5. Data collection and use upon registration
You have the possibility to register on our website and create a profile. In this case, we collect the personal data that you voluntarily provide to us during your registration and the creation of the profile. Which data is collected can be seen from the respective input forms. The legal basis for the processing of your data is accordingly Art. 6 para. 1 lit. b DSGVO. We use the data you provide only for services to be provided by the platform (matching) and, if applicable, for the preparation of contracts. We may also pass on your data to one or more processors (e.g. payment service providers) who will also use your data exclusively for internal use on our behalf.
We also store your IP address and the date and time of registration in order to prevent misuse of our website and the services offered on it and, where applicable, to clarify any criminal offences committed. The storage of this data is therefore necessary for our own protection. The legal basis for the processing of personal data is Art. 6 para. 1 lit. f DSGVO. The above-mentioned purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f DSGVO. As a matter of principle, this data will not be passed on to third parties, unless there is a legal obligation to do so or the passing on of such data serves the purpose of criminal prosecution. After deletion of your account, your data will first be blocked for further use and then deleted after expiry of the statutory retention periods, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes which are permitted by law and about which we inform you below.
6. Google analytics
The person responsible for processing has integrated the Google Analytics component (with anonymisation function) on this website. Google Analytics is a web analysis service. Web analysis is the collection, collection and evaluation of data on the behaviour of visitors to websites. Among other things, a web analysis service collects data about the website from which a person concerned came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used to optimise a website and for cost-benefit analysis of internet advertising.
The operating company of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.
The data controller uses the suffix “_gat._anonymizeIp” for web analysis via Google Analytics. By means of this addition, the IP address of the Internet connection of the person concerned is shortened and made anonymous by Google if the access to our Internet pages is from a member state of the European Union or from another state which is a party to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Among other things, Google uses the data and information obtained to evaluate the use of our website in order to compile online reports for us which show the activities on our website and to provide further services in connection with the use of our website.
Google Analytics places a cookie on the information technology system of the person concerned. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyse the use of our website. Each time one of the individual pages of this website is called up, which is operated by the person responsible for processing and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. In the course of this technical process, Google obtains knowledge of personal data, such as the IP address of the person concerned, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission settlements.
The cookie is used to store personal information, such as the time of access, the place from which access was made and the frequency of visits to our website by the person concerned. Each time our website is visited, this personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.
The person concerned can prevent the setting of cookies by our website, as described above, at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
7. Google Web Fonts
This site uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google’s servers. This enables Google to know that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 letter f DSGVO.
If your browser does not support Web Fonts, a standard font will be used by your computer.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in the Google data protection declaration: https://www.google.com/policies/privacy/.
8. Integration of Youtube
We may include on our website videos from the social network youtube.com, which is operated by YouTube, LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (“YouTube”). YouTube LLC is a subsidiary of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA. When you access our website, your browser establishes a direct connection with the servers of YouTube. Your browser is automatically prompted by the video embedded in our website to download a representation of the relevant component of YouTube. As part of this technical process, Youtube is informed which specific subpage of our website you are visiting.
If you use the videos, the corresponding information – e.g. the activation of the play button – is transmitted from your browser to Youtube, linked to your user account and stored. By clicking on the respective video, you consent to the data transfer to Youtube. The legal basis for processing your data after your consent is Art. 6 para. 1 lit. a DSGVO. If you are logged in with your personal Google Account during your visit to our website, Youtube can assign the visit and the sub-pages of our website that you actually visit to your account.
If you do not have a Google Account, there is still the possibility that Youtube may save your IP address.
If you do not wish such processing, you must log out of your Google Account and delete your cookies before visiting our website.
For further information on data protection, please see the data protection regulations of Youtube https://www.google.de/intl/de/policies/privacy/.
9. Integration of third party content
We sometimes integrate third-party content on our website, such as maps from Google Maps and Apple Maps, RSS feeds or graphics from other websites/providers. To display these contents, it is necessary to transmit your IP address to the third party provider. When you access our website, your browser therefore establishes a direct connection with the servers of the respective third party provider. Your browser is automatically prompted by the respective content embedded on our website to download a representation of the corresponding component of the third-party provider. As part of this technical process, the third-party provider is informed which specific subpage of our website you are visiting.
Unfortunately, we have no influence on whether the third-party provider collects or saves the IP address for other purposes beyond the mere display of the content. If we become aware of such use, we will inform you of this in this data protection declaration.
10. eMail and contact form
Due to legal regulations, we provide information on our website that enables rapid electronic contact with us and direct communication with us. This includes both our e-mail address and our contact form. If you contact us by e-mail or via our contact form, the personal data you provide will be stored automatically. The other personal data processed during the contact is used to prevent misuse of the contact form and to ensure the security of our information technology systems. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f DSGVO. If the purpose of the contact is the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b DSGVO.
We use the personal data you provide exclusively for processing your specific enquiry. The data provided will always be treated confidentially.
The data will be deleted as soon as they are no longer required for the purpose of their collection. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended. The conversation ends when it is clear from the circumstances that the matter in question has been conclusively clarified.
You have the possibility to revoke your consent to the processing of your personal data at any time. If you contact us, you can object to the storage of your personal data at any time. In such a case the conversation cannot be continued.
We expressly agree to the forwarding of e-mails which you receive from us and which are not marked by the following notice: This e-mail is confidential and only intended for the intended addressee(s). Anyone other than the intended addressee(s) is prohibited from reading, saving, forwarding or using the contents of this e-mail.
11. Data security
We secure our website and other systems through numerous technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons. However, despite regular checks, complete protection against all risks is not possible and cannot be guaranteed by us. For this reason, you are free at all times to transmit your personal data to us by other means, for example by telephone or post.
12. Legal basis of the processing of personal data
Insofar as we obtain your consent for processing of personal data, Art. 6 para. 1 lit. a DSGVO serves as the legal basis for the processing of personal data.
Art. 6 para. 1 letter b DSGVO serves as the legal basis for the processing of personal data which is necessary for the performance of a contract to which you are a party. This also applies to processing operations which are necessary for the implementation of pre-contractual measures. Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis.
In the event that your vital interests or the vital interests of another natural person make it necessary to process personal data, Art. 6 para. 1 lit. d DSGVO serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if your interests, fundamental rights and freedoms do not outweigh the former, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for the processing.
13. Legitimate interests in the processing
If the processing of your personal data is based on Article 6 I lit. f DS-GVO, our legitimate interest, unless otherwise stated, is the performance of our business activities. In all other respects, we have stated our purposes and interests within the framework of the above list of processing in each case.
14. Data deletion and storage period
Your personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies or you revoke your consent. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU ordinances, laws or other regulations to which the person responsible is subject. If the purpose of storage ceases to apply, if you revoke your consent or if a storage period prescribed by the European Directive and Regulation Giver or any other competent legislator expires, the personal data will be blocked or deleted as a matter of routine and in accordance with the statutory provisions, unless it is necessary to continue storing the data in order to conclude or fulfil a contract.
15. Right to information
You also have the right to receive free information from us at any time about the personal data stored about you and a copy of this information. You also have a right to information regarding the following information:
- the processing purposes,
- the categories of personal data processed,
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular to recipients in third countries or to international organisations,
- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
- the existence of a right of rectification or erasure of personal data relating to them or of a right of opposition to or limitation of the processing by the controller,
- the existence of a right of appeal to a supervisory authority,
- if the personal data are not collected from the data subject: all available information on the origin of the data and,
- the existence of automated decision-making, including profiling, in accordance with Article 22(1) and (4) of the DPA and, at least in these cases, meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.
You also have a right of access to information as to whether personal data have been transferred to a third country or to an international organisation. If this is the case, you also have the right to be informed of the appropriate guarantees relating to the transfer.
16. Right of rectification
You have the right to request the immediate correction and/or completion of incorrect or incomplete personal data concerning you. We must make the correction without delay.
17. Right to limit processing
You have the right to request us to restrict processing if one of the following conditions is met:
- the accuracy of the personal data is contested by the data subject, for a period of time sufficient to enable the controller to verify the accuracy of the personal data
- The processing is unlawful, the data subject refuses to have the personal data deleted and instead requests that the use of the personal data be restricted.
- The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them in order to assert, exercise or defend his rights.
- The data subject has lodged an objection to the processing in accordance with Article 21 (1) of the DPA and it is not yet clear whether the legitimate reasons given by the controller outweigh those of the data subject.
If the processing of personal data relating to you has been restricted, such data, apart from being stored, may be processed only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
If the restriction on processing has been restricted under the above conditions, you will be informed by us before the restriction is lifted.
18. Right of deletion
You have the right to demand that the personal data concerning you be deleted immediately if one of the following reasons applies and provided that the processing is not necessary:
- the personal data have been collected or otherwise processed for purposes for which they are no longer necessary
- The data subject withdraws the consent on which the processing was based under Article 6(1)(a) of the DPA or Article 9(2)(a) of the DPA and there is no other legal basis for the processing.
- The data subject objects to the processing pursuant to Article 21(1) of the DS-BER, and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the DS-BER.
- The personal data were processed unlawfully.
- The deletion of personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
- The personal data were collected in relation to information society services offered, in accordance with Article 8(1) of the DS-GVO.
If the personal data have been made public by us and if we, as data controller, are obliged to delete the personal data pursuant to Art. 17 (1) DS-GVO, we shall take reasonable measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data that the data subject has requested these other data controllers to delete all links to these personal data or to make copies or replications of these personal data unless the processing is necessary.
The right of erasure shall not apply insofar as processing is necessary:
- to exercise the right to freedom of expression and information;
- to comply with a legal obligation to which the processing relates under Union or national law to which the controller is subject or in order to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the field of public health pursuant to Article 9 (2) lit. h and i and Article 9 (3) DSGVO;
- for archiving, scientific or historical research purposes in the public interest or for statistical purposes in accordance with Art. 89 para. 1 DSGVO, insofar as the law referred to in section a) is likely to render impossible or seriously prejudice the attainment of the objectives of such processing, or
- to assert, exercise or defend legal claims.
19. Right to information
If you have asserted the right to rectification, deletion or limitation of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, deletion or limitation of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed about these recipients.
20. Right to data transferability
You have the right to receive the personal data concerning you which you have provided us with in a structured, common and machine-readable format. You also have the right to have this data communicated to another controller without hindrance from us, provided that the processing is based on the consent pursuant to Art. 6 paragraph 1 letter a DS-GVO or Art. 9 paragraph 2 letter a DS-GVO or on a contract pursuant to Art. 6 paragraph 1 letter b DS-GVO and the processing is carried out by means of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Furthermore, when exercising your right to data transfer in accordance with Art. 20 Paragraph 1 DS-GVO, you have the right to request that personal data be transferred directly from us to another responsible party, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons.
The right to data transferability does not apply to processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
21. Right of opposition
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(e) or (f) of the DPA. This also applies to profiling based on these provisions. In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. This also applies to profiling, insofar as it relates to such direct marketing. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.
You also have the right to object, for reasons arising from your particular situation, to the processing of your personal data which concerns you and which is carried out by us for the purposes of scientific or historical research or for statistical purposes in accordance with Article 89 paragraph 1 of the DS-GVO, unless such processing is necessary for the performance of a task carried out in the public interest. You can contact us at any time to exercise your right of objection. You are also free to exercise your right of objection in connection with the use of information society services, without prejudice to Directive 2002/58/EC, by means of automated procedures involving technical specifications.
22. Right to withdraw consent for data protection
You have the right to revoke your consent to the processing of personal data at any time. Revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
23. Right to automated decisions in individual cases, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way, provided that the decision
- is not necessary for the conclusion or performance of any contract between you and us; or
- is authorised by legislation of the Union or the Member States to which we are subject and that legislation provides for appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
- with your express consent.
If the decision
- necessary for the conclusion or performance of a contract between you and us, or
- it takes place with your express consent,
we shall take reasonable measures to safeguard your rights and freedoms and your legitimate interests, which shall include at least the right to obtain the intervention of any person on our part to express his or her point of view and to challenge the decision.
24. Existence of automated decision making
We do not carry out automatic decision making or profiling.
25. Right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place of the suspected infringement, if you consider that the processing of personal data concerning you is in breach of the DPA.
The supervisory authority to which the complaint has been submitted will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 DSGVO.
STATE: September 2020