Data protection

Privacy Policy
This privacy policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as „data“) in the context of providing our services and within our online offering and its associated websites, functions, and content, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as „online offering“). With regard to the terminology used, such as „processing“ or „controller,“ we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Responsible party
Hecht Balance LLC
3833 Powerline Road
Suite 101-U
Fort Lauderdale, FL 33309
United States of America
Email Address: service@anjahecht.de

Types of data processed

  • Master data (e.g., personal master data, names, or addresses).
  • Contact details (e.g., email, phone numbers).
  • Content data (e.g., text inputs, photographs, videos).
  • Usage data (e.g., visited websites, interest in content, access times).
  • Meta/Communication Data (e.g., device information, IP addresses).

Categories of affected persons
Visitors and users of the online offering (hereinafter, the affected persons will also be collectively referred to as „users“).

Purpose of processing

  • Provision of the online offer, its functions and content.
  • Responding to contact requests and communicating with users.
  • Safety measures.
  • Reach Measurement/Marketing

Terminology Used
„Personal data“ means any information relating to an identified or identifiable natural person (hereinafter „data subject“); a natural person is regarded as identifiable who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

„Processing“ means any operation or series of operations carried out with or without the aid of automated procedures in connection with personal data. The term is broad and covers practically any handling of data.

„Pseudonymization“ is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

„Profiling“ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

As the „controller,“ the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data is designated.

„Data processor“ is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Governing Legal Framework
Pursuant to Article 13 GDPR, we hereby inform you of the legal bases for our data processing. For users within the scope of the General Data Protection Regulation (GDPR), i.e., the EU and the EEA, the following applies unless the legal basis is stated otherwise in the privacy policy:
The legal basis for obtaining consent is Article 6(1)(a) and Article 7 GDPR;
The legal basis for processing for the performance of our services and the execution of contractual measures, as well as for responding to inquiries, is Art. 6(1)(b) GDPR;
The legal basis for processing for the fulfillment of our legal obligations is Art. 6(1)(c) GDPR.;
In cases where the processing of personal data is necessary for the vital interests of the data subject or another natural person, Article 6(1)(d) of the GDPR serves as the legal basis.
The legal basis for the processing required for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller is Article 6(1)(e) GDPR.
The legal basis for processing to safeguard our legitimate interests is Article 6(1)(f) of the GDPR.
The processing of data for purposes other than those for which it was collected shall be determined in accordance with the provisions of Article 6(4) of the GDPR.
The processing of special categories of data (pursuant to Article 9(1) GDPR) is determined by the provisions of Article 9(2) GDPR.

Security measures
We shall implement appropriate technical and organizational measures, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, in accordance with the statutory provisions, to ensure a level of protection appropriate to the risk.

Measures include, in particular, ensuring the confidentiality, integrity, and availability of data through control of physical access to the data, as well as access related to it, input, disclosure, ensuring its availability, and its segregation. Furthermore, we have established procedures that ensure the exercise of data subject rights, deletion of data, and response to data compromise. Additionally, we consider the protection of personal data already during the development or selection of hardware, software, and procedures, in accordance with the principle of data protection through design and by default privacy-friendly settings.

Cooperation with processors, joint controllers, and third parties
If we disclose data to other persons and companies (processors, joint controllers, or third parties), transfer it to them, or otherwise grant them access to the data as part of our processing, this will only occur on the basis of a legal permission (e.g., if the transfer of data to third parties, such as payment service providers, is necessary for the fulfillment of a contract), the user has consented, a legal obligation provides for this, or on the basis of our legitimate interests (e.g., when using agents, web hosts, etc.).

If we disclose, transmit, or otherwise grant access to data to other companies within our corporate group, this will be done particularly for administrative purposes as a legitimate interest and, furthermore, on a basis compliant with legal requirements.

Transfers to third countries
If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA), or the Swiss Confederation), or if this occurs in the context of using third-party services or disclosing or transferring data to other persons or companies, this will only happen if it is necessary for the performance of our (pre)contractual obligations, based on your consent, due to a legal obligation, or based on our legitimate interests. Subject to legal or contractual permissions, we will only process or allow data to be processed in a third country if the legal requirements are met. This means that processing will occur, for example, based on specific guarantees, such as the officially recognized determination of a level of data protection equivalent to that of the EU (e.g., for the USA through the „Privacy Shield“) or compliance with officially recognized special contractual obligations.

Rights of the data subjects
You have the right to request confirmation of whether personal data concerning you is being processed, and to information about this data, as well as further information and a copy of the data in accordance with legal requirements.

You have the right, in accordance with legal requirements, to request the completion of data concerning you or the correction of incorrect data concerning you.

In accordance with legal requirements, you have the right to request the immediate deletion of the relevant data, or alternatively, in accordance with legal requirements, to request a restriction on the processing of the data.

You have the right to request that the data concerning you, which you have provided to us, be received in accordance with legal requirements and to demand its transfer to other controllers.

You also have the right, in accordance with legal requirements, to lodge a complaint with the competent supervisory authority.

Right of Withdrawal
You have the right to withdraw any consents you have given, with effect for the future.

Right of objection
You can object to the future processing of your data in accordance with legal requirements at any time. You may object, in particular, to the processing for direct marketing purposes.

Cookies and the right to object to direct marketing
„Cookies“ are small files that are stored on users„ computers. Various types of information can be stored within cookies. A cookie primarily serves to store information about a user (or the device on which the cookie is stored) during or after their visit to an online service. Temporary cookies, also known as “session cookies„ or “transient cookies,„ are cookies that are deleted after a user leaves an online service and closes their browser. For example, the contents of a shopping cart in an online shop or a login status can be stored in such a cookie. “Permanent„ or “persistent„ cookies are cookies that remain stored even after the browser is closed. This way, for example, the login status can be saved if users visit again after several days. Similarly, user interests that are used for reach measurement or marketing purposes can be stored in such a cookie. “Third-party cookies„ are cookies offered by providers other than the controller operating the online service (otherwise, if they are only the controller's cookies, they are referred to as “first-party cookies").

We may use temporary and permanent cookies, and we will clarify this within our privacy policy.

If users do not want cookies to be stored on their computer, they are asked to disable the corresponding option in their browser's system settings. Stored cookies can be deleted in the browser's system settings. The exclusion of cookies may lead to functional limitations of this online offering.

A general objection to the use of cookies for online marketing purposes can be declared for a variety of services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. Furthermore, cookies can be prevented from being stored by disabling them in your browser settings. Please note that in this case, not all functions of this online service may be available for use.

Data deletion
The data we process will be deleted or its processing restricted in accordance with legal requirements. Unless otherwise expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no legal retention obligations preventing deletion.

Unless the data is deleted because it is required for other legitimate purposes and in accordance with the law, its processing will be restricted. This means the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

Changes and Updates to the Privacy Policy
We ask you to regularly inform yourself about the content of our privacy policy. We adapt the privacy policy as soon as changes in the data processing we carry out make this necessary. We will inform you as soon as the changes require an action on your part (e.g., consent) or another individual notification.

Therapeutic Services and Coaching
We process the data of our clients and prospective clients and other clients or contractual partners (collectively referred to as „clients“) in accordance with Art. 6 (1) lit. b) GDPR to provide them with our contractual or pre-contractual services. The data processed here, the type, scope, purpose, and necessity of their processing, are determined by the underlying contractual relationship. The data processed generally include master data and core data of the clients (e.g., name, address, etc.), as well as contact data (e.g., email address, telephone, etc.), contract data (e.g., services used, fees, names of contact persons, etc.), and payment data (e.g., bank details, payment history, etc.).

As part of our services, we may also process special categories of data in accordance with Art. 9 (1) GDPR, in particular information on the health of clients, if applicable with reference to their sex lives or sexual orientation, ethnic origin, or religious or philosophical beliefs. For this purpose, if necessary, we obtain explicit consent from clients in accordance with Art. 6 (1) lit. a, Art. 7, Art. 9 (2) lit. a GDPR and otherwise process the special categories of data for purposes of health care on the basis of Art. 9 (2) lit. h GDPR, § 22 (1) no. 1 b BDSG.

If required for contract fulfillment or by law, we will disclose or transmit client data in the context of communication with other professionals, to third parties necessarily or typically involved in contract fulfillment, such as billing centers or comparable service providers, if this serves the provision of our services according to Art. 6 para. 1 lit. b GDPR, is legally required according to Art. 6 para. 1 lit. c GDPR, serves our interests or those of the clients in efficient and cost-effective healthcare as a legitimate interest according to Art. 6 para. 1 lit. f GDPR, or is necessary according to Art. 6 para. 1 lit. d GDPR, or to protect the vital interests of the clients or another natural person, or within the scope of consent according to Art. 6 para. 1 lit. a, Art. 7 GDPR.

The data will be deleted when it is no longer required for the fulfillment of contractual or legal duties of care, as well as for handling any warranty and comparable obligations, with the necessity of data retention being reviewed every three years; otherwise, the statutory retention periods shall apply.

Contractual services
We process the data of our contractual partners and interested parties, as well as other clients, customers, clients, or contractual partners (collectively referred to as „contractual partners“) in accordance with Art. 6 para. 1 lit. b GDPR to provide them with our contractual or pre-contractual services. The data processed in this context, the nature, scope, and purpose, as well as the necessity of their processing, are determined by the underlying contractual relationship.

The processed data includes the master data of our contractual partners (e.g., names and addresses), contact details (e.g., email addresses and phone numbers), as well as contract data (e.g., services used, contract contents, contractual communication, names of contact persons), and payment data (e.g., bank details, payment history).

As a general rule, we do not process special categories of personal data, except when they are part of an commissioned or contractually agreed processing activity.

We process data that is necessary for the establishment and fulfillment of contractual services and point out the necessity of providing it if this is not obvious to the contractual partners. Disclosure to external persons or companies only takes place if it is required within the scope of a contract. When processing data entrusted to us within the scope of an order, we act in accordance with the instructions of the client and the legal requirements.

In the course of using our online services, we may store the IP address and the time of the respective user action. Storage is based on our legitimate interests as well as the users' interests in protection against abuse and other unauthorized use. This data will generally not be passed on to third parties unless it is necessary for the assertion of our claims according to Art. 6 para. 1 lit. f GDPR or if there is a legal obligation to do so according to Art. 6 para. 1 lit. c GDPR.

The data will be deleted when the data is no longer required to fulfill contractual or legal duties of care, as well as for handling any warranty and comparable obligations, with the necessity of storing the data being reviewed every three years; otherwise, the statutory retention periods shall apply.

External payment service providers
We use external payment service providers through whose platforms users and we can make payment transactions (e.g., each with a link to the privacy policy, Paypal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full), Klarna (https://www.klarna.com/de/datenschutz/), Skrill (https://www.skrill.com/de/fusszeile/datenschutzrichtlinie/), Giropay (https://www.giropay.de/rechtliches/datenschutz-agb/), Visa (https://www.visa.de/datenschutz), Mastercard (https://www.mastercard.de/de-de/datenschutz.html), American Express (https://www.americanexpress.com/de/content/privacy-policy-statement.html)

As part of fulfilling contracts, we use payment service providers on the basis of Art. 6 (1) (b) GDPR. Furthermore, we use external payment service providers based on our legitimate interests pursuant to Art. 6 (1) (f) GDPR, in order to offer our users effective and secure payment options.

The data processed by payment service providers includes inventory data, such as name and address, banking data, such as account numbers or credit card numbers, passwords, TANs, and checksums, as well as contract, sum, and recipient-related information. This information is required to process transactions. However, the entered data is only processed and stored by the payment service providers. This means we do not receive any account or credit card-related information, but merely information confirming or denying the payment. Under certain circumstances, the data may be transmitted by the payment service providers to credit bureaus. This transmission is for the purpose of identity and credit checks. We refer you to the terms and conditions and privacy notices of the payment service providers for this.

For payment transactions, the terms and conditions and privacy notices of the respective payment service providers apply, which can be accessed on their respective websites or transaction applications. We also refer to these for further information and for the assertion of withdrawal, information, and other data subject rights.

Administration, Financial Accounting, Office Organization, Contact Management
We process data within the scope of administrative tasks, as well as for the organization of our operations, financial accounting, and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the context of providing our contractual services. The legal bases for processing are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. The processing affects customers, prospects, business partners, and website visitors. The purpose and our interest in the processing lie in administration, financial accounting, office organization, and data archiving, i.e., tasks that serve to maintain our business activities, perform our duties, and provide our services. The deletion of data with regard to contractual services and contractual communication corresponds to the information provided for these processing activities.

We disclose or transmit data to the tax authorities, advisors such as tax consultants or auditors, as well as other fee collectors and payment service providers.

Furthermore, based on our business interests, we store information about suppliers, organizers, and other business partners, for example, for later contact. We generally store this data, which is predominantly business-related, permanently.

Business Analyses and Market Research
In order to operate our business economically and to recognize market trends, wishes of contract partners, and users, we analyze the data available to us regarding business transactions, contracts, inquiries, etc. We process inventory data, communication data, contract data, payment data, usage data, and metadata based on Art. 6 para. 1 lit. f GDPR, whereby the data subjects include contract partners, prospects, customers, visitors, and users of our online services.

The analyses are carried out for the purpose of business evaluations, marketing, and market research. In doing so, we can take into account the profiles of registered users, including, for example, the services they have used. The analyses serve to increase user-friendliness, optimize our offering, and improve economic efficiency. The analyses are for our use only and will not be disclosed externally, unless they are anonymized analyses with aggregated values.

If these analyses or profiles are personal data, they will be deleted or anonymized upon termination of the user's account, otherwise after two years from the conclusion of the contract. Furthermore, company-wide economic analyses and general trend determinations will be anonymized whenever possible.

Akismet Anti-Spam Check

Our website uses the „Akismet“ service, which is provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. This service is used on the basis of our legitimate interests pursuant to Article 6(1)(f) of the GDPR. This service helps distinguish comments from real people from spam comments. To do this, all comment data is sent to a server in the United States, where it is analyzed and stored for four days for comparison purposes. If a comment is classified as spam, the data is stored beyond this period. This information includes the name entered, the email address, the IP address, the comment content, the referrer, details about the browser and computer system used, and the time of the entry.

Further information on Akismet's data collection and usage can be found in Automattic's privacy notice: https://automattic.com/privacy/.

Users are welcome to use pseudonyms or refrain from entering their name or email address. You can prevent data transfer entirely by not using our comment system. That would be a shame, but unfortunately, we see no other alternatives that work as effectively.

Retrieving Emojis and Smileys
Our WordPress blog uses graphic emojis (or smileys)—that is, small graphic files that express emotions—which are retrieved from external servers. In doing so, the server providers collect users’ IP addresses. This is necessary so that the emoji files can be transmitted to users’ browsers. The emoji service is provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Automattic’s privacy policy: https://automattic.com/privacy/. The server domains used are s.w.org and twemoji.maxcdn.com; to the best of our knowledge, these are so-called content delivery networks—that is, servers that serve solely to ensure fast and secure transmission of the files, and users’ personal data is deleted after transmission.

The use of emojis is based on our legitimate interests, i.e., our interest in an attractive design of our online services pursuant to Art. 6 (1) lit. f GDPR.

Contact
When you contact us (e.g., via contact form, email, telephone, or social media), your information will be processed to handle your inquiry and its processing in accordance with Art. 6(1)(b) GDPR (for contractual/pre-contractual relationships) and Art. 6(1)(f) GDPR (for other inquiries). User data may be stored in a Customer Relationship Management (“CRM”) system or a comparable inquiry management system.

We delete requests when they are no longer necessary. We review the necessity every two years; furthermore, statutory archiving obligations apply.

Newsletter
With the following information, we inform you about the content of our newsletter, as well as the registration, dispatch, and statistical evaluation procedures, and your rights of objection. By subscribing to our newsletter, you agree to receive it and the described procedures.

Newsletter content: We send newsletters, emails, and other electronic notifications with advertising information (hereinafter referred to as „Newsletters“) only with the consent of the recipients or a legal permit. If the content of the newsletter is specifically described within the scope of a subscription, it is decisive for the users' consent. Otherwise, our newsletters contain information about our services and about us.

Login details: To subscribe to the newsletter, simply provide your email address and a name for personal salutation in the newsletter.

The newsletter is sent and its success is measured based on the recipients' consent pursuant to Art. 6(1)(a), Art. 7 GDPR in conjunction with Section 7(2) No. 3 UWG, or if consent is not required, based on our legitimate interests in direct marketing pursuant to Art. 6(1)(f) GDPR in conjunction with Section 7(3) UWG.

The logging of the login procedure is based on our legitimate interests according to Art. 6 Para. 1 lit. f GDPR. Our interest lies in the use of a user-friendly and secure newsletter system that serves our business interests, meets user expectations, and also allows us to prove consent.

Cancellation/Revocation – You can cancel the receipt of our newsletter at any time, i.e., revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. We may store deleted email addresses for up to three years based on our legitimate interests before deleting them, in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed at the same time.

Newsletter – Shipping Service Provider

Der Versand der Newsletter erfolgt mittels des Versanddienstleisters [Mailerlite: Michael Toohig, Josef Wolosz / 15 Cambridge Court / 210 Shepherd’s Bush Road / London W6 7NJ]. Die Datenschutzbestimmungen des Versanddienstleisters können Sie hier einsehen: [https://www.klick-tipp.com/datenschutzerkl%C3%A4rung]. Der Versanddienstleister wird auf Grundlage unserer berechtigten Interessen gem. Art. 6 Abs. 1 lit. f. DSGVO und eines Auftragsverarbeitungsvertrages gem. Art. 28 Abs. 3 S. 1 DSGVO eingesetzt.

The shipping service provider may use the recipient data in pseudonymous form, i.e., without attribution to a user, for the optimization or improvement of its own services, e.g., for the technical optimization of the dispatch and display of newsletters or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to contact them itself or to pass the data on to third parties.

Newsletter – Success Measurement
The newsletters contain a so-called „web beacon,“ which is a pixel-sized file that is retrieved from our server, or from the server of our shipping service provider if we use one, when the newsletter is opened. As part of this retrieval, technical information such as browser and system information, as well as your IP address and the time of retrieval, are collected.

This information is used for the technical improvement of services based on technical data or target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or access times. Statistical surveys also include determining whether newsletters are opened, when they are opened, and which links are clicked. While this information can be assigned to individual newsletter recipients for technical reasons, it is neither our intention, nor that of the shipping service provider, if employed, to observe individual users. Rather, the evaluations serve to recognize our users' reading habits and to adapt our content to them or to send different content according to our users' interests.

Unfortunately, a separate revocation of success measurement is not possible; in this case, the entire newsletter subscription must be canceled.

Hosting and email sending
The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, email sending, security services, and technical maintenance services, which we use for the purpose of operating this online offering.

We, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties, and visitors to this online service based on our legitimate interests in providing this online service efficiently and securely in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).

Collection of access data and log files
On the basis of our legitimate interests within the meaning of Art. 6 (1) lit. f. GDPR, we, or rather our hosting provider, collect data about every access to the server on which this service is located (so-called server log files). The access data include the name of the retrieved website, file, date and time of retrieval, amount of data transferred, message about successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider.

Log file information is stored for a maximum of 7 days for security reasons (e.g., to investigate misuse or fraud) and then deleted. Data that requires further retention for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.

Facebook Pixel, Custom Audiences, and Facebook Conversions
Within our online offering, we use the so-called “Facebook Pixel” from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), based on our legitimate interests in analysis, optimization, and the economic operation of our online offering and for these purposes.

Facebook is certified under the Privacy Shield agreement, thereby guaranteeing compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

With the help of the Facebook Pixel, Facebook can, on the one hand, identify visitors to our online services as a target audience for displaying advertisements (so-called “Facebook Ads”). Accordingly, we use the Facebook Pixel to show the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online services or who exhibit certain characteristics (e.g., interests in specific topics or products, determined based on the websites visited) that we transmit to Facebook (so-called „Custom Audiences“). With the help of the Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interests of users and do not appear intrusive. Furthermore, with the help of the Facebook Pixel, we can track the effectiveness of Facebook advertisements for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook advertisement (so-called „Conversion“).

The processing of data by Facebook takes place within the framework of Facebook's Data Usage Policy. Accordingly, general information on the display of Facebook Ads can be found in Facebook's Data Usage Policy: https://www.facebook.com/policy. Specific information and details about the Facebook pixel and how it works can be found in Facebook's Help Center: https://www.facebook.com/business/help/651294705016616.

You can object to collection by the Facebook pixel and the use of your data for displaying Facebook ads. To adjust which types of ads are shown to you within Facebook, you can visit the page set up by Facebook and follow the instructions on setting up interest-based advertising: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, meaning they will be applied to all devices, such as desktop computers or mobile devices.

You can also opt out of the use of cookies for reach measurement and advertising purposes via the opt-out page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

Online presences on social media
We maintain online presences within social networks and platforms to communicate with customers, prospects, and users who are active there and to inform them about our services.

We point out that user data may be processed outside the European Union. This can pose risks for users, as it may, for example, make it more difficult to enforce users' rights. With regard to US providers certified under the Privacy Shield, we point out that they commit to complying with EU data protection standards.

Furthermore, user data is generally processed for market research and advertising purposes. For example, usage profiles can be created from user behavior and resulting interests. Usage profiles can in turn be used to, for example, display advertisements both on and off the platforms that are presumed to match users' interests. For these purposes, cookies are generally stored on users' computers, which store users' usage behavior and interests. Furthermore, data independent of the devices used by the users can also be stored in the usage profiles (especially if the users are members of the respective platforms and are logged in).

The processing of users' personal data is based on our legitimate interests in effectively informing and communicating with users, pursuant to Art. 6(1)(f) GDPR. If users are asked by the respective providers for consent to data processing (i.e., they give their consent, e.g., by checking a box or confirming a button), the legal basis for processing is Art. 6(1)(a), Art. 7 GDPR.

For a detailed description of the respective processing and opt-out options, please refer to the provider information linked below.

Even in the case of information requests and the assertion of user rights, we point out that these can be most effectively asserted with the providers. Only the providers have access to the user data and can take corresponding measures and provide information directly. Should you still need help, you can contact us.

– Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) – Privacy Policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

– Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

– Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Privacy Policy/Opt-Out: http://instagram.com/about/legal/privacy/.

– Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) – Privacy Policy: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.

– Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – Privacy Policy/Opt-Out: https://about.pinterest.com/de/privacy-policy.

– LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) – Privacy Policy https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.

– Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) – Privacy Policy/Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.

– Wakalet (Wakelet Limited, 76 Quay Street, Manchester, M3 4PR, United Kingdom) – Privacy Policy/Opt-Out: https://wakelet.com/privacy.html.

– Soundcloud (SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany) – Privacy Policy/Opt-Out: https://soundcloud.com/pages/privacy.

Integration of third-party services and content

Based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6(1)(f) GDPR), we use third-party content or service offerings to embed their content and services, such as videos or fonts (hereinafter collectively referred to as “content”).

This always presupposes that the third-party providers of these contents perceive the IP addresses of the users, as they could not send the contents to their browsers without the IP address. The IP address is therefore required for the display of these contents. We endeavor to use only such contents whose respective providers use the IP address solely for the delivery of the contents. Third-party providers can also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. Through the “pixel tags,” information such as visitor traffic to the pages of this website can be evaluated. The pseudonymous information can also be stored in cookies on the users' devices and contain, among other things, technical information about the browser and operating system, referring websites, time of visit, and further details on the use of our online services, as well as be combined with such information from other sources.

Vimeo
We may embed videos from the “Vimeo” platform provided by Vimeo Inc., Attention: Legal Department, 555 West 18th Street, New York, New York 10011, USA. Privacy Policy: https://vimeo.com/privacy. Please note that Vimeo may use Google Analytics; for more information, please refer to the privacy policy (https://policies.google.com/privacy) and the opt-out options for Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=de) or Google’s settings for data use for marketing purposes (https://adssettings.google.com/).

YouTube
We embed videos from the platform “YouTube” of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Created with privacy-generator.de by Attorney Dr. Thomas Schwenke

,