1 Overview of Data Protection
1.1 General Information
1.2 Data Collection on this Website
Who is responsible for data collection on this website (i.e., the "data controller")?
For what purposes do we use your data?
Some of the information is generated to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to obtain information about the origin, recipients, and purposes of your archived personal data at any time, without any fee being charged. You also have the right to request the correction or deletion of your data. If you have given consent to data processing, you have the option to revoke this consent at any time, effective for the future. Additionally, you have the right to request that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
Please feel free to contact us at any time if you have any questions about this or other privacy-related topics.
1.3 Analysis Tools and Third-Party Tools
There is a possibility that your browsing behavior on this website may be statistically analyzed during your visit. Such analyses are primarily carried out using analytics programs.
We use IONOS based on Art. 6(1)(f) of the GDPR. Our company has a legitimate interest in providing a reliable website. If the user has given consent, processing will be based on Art. 6(1)(a) of the GDPR and § 25(1) of the German Telemedia Act (TTDSG), to the extent that the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.
3 General Information and Mandatory Disclosures
3.1 Data Protection
We would like to point out that data transmission over the internet (e.g., communication via email) may have security vulnerabilities. Complete protection of data from third-party access is not possible.
3.2 Information about the Data Controller (referred to as the "data controller" in the GDPR)
The data controller for this website is:
DE-82266 Inning am Ammersee
Co-CEO: Dr. Richard Eckl
Co-CEO: Dr. Georg Walder
Phone: +49 8143 5609640
The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).
3.3 Duration of Storage
3.4 General Information about the Legal Basis for Data Processing on this Website
3.5 Information on Data Transfer to the US and Other Non-EU Countries
We use tools from companies based in the United States or other non-EU countries that may have data protection standards considered inadequate from an EU perspective. When these tools are active, your personal data may be transferred to and processed in these non-EU countries. We must inform you that these countries may not provide a level of data protection comparable to that of the EU. For example, US companies are obligated to disclose personal data to security authorities, and as an affected person, you have no legal recourse. It cannot be ruled out that US authorities (e.g., the Secret Service) may process, analyze, and permanently archive your personal data for surveillance purposes. We have no control over these processing activities.
3.6 Revocation of Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You can revoke your consent at any time. The legality of data processing carried out prior to revocation remains unaffected.
3.7 Right to Object to Data Collection in Special Cases; Right to Object to Direct Marketing (Art. 21 of the GDPR)
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) OF THE GDPR).
3.8 Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, individuals have the right to lodge a complaint with a supervisory authority, particularly in the Member State where they have their habitual residence, place of work, or the location where the alleged violation occurred. The right to lodge a complaint exists regardless of any other administrative or judicial remedies available.
3.9 Right to Data Portability
You have the right to request that we provide you or a third party with the data we process automatically based on your consent or for the performance of a contract in a commonly used, machine-readable format. If you request the direct transmission of the data to another data controller, this will only be done if technically feasible.
3.10 SSL and/or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by the change in the browser's address line from "http://" to "https://" and the appearance of the lock symbol in your browser's address bar.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
3.11 Information, Correction, and Deletion of Data
You have the right, under the applicable legal provisions, to request information about your archived personal data, its origin and recipients, as well as the purpose of data processing. Additionally, you may have the right to request the correction or deletion of your data, if necessary. If you have any questions regarding this matter or any other questions related to personal data, please feel free to contact us at any time.
3.12 Right to Restriction of Processing
You have the right to request the restriction of processing of your personal data. To exercise this right, you can contact us at any time. The right to request restriction of processing applies in the following cases:
- If you dispute the accuracy of your personal data stored by us, we usually need time to verify this claim. During the verification period, you have the right to request the restriction of processing of your personal data.
- If the processing of your personal data has been or is being carried out unlawfully, you have the option to request the restriction of processing instead of requesting the deletion of this data.
- If we no longer need your personal data, but you require it for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of processing instead of deletion.
- If you have objected to the processing under Article 21(1) of the GDPR, a balance must be struck between your rights and ours. As long as it is not yet determined whose interests prevail, you have the right to request the restriction of processing of your personal data.
If you have restricted the processing of your personal data, except for storage, such data may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest, as provided by the European Union or an EU Member State.
4 Recording of Data on this Website
Our websites and pages use so-called "cookies." Cookies are small text files that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently archived on your device (persistent cookies). Session cookies are automatically deleted once you end your visit. Persistent cookies remain archived on your device until you actively delete them or they are automatically deleted by your web browser.
In some cases, cookies from third-party providers may be stored on your device when you enter our website (third-party cookies). These cookies allow you or us to use certain services provided by the third party (e.g., cookies for payment processing services).
Cookies serve a variety of functions. Many cookies are technically necessary as certain functions of the website would not work without them (e.g., shopping cart function or display of videos). The purpose of other cookies may be to analyze user behavior or display advertising messages.
Cookies that are necessary for performing electronic communication transactions or for providing functions that you wish to use (e.g., the shopping cart function) or cookies that are necessary for optimizing the website (necessary cookies) (e.g., cookies that provide measurable insights into the web audience) are stored based on Art. 6(1)(f) of the GDPR, unless another legal basis is cited. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of the operator's services. If your consent has been obtained for the storage of cookies and similar tracking technologies, the processing is based exclusively on the granted consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG); this consent can be revoked at any time.
You have the option to set your browser to inform you about the setting of cookies and allow cookies only in individual cases, to exclude the acceptance of cookies for specific cases or in general, or to activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
4.2 Consent with Cookiebot
Our website uses the consent technology provided by Cookiebot to obtain your consent for storing certain cookies on your device or for using certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter "Cookiebot").
4.3 Inquiry via Email, Telephone, or Fax
If you contact us by email, telephone, or fax, your request including the resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not disclose this data without your consent.
The processing of this data is based on Art. 6(1)(b) of the GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing
The data you transmit to us through a contact inquiry will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer exists (e.g., after fulfilling your request). Mandatory legal provisions, especially statutory retention periods, remain unaffected by this.
5 Analytical Tools and Advertising
5.1 Google Analytics
This website uses features of the web analytics service Google Analytics. The provider of this service is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics allows the website operator to analyze the behavior patterns of website visitors. For this purpose, the website operator receives a variety of user data, such as visited pages, time spent on the page, operating system used, and the user's origin. This data is consolidated into a user ID and assigned to the respective device of the website visitor.
In addition, we can record your mouse movements, scroll behavior, and clicks with Google Analytics. Google Analytics uses various modeling approaches to enrich the collected data sets and employs machine learning technologies for data analysis.
Google Analytics uses technologies that enable the recognition of users for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google regarding the use of the website is typically transmitted to and stored on a Google server in the United States.
The use of these services is based on your consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TTDSG. You can revoke your consent at any time.
The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses (SCC). Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/. https://privacy.google.com/businesses/controllerterms/mccs/.
5.2 Browser Plug-in
You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
5.3 IONOS Web Analytics
This website uses IONOS WebAnalytics analytical services. The provider of these services is 1&1 IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. In the context of conducting analyses by IONOS, the following data may be analyzed, among others: the number of visitors and their behavior patterns during visits (e.g., number of pages accessed, duration of visits, percentage of abandoned visits), the origin of visitors (i.e., from which page visitors come to our website), the locations of visitors, as well as technical data (browser type and version, operating system used, device type). For these purposes, IONOS particularly archives the following data:
- Referrer (the previously visited page)
- Accessed page of the website or file
- Browser type and browser version
- Operating system used
- Device type used
- Access time to the website
- Anonymous IP address (used only for determining the access location)
According to IONOS, the collected data is fully anonymized, so it cannot be attributed to individual persons. IONOS WebAnalytics does not archive any cookies.
The storage and evaluation of the data are carried out in accordance with Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the statistical analysis of user behavior in order to optimize both the operator's website appearance and advertising activities. If there is appropriate consent, the processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TTDSG, to the extent that the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of TTDSG. This consent can be revoked at any time.
6 Plug-ins and Tools
This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit any of our pages that contain a Vimeo video, a connection to Vimeo's servers is established. This informs the Vimeo server about which of our pages you have visited. Vimeo also receives your IP address, even if you are not logged in to Vimeo or do not have a Vimeo account. The information recorded by Vimeo is transmitted to a Vimeo server in the United States.
If you are logged in to your Vimeo account, Vimeo can directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your Vimeo account.
The use of Vimeo is based on our interest in presenting our online content in an appealing manner. According to Art. 6(1)(f) GDPR, this represents a legitimate interest. If appropriate consent is given, the processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TTDSG, to the extent that the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of TTDSG. This consent can be revoked at any time.
The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses (SCC) and, according to Vimeo, on "legitimate business interests." Details can be found here: https://vimeo.com/privacy.
7 eCommerce and Payment Service Providers
7.1 Processing of Data (Customer and Order Data)
We collect, process, and use personal data only to the extent necessary for the establishment, content design, or modification of the legal relationship (inventory data). These measures are carried out on the basis of Art. 6(1)(b) GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process, and use personal data regarding the use of this website (usage data) only to the extent necessary to enable users to utilize the services and to invoice them.
The customer data collected will be deleted upon completion of the order or termination of the business relationship. Legal retention periods remain unaffected.
8 Customized Services
8.1 Handling of Applicant Data
We offer visitors to our website the opportunity to apply for a position with us (e.g., via email, postal mail, or the online application form). In the following, we inform you about the scope, purpose, and use of the personal data collected during the application process. We assure you that the collection, processing, and use of your data are carried out in compliance with applicable data protection and other legal regulations, and that your data is always treated strictly confidentially.
8.2 Scope and Purpose of Data Collection
When you apply for a position with us, we process the associated personal data (e.g., contact and communication data, application documents, notes from interviews, etc.) if it is necessary for the decision on the establishment of an employment relationship. The legal bases for this are § 26 GDPR under German law (initiation of an employment relationship), Art. 6(1)(b) GDPR (general contractual negotiations), and - if you have given us your consent - Art. 6(1)(a) GDPR. You can revoke your consent at any time. Within our company, your personal data will only be shared with individuals involved in the processing of your application.
If your application leads to your employment, the data you have submitted will be stored in our data processing system on the basis of § 26 GDPR and Art. 6(1)(b) GDPR for the purpose of carrying out the employment relationship.
8.3 Data Retention Period
If we cannot offer you a job or if you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for up to 6 months after the conclusion of the application process (rejection or withdrawal of the application). After that, the data will be deleted, and the physical application documents will be destroyed. The storage serves as evidence in case of legal disputes. If it is foreseeable that the data will be needed after the 6-month period (e.g., due to an imminent or pending legal dispute), deletion will only take place once the purpose for further storage no longer applies.
Longer storage may also occur if you have given your consent (Article 6(1)(a) GDPR) or if legal retention obligations prevent deletion.