# Privacy Policy

This is a translation for convenience. The legally binding version is the German privacy policy at [fse-group.de/datenschutz](/datenschutz).

Privacy Policy

Last updated: July 2020

### Table of contents

- Name and address of the controller

- Contact details of the data protection officer

- General information on data processing

- Rights of the data subject

- Provision of the website and creation of log files

- Use of cookies

- Email contact

- Hosting

- Plugins used

### Name and address of the controller

The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is FSE GmbH, Hugo-Licht-Straße 3, 04109 Leipzig, Germany, email: info@fse-group.de. We are legally represented by Dominic Asche and Gunnar Hopfe.

### Contact details of the data protection officer

Our data protection officer can be reached via heyData GmbH, Schützenstraße 5, 10117 Berlin, Germany, www.heydata.eu, email: datenschutz@heydata.eu.

### General information on data processing

#### 1. Scope of the processing of personal data

As a matter of principle we only process personal data of our users to the extent necessary to provide a functioning website as well as our content and services. The processing of our users' personal data regularly takes place only with the user's consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is required by law.

#### 2. Legal basis for the processing of personal data

Where we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) sentence 1 (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

For the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 (1) sentence 1 (b) GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.

Where processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 (1) sentence 1 (c) GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person make the processing of personal data necessary, Art. 6 (1) sentence 1 (d) GDPR serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) sentence 1 (f) GDPR serves as the legal basis for the processing.

#### 3. Data erasure and storage period

The personal data of the data subject is erased or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. The data is also blocked or erased when a storage period prescribed by the aforementioned rules expires, unless further storage of the data is necessary for the conclusion or performance of a contract.

### Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

#### 1. Right of access

You may request confirmation from the controller as to whether personal data concerning you is being processed by it.

If such processing is taking place, you may request information from the controller about the following:

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

This right of access may be restricted to the extent that it is likely to render impossible or seriously impair the achievement of research or statistical purposes and the restriction is necessary for the fulfilment of those research or statistical purposes.

the purposes for which the personal data is processed;
the categories of personal data being processed;
the recipients or categories of recipients to whom the personal data concerning you has been or is still being disclosed;
the envisaged period for which the personal data concerning you will be stored or, if specific information on this is not possible, criteria for determining the storage period;
the existence of automated decision-making including profiling pursuant to Art. 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.
all available information about the origin of the data if the personal data is not collected from the data subject;
the existence of automated decision-making including profiling pursuant to Art. 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject. You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
This right of access may be restricted to the extent that it is likely to render impossible or seriously impair the achievement of research or statistical purposes and the restriction is necessary for the fulfilment of those research or statistical purposes.

#### 2. Right to rectification

You have the right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is inaccurate or incomplete. The controller must carry out the rectification without delay.

Your right to rectification may be restricted to the extent that it is likely to render impossible or seriously impair the achievement of research or statistical purposes and the restriction is necessary for the fulfilment of those research or statistical purposes.

#### 3. Right to restriction of processing

Under the following conditions you may request the restriction of the processing of the personal data concerning you:

If the processing of the personal data concerning you has been restricted, this data may – apart from being stored – only be processed with your consent or for the establishment, exercise or defence of legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the Union or a member state.

If the processing has been restricted under the conditions above, you will be informed by the controller before the restriction is lifted.

Your right to restriction of processing may be restricted to the extent that it is likely to render impossible or seriously impair the achievement of research or statistical purposes and the restriction is necessary for the fulfilment of those research or statistical purposes.

#### 4. Right to erasure

a) Obligation to erase

You may request the controller to erase the personal data concerning you without delay, and the controller is obliged to erase this data without delay if one of the following grounds applies:

The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed
You withdraw your consent on which the processing was based pursuant to Art. 6 (1) sentence 1 (a) or Art. 9 (2) (a) GDPR and there is no other legal basis for the processing.
You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
The personal data concerning you has been processed unlawfully.
The erasure of the personal data concerning you is necessary to comply with a legal obligation under Union or member state law to which the controller is subject.
The personal data concerning you was collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

b) Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Art. 17 (1) GDPR, it shall, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform controllers processing the personal data that you as the data subject have requested the erasure of all links to, or copies or replications of, that personal data.

c) Exceptions

The right to erasure does not apply where the processing is necessary

for exercising the right of freedom of expression and information;
for compliance with a legal obligation which requires processing under Union or member state law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) as well as Art. 9 (3) GDPR;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, in so far as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
for the establishment, exercise or defence of legal claims.

#### 5. Right to be informed

If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort.

You have the right vis-à-vis the controller to be informed about these recipients.

#### 6. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

the processing is based on consent pursuant to Art. 6 (1) sentence 1 (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) sentence 1 (b) GDPR and
the processing is carried out by automated means.

In exercising this right you also have the right to obtain that the personal data concerning you is transmitted directly from one controller to another controller, in so far as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

#### 7. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) sentence 1 (e) or (f) GDPR; this also applies to profiling based on those provisions.

The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such marketing; this also applies to profiling in so far as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for those purposes.

In connection with the use of information society services – notwithstanding Directive 2002/58/EC – you have the option of exercising your right to object by automated means using technical specifications.

You also have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out for scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR.

Your right to object may be restricted to the extent that it is likely to render impossible or seriously impair the achievement of research or statistical purposes and the restriction is necessary for the fulfilment of those research or statistical purposes.

#### 8. Right to withdraw the data protection consent

You have the right to withdraw your data protection consent at any time. Withdrawing consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.

#### 9. Automated individual decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

is necessary for entering into, or performance of, a contract between you and the controller,
is authorised by Union or member state law to which the controller is subject and that law contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
is based on your explicit consent.

However, these decisions must not be based on special categories of personal data pursuant to Art. 9 (1) GDPR unless Art. 9 (2) (a) or (b) GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

With regard to the cases mentioned in 1. and 3., the controller shall implement suitable measures to safeguard the rights and freedoms as well as your legitimate interests, which shall include at least the right to obtain human intervention on the part of the controller, to express your own point of view and to contest the decision.

#### 10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority with which the complaint was lodged will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

### Provision of the website and creation of log files

#### 1. Description and scope of the data processing

Each time our website is accessed, our system automatically records data and information from the computer system of the accessing device.

The following data is collected in this process:

This data is stored in the log files of our system. Not affected by this are the user's IP addresses or other data that would allow the data to be attributed to a user. This data is not stored together with other personal data of the user.

#### 2. Purpose of the data processing

The storage in log files takes place to ensure the functionality of the website. In addition the data helps us to optimise the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.

These purposes also constitute our legitimate interest in the data processing pursuant to Art. 6 (1) sentence 1 (f) GDPR.

#### 3. Legal basis for the data processing

The legal basis for the temporary storage of the data is Art. 6 (1) sentence 1 (f) GDPR.

#### 4. Storage period

The data is erased as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected to provide the website, this is the case when the respective session has ended.

#### 5. Possibility of objection and removal

Collecting the data to provide the website and storing the data in log files is strictly necessary for the operation of the website. Consequently there is no possibility for the user to object.

The user's internet service provider
Date and time of access
Information about the browser type and the version used
The user's operating system

### Use of cookies

#### 1. Description and scope of the data processing

Our website uses cookies. Cookies are text files that are stored in or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can still be identified after a page change.

The following data is stored and transmitted in the cookies:

Language settings

In addition we use cookies on our website that allow an analysis of users' browsing behaviour.

In this way the following data may be transmitted:

Frequency of page views
Use of website functions

The user data collected in this way is pseudonymised by technical measures. It is therefore no longer possible to attribute the data to the accessing user. The data is not stored together with other personal data of the users.

#### 2. Purpose of the data processing

The purpose of using technically necessary cookies is to make the use of websites easier for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognised again after a page change.

We need cookies for the following applications:

Carrying over language settings
Remembering search terms

User data collected through technically necessary cookies is not used to create user profiles.

Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies we learn how the website is used and can therefore continuously optimise our offering.

To improve content and user guidance

#### 3. Legal basis for the data processing

The legal basis for the processing of personal data using cookies is Art. 6 (1) sentence 1 (a) GDPR.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) sentence 1 (f) GDPR.

#### 4. Storage period, possibility of objection and removal

Cookies are stored on the user's device and transmitted from it to our site. As a user you therefore also have full control over the use of cookies. By changing the settings in your internet browser you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also happen automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

If you use a Safari browser from version 12.1 onwards, cookies are automatically deleted after seven days. This also affects opt-out cookies that are set to prevent tracking measures.

Language settings
Frequency of page views
Use of website functions
Carrying over language settings
Remembering search terms
Email contact

1. Description and scope of the data processing

Our website allows contact via the email address provided. In this case the personal data of the user transmitted with the email is stored.

The data is used exclusively to process the conversation.

2. Purpose of the data processing

In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.

3. Legal basis for the data processing

The legal basis for processing the data where the user has given consent is Art. 6 (1) (a) GDPR.

The legal basis for processing data transmitted in the course of sending an email is Art. 6 (1) (f) GDPR. If the email contact aims at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.

4. Storage period

The data is erased as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email this is the case when the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the matter concerned has been conclusively clarified.

Personal data collected additionally during the sending process is erased after a period of seven days at the latest.

5. Possibility of objection and removal

The user has the option of withdrawing consent to the processing of personal data at any time. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case the conversation cannot be continued.

By phone, by email

All personal data stored in the course of making contact will be erased in this case.

By phone, by email
Hosting
The website is hosted on servers of a service provider commissioned by us.

Our service provider is:

Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany

The servers automatically collect and store information in so-called server log files, which your browser transmits automatically when you visit the website. The stored information is:

Referrer URL
Host name of the accessing device
Date and time of the server request
IP address
Browser type and browser version
Operating system used

This data is not merged with other data sources. This data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and the optimisation of its website – the server log files must be recorded for this purpose.

The website's server is located geographically in Germany.
Plugins used
We use plugins for various purposes. The plugins used are listed below:

Use of Google Analytics

1. Scope of the processing of personal data

We use Google Analytics, a web analytics service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, with the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter: Google). Among other things Google Analytics examines where visitors come from, how long they stay on individual pages and how search engines are used, and therefore allows a better measurement of advertising campaign success. Google places a cookie on your computer for this purpose. Personal data may thereby be stored and evaluated, in particular the user's activity (especially which pages have been visited and which elements have been clicked), device and browser information (especially the IP address and the operating system), data about the advertisements displayed (especially which advertisements were shown and whether the user clicked on them) and also data from advertising partners (especially pseudonymised user IDs). The information generated by the cookie about your use of this online presence is transferred to a Google server in the USA and stored there. If IP anonymisation is activated on this online presence, however, your IP address will first be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there.

Google has submitted to and certified under the Privacy Shield agreement concluded between the European Union and the USA. Google thereby undertakes to comply with the standards and provisions of European data protection law. Further information can be found in the entry linked below:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&#038;status=Active

IP anonymisation is active on this online presence. On behalf of the operator of this online presence, Google will use this information to evaluate your use of the online presence, to compile reports on the activities of the online presence and to provide further services to the operator of the online presence in connection with the use of the online presence and the internet. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. You can prevent the storage of cookies by adjusting your browser software settings accordingly; we point out, however, that in this case you may not be able to use all functions of our online presence to their full extent.

You can find further information about the processing of data by Google here:
https://policies.google.com/privacy?gl=DE&#038;hl=en

2. Purpose of the data processing

The purpose of processing the personal data is to address a target group specifically that has already expressed initial interest by visiting the site.

3. Legal basis for the processing of personal data

The legal basis for processing users' personal data is, as a matter of principle, the user's consent pursuant to Art. 6 (1) sentence 1 (a) GDPR.

4. Storage period

Your personal information is stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law. Advertising data in server logs is anonymised in that Google, according to its own statements, deletes parts of the IP address and cookie information after 9 or 18 months respectively.

5. Possibility of withdrawal and removal

You have the right to withdraw your data protection consent at any time. Withdrawing consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.
You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can also prevent the collection of the data generated by the cookie and relating to your use of the online presence (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en

Using the following link you can deactivate the use of your personal data by Google:
https://adssettings.google.com

Further information on the possibilities of objection and removal vis-à-vis Google can be found at:
https://policies.google.com/privacy?gl=DE&#038;hl=en

Use of Google Tag Manager

1. Scope of the processing of personal data

We use Google Tag Manager (https://www.google.com/intl/en/tagmanager/) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, with the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter: Google). With Google Tag Manager, tags of Google services and of third-party providers can be managed and embedded in an online presence in a bundled way. Tags are small code elements on an online presence that serve, among other things, to measure visitor numbers and behaviour, to record the effect of online advertising and social channels, to apply remarketing and audience targeting, and to test and optimise online presences. When a user visits the online presence, the current tag configuration is sent to the user's browser. It contains instructions on which tags should be triggered. Google Tag Manager triggers other tags which in turn may collect data. You can find information on this in the passages on the use of the respective services in this privacy policy. Google Tag Manager does not access this data.

Data may be transferred to Google servers in the USA in this process. Google has submitted to and certified under the Privacy Shield agreement concluded between the European Union and the USA. Google thereby undertakes to comply with the standards and provisions of European data protection law. Further information can be found in the entry linked below:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&#038;status=Active

Further information about Google Tag Manager can be found at https://www.google.com/intl/en/tagmanager/faq.html and in Google's privacy policy: https://policies.google.com/privacy?hl=en

2. Purpose of the data processing

The purpose of processing the personal data lies in the collected and clear management as well as an efficient integration of third-party services.

3. Legal basis for the processing of personal data

The legal basis for processing users' personal data is, as a matter of principle, the user's consent pursuant to Art. 6 (1) sentence 1 (a) GDPR.

4. Storage period

Your personal information is stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law. Advertising data in server logs is anonymised in that Google, according to its own statements, deletes parts of the IP address and cookie information after 9 or 18 months respectively.

5. Possibility of withdrawal and removal

You have the right to withdraw your data protection consent at any time. Withdrawing consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.

You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can also prevent the collection of the data generated by the cookie and relating to your use of the online presence (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en

Using the following link you can deactivate the use of your personal data by Google:
https://adssettings.google.com

Further information on the possibilities of objection and removal vis-à-vis Google can be found at:
https://policies.google.com/privacy?gl=DE&#038;hl=en

Use of Google Maps

1. Scope of the processing of personal data

We use the online map service Google Maps of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, with the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter: Google). We use the Google Maps plugin in order to display geographical data visually and embed it in our online presence. Through the use of Google Maps on our online presence, information about the use of our online presence, your IP address and addresses entered in the route planning function are transmitted to a Google server in the USA and stored there. Google has submitted to and certified under the Privacy Shield agreement concluded between the European Union and the USA. Google thereby undertakes to comply with the standards and provisions of European data protection law. Further information can be found in the entry linked below:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&#038;status=Active
You can find further information about the processing of data by Google here:
https://policies.google.com/privacy?gl=DE&#038;hl=en

2. Purpose of the data processing

The use of the Google Maps plugin serves to improve usability and to present our online presence attractively.

3. Legal basis for the processing of personal data

The legal basis for processing users' personal data is, as a matter of principle, the user's consent pursuant to Art. 6 (1) sentence 1 (a) GDPR.

4. Storage period

Your personal information is stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law.

5. Possibility of withdrawal and removal

You have the right to withdraw your data protection consent at any time. Withdrawing consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.

You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
Using the following link you can deactivate the use of your personal data by Google:
https://adssettings.google.com

Further information on the possibilities of objection and removal vis-à-vis Google can be found at:
https://policies.google.com/privacy?gl=DE&#038;hl=en

Use of Google Webfonts

1. Scope of the processing of personal data

We use Google Webfonts of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, with the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter: Google). The web fonts are transferred into the browser cache when the page is accessed so that they can be used for the visually improved presentation of various information. If the browser does not support Google Webfonts or blocks access, the text is displayed in a standard font. No cookies are stored on the visitor's device when the page is accessed. Data transmitted in connection with the page view is sent to resource-specific domains such as https://fonts.googleapis.com or https://fonts.gstatic.com. Personal data may thereby be stored and evaluated, in particular the user's activity (especially which pages have been visited and which elements have been clicked) and device and browser information (especially the IP address and the operating system).
Data may be transferred to Google servers in the USA in this process. Google has submitted to and certified under the Privacy Shield agreement concluded between the European Union and the USA. Google thereby undertakes to comply with the standards and provisions of European data protection law. Further information can be found in the entry linked below:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&#038;status=Active

The data is not associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.
You can find further information about the processing of data by Google here:
https://policies.google.com/privacy?gl=DE&#038;hl=en

2. Purpose of the data processing

The use of Google Webfonts serves an attractive presentation of our texts. If your browser does not support this function, a standard font from your computer is used for display.

3. Legal basis for the processing of personal data

The legal basis for processing users' personal data is, as a matter of principle, the user's consent pursuant to Art. 6 (1) sentence 1 (a) GDPR.

4. Storage period

Your personal information is stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, for example for tax and accounting purposes.

5. Possibility of objection and removal

You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
Using the following link you can deactivate the use of your personal data by Google:
https://adssettings.google.com

Further information on the possibilities of objection and removal vis-à-vis Google can be found at:
https://policies.google.com/privacy?gl=DE&#038;hl=en

Use of LinkedIn

1. Scope of the processing of personal data

We use functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our web pages with your IP address. If you click LinkedIn's “Recommend” button while logged into your LinkedIn account, LinkedIn is able to attribute your visit to our website to you and your user account. Personal data may thereby be stored and evaluated, in particular the user's activity (especially which pages have been visited and which elements have been clicked) and device and browser information (especially the IP address and the operating system).
Data may be transmitted to LinkedIn servers in the USA in this process. LinkedIn has submitted to and certified under the Privacy Shield agreement concluded between the European Union and the USA. LinkedIn thereby undertakes to comply with the standards and provisions of European data protection law. Further information can be found in the entry linked below:
https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&#038;status=Active

We point out that as the provider of these pages we have no knowledge of the content of the transmitted data or of its use by LinkedIn. You can find further information about the processing of data by LinkedIn here:
https://www.linkedin.com/legal/privacy-policy.

2. Purpose of the data processing

The use of the LinkedIn plugin serves the usability of our online presence.

3. Legal basis for the processing of personal data

The legal basis for processing users' personal data is, as a matter of principle, the user's consent pursuant to Art. 6 (1) sentence 1 (a) GDPR.

4. Storage period

Your personal information is stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, for example for tax and accounting purposes.

5. Possibility of withdrawal and removal

You have the right to withdraw your data protection consent at any time. Withdrawing consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.
You can prevent the collection and processing of your personal data by LinkedIn by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. Transmission can furthermore be prevented by logging out of your LinkedIn account before accessing our website.
Using the following links you can deactivate the use of your personal data by LinkedIn:
https://www.linkedin.com/psettings/guest-controls
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out?trk=microsites-frontend_legal_cookie-policy

Further information on the possibilities of objection and removal vis-à-vis LinkedIn can be found at:
https://www.linkedin.com/legal/privacy-policy

6. Facebook company presence

By operating a digital company presence on the Facebook platform we make use of the services of Meta Platforms Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland.

We explicitly point out that you use our Facebook company presence at your own responsibility. This applies in particular to the use of the interactive functions (for example commenting, sharing, rating).

When you visit our Facebook company presence, Meta records among other things the IP address you use as well as further information present on your device (PC, notebook, etc.) in the form of cookies. This information is used to provide us as the operator of the Facebook company presence with statistical information about the use of the Facebook company presence. Meta provides more detailed information on this at the following link:

http://de-de.facebook.com/help/pages/insights

The data collected about you in this context is processed by Meta Platforms Ltd. and may be transferred to countries outside the European Union. Meta describes in general terms which information it receives and how it is used in its data use policies. There you will also find information about how to contact Meta and about the settings available for advertisements. The data use policies are available at the following link: http://de-de.facebook.com/about/privacy

Meta's complete data policies can be found here:

https://www.facebook.com/about/privacy/previous

In what way Meta uses the data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are attributed to individual users, how long Meta stores this data and whether data from a visit to the Facebook page is passed on to third parties is not stated conclusively and clearly by Meta and is not known to us.

When a Facebook page is accessed, the IP address assigned to your device is transmitted to Meta. According to Meta this IP address is anonymised (for “German” IP addresses). Meta also stores information about its users' devices (for example as part of the “login notification” function); Meta may therefore be able to attribute IP addresses to individual users.

If you are currently logged in to Facebook, a cookie with your personal Facebook identifier is stored on your device. This enables Meta to trace that you visited this page and how you used it. This also applies to all other Facebook pages. Through Facebook buttons embedded in websites, Facebook is able to record your visits to these websites and attribute them to your Facebook profile. Based on this data, content or advertising can be tailored to you.

If you want to avoid this, you should log out of Facebook or deactivate the “stay logged in” function, delete the cookies present on your device and close and restart your browser. In this way information through which you can be directly identified is deleted from Meta. You can then use our Facebook company page without your Facebook identifier being revealed. If you access interactive functions of the page (like, comment, share, messages, etc.), a Facebook login screen appears. After any login you are once again identifiable to Meta as a specific user.

Information on how you can manage or delete information held about you can be found on the following Facebook support pages:

https://de-de.facebook.com/about/privacy#

7. Insights & cookies

Meta cookies

As the provider of the information service we use the “Facebook Insights” function provided to us by Meta. Through Facebook Insights we receive statistical data from Meta (for example total number of page views, likes, page activities, etc.). This statistical data is transmitted to us only in anonymised form, which means we cannot attribute this data to any specific visitor to our page. We also have no access to the data underlying the statistics.

So that Meta can provide us with this data, Meta stores cookies on the devices you use to access the fan page. These cookies are small text files containing a unique user code. The cookies are active for a period of two years unless you delete them beforehand. As far as we know, Meta uses the data collected through the cookies to provide you with advertising and to enable companies affiliated with Meta as well as Meta's advertising partners to do the same.

Further information on the use of cookies by Meta can be found at:

https://www.facebook.com/policies/cookies/.

We maintain our Meta company presence in order to make our company and/or our products better known and to be able to communicate with you. For this we also use the data provided by the “Facebook Insights” function. This helps us to better understand your interests and to reach our target group more effectively. It allows us to place interest-based advertising in a targeted way and to provide more relevant content on our fan page. The processing of personal data takes place on the basis of our legitimate interests pursuant to Art. 6 (1) sentence 1 (f) GDPR in effective communication and interaction with users as well as an optimised presentation of our products and services.

This privacy policy was created with the support of [DataGuard](https://www.dataguard.de/).
