Privacy policy

§ 1 Information on the collection of personal data

(1) In the following, we provide information about the collection of personal data when using our website and our other presences and appearances and in the context of our services and performances. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour. This privacy policy applies to the websites and services through which it is provided. Different data protection information may apply to our other presences and services, which you can view there.

(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is the 

neuefische GmbH 

Gasstrasße 6a 

22761 Hamburg 

You can find further contact options for us in our provider labelling ("Imprint"). You can reach our company data protection officer at the above-mentioned contact details with the addition of "The Data Protection Officer" by letter or by e-mail at datenschutz@neuefische.de

(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. We delete the data collected in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations. The legal basis for the processing of your data in the context of communication with you is Art. 6 para. 1 lit. a GDPR if consent has been given. If the communication serves the fulfilment of a contract with you or the implementation of pre-contractual measures, the legal basis for the processing of your data is Art. 6 para. 1 lit. b) GDPR. In all other cases, the legal basis is our legitimate interest in an efficient, customer-friendly and targeted processing of your request in conjunction with Art. 6 para. 1 lit. f) GDPR or any legal obligation incumbent on us that requires the storage and processing of your data in conjunction with Art. 6 para. 1 lit. c) GDPR. 

§ 2 Your rights

(1) You have the following rights vis-à-vis us with regard to your personal data: - Right to information, 

- Right to rectification or erasure, 

- Right to restriction of processing, 

- Right to object to the processing, 

- Right to data portability. 

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. 

§ 3 Collection of personal data when visiting our website

(1) When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR): 

- IP address 

- Date and time of the enquiry 

- Time zone difference to Greenwich Mean Time (GMT) 

- Content of the request (specific page) 

- Access status/HTTP status code 

- Amount of data transferred in each case 

- Website from which the request comes 

- Browser 

- Operating system and its interface 

- Language and version of the browser software. 

(2) Use of cookies:

Our websites use cookies and similar technologies. Cookies are small text files that are stored by the Internet browser on the user's end device. A cookie usually contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. 

Cookies are used to make the website more user-friendly, to optimise the functions and services of the website and to provide you with content tailored to your needs. The purpose of using technically necessary cookies is to enable and simplify the use of the website and the functions provided with it. Some functions of this website cannot be offered without the use of cookies. 

The user data collected by technically necessary cookies is not used to create user profiles. In addition, with your separate consent, cookies can be used for the provision of external media such as films and maps as well as for analysing the use of the website and other functions. 

You can deactivate or restrict the use of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for the website, it may no longer be possible to use all the functions of the website to their full extent. 

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR, whereby the legitimate interest of the controller is the secure, stable and efficient provision of the functions of the website and the information that can be accessed via it. If the controller fulfils a contractual obligation towards you with the respective function, the legal basis is Art. 6 para. 1 lit. b GDPR. 

The legal basis for the processing of personal data using cookies for analysis purposes and for other non-technically necessary processing purposes is Art. 6 para. 1 lit. a GDPR in conjunction with § 25 TDDG if the user has given his or her consent.

§ 4 Further functions and offers

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you must generally provide additional personal data that we use to provide the respective service and to which the aforementioned data processing principles apply.

(2) We may disclose your personal data to third parties if we offer participation in promotions, competitions, contracts or similar services together with partners and the disclosure is necessary for the respective purpose. You will receive further information on this when you provide your personal data or below in the description of the offer. (3) We use the Contentful CDN (Content Delivery Network) of Contentful GmbH, Max-Urich-Str. 3, 13355 Berlin (Contentful) for the proper provision of the content of this website. The Contentful CDN helps to make content, in particular files such as graphics or videos, available to you more quickly with the help of regionally or internationally distributed servers. 

When using our website, Contentful processes in particular the IP address, user agent and browser information. 

Your data will be stored by Contentful for a maximum of 90 days. 

Storage and processing takes place on servers in the EU, the United States of America or other third countries in accordance with the GDPR on the basis of concluded EU standard contractual clauses (SCC). Personal data may be shared with service providers and their affiliates that provide technology or ancillary services to support, operate and maintain Contentful services. 

The legal basis for the processing of the data is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. 

You can object to the collection and storage of your data at any time with effect for the future. To object to the collection and storage of your data for the future, you can click on the following link: 

https://www.contentful.com/legal/privacy-at-contentful/do-not-sell-data-access-request/ Please note that this may mean that content can no longer be displayed correctly or at all and that the functions of this website may be restricted as a result. 

For further details on data processing, please refer to Contentful's privacy policy: https://www.contentful.com/legal/privacy-at-contentful/privacy-notice/ 

(4) We use the technical solution Userlike (hereinafter referred to as "Userlike") to process user enquiries and for customer communication via live chat systems. The provider is Userlike UG (haftungsbeschränkt), Probsteigasse 44 - 46, 50670 Cologne. Userlike is a live chat and communication solution that can be used in particular to conduct live chats when visiting our website. Personal data is also processed, in particular the content of messages and technical information required for the processing of communication and the technical operation of the communication solution. 

Messages that you send to us can be saved in the Userlike ticket system or answered by our employees in live chat. When you communicate with us via Userlike, we and Userlike store, among other things, your name and e-mail address, if you have provided them, and your chat history. This data is summarised in a profile. 

The messages sent to us remain with us until you ask us to delete them or the purpose for data storage no longer applies (e.g. after your enquiry has been processed or further business transactions in connection with it have been completed; in the case of information required for any necessary evidence, the deletion takes place after the statutory limitation periods for possible claims have expired). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected. 

The use of Userlike is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in processing your enquiries as quickly, directly, reliably and efficiently as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. Further information can be found in Userlike's privacy policy: https://www.userlike.com/de/data-privacy and https://www.userlike.com/de/ blog/live-chat-software-datenschutz-dsgvo. 

(5) On our website and in the context of other appearances we offer users the option of registering by entering personal data. The data is entered into an input mask and transmitted to us and stored. The data is not passed on to third parties. As part of the registration process, the information resulting from the registration form is requested and stored by us. The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent. If the registration serves the fulfilment of a contract to which the data subject is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR. 

(6) Hubspot CRM
We use Hubspot CRM on this website and in our company. The provider of this software solution for managing customer relationships is Hubspot Inc, 25 1st Street, Ste 100, Cambridge, MA 02141 USA (hereinafter referred to as Hubspot CRM). Among other things, Hubspot CRM enables us to manage existing and potential customers as well as customer contacts. With the help of Hubspot CRM, we are able to record, sort and analyse customer interactions via email, social media or telephone across various channels. The personal data collected in this way can be analysed and used for communication with interested parties or for marketing measures (e.g. newsletter mailings). With Hubspot CRM, we are also able to record and analyse the user behaviour of our contacts on our website. The use of Hubspot CRM is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the most efficient customer management and customer communication possible. If a corresponding consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. 

Further details can be found in the provider's privacy policy: 

https://legal.hubspot.com/de/privacy-policy 

Data is transferred to the USA on the basis of the EU Commission's standard contractual clauses. You can find details here: https://www.hubspot.de/data-privacy/privacy-shield You can view the standard contractual clauses used via this link: 

https://legal.hubspot.com/de/dpa 

Hubspot is also certified in accordance with the EU-US Data Privacy Framework ("DPF"). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards and to ensure an adequate level of data protection. Further information on Hubspot's status under the DPF can be found at the following link: 

https://www.privacyshield.gov/ps/participant?id=a2zt0000000TN8pAAG We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which ensures that Hubspot processes the personal data processed for us only in accordance with our instructions and in compliance with the GDPR. 

(7) You have the option of making an appointment with us on our website. We use the "Calendly" tool to make appointments. The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA (hereinafter "Calendly"). 

To book an appointment, enter the requested data and the desired date in the form provided. The data entered will be used for the planning, realisation and, if necessary, follow-up of the appointment. The appointment data is stored for us on the servers of Calendly, whose privacy policy you can view here: https://calendly.com/de/pages/privacy. 

The data you enter will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Mandatory statutory provisions - in particular retention periods - remain unaffected. 

The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in making appointments with interested parties and customers as uncomplicated as possible. If a corresponding consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. 

Data is transferred to the USA on the basis of the EU Commission's standard contractual clauses. Details can be found here: https://calendly.com/pages/dpa. The service provider Calendly LLC is also certified for the transfer of personal data to the United States in accordance with the European-American Data Protection Agreement. 

§ 5 Objection or revocation against the processing of your data

(1) If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.

(2) Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the contact details given above.

§ 6 Web tracking

Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.

(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

(3) You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension "_anonymiseIp()". This means that IP addresses are further processed in abbreviated form, so that they cannot be linked to a specific person. If the data collected about you is personally identifiable, it is immediately excluded and the personal data is deleted immediately.

(5) We use Google Analytics to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.

(6) Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. 

User conditions: http://www.google.com/analytics/terms/de.html, 

Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy: http://www.google.de/intl/de/policies/privacy. For any possible cases in which personal data is transferred to the USA, Google complies with the data protection regulations for data transfer to third countries in accordance with Art. 44 et seq. GDPR. EU standard contractual clauses have been concluded for this purpose. You can view these here: https://policies.google.com/privacy/frameworks?hl=de

(7) Web analysis and optimisation with the help of the Hotjar service, provided by the third-party provider Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe. Hotjar can be used to track movements on the websites on which Hotjar is used (so-called heat maps). For example, it is possible to recognise how far users scroll and which buttons users click and how often. Technical data such as the selected language, system, screen resolution and browser type are also recorded. User profiles can be created, at least temporarily, during a visit to our website. Hotjar can also be used to obtain feedback directly from users of the website. In this way, we obtain valuable information to make our websites even faster and more customer-friendly. This is also our legitimate interest within the scope of the legal basis of Art. 6 para. 1 sentence 1 lit. f GDPR) Privacy Policy: www.hotjar.com/privacy. Opt-out: www.hotjar.com/opt-out. 

Google Tag Manager

This website uses Google's Tag Manager. This service enables us to manage website tags via an interface. This Google tool only sets tags. No cookies are used and no personal data is regularly collected. However, other tags may be triggered, which in turn may collect data. The Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags if they are implemented with Google Tag Manager.

§ 7 Usage-based and advertising content

Google Ads

We use "Google Ads" (formerly Google AdWords) on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Ads enables us to draw attention to our attractive offers with the help of advertising material on external websites. This allows us to determine how successful individual advertising measures are. These adverts are delivered by Google via so-called "AdServers". We use so-called AdServer cookies for this purpose, through which certain parameters for measuring success, such as the display of adverts or clicks by users, can be measured. If you access our website via a Google advert, Google Ads will store a cookie on your PC. These cookies generally lose their validity after 30 days. They are not intended to identify you personally. The following information is usually stored as analysis values for this cookie: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user no longer wishes to be addressed). These cookies enable Google to recognise your web browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked via the websites of Ads customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical analyses from Google. These analyses enable us to recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of Google Ads. To the best of our knowledge, Google receives the information that you have accessed the relevant part of our website or clicked on one of our adverts. If you have a user account with Google and are registered, Google can assign the visit to your user account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will find out your IP address and store it. 

We use Google Ads for marketing and optimisation purposes, in particular to display ads that are relevant and interesting to you, to improve campaign performance reports and to achieve a fair calculation of advertising costs. This also constitutes our legitimate interest in the processing of the aforementioned data by the third-party provider. The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR and, insofar as we obtain your consent, Art. 6 para. 1 lit. a GDPR. 

You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. We would like to point out that in this case you may not be able to use all the functions of our website to their full extent. It is also possible to prevent the storage of cookies by setting your web browser to block cookies from the domain "www.googleadservices.com" (https://www.google.de/settings/ads). We would like to point out that this setting will be deleted if you delete your cookies. You can also deactivate interest-based adverts via the link https://optout.aboutads.info. Please note that this setting will also be deleted if you delete your cookies. 

Information from the third-party provider: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland 

Further information on the use of data by Google, on setting and objection options and on data protection can be found on the following Google websites: Google's Privacy & Safety.

Privacy policy: https://policies.google.com/privacy?hl=de&gl=de 

Google website statistics: https://services.google.com/sitestats/de.html 

Facebook Pixel

This website uses Facebook pixels to measure the conversion of visitor actions. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries. 

This allows the behaviour of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

The data collected is anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy. This enables Facebook to place adverts on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the site operator. 

Facebook Pixel is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time. 

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: 

https://www.facebook.com/legal/EU_data_transfer_addendum and 

https://de-de.facebook.com/help/566994660333381. 

You can find further information on protecting your privacy in Facebook's data protection information: https://de-de.facebook.com/about/privacy/. 

You can also deactivate the remarketing function "Custom Audiences" in the settings for adverts at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this. 

If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/. 

Facebook Custom Audience

We use the Custom Audiences service of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, 2 Dublin, Ireland, email: impressum-support@support.facebook.com, website: facebook.com. Data transfer to the USA is based on the standard contractual clauses of the EU Commission and, where applicable, the EU-US Data Privacy Framework. Details 

can be found here: https://www.facebook.com/legal/terms/customaudience and https://www.facebook.com/legal/terms/dataprocessing. 

The legal basis for the transfer of personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you can revoke at any time via the cookie settings on this website.

Facebook Custom Audience is an advertising tool from Facebook that can be used to target advertising campaigns to site visitors. 

You can withdraw your consent at any time. You can find more information on revoking your consent either in the consent itself or at the end of this privacy policy. 

Further information on the handling of the transferred data can be found in the provider's privacy policy at www.facebook.com/about/privacy. 

The provider also offers an opt-out option at www.facebook.com/about/privacy. 

DoubleClick

This website uses the web analysis service DoubleClick as part of the application of Google Analytics, which enables the user's browser to be recognised when visiting other websites. The data collected is only analysed for statistical purposes and in anonymised form. The information generated by the cookie about your visit to the Bodensee-Therme Konstanz website will be transmitted to and stored by Google on servers in the United States. The IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area by activating IP anonymisation. 

Only in exceptional cases is the IP address transmitted in full to a Google server in the USA before it is truncated there. The anonymised IP address transmitted by the user's browser as part of Google Analytics is not merged with other Google data. DoubleClick cookies do not contain any personal data. 

The information generated is used to compile reports on the activities on this website and to provide other services related to the use of this website. Where required by law, Google may transfer this information to third parties or where such third parties process the information on Google's behalf. 

The legal basis for the processing of personal data is the consent of the user in accordance with Art. 6 para. 1 lit. a GDPR. The user has the option at any time to object to the tracking web analysis for the future or to deactivate the DoubleClick cookie. The browser extension required for this can be downloaded and installed on the corresponding Google website. If several end devices or browsers are used by the user, the opt-out must be carried out for each end device or browser. To do this, the user can click on the following link: http://google.com/ads/preferences/html/opt-out.html 

Sleeknote 

We use the Sleeknote service on this website to provide user-friendly access to specific content (such as downloads, feedback options and registration for newsletters and promotions) in line with your use of our website, provided you give your consent. This service is operated by Sleeknote ApS, Jens Baggesens Vej 90A, 8200 Aarhus, Denmark, ("Sleeknote"). 

The Sleeknote service displays certain additional content to you as a visitor, depending on which content of our website you access and how you use our website, in order to make your visit as pleasant and efficient as possible for you. In this context, Sleeknote collects and stores data on the use of our website, from which usage profiles are created using pseudonyms in order to evaluate the acceptance of the content displayed and to continuously improve and optimise the individual content displayed based on user needs. The Sleeknote service also places cookies on your computer for this purpose. These are small text files that are stored locally on your computer. The cookies remain stored on your computer for a maximum of 2 years. The pseudonymised user profiles are not merged with other personal data without the express consent of the person concerned. Your personal data will also not be passed on to third parties. Sleeknote generally stores the data collected via the Sleeknote service for up to 3 months and then deletes it. 

We have concluded an order processing contract with Sleeknote. The transfer of personal data concerning you is therefore based on Art. 28 GDPR. 

For further information on the protection of your personal data by Sleeknote, please also refer to Sleeknote's privacy policy: https://sleeknote.com/privacy-policy. 

We use the Sleeknote service with your consent. The legal basis for the use of the Sleeknote service is therefore Art. 6 para. 1 sentence 1 lit. a) GDPR in conjunction with § 25 TTDSG. 

§ 8 Social networks 

Facebook

This section applies to our processing of personal data via our Facebook presence: Meta Platforms Ireland Limited Facebook Ireland Limited ("Facebook") is generally responsible for the collection and further processing of personal user data on Facebook websites. Please note that Facebook collects and processes certain information about your visit to our Facebook page even if you do not have a Facebook user account or are not logged in to Facebook. For information on the processing of personal data by Facebook, please refer to Facebook's privacy policy: https://www.facebook.com/about/privacy/.

As the operator of this Facebook page, we can only view your public profile on Facebook. Which information is visible here depends on your settings in your profile. In addition, we process your personal data (such as your name and the content of your messages, enquiries or other contributions to us) if you contact us via our Facebook page or if you publish content via our Facebook presence, e.g. in the form of a comment. We then process this data for the purpose of processing your posts accordingly and responding to them if necessary. These purposes also constitute our legitimate interests within the meaning of the legal basis of Art. 6 para. 1 f) of the European General Data Protection Regulation (GDPR). We store your personal data on our systems, i.e. outside of Facebook, if and for as long as it is required for the purposes for which it was collected or if there are statutory retention obligations. 

Instagram

This privacy policy applies to our Instagram presence: 

Instagram is part of the Facebook group of companies and shares infrastructure, systems and technology with Facebook and other Facebook companies 

https://www.facebook.com/help/111814505650678?ref=dp. 

We expressly point out that Facebook stores the data of the users of its services (e.g. personal information, IP address, etc.) and may also use this data for business purposes. You can find more information about Facebook's data processing at Instagram in Instagram's privacy policy at https://help.instagram.com/519522125107875?helpref=page_content. We have no influence on data collection and further processing by Facebook/Instagram. Furthermore, it is not clear to us to what extent, where and for how long the data is stored, to what extent Facebook/Instagram fulfils existing deletion obligations, which evaluations and links are made with the data and to whom the data is passed on. Insofar as personal data is processed in connection with our Instagram page and Facebook alone decides on the purposes and means of processing, the following applies 

Meta Platforms Ireland Limited Facebook Ireland Limited (also: "Facebook/Instagram"), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, sole controller for the processing. 

You can contact the company data protection officer for Instagram at the following address: https://www.facebook.com/help/contact/540977946302970 using the contact form provided. The Instagram Privacy Policy (http://instagram.com/legal/privacy/) specifies the categories of personal data that are processed when using Facebook products (https://www.facebook.com/help/1561485474074139?ref=dp), describes in general terms the purposes for which this data is used and specifies the categories of recipients to whom this data may be disclosed. In the Data Policy, you will also find information about the legal basis for the processing of this data and information about how you can withdraw your consent to the processing of personal data. Further information on the respective legal basis can be found at https://www.facebook.com/about/privacy/legal_bases. 

In the Data Policy, you will also find information on how you can exercise your rights of access, rectification, portability and erasure vis-à-vis Facebook. Under this point you will also find information about your right to object to certain processing of personal data. You can find more information about your control options here: 

https://www.facebook.com/help/2069235856423257. In the data policy you will also find information about the duration for which personal data is stored and information about the criteria for determining this duration and the possibility of blocking or deleting Instagram accounts. The data policy refers to the intention of Facebook/Instagram to transfer data to 

third countries if necessary. Please note that if personal data is processed in the United States of America, the level of protection for your data may be lower than if it is processed within the EU. 

If you visit our Instagram page and your browser allows cookies to be stored, Facebook/Instagram stores information in the form of small text files in your browser's memory (hereinafter referred to as "cookies") and can access this information when you visit the Instagram platform or a website that integrates Instagram technologies. You can find more information on the purpose of the cookies used, the integration of these cookies by other websites and your control options in this regard here: 

https://help.instagram.com/1896641480634370?ref=ig. 

Cookies enable Instagram/Facebook to track your user behaviour (for registered users across devices) beyond the Instagram platform on other websites and also to create profiles of your behaviour. This applies both to persons registered with the Instagram platform and to persons 

not registered there. If you want to prevent your behaviour from being tracked in this way, you should log out of Facebook or Instagram or deactivate the "stay logged in" function, delete the cookies on your device and close and restart your browser. 

In addition to the content you submit, information about your profile, your likes and your posts will be visible to us depending on your privacy settings. You can find out how to change your privacy settings here: 

https://de-de.facebook.com/help/instagram/116024195217477. 

The processing of your personal data when contacting or interacting with us via our Instagram presence is carried out by us on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest within the meaning of the legal basis is to respond to your request and to communicate with you appropriately and for the intended purpose. If your contact is aimed at the conclusion of a contract (for example in the context of participation in competitions), the additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR. 

LinkedIn

We use the "LinkedIn" platform for the purpose of presenting our company and our bootcamps and other products there and to draw your attention to current trends, products and services from us via posts and videos and also with advertising media such as banners and sponsored links/sponsored posts. The following information also serves as data protection information for our online presence there. 

The services for the EU are provided by LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland. The headquarters of LinkedIn Inc. is located in Sunnyvale, California, USA. The company belongs to Microsoft. 

A hyperlink to LinkedIn is integrated into our website and identified by a logo. After clicking on the logo, the LinkedIn website opens in a new browser tab. 

When you access LinkedIn services, LinkedIn may receive personal data from you. For details, please refer to LinkedIn's privacy policy at the following link: 

https://www.linkedin.com/ legal/privacy-policy 

You can find LinkedIn's cookie policy at the following link: 

https://www.linkedin.com/ legal/cookie-policy 

As part of the maintenance of our company profile and the implementation of our LinkedIn advertising campaigns, we have limited access to statistical analyses from LinkedIn, e.g. on the number of page views of our online presence. LinkedIn makes this data available in aggregated and anonymised form for certain periods of time, but does not allow any conclusions to be drawn about identifiable visitors to our company page. We have no influence on the means and purposes of the processing of personal data by LinkedIn, insofar as these are collected in connection with a visit to the LinkedIn website and our LinkedIn online presence. We would like to point out that you use LinkedIn and its functions on your own responsibility. If we process your personal data, this is done on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR), as we assume that your fundamental rights to the protection of your personal data do not prevail here. 

The legal basis for the processing of your data in connection with the use of our corporate presence and our LinkedIn campaigns is Art. 6 para. 1 sentence 1 lit. f GDPR in conjunction with our legitimate interests in expanding the base of our customers and interested parties and also potential employees, and, if you have given your consent, Art. 6 para. 1 lit. A GDPR. If we communicate with you via linkedin and the communication serves to prepare or execute a contractual relationship with you, the legal basis is Article 6(1)(b) GDPR. We store your activities and personal data published via our company website until you withdraw your consent. In addition, we comply with the statutory retention periods. 

According to LinkedIn, the data centres for LinkedIn members (who, like us, are registered with LinkedIn and have an account) are located in the USA. The requirements for lawful processing of personal data may be less stringent in the USA than within the EU. LinkedIn services require data to be transferred from the European Union (EU) to the United States of America (USA) and back. This also applies to you as a visitor if you use LinkedIn services and certain functions, e.g. if you leave a comment on one of our posts. 

The data transfer to the USA is based on standard contractual clauses and the EU-US Data Privacy Framework. Information from LinkedIn can be found under the following links: 

https://www.linkedin.com/help/ linkedin/answer/62533?trk= microsites-frontend_legal_ privacy-policy&lang=en https://de.linkedin.com/legal/l/dpa 

The LinkedIn user agreement (applies to members and visitors) can be found at the following link: 

https://de.linkedin.com/ legal/user-agreement. 

Target group oriented advertising

We also occasionally use the social media platforms described to display targeted advertising. For this purpose, we use target group definitions provided to us by the social media provider. We only use anonymous target group definitions, i.e. we define characteristics based on general demographic information, behaviour, interests and connections, for example. The operator of the social media platform uses these to display adverts to its users accordingly. The legal basis for this is the consent that the operator of the social media platform has obtained from its users. If you wish to revoke this consent, please use the revocation options provided by the provider of the social media platform, as the social media platform operator is responsible for this processing. Occasionally, we or the provider of the social media platform also use publicly available data to define target groups. If you have given your consent, the legal basis for this processing is Art. 6 para. 1 lit. a GDPR or, if permissible and relevant, Art. 6 para. 1 lit. f GDPR in conjunction with our legitimate interest in advertising that matches the target group as closely as possible. 

We do not use target group definition based on location data. We do not pass on any personal data to the operator of the social media platform as part of the target group definition. Occasionally, we also use information about visits to or interactions with other sites (so-called remarketing) to define target groups. We also use cookies for this purpose. In these cases, however, we obtain the user's consent in advance via a consent banner on the respective other pages and provide information about the data processing at this point. You can revoke this consent at any time by calling up the consent banner on the relevant website again 

§ 9 Newsletter and email messages

(1) With your consent, you can subscribe to our newsletter (if offered), with which we inform you about our current interesting offers. The advertised services and benefits are named in the declaration of consent. 

(2) We use the so-called double opt-in procedure to subscribe to our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. We also store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data. 

(3) The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR. 

(4) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your cancellation by clicking on the link provided in every newsletter email or by sending a message to the contact details given in the legal notice. 

(5) We would like to point out that we can evaluate your user behaviour when sending the newsletter. For this analysis, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the analyses, we link the data mentioned in § 3 and the web beacons with your email address and an individual ID. Links received in the newsletter also contain this ID. We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on in them and deduce your personal interests from this. We link this data to the actions you take on our website. 

You can object to this tracking at any time by clicking on the separate link provided in each email or by informing us via another contact channel. The information will be stored for as long as you are subscribed to the newsletter. After you unsubscribe, we store the data purely statistically and anonymously. Such tracking is also not possible if you have deactivated the display of images in your e-mail programme by default. In this case, the newsletter will not 

be displayed in full and you may not be able to use all the functions. If you display the images manually, the above-mentioned tracking will take place. 

(6) The newsletter and other emails from the communication flow initiated via the forms on our website are sent using "MailChimp", a messaging platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. In this context, email dispatch data and the personal data contained therein may also be processed in the USA because dispatch service providers from there are involved in sending emails. The framework conditions for the processing of personal data in the USA differ from the European level of data protection. There is no adequacy decision by the European Commission for the USA that establishes an equivalent level of data protection. We have therefore concluded European standard contractual clauses with all service providers based in the USA. You can view MailChimp's privacy policy here. 

(7) The email addresses of our newsletter recipients, as well as their other data described in this notice, are stored on MailChimp's servers in the USA. MailChimp uses this information to send and analyse the newsletter on our behalf. Furthermore, MailChimp may, according to its own information, use this data to optimise or improve its own services, e.g. to technically optimise the sending and presentation of the newsletter or for economic purposes in order to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.

§ 10 Linked content / sharing functions

Our website contains links to third-party websites. The respective data protection declarations and data protection notices of the respective operators of the linked websites apply. We would like to point out that we are not responsible for data processing practices on third-party platforms outside our own sphere of influence.

 § 11 Data protection during applications and the application process/assessment

The controller collects and processes the personal data of applicants for the purpose of handling the application process. This concerns applications relating to employment and other activities for the controller on the one hand and applications for the study programmes, workshops and boot camps offered by the controller on the other. 

The following applies to employment relationships and other activities for the controller: If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the 

statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted four months after notification of the rejection decision, unless deletion conflicts with any other legitimate interests of the controller. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). The legal basis for the processing of personal data of applicants for the purposes of contract fulfilment is Art. 6 para. 1 lit. b, 88 GDPR in conjunction with § 26 Federal Data Protection Act (BDSG), furthermore, insofar as the processing is carried out to fulfil legal requirements, Art. 6 para. 1 lit. c GDPR and, insofar as the consent of the data subject is the basis of the processing, Art. 6 para. 1 lit. a GDPR in conjunction with § 26 BDSG. § Section 26 BDSG, in all other cases Article 6(1)(f) GDPR in conjunction with our legitimate interests in the appropriate, secure, efficient and fair organisation of our operational processes, appropriate documentation and the provision of evidence and presentation in legal proceedings in conjunction with Section 26 BDSG. § SECTION 26 BDSG.

The following applies to study programmes, workshops and boot camps: If the application is successful, a contractual relationship is established regarding the services provided by the controller for the respective applicant and the consideration to be provided by the respective applicant. The personal data processed in this context will be stored for the duration of the contractual relationship and beyond that until the expiry of the regular statutory limitation periods, unless statutory obligations, in particular retention obligations under tax and commercial law, require longer storage. 

If the application is unsuccessful, the personal data will be deleted after a period of four months. With the separately obtained consent of the data subject, the data may be stored for a further twelve months so that the application can be considered again if course places become available or any other offers that may be of interest to the applicant. 

The legal basis for processing is Art. 6(1)(b) GDPR, insofar as the processing is carried out for the purpose of initiating, implementing and processing the contractual relationship, Art. 6(1)(f) GDPR, insofar as the legitimate interests of the controller in the proper documentation of its business transactions, in the provision of evidence and presentation in the context of any disputes and in the administration, maintenance and expansion of the business relationship between the controller and its contractual partner, as well as Art. 6(1)(c) GDPR, insofar as the processing is carried out to fulfil legal requirements. If the processing is based on the consent of the data subject, the legal basis for the processing is Article 6(1)(a). For application procedures, we use the services of Teamtailor AB, Östgötagatan 16, SE-116 25 Stockholm, which provides platform services for the administration and implementation of application procedures on our behalf, whereby personal data is processed exclusively in the European Union. 

§ 12 Service provider

In some cases, we use external service providers (processors) to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

If our service providers or partners are based in a country outside the EU and the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

§ 13 Cancellation

Unless otherwise stated in the respective individual information, the controller processes personal data in accordance with the statutory provisions for the purposes described here and only for as long as personal identification of the data subject is required for the respective purpose. The data will then be deleted or neutralised/anonymised in accordance with data protection regulations.