Privacy Policy

Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR), other national data protection laws of the Member States, and other applicable data protection regulations is:

Park Your Truck GmbH

Köthener Str. 70
06847 Dessau-Rosslau
Germany

Phone: 0340/88293906
Email: service@park-your-truck.com
Website: www.park-your-truck.com

Contact Details of the Data Protection Officer

The Data Protection Officer of the controller is:

DataCo GmbH
Dachauer Straße 65
80335 München
Germany

Tel.: +49 89 7400 45840
www.dataguard.de

Rights of the Data Subject

If your personal data is being processed, you are considered a data subject within the meaning of the GDPR and are entitled to the following rights with respect to the controller:

1. Right of Access

You have the right to obtain from the controller confirmation as to whether or not personal data concerning you is being processed.

Where this is the case, you have the right to request access to the following information:

  • the purposes of the processing;

  • the categories of personal data concerned;

  • the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

  • the envisaged period for which the personal data concerning you will be stored, or, if specific information is not available, the criteria used to determine that period;

  • the existence of the right to request from the controller rectification or erasure of personal data, or restriction of processing of personal data concerning you, or to object to such processing;

  • the right to lodge a complaint with a supervisory authority;

  • where the personal data is not collected from you, any available information as to its source;

  • the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

You also have the right to be informed whether personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.

2. Right to Rectification

You have the right to obtain from the controller the rectification and/or completion of personal data concerning you, if such data is inaccurate or incomplete. The controller must carry out the rectification without undue delay.

3. Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data under the following conditions:

  • if you contest the accuracy of the personal data concerning you, for a period enabling the controller to verify the accuracy of the personal data;
  • the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
  • the controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims; or
  • you have objected to processing pursuant to Article 21(1) GDPR and it has not yet been determined whether the legitimate grounds of the controller override your own.

Where processing of your personal data has been restricted, such data shall – with the exception of storage – only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been imposed under the conditions mentioned above, you will be informed by the controller before the restriction is lifted.

4. Right to Erasure

a) Obligation to Erase

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay where one of the following grounds applies:

  1. The personal data concerning you is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
  2. You withdraw your consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal ground for the processing.
  3. You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
  4. The personal data concerning you has been unlawfully processed.
  5. The erasure of your personal data is required to fulfill a legal obligation under Union or Member State law to which the controller is subject.
  6. The personal data concerning you was collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

b) Information to Third Parties

Where the controller has made the personal data public and is obliged pursuant to Article 17(1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you, as the data subject, have requested the erasure by such controllers of any links to, or copies or replications of, those personal data.

c) Exceptions

The right to erasure does not apply to the extent that processing is necessary:

  1. for exercising the right of freedom of expression and information;
  2. for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  3. for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) GDPR;
  4. for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Article 89(1) GDPR, in so far as the right referred to in point (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  5. for the establishment, exercise, or defense of legal claims.
5. Right to Notification

If you have exercised your right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort.

You have the right to request that the controller inform you about those recipients.

6. Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data was provided, where

  1. the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR; and
  2. the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The rights and freedoms of others must not be adversely affected by this.

The right to data portability shall not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR; this also applies to profiling based on those provisions.

The controller shall no longer process the personal data concerning you unless they can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.

In connection with the use of information society services – notwithstanding Directive 2002/58/EC – you have the possibility to exercise your right to object by automated means using technical specifications.

8. Right to Withdraw Consent

You have the right to withdraw your consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

9. Automated Individual Decision-Making, Including Profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:

  1. is necessary for entering into, or performance of, a contract between you and the controller,
  2. is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
  3. is based on your explicit consent.

However, such decisions must not be based on special categories of personal data referred to in Article 9(1) GDPR unless Article 9(2)(a) or (b) GDPR applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.

In cases referred to in (1) and (3) above, the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, which include at least the right to obtain human intervention on the part of the controller, to express your point of view, and to contest the decision.

10. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.

Provision of the Website and Creation of Log Files

1. Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected:

  • Information about the browser type and version used
  • The user’s operating system
  • The user’s internet service provider
  • The user’s IP address
  • Date and time of access
  • Websites from which the user’s system accesses our website
  • Websites accessed by the user’s system via our website

This data is stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Purpose of Data Processing

The temporary storage of the IP address by the system is necessary to deliver the website to the user’s device. For this purpose, the user’s IP address must remain stored for the duration of the session.

Storage in log files is carried out to ensure the functionality of the website. Additionally, the data serves to optimize the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing pursuant to Art. 6(1)(f) GDPR.

3. Legal Basis for Data Processing

The legal basis for the temporary storage of data and log files is Art. 6(1)(f) GDPR.

4. Duration of Storage

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.

In the case of data storage in log files, this is the case after no more than seven days. Storage beyond this period is possible. In this case, the IP addresses of the users are either deleted or anonymized so that identification of the accessing client is no longer possible.

5. Possibility of Objection and Removal

The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Therefore, there is no possibility for the user to object.

Use of Cookies

1. Description and Scope of Data Processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables unique identification of the browser when the website is revisited.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

  • Language settings
  • Log-in information

We also use cookies on our website that enable an analysis of users’ browsing behavior.

In this way, the following data can be transmitted:

  • Entered search terms
  • Frequency of page views
  • Use of website functions

The data collected in this way is pseudonymized by technical measures. Therefore, it is no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the users.

2. Purpose of Data Processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

We require cookies for the following applications:

  • Adoption of language settings
  • Remembering search terms

The user data collected by technically necessary cookies is not used to create user profiles.

The use of analysis cookies serves the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus continuously optimize our offering.

This also applies to evaluating marketing activities and improving the website’s user-friendliness.

3. Legal Basis for Data Processing

The legal basis for the processing of personal data using cookies is Art. 6(1)(a) GDPR.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6(1)(f) GDPR.

4. Duration of Storage, Possibility of Objection and Removal

Cookies are stored on the user’s device and transmitted to our site by it. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

If you are using Safari version 12.1 or later, cookies are automatically deleted after seven days. This also applies to opt-out cookies that are set to prevent tracking measures.

5. Cookie Consent Management with Real Cookie Banner

To manage the cookies and similar technologies (tracking pixels, web beacons, etc.) we use, and the related consents, we employ the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at: https://devowl.io/de/rcb/datenverarbeitung/

The legal bases for the processing of personal data in this context are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest lies in the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide personal data. If you do not provide the personal data, we cannot manage your consents.

Newsletter

1. Description and Scope of Data Processing

Our website offers the option to subscribe to a free newsletter. When registering for the newsletter, the data entered in the input form is transmitted to us:

  • Email address
  • Last name
  • First name
  • IP address of the accessing computer
  • Date and time of registration

In connection with data processing for sending newsletters, no data is passed on to third parties. The data is used exclusively for sending the newsletter.

2. Purpose of Data Processing

The collection of the user’s email address is used to deliver the newsletter.

The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.

3. Legal Basis for Data Processing

The legal basis for the processing of data after registration for the newsletter by the user is Art. 6(1)(a) GDPR, provided that the user’s consent has been obtained.

4. Duration of Storage

The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Accordingly, the user’s email address is stored for as long as the newsletter subscription is active.

The other personal data collected during the registration process is usually deleted after a period of seven days.

5. Right to Object and Removal Option

The newsletter subscription can be canceled by the user at any time. A corresponding link can be found in each newsletter for this purpose.

This also enables a withdrawal of the consent to store the personal data collected during the registration process.

Email Contact

1. Description and Scope of Data Processing

It is possible to contact us via the email address provided on our website. In this case, the personal data transmitted with the email will be stored.

The data is used exclusively for processing the conversation.

2. Purpose of Data Processing

If contact is made via email, this also constitutes the necessary legitimate interest in processing the data.

3. Legal Basis for Data Processing

The legal basis for the processing of data is Art. 6(1)(a) GDPR if the user has given consent.

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6(1)(f) GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.

4. Duration of Storage

The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data sent via email, this is the case when the respective conversation with the user has ended. The conversation is deemed ended when it can be inferred from the circumstances that the relevant matter has been conclusively resolved.

Any personal data additionally collected during the sending process will be deleted at the latest after seven days.

5. Right to Object and Removal Option

The user has the option to withdraw consent to the processing of personal data at any time. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

Withdrawal is possible via telephone or email.

All personal data stored in the course of making contact will be deleted in this case.

Contact Form

1. Description and Scope of Data Processing

A contact form is available on our website, which can be used for electronic communication. If a user makes use of this option, the data entered in the input form will be transmitted to us and stored.

At the time the message is sent, the following data will be stored:

  • Email address
  • Last name
  • First name
  • Telephone / mobile number
  • IP address of the requesting computer
  • Date and time of contact

Your consent to the processing of the data is obtained during the submission process, and reference is made to this privacy policy.

Alternatively, it is possible to contact us via the provided email address. In this case, the personal data transmitted with the email will be stored.

The data is used exclusively for processing the conversation.

2. Purpose of Data Processing

The processing of personal data from the input form serves solely to handle the contact request. If contact is made via email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the submission process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

3. Legal Basis for Data Processing

The legal basis for the processing of the data is Art. 6(1)(a) GDPR if the user has given consent.

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6(1)(f) GDPR. If the email contact aims at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR.

4. Duration of Storage

The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the contact form input fields and those sent via email, this is the case when the respective conversation with the user has ended. The conversation is deemed ended when it can be inferred from the circumstances that the relevant matter has been conclusively resolved.

Any personal data additionally collected during the submission process will be deleted at the latest after seven days.

5. Right to Object and Removal Option

The user has the right to withdraw their consent to the processing of personal data at any time. If the user contacts us via email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

The withdrawal is possible by telephone or email.

All personal data stored in the course of making contact will be deleted in this case.

Use of Company Profiles on Professional Networks

1. Scope of Data Processing

We use the possibility of company profiles on professional networks. We maintain a company profile on the following professional networks:

LinkedIn:

LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland

XING:

XING SE, Dammtorstraße 30, 20354 Hamburg, Germany

On our page, we provide information and offer users the opportunity to communicate.

The company profile is used for applications, information/PR, and active sourcing.

We do not have any information about the processing of your personal data by the companies jointly responsible for the company profile. Further information can be found in the privacy policies of:

LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

XING: https://privacy.xing.com/de/datenschutzerklaerung

If you perform an action on our company profile (e.g., comments, posts, likes, etc.), it may be that you publicly disclose personal data (e.g., your full name or profile photo).

2. Legal Basis for Data Processing

The legal basis for processing your data in connection with the use of our company profile is Art. 6(1)(f) GDPR.

3. Purpose of Data Processing

Our company profile serves to inform users about our services. It is at the discretion of each user to publish personal data through their activities.

4. Duration of Storage

We store your activities and personal data published via our company profile until you revoke your consent. Furthermore, we observe statutory retention periods.

5. Right to Object and Removal Options

You may object to the processing of your personal data collected in connection with your use of our company profile at any time and exercise your data subject rights as outlined in Section IV. of this privacy policy. To do so, please send us an informal email to the email address specified in this privacy policy.

LinkedIn has also committed to and been certified under the EU-U.S. Privacy Shield Framework. Through this, LinkedIn commits to comply with the standards and regulations of European data protection law. More information can be found at the following link: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

Further information about objection and removal options can be found here:

LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

XING: https://privacy.xing.com/de/datenschutzerklaerung

Hosting

The website is hosted on servers operated by a service provider commissioned by us.

Our service providers are:

Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany

Linode, Communicatio AG

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The stored information includes:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Date and time of the server request
  • IP address

A merging of these data with other data sources does not take place. The collection of these data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be recorded.

The server location of the website is geographically situated in Germany.

Registration

1. Description and Scope of Data Processing

On our website, we offer users the possibility to register by providing personal data. The data is entered into an input form, transmitted to us, and stored. No transfer of data to third parties takes place. The following data is collected during the registration process:

  • Email address
  • Last name
  • First name
  • Address
  • Telephone / mobile phone number
  • IP address of the accessing computer
  • Date and time of registration
  • Company, VAT number, number of drivers, number of vehicles, number of dispatchers, vehicle registration number, driver name / train number

During the registration process, the user’s consent to the processing of these data is obtained.

2. Purpose of Data Processing

User registration is necessary to fulfill a contract with the user or to carry out pre-contractual measures.

The data will be used for manual security checks by the freight forwarding company; furthermore, the data is required for invoicing. Additionally, we need the data for booking parking spaces.

3. Legal Basis for Data Processing

The legal basis for processing the data is Art. 6(1)(a) GDPR, provided the user has given consent.

If the registration serves the fulfillment of a contract to which the user is a party, or the implementation of pre-contractual measures, the additional legal basis for processing is Art. 6(1)(b) GDPR.

4. Duration of Storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.

For data collected during the registration process to fulfill a contract or carry out pre-contractual measures, this is the case when the data are no longer necessary for contract execution. Even after the contract ends, there may be a need to retain personal data of the contracting party to comply with contractual or legal obligations.

5. Right to Object and Deletion Options

Users have the right to delete their registration at any time. The data stored about you can be amended at any time.

Users can request changes, deactivation, or deletion of their account at any time via email or phone.

If the data are necessary to fulfill a contract or carry out pre-contractual measures, early deletion is only possible insofar as contractual or legal obligations do not prevent deletion.

Used Plugins

We use plugins for various purposes. The plugins used are listed below:

Use of Google Analytics

1. Scope of Personal Data Processing

We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as “Google”). Google Analytics analyzes, among other things, the origin of visitors, their duration of stay on individual pages, and the use of search engines, thus enabling better success control of advertising campaigns. Google sets a cookie on your computer. This can result in the storage and evaluation of personal data, especially user activity (in particular which pages were visited and which elements were clicked), device and browser information (in particular IP address and operating system), data about displayed advertisements (in particular which ads were shown and whether the user clicked on them), and data from advertising partners (in particular pseudonymized user IDs). The information generated by the cookie about your use of this online presence is transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this online presence, Google will shorten your IP address within member states of the European Union or other contracting states to the Agreement on the European Economic Area before transmission. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

Google has committed to the EU-U.S. Privacy Shield Framework and is certified under it. Thus, Google is obligated to comply with the standards and regulations of European data protection law. More information can be found at the following link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

IP anonymization is active on this online presence. On behalf of the operator of this online presence, Google will use this information to evaluate your use of the online presence, compile reports on the activities of the online presence, and provide further services related to the use of the online presence and the internet to the operator. The IP address transmitted by your browser within Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by adjusting your browser software settings; however, please note that in this case you may not be able to use all functions of this online presence in full.

More information on data processing by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

The purpose of processing personal data lies in the targeted addressing of a group that has already shown initial interest through visiting the site.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing the personal data of users is generally the user’s consent according to Art. 6(1) sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information is stored as long as necessary to fulfill the purposes described in this privacy policy or as legally required. Advertising data in server logs is anonymized as Google deletes parts of IP addresses and cookie information after 9 or 18 months, according to its statements.

5. Right of Withdrawal and Deletion Options

You have the right to revoke your data protection consent at any time. The lawfulness of processing based on consent until the revocation remains unaffected.

You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supporting browser, disabling script execution in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com).

Furthermore, you can prevent the collection of data generated by the cookie and related to your use of this online presence (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

You can deactivate the use of your personal data by Google via the following link: https://adssettings.google.de

More information on objection and deletion options vis-à-vis Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Tag Manager

1. Scope of Personal Data Processing

We use Google Tag Manager (https://www.google.com/intl/de/tagmanager/) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as “Google”). Google Tag Manager allows the management and bundling of tags from Google services and third parties to be embedded on an online presence. Tags are small code elements on an online presence that serve, among other things, to measure visitor numbers and behavior, to capture the impact of online advertising and social channels, to implement remarketing and audience targeting, and to test and optimize online presences.

When a user visits the online presence, the current tag configuration is sent to the user’s browser. It contains instructions on which tags should be triggered. Google Tag Manager triggers other tags, which may in turn collect data. Information about this can be found in the sections on the use of the respective services in this privacy policy. Google Tag Manager itself does not access this data.

Data may be transmitted to Google servers in the USA. Google has committed to the EU-U.S. Privacy Shield Framework and is certified under it. Therefore, Google undertakes to comply with the standards and regulations of European data protection law. More information can be found at the following link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Further information about Google Tag Manager can be found at https://www.google.com/intl/de/tagmanager/faq.html and in Google’s privacy policy: https://policies.google.com/privacy?hl=de

2. Purpose of Data Processing

The purpose of processing personal data is the consolidated and clear management as well as efficient integration of third-party services.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information is stored as long as necessary to fulfill the purposes described in this privacy policy or as legally required. Advertising data in server logs is anonymized, as Google deletes parts of the IP address and cookie information after 9 or 18 months, according to its own statements.

5. Right of Withdrawal and Deletion Options

You have the right to revoke your data protection consent at any time. The lawfulness of processing based on consent until the revocation remains unaffected.

You can prevent the collection and processing of your personal data by Google by blocking third-party cookies on your computer, using the “Do Not Track” feature of a supporting browser, disabling script execution in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com).

Furthermore, you can prevent the collection of data generated by the cookie and related to your use of this online presence (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

You can deactivate the use of your personal data by Google via the following link: https://adssettings.google.de

More information on objection and deletion options vis-à-vis Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

Use of HubSpot

1. Scope of Personal Data Processing

We use features of HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA (hereinafter referred to as “HubSpot”). This is an integrated software solution with which we cover various aspects of our online marketing. These include, among others: email marketing (newsletters as well as automated mailings, e.g., for providing downloads), social media publishing & reporting, reporting (especially traffic sources, accesses, etc.), contact management (especially user segmentation & CRM), landing pages, and contact forms. HubSpot places a cookie on your computer. Personal data can be stored and evaluated, especially user activity (in particular which pages have been visited and which elements have been clicked), device and browser information (in particular IP address and operating system), data about displayed advertisements (in particular which ads were shown and whether the user clicked on them), and also data from advertising partners (in particular pseudonymized user IDs). The data may be transmitted to HubSpot servers in the USA. HubSpot has committed to the EU-U.S. Privacy Shield Framework and is certified under it. Therefore, HubSpot undertakes to comply with the standards and regulations of European data protection law. Further information can be found at the following link: https://www.privacyshield.gov/participant?id=a2zt0000000TN8pAAG&status=Active
More information about data processing by HubSpot can be found here: https://legal.hubspot.com/de/privacy-policy

2. Purpose of Data Processing

The use of the HubSpot plugin serves exclusively to optimize our marketing.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent according to Art. 6(1) sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored as long as necessary to fulfill the purposes described in this privacy policy or as legally required, e.g., for tax and accounting purposes.

5. Right of Withdrawal and Deletion Options

You have the right to revoke your data protection consent at any time. The lawfulness of processing based on consent until the revocation remains unaffected.

You can prevent the collection and processing of your personal data by HubSpot by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supported browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

More information on objection and deletion options regarding HubSpot can be found at: https://legal.hubspot.com/de/privacy-policy

Use of Font Awesome

1. Scope of Personal Data Processing

We use fonts from Font Awesome, a service of Fonticons, Inc., 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA (hereinafter: Font Awesome). The fonts are transferred to the browser cache when the page is called up in order to use them for visually enhanced presentation of various information. Personal data may thereby be stored, transmitted, and evaluated, especially device and browser information (in particular IP address and operating system).
If the browser does not support Font Awesome or blocks access, the text will be displayed in a standard font.
No cookies are placed on the visitor’s device when the page is loaded.
More information about data processing by Font Awesome can be found here: https://origin.fontawesome.com/privacy

2. Purpose of Data Processing

The use of Google Webfonts serves an appealing presentation of our texts.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent according to Art. 6(1) sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored as long as necessary to fulfill the purposes described in this privacy policy or as legally required.

5. Right of Withdrawal and Deletion Options

You have the right to revoke your data protection consent at any time. The lawfulness of processing based on consent until the revocation remains unaffected.
You can prevent the collection and processing of your personal data by Font Awesome by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supported browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
More information on objection and deletion options regarding Font Awesome can be found at:
https://origin.fontawesome.com/privacy

Use of Google Maps

1. Scope of Personal Data Processing

We use the online map service Google Maps of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter: Google). We use the Google Maps plugin to visually display geographic data and embed it on our online presence. By using Google Maps on our website, information about the use of our website, your IP address, and addresses entered in the route planner function are transmitted to a Google server in the USA and stored there. Google has committed to the EU-U.S. Privacy Shield Framework and is certified under it. Therefore, Google undertakes to comply with the standards and regulations of European data protection law. Further information can be found at the following link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
More information about data processing by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

The use of the Google Maps plugin serves to improve user-friendliness and appealing presentation of our online presence.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent according to Art. 6(1) sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored as long as necessary to fulfill the purposes described in this privacy policy or as legally required.

5. Right of Withdrawal and Deletion Options

You have the right to revoke your data protection consent at any time. The lawfulness of processing based on consent until the revocation remains unaffected.
You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supported browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de
More information on objection and deletion options regarding Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

Use of Vimeo

1. Scope of Personal Data Processing

We use the plugin of the video portal Vimeo, Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. Vimeo is an online video streaming portal. When you visit our online presence, your browser establishes a connection with Vimeo’s servers in the USA. Information about your visit to our online presence and your IP address is transmitted to Vimeo.
Data may be transferred to Vimeo servers in the USA. Vimeo has committed to the EU-U.S. Privacy Shield Framework and is certified under it. Therefore, Vimeo undertakes to comply with the standards and regulations of European data protection law. Further information can be found at the following link:
https://www.privacyshield.gov/participant?id=a2zt00000008V77AAE&status=Active
This occurs regardless of whether you have a Vimeo account and whether you are logged in. If you are logged in, Vimeo can link the collected data to your account.
More information about data processing by Vimeo can be found here: https://vimeo.com/privacy

2. Purpose of Data Processing

The provision of the Vimeo plugin serves the provision and embedding of videos.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent according to Art. 6(1) sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored as long as necessary to fulfill the purposes described in this privacy policy or as legally required.

5. Right of Withdrawal and Deletion Options

You have the right to revoke your data protection consent at any time. The lawfulness of processing based on consent until the revocation remains unaffected.
You can prevent the collection and processing of your personal data by Vimeo by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supported browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
More information on objection and deletion options regarding Vimeo can be found at: https://vimeo.com/privacy

This privacy policy was created with the support of DataGuard.