I. Name and address of the party responsible

The party responsible within the meaning of the basic data protection regulation and other national data protection laws of the member states as well as other data protection regulations is:

Centigrade GmbH
Science Park 2
66123 Saarbrücken
Germany

Phone: +49 681 959 3110
Fax: +49 681 959 3119
Website: www.centigrade.de
E-Mail: public.info (at) centigrade.de
Hint: To reduce Spam-Emails we replaced the "@ symbol" with "(at)". For contacting us, please use the "@ symbol" instead.

II. Data protection officer

In accordance with the legal requirements, we have appointed a data protection officer for our company. You can contact him by e-mail at datenschutz (at) centigrade.de.

Hint: To reduce Spam-Emails we replaced the "@ symbol" with "(at)". For contacting us, please use the "@ symbol" instead.

III. General information on data processing

1. Extent of processing of personal data

As operator of this website, Centigrade GmbH takes the protection of your personal data very serious. The website can usually be used without personal data. In principle, we collect and use personal data of our users only to the extent necessary for the provision of a functional website and for our content and services. The collection and use of personal data of our users only takes place with the consent of the user. An exception applies to cases in which prior consent can not be obtained and the processing of the data is permitted by law.

2. Legal basis for the processing of personal data

As far as we obtain the consent of the subject for the processing of personal data, is Art. 6 Para. 1 lit. of the EU General Data Protection Regulation (GDPR) the legal basis.

The processing of personal data necessary for the performance of a contract to which the subject is a party shall be governed by Art. 6 Para. 1 lit. b GDPR. This also applies to processing operations required to carry out pre-contractual actions.

To the extent that processing of personal data is required to fulfill a legal obligation that governs our business, Art. 6 Para. 1 lit. c of the GDPR shall apply.

In the event that vital interests of the subject or any other natural person require the processing of personal data, Art. 6 Para. 1 lit. d od the GDPR shall apply.

If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the subject do not prevail over the first interest, Art. 6  para. 1 lit. f of the GDPR shall be the legal basis for processing.

3. Data deletion and storage time

The personal data of the subject will be deleted or blocked as soon as the purpose of the storage is deleted. Storage can be done beyond, if this is necessary according to the European or national legislation in EU law regulations, laws or regulations that govern the responsible party. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Each time our website is accessed, our Internet provider automatically collects general data and information from the computer system of the calling computer from our hosted website.

The following data is being collected:

• Information about the browser type and version used
• The operating system of the user
• The Internet service provider of the user
• IP address of the computer from which the request was sent, in anonymised (shortened) form
• Date and time of access
• Websites from which the system of the user comes to our website
• Websites that are accessed by the user's system through our website

This information is not assigned to specific individuals. A merge of this information with other data sources will not be done. The Internet address of the terminal you are using is anonymized after a short time by anonymizing the last block of an IP address before storing it in the log file (for example, 83.245.49.xxx). No personal usage profiles will be created, the data will not be passed on to third parties.

2. Legal basis for data processing

Legal basis for the temporary storage of the general data and information in the logfiles is Art. 6 Abs. 1 lit. f DSGVO. In addition, there is a legal obligation pursuant to Art. 32 DSGVO to protect our own IT infrastructure and therefore also these websites and to implement technical and organizational measures in this regard, above all to prevent misuse. Log files are a central component of these (preventive) security measures. The legal basis is therefore also Art. 6 para. 1 lit. c DSGVO.

3. Purpose of data processing

The storage in the log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place.

4. Duration of data processing

The storage of the data in log files is only carried out for the period of time required to achieve the purpose of storage or as provided by applicable laws.

5. Objection and correction options

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website and for IT security reasons. The user is therefore not able to object.

V. Use of Cookies, Configuration via Cookie Management Platform (CMP)

1. Description and scope of data processing

Our website uses cookies to provide you with a convenient and feature rich online service and to verify your eligibility to use the service. Cookies are text files that are stored in the Internet browser or from the Internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.

The following data is stored and transmitted in the cookies:

• Cookie-ID
• PHP-SESSION

In addition, we use cookies on our website that allow an analysis of the users browsing behavior.

The following data can be transmitted this way:

• Frequency of page views
• Use of website features

The data of the users collected in this way are pseudonymized by technical precautions. Therefore, an assignment of the data to the user is no longer possible. The data will not be stored together with other personal data of the users.

Via our Cookie Management Platform (CMP), which is displayed as a banner at the bottom of the website when you access our web pages, you can configure cookie services used at any time, give your consent or revoke this consent by deactivating the cookie services accordingly.

By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. To do this, please use the help functions of your respective browser.

2. Legal basis for data processing

Processing based on cookies or other identifiers (e.g. browser fingerprints, pixels) that are not technically necessary for the function of our websites (e.g. for the services mentioned in section X. of this privacy policy), we only perform with your consent, which you can give via our CMP.

The legal basis for processing operations using technically unnecessary cookies is Section 15 (3) Sentence 1 TMG in conjunction with. Art. 5 para. 3 sentence 1 ePrivacy Directive. Before you have given your consent, such cookies that are not necessary for the function of our websites will not be set.

The use of technically necessary cookies is based on legitimate interests according to Art. 6 para. 1 lit. f DSGVO. The right to object is excluded for technically absolutely necessary cookies, as these are absolutely necessary to be able to display our websites and their content to you and to provide you with the functionalities of the websites.

3. Purpose of data processing

The use of the analysis cookies is for the purpose of improving the quality of our website and its contents. Through the analysis cookies, we learn how the website is used and so we can constantly optimize our offer.
With the help of these cookies, we can optimize the information and offers on our website and facilitate the use of the website.

The use of technically necessary cookies is for the purpose of simplifying the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, for example, it is necessary that the browser is recognized even after a page change. The user data collected through technically necessary cookies are not used to create user profiles.

4. Duration of storage, objection and correction options

Cookies are stored on the computer of the user and transmitted by the computer to us. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full.

For more information about the cookie and services that use cookies on our websites, please refer to our CMP. You can also revoke any cookie consent you may have given via our CMP by deactivating the cookie services that are not technically necessary for the function of our websites.

VI. Encryption

This website supports line encryption via HTTPS.  This prevents the transmission of your data on the internet from being seen or altered by unauthorized persons. The secured connection can be reached via the URL https://www.centigrade.de.

VII. Contact form and e-mail contact

1. Description and scope of data processing

On our website contact forms are available, which can be used for electronic contact. If a user uses this option, the data entered in the input mask will be transmitted to us and saved.

This data includes:

• Name
• E-mail address
• Phone number
• Subject
• Message
• Consent

At the time of the sending of the message, the following data is also stored:

• Date and time of registration

For the processing of the data in the context of the sending process, your consent is obtained and reference is made to this privacy policy.

Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored.

In this context, there is no disclosure of the data to third parties. The data will only be used to process the conversation regarding your concerns.

2. Legal basis for data processing

The legal basis for the processing of the data with the consent of the user is Art. 6 para. 1 lit. a GDPR.

The legal basis for the processing of the data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f GDPR.  If the e-mail contact aims to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

3. Purpose of data processing

The processing of the personal data from the input mask serves us only to process the contact. In the case of contact via e-mail, the legitimate interest in the processing of the data also lies herein.

The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of data processing

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. Regarding the personal data from the input mask of the contact form and data sent by e-mail, it will be deleted when the respective conversation between the user and us regarding their concerns has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.

The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

5. Objection and correction options

The user has the possibility at any time to revoke their consent to the processing of the personal data. If the user contacts us by e-mail, they may object to the storage of their personal data at any time. In such a case, the conversation cannot continue.

The affected user can object to the processing and storage of the data in writing by e-mail to the contact named in the imprint.

All personal data stored in the course of contact establishment will be deleted in this case.

VIII. Contact form and registration form for UX-Academy

1. Description and scope of data processing

A contact form available is available on our website, which can be used for electronic contact. If a user uses this option, the data entered in the input mask will be transmitted to us and saved.

This data includes:

• Name
• Company/Organization
• Position
• E-mail address
• Phone number
• Invoice address
• Subject
• Message
• Consent

For the processing of the data in the context of the sending process, your consent is obtained and reference is made to this privacy policy.

Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored.

In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the conversation.

2. Legal basis for data processing

The legal basis for the processing of the data with the consent of the user is Art. 6 para. 1 lit. a GDPR.

The legal basis for the processing of the data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f GDPR.  If the e-mail contact aims to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

3. Purpose of data processing

The processing of personal data from the input mask is solely for processing the application for gamification training. In the case of contact via e-mail, the legitimate interest in the processing of the data also lies herein.

The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of data processing

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. Regarding the personal data from the input mask of the contact form and data sent by e-mail, it will be deleted when the respective conversation between the user and us regarding the user’s concerns has ended. The conversation has ended when it is apparent from the circumstances that the relevant matter has been fully resolved.

The other personal data collected during the sending process will be erased after seven days at the latest.

5. Right to object and right to rectification

The user has the option to withdraw their consent for the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

The user concerned can object to the notice of processing and the storage of data in writing at any time, by sending an email to details provided in the imprint.

In this case, all personal data stored in the course of contact will be erased.

IX. Data protection during the application process and applications

Centigrade GmbH collects and processes applicants’ personal data for the purpose of carrying out the application process. Processing may also be carried out electronically. In particular, this is the case when an applicant sends application documents to us electronically, e.g. by email or via web form on the website. If Centigrade GmbH enters into an employment contract with an applicant, the data provided will be stored for the purpose of handling the employment relationship in accordance with legal regulations. If an employment contract is not concluded between Centigrade GmbH and the applicant, the application documents will be erased automatically two months after giving notification that the application has been rejected, provided that Centigrade GmbH has no other legitimate interests preventing erasure. For example, other legitimate interests in this context include a burden proof in accordance with the German Equality Act (Allgemeines Gleichbehandlungsgesetz, AGG). The legal basis for the processing of applicant data is Art. 6 para. 1 lit. b DS-GVO, § 26 BDSG.

X. Sharing personal data with third parties

1. Privacy policy for the use of Google Analytics

Based on our legitimate interest in the optimization and analysis of our website in accordance with point f of Article 6 (1) GDPR, this website uses the “Google Analytics” service, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland („Google“). The service (Google Analytics) uses “cookies”, text files that are stored on your device. The information collected via the cookies is usually sent to a Google server in the USA and stored there.

Since January 2019, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, has also been responsible for all Google services used within the EU.

IP anonymization is used on this website. User’s IP addresses are truncated within Member States of the EU and the European Economic Area and the other signatories to the Agreement. Only in certain cases will the complete IP address be sent to a Google server in the USA first and truncated there. This truncation means your IP address is not personally identifiable. The user’s IP address transmitted by the browser is not combined with other data stored by Google.

In accordance with the agreement on contract data processing that we have concluded with Google Inc., Google Inc. produces an analysis of website use and website activity using the information collected and renders services associated with Internet use.

The data collected by Google on our behalf is used to analyze the use of our website by individual users, e.g. to compile reports on activity on the website, in order to improve our website.

You have the option to prevent the storage of cookies on your device by adjusting the corresponding settings in your browser. It is not guaranteed that you will be able to access all the functions of this website without any restrictions if your browser does not allow cookies.

Using a browser plugin, you can also prevent the information collected via cookies (including your IP address) being sent to Google and used by Google. The following link takes you to the appropriate plugin: https://tools.google.com/dlpage/gaoptout?hl=de

You can find further information on the use of data by Google here:

• https://policies.google.com/privacy/partners?hl=de (data that is collected by Google partners)
• https://adssettings.google.de/authenticated (settings related to advertisements displayed to you)
• https://policies.google.com/technologies/ads?hl=de (use of cookies in advertisements)

2. Privacy policy for the use of Google Ads

The data controller has integrated Google Ads on this website. Google Ads is an Internet advertising service that allows advertisers to place ads in both Google's search engine results and the Google Advertising Network. Google Ads allows an advertiser to pre-define certain keywords to display an ad in Google's search engine results only when the user uses the search engine to retrieve a keyword-relevant search result. In the Google Network, ads are distributed to thematically relevant web pages using an automatic algorithm and using the previously defined keywords.

The operator of Google Ads services is Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland („Google“).

The purpose of Google Ads is to advertise our website by displaying interest-relevant advertising on the websites of third parties and in the search engine results of the Google search engine and by displaying third-party advertising on our website.

If an affected person comes to our website via a Google ad, Google stores a so-called conversion cookie on the information technology system of the person concerned. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the person concerned. If the cookie has not yet expired, the conversion cookie is used to determine whether certain subpages, such as the shopping basket of an online shop system, have been visited on our website. The conversion cookie enables both us and Google to track whether a person concerned, who came to our website via an AdWords ad, has generated revenue, i.e. whether they completed or cancelled a purchase of goods.

The data and information collected through the use of the conversion cookie is used by Google to generate visit statistics for our website. We use these visit statistics to determine the total number of users who have been referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google that could identify the person concerned.

The conversion cookie is used to store personal information, such as the websites visited by the person concerned. Personal data, including the IP address of the Internet connection used by the person concerned, is therefore transmitted to Google in the United States of America each time he or she visits our website. This personal data is stored by Google in the United States of America. Google may disclose personal data collected through the technical process to third parties.

The person concerned can prevent the setting of cookies through our website at any time, as already described above, by means of an appropriate setting of the Internet browser used, and thus permanently object to the setting of cookies. Such a setting in the Internet browser used would also prevent Google from placing a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.

Furthermore, it is also possible for the person concerned to object to interest-based advertising by Google. To do this, the person concerned must go to the link http://www.google.de/settings/ads from each of the Internet browsers they use and make the desired setting changes there.

Further information and the applicable data protection regulations can be found at: https://www.google.de/intl/de/policies/privacy/

3. Privacy policy for the use of Google Remarketing

On our websites we use DoubleClick Remarketing pixels and Google Ads Remarketing or "Similar Audiences", both services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). These services allow us to display advertising messages related to our website, such as interesting product offers, on the websites of other providers who also use these Google services ("partners" in the Google Display Network). This is done using cookie technology.

Google stores a small file with a sequence of numbers (so-called cookie ID) in your browser for this purpose in order to remember you as a visitor to our web pages and to record further anonymous data about the use of our web pages. The Cookie-ID is stored by us and serves only for the unique identification of your browser and not for the identification of your person. Personal data from you are not collected or stored via these services.

We also use Google Remarketing across multiple devices. This means that if, for example, you start shopping in our online shop on your smartphone and complete your order on your laptop, we can also reach you on the other device you use with the personalised advertising messages mentioned above. However, this will only happen if you have agreed to Google linking your web and app browser history to your Google Account and using information from your Google Account to personalize ads you see on the web. In this case, Google will use the data of these registered users in conjunction with Google Analytics data to create and define target audience lists for cross-device remarketing. To support this feature, Google Analytics collects Google-authenticated IDs from these users. This data from Google is temporarily linked to our Google Analytics data in order to form our target groups.

Please check your Google Account's privacy settings to prevent Google from linking your web browsing history and your app browsing history to your Google Account.

For more information about Google's remarketing services, details of the data processing that takes place through those services, and Google's privacy policy, please visit http://www.google.com/policies/technologies/ads/.

4. Privacy policy for the use of YouTube

The data controller has integrated components of YouTube on this website. YouTube is an Internet video portal that allows video publishers to post video clips and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programs, music videos, trailers or videos produced by the users themselves can be viewed on the Internet portal.

The operating company of YouTube for de.youtube.com is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. More information about YouTube can be viewed at https://www.youtube.com/yt/about/de/ . As part of this technical process, YouTube and Google are informed about which specific subpage of our website is visited by the person concerned.

If the person concerned is simultaneously logged in to YouTube, YouTube recognizes which specific subpage of our website the person concerned is visiting when they open a subpage containing a YouTube video. This information is collected by YouTube and Google and mapped to the respective YouTube account of the person concerned.

YouTube and Google receive information via the YouTube component that the person concerned has visited our website whenever the person concerned is logged in to YouTube at the same time as visiting our website; this happens regardless of whether the person concerned clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desired by the person concerned, he can prevent this transmission by logging out of his YouTube account before visiting our website.

Further information on the handling, collection and processing of user data can be found in the privacy policy of YouTube and Google at:

https://www.google.de/intl/de/policies/privacy

5. Privacy policy for the use of Instagram

Our website uses the Instagram plug-in from Instagram LLC, 1601 Willow Road, Menlo Park, California, 94025, USA ("Instagram"). This plug-in is recognizable by the Instagram logo.

When you visit our website, your browser establishes a direct connection to the servers of Instagram. Instagram thereby receives the information that your IP address has visited our website. If you are logged into your Instagram account while visiting our website, Instagram can assign the visit to our website to your user account. By interacting with the plug-ins, e.g. by clicking on the "Instagram" button, this information is also transmitted directly to Instagram and stored there.

For the type, scope and purpose of the data collected by Instagram as well as its further processing and use, please refer to Instagram's privacy policy: https://help.instagram.com/519522125107875

If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website.

6. Privacy policy for the use of Kununu

We have a profile on kununu, which is part of XING. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. You can find the kununu links on our website. When you visit our pages, a direct connection is established between your browser and the XING server via the kununu plugin. XING thereby receives the information that you have visited our site with your IP address. If you click on the kununu logo while logged into your XING account, you can link the content of our pages on your XING profile. This allows XING to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by XING. The kununu links establish a direct connection between your browser and the kununu server belonging to Xing. kununu thereby receives the information that you have visited our site with your IP address. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by kununu. If you do not want kununu to be able to assign your visit to our pages to your kununu user account, please log out of your kununu user account.

Further information on data protection and the knunu share button can be found in the Xing/kununu privacy policy at https://www.xing.com/app/share?op=data_protection. For details on their handling of your personal data, please refer to the kununu privacy policy: https://support.kununu.com/hc/de/categories/5139748304913-Datenschutz.

7. Privacy policy for the use of Vimeo

Our website uses the video hosting plug-in from Vimeo, operated by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA ("Vimeo"). The Vimeo plug-in allows us to embed videos on our website and provide you with an engaging and interactive experience.

When you visit a page on our website that contains the Vimeo plug-in, your browser establishes a direct connection to Vimeo's servers. This transmits to the Vimeo server which of our web pages you have visited. If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.

For more information on the handling of user data, please see Vimeo's privacy policy at: https://vimeo.com/privacy

We use the Vimeo plug-in to provide you with videos and multimedia content on our website. The use of this plug-in is in the interest of an appealing presentation of our online offers.

Please note that cookies and other tracking technologies may be used by Vimeo when playing the embedded videos on Vimeo. We have no influence on the type and use of the data collected by Vimeo. For more information about this and to manage your privacy settings on Vimeo, please visit the privacy settings of your Vimeo account.

8. Privacy policy for the use of Spotify

Our website uses the Spotify music streaming plug-in, operated by Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden ("Spotify"). The Spotify plug-in allows us to provide you with music and audio content directly on our Website and to provide an interactive music experience.

By integrating the Spotify plug-in, your browser establishes a direct connection to Spotify's servers. Spotify thereby receives information about which of our web pages you have visited. If you are logged into your Spotify account, Spotify can assign your visit to our website to your personal profile. To prevent this, please log out of your Spotify account before visiting our website.

For more information on the handling of user data, please refer to Spotify's privacy policy at: https://www.spotify.com/legal/privacy-policy/

We use the Spotify plug-in to provide you with a musical experience on our website and to make our online offers appealing.

Please note that when you play music or audio content through the embedded Spotify plug-in, cookies and other tracking technologies may be used by Spotify. We have no control over the nature and use of the data collected by Spotify. For more information about this and to manage your privacy settings on Spotify, please visit the privacy settings in your Spotify account.

8. Privacy policy for the use of Instagram via Elfsight Instagram Feed CC

On our pages, functions of the service Instagram are integrated. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA 94025, USA integrated.

The Elfsight Instagram Feed CC plugin loads the images directly from Instagram. All other data is collected and cached on the server side. When you, as a visitor to our website, load the content, it is loaded from Elfsight's cache for the Instagram feed. No personal data is collected for this data request.

For more information on Elfsight's privacy policy, please visit: https://elfsight.com/privacy-policy/

For more information, please see Instagram's privacy policy: https://instagram.com/about/legal/privacy/

XI. Contact form for newsletters

1. Description and scope of data processing

On our website you can subscribe to a free newsletter. The data from the input mask is transmitted to us when registering for the newsletter.

This data can include:

• First Name
• Last Name
• E-mail adress
• Phone number
• Company
• Subject
• Consent

In addition, the following data is collected upon registration:

• IP address of the retrieving computer
• Date and time of registration

For the processing of the data, your consent is obtained during the registration process and reference is made to this privacy policy.

2. Legal basis for data processing

The legal basis for the processing of data after the user has registered for the newsletter is Art. 6 para. 1 lit. a GDPR.

3. Purpose of data processing

The collection of the user's e-mail address serves to deliver the newsletter. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage, objection and correction options

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. The e-mail address of the user is therefore stored as long as the subscription to the newsletter is active.

5. Objection and correction options

Subscription to the newsletter may be terminated by the data subject free of charge and at any time in writing . For this purpose it is sufficient to send an e-mail to the contact named in the imprint.

6. Mailchimp

We use Mailchimp as our marketing platform. Mailchimp is a service of Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. By clicking on "Confirm registration" in the newsletter form, you confirm that your data will be forwarded to Mailchimp for processing. Learn more about Mailchimp's privacy practices here.

7. CleanTalk Anti-Spam-Check

We use the service "CleanTalk", which protects the website from spam. The use is based on our legitimate interests within the meaning of Art. 6 (1) f) of the General Data Protection Regulation (DSGVO).

When you submit the website contact form, your person-related data will be stored on this website, e.g. your IP address, your e-mail, your comment text and the data of the website form fields.

For security reasons and to protect this website from spam, your data will be processed in the CleanTalk Cloud Service and stored for a maximum of 45 days. At the end of the period, they will be completely deleted. CleanTalk useses the IP/email address spam activity information to provide appropriate anti-spam protection to all websites connected to its service.

For more information on the collection and use of data by CleanTalk, please refer to the privacy policy of CleanTalk Inc:alk Inc.: https://cleantalk.org/publicoffer#privacy

8. Spotify

Our website uses the music streaming plugin from Spotify, operated by Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden ("Spotify"). The Spotify plugin allows us to provide you with music and audio content directly on our website, offering an interactive music experience.

By integrating the Spotify plugin, your browser establishes a direct connection to Spotify's servers. Spotify thereby receives information about which of our web pages you have visited. If you are logged into your Spotify account, Spotify can associate your visit to our website with your personal profile. To prevent this, please log out of your Spotify account before visiting our website.

Further information on the handling of user data can be found in Spotify's privacy policy at: https://www.spotify.com/legal/privacy-policy/

We use the Spotify plugin to provide you with a musical experience on our website and to make our online offerings appealing.

Please note that when playing music or audio content through the embedded Spotify plugin, cookies and other tracking technologies may be used by Spotify. We have no influence on the type and use of data collected by Spotify. For more information and to manage your privacy settings on Spotify, please visit the privacy settings in your Spotify account.

9. Instagram via Elfsight Instagram Feed CC

Features of the Instagram service are integrated into our pages. These features are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

The Elfsight Instagram Feed CC plugin directly loads images from Instagram. All other data is collected and cached on the server. When you, as a visitor to our website, load the content, it is retrieved for the Instagram Feed from Elfsight's cache. No personal data is collected for this data request.

For more information on Elfsight's privacy policy, please visit: https://elfsight.com/privacy-policy/

Additional information can be found in Instagram's privacy policy: https://instagram.com/about/legal/privacy/

10. WEBFLOW

We host parts of our website with Webflow. The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter referred to as Webflow). When you visit our website, Webflow collects various log files, including your IP addresses.

Webflow is a tool for creating and hosting websites. Webflow stores cookies or other recognition technologies necessary for displaying the page, providing certain website functions, and ensuring security (essential cookies).

For details, refer to Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy.

The use of Webflow is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation of our website. If appropriate consent has been requested, processing is based solely on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of TTDSG. Consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://webflow.com/legal/eu-privacy-policy

XII. Rights of the person concerned

1. Right to information

You can ask the responsible person to confirm whether personal data concerning you will be processed by us.

If such processing has taken place, you may request the following information from the person responsible:

(1) the purposes for which the personal data is processed;

(2) the categories of personal data processed;

(3) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed to;

(4) the planned duration of the storage of the personal data concerning you or, if specific information on this is not available, the criteria for determining the storage period;

(5) the existence of a right to have your personal data concerning you corrected or deleted, a right to have processing restricted by the data controller or a right to object to such processing;

(6) the existence of a right of appeal to a supervisory authority;

(7) any available information on the origin of the data if the personal data was not collected from the person concerned;

(8) the existence of automated decision making including profiling in accordance with Art. 22 para. 1 and 4 DSGVO and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the person concerned.

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate warranties in accordance with Art. 46 DSGVO in connection with the transmission.

2. Right to correction

You have a right of rectification and/or completion vis-à-vis the data controller if the personal data processed concerning you is incorrect or incomplete. The person responsible shall make the correction without delay.

3. Right to limitation of processing

Under the following conditions, you may request that the processing of personal data concerning you be restricted:

(1) if you dispute the accuracy of the personal data concerning you for a period of time that enables the person responsible to verify the accuracy of the personal data;

(2) the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;

(3) the person responsible no longer needs the personal data for the purposes of the processing, but you do need them to assert, exercise or defend legal claims, or

(4) if you object to the processing pursuant to Art. 21 para. 1 DSGVO and it is not yet clear whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.

If the processing restriction has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.

4. Right to deletion

Deletion obligation

You may request the person responsible to delete the personal data relating to you immediately. The person responsible is then obliged to delete this data immediately if one of the following reasons applies:

(1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.

(2) You revoke your consent, on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para 2 lit. a DSGVO, and there is no other legal basis for processing.

(3) You file an objection against the data processing pursuant to Art. 21 para. 1 DSGVO and there are no overriding legitimate reasons for the processing, or file an objection pursuant to Art. 21 para. 2 DSGVO.

(4) The personal data concerning you has been processed unlawfully.

(5) The deletion of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.

(6) The personal data concerning you have been collected in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO.

Information to third parties

If the person responsible has made the personal data concerning you public and is obliged to delete them pursuant to Art. 17 para. 1 DSGVO, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data, that you as the person concerned have requested the deletion of all links to this personal data or of copies or replications of this personal data.

Exceptions

Right to erasure does not exist as long as processing is necessary

(1) to exercise the liberty to freedom of expression and information;

(2) to fulfil a legal obligation that requires processing according to the law of the union or of the member states, to which the responsible person is subject to, or to exercise a duty for public benefit or in the exercise of public authority, which has been delegated to the person responsible;

(3) for reasons of public interest in the field of public health, in accordance with Art. 9, paragraph 2, lit. h and i, as well as Art. 9, paragraph 3 GDPR;

(4) for archival purposes in public interest, scientific or historical research purposes or for statistical purposes, according to Art. 89, section 1 GDPR, as far as the law referred to in section (a) is likely to render reaching the targets of this processing impossible, or seriously affect them, or

(5) to assert, exercise or defend legal claims.

5. Right to information

If you exercise the right to rectification, erasure or restriction of processing towards the person responsible, he/she is obliged to communicate this correction or deletion of data or restriction of processing to all recipients to whom your personal data has been disclosed, unless this proves to be impossible or involves disproportionate efforts.

With respect to the person responsible, you have the right to be informed about these recipients.

6. Right to data portability

You have the right to receive personal data that you have provided to the person responsible, in a structured, common and machine-readable format. In addition, you also have the right to transfer this data to another person to whom you had provided the personal data, without hindrance from the person responsible, provided that

(1) the processing upon consent according to Art. 6, section 1, lit. a GDPR or Art. 9, section 2, lit. a GDPR or on a contract according to Art. 6, section 1, lit. b GDPR and

(2) the processing is done using automated procedures.

In exercising this right, you also have the right to transfer your personal data directly from one person responsible to another, insofar as this is technically feasible. Freedom and rights of other persons may not be affected.

The right to data portability does not apply to the processing of personal data which is necessary for performing a task, which is in public interest, or in exercising public authority, which has been delegated to the person responsible.

7. The right to object to certain processing operations

For reasons arising from your particular situation, you have the right to take objection against processing of your personal data at any time, on the basis of Art. 6, section 1, lit. e or f GDPR; this also applies to profiling based on these provisions.

The controller will no longer process personal data concerning you, unless he demonstrates compelling legitimate grounds for processing, that outweigh your interests, rights and freedom, or the processing is intended to assert, exercise or defend legal claims.

If the personal data relating to you is processed for direct advertising purposes, you have the right to object at any time against the processing of your personal data for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct advertising.

If you object to processing for direct advertising purposes, your personal data will no longer be processed for these purposes.

Regardless of policy 2002/58/EG, you have the option, in the context of the use of information society services, to exercise your right to object through automated procedures that use technical specifications.

8. Right to revoke data protection consent

You have the right to revoke your data protection consent at any time. The revocation of consent does not affect the legality of processing carried out on the basis of the consent, until revocation.

9. Automated decision on an individual basis, including profiling

You have the right not to be subjected to a decision based solely on automated processing, including profiling, that will have a legal effect or that will affect you in a similar manner.

Processing on our websites is neither based on automated decisions nor profiling.

10. Right to complain to an inspecting authority

Without prejudice to any other administrative or judicial appeal, you have the right to complain to an inspecting authority, in particular in the member state of the place of residence, employment or the place of alleged infringement, if you believe that the processing of your personal data is against the GDPR.

The inspecting authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial appeal by type. 78 GDPR.

Where can I complain about data protection violations?

Independent data protection center of Saarland
Fritz-Dobisch-Str. 12
66111 Saarbrücken

E-Mail: poststelle@datenschutz.saarland.de
Tel: +49 (0) 681 9 47 81-0
Fax: +49 (0) 681/ 9 47 81-29

Changes to this privacy policy

We reserve the right to change this data protection policy at any time with future effect. The current version is available on our website. Please visit our website regularly and be informed about the data protection regulations applicable.

As of: 22.04.2021