The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Christian Münch
Your Rights as a Data Subject
You can exercise the following rights at any time using the contact details provided for our data protection officer:
- Access to your data stored by us and information about its processing (Article 15 GDPR),
- Rectification of inaccurate personal data (Article 16 GDPR),
- Erasure of your data stored by us (Article 17 GDPR),
- Restriction of processing if we are not yet permitted to delete your data due to legal obligations (Article 18 GDPR),
- Objection to our processing of your data (Article 21 GDPR), and
- Data portability, provided you have consented to processing or entered into a contract with us (Article 20 GDPR).
If you have given us your consent, you can withdraw it at any time with effect for the future.
You can lodge a complaint with a supervisory authority at any time, for example, the competent authority in the German federal state where you reside or the authority responsible for us as the controller.
A list of supervisory authorities (for the private sector), including their addresses, is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Collection of General Information When Visiting Our Website
Nature and Purpose of Processing
When you access our website without registering or otherwise submitting information, general information is collected automatically. This information (server log files) includes, for example, your browser type, operating system, internet service provider's domain name, IP address, and similar details.
It is processed in particular for the following purposes:
- Ensuring a trouble-free connection to the website,
- Ensuring smooth use of our website,
- Evaluating system security and stability, and
- Other administrative purposes.
We do not use your data to draw conclusions about you personally. We may evaluate information of this kind statistically to optimize our website and its underlying technology.
Legal Basis
Processing takes place under Article 6(1)(f) GDPR, based on our legitimate interest in improving the stability and functionality of our website.
Recipients
Recipients may include technical service providers acting as processors for the operation and maintenance of our website.
Retention Period
The data is deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this is generally the case when the relevant session ends.
Whether Provision Is Required
Providing the personal data mentioned above is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. Individual services may also be unavailable or restricted. For this reason, an objection is excluded.
Web Analytics with Rybbit (Self-Hosted)
Nature and Purpose of Processing
We use the self-hosted analytics software Rybbit on our website to analyze visitor behavior and optimize our offering. It collects data about your use of our website, such as pages visited, time spent, and country of origin. This data is processed exclusively on our own server and is not shared with third parties. Collection helps us understand which areas of our website are particularly interesting and where we can improve our offering. Your IP address is anonymized before storage.
Legal Basis
Data is processed on the basis of the user's consent (Article 6(1)(a) GDPR).
Recipients
As the software runs on our own servers, we are the sole recipients of the collected data. No data is shared with third parties.
Retention Period
Data is deleted as soon as it is no longer required for our recording purposes.
Embedded YouTube Videos
Nature and Purpose of Processing
We embed YouTube videos on some of our web pages. The corresponding plugins are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube"). When you visit a page with a YouTube plugin, a connection to YouTube servers is established. YouTube is informed about which pages you visit. If you are logged in to your YouTube account, YouTube can associate your browsing behavior with you personally. You can prevent this by logging out of your YouTube account beforehand.
When a YouTube video starts, the provider uses cookies to collect information about user behavior.
Further information about the purpose and scope of data collection and processing by YouTube is available in the provider's privacy policy. It also contains information about your related rights and settings for protecting your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has committed to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework
Legal Basis
The legal basis for embedding YouTube and the associated transfer of data to Google is your consent (Article 6(1)(a) GDPR).
Recipients
Accessing YouTube automatically establishes a connection to Google.
Retention Period and Withdrawal of Consent
If you have disabled cookie storage for Google's advertising program, you should not encounter such cookies when watching YouTube videos either. However, YouTube also stores non-personal usage information in other cookies. To prevent this, you must block cookie storage in your browser.
Further information about privacy at YouTube is available in the provider's privacy policy: https://www.google.de/intl/de/policies/privacy/
Transfer to Third Countries
Google processes your data in the USA and has committed to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
Whether Provision Is Required
Providing your personal data is voluntary and based solely on your consent. If you block access, some website functionality may be restricted.
SSL Encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (such as SSL) over HTTPS.
Changes to Our Privacy Policy
We reserve the right to amend this privacy policy to ensure that it always complies with current legal requirements or to reflect changes to our services, such as the introduction of new services. The new privacy policy will apply when you next visit.
Questions for the Data Protection Officer
If you have questions about data protection, please email us or contact the person responsible for data protection in our organization directly:
This privacy policy was created with the help of activeMind AG, experts in external data protection officers (version #2019-04-10).