Privacy Notice

This website is an offer of the company Frusano GmbH:

Frusano GmbH
Kolonnenstr. 8
10827 Berlin
Germany

dataprivacy@Frusano.com

Our company appreciates your visit to our website and your interest in our company, products and services. The protection of your personal data when it is collected, processed and used during your visit to our website is important to us and is a top priority.

Your data is collected, processed and used in accordance with the statutory provisions such as the German Data Protection Act (BDSG), the German Telemedia Act (TMG) and other data protection regulations, about which you can find comprehensive information at www.datenschutz.de, for example. In the following, we explain what information we collect during your visit to our website and how it is used.

Collection and processing of data, possibly personal data

Every time a user accesses a page of this website and every time a file is retrieved, the name of the retrieved file, the amount of data transferred, the success of the retrieval, the IP address currently used by your PC, the date and time, the browser type and the operating system of your PC are stored in a log file. The data is collected and stored exclusively in anonymised or pseudonymised form and does not allow any conclusions to be drawn about you as a natural person. The storage is exclusively for internal system-related and statistical purposes.

Additional personal details such as your name, address, telephone number or e-mail address are not recorded unless you provide these details voluntarily, e.g. as part of a registration process requested by you, a survey, a competition, to fulfil a contract or a request for information. When initiating, concluding, processing and cancelling a purchase contract, we collect, store and process data in accordance with the statutory provisions.

Utilisation and disclosure of personal data

If you have provided us with personal data, we will use it exclusively for the purpose for which you have made it available to us, i.e. to fulfil your wishes and requirements, in particular to process the contract concluded with you, for correspondence in this connection or to answer your enquiry. If this is necessary for the delivery of ordered goods, we will pass on your address data, telephone number and email address to the shipping company commissioned with the delivery. The geo-coordinates of the address are determined and stored using a Google API service with the street, postcode, city and country (but without the name). In order to process payments, we pass on the necessary payment data to the credit institution commissioned with the payment and, if applicable, to the payment service you selected during the ordering process. In the event of a significant delay in payment (and only then), we will pass on your address, contact and contract data to a debt collection company commissioned by us, which is obliged to comply with data protection regulations and may only use the data for the purpose of debt collection.

Your personal data will not be passed on, sold or otherwise transferred to third parties unless we are legally obliged to do so or you have given your express prior consent. You have the right to revoke such consent at any time with effect for the future. Insofar as we utilise the services of third parties for the implementation and handling of processing procedures, the provisions of the Federal Data Protection Act are complied with.

Once the contract has been fully processed, your data will be blocked and deleted after expiry of the tax and commercial law regulations, unless you have expressly consented to any further use of your data.

Revocation of consent, deletion and information, contact

If you no longer consent to the storage of your personal data or if it has become incorrect, we will arrange for your data to be deleted, corrected or blocked in accordance with the statutory provisions. Upon written request, we will be happy to inform you which of your personal data we have stored. If you have any questions about the collection, processing or use of your personal data, or if you require information, correction, blocking or deletion of data, please contact us at the address given at the top of this page.

Automatically collected, non-personal data; generation of cookies; auxiliary programmes; active content

When you visit our website/websites, information may be stored on your computer in the form of a so-called "cookie", which allows us to automatically recognise your computer the next time you visit our homepage. Cookies allow us, among other things, to customise a website to your wishes.

If you do not want us to recognise information about your computer, please set your Internet browser so that it deletes cookies from your computer hard drive, blocks all cookies or warns you before a cookie is stored. For more information, please refer to the instructions for use of your Internet browser.

If you leave our site via a link and thus reach external sites, cookies may also be set by the addressees of the target site you clicked on. We are not legally responsible for these cookies. For information on the use of such cookies and the information stored on them, please refer to their data protection declarations.

Java applets, Active-X-Controls and Java Script may be used in the provision of this website. If you do not wish to use these auxiliary programmes or active content for security reasons, you should deactivate the corresponding setting in your browser.

Provision of the online offer and web hosting

We process users' data in order to provide them with our online services. For this purpose, we process the user's IP address, which is necessary to transmit the content and functions of our online services to the user's browser or end device.

Processed data types: Usage data (e.g. page views and length of stay, click paths, intensity and frequency of use, device types and operating systems used, interactions with content and functions); meta, communication and procedural data (e.g. IP addresses, time data, identification numbers, persons involved). Log data (e.g. log files relating to logins or the retrieval of data or access times).
Data subjects: Users (e.g. website visitors, users of online services).
Purposes of processing: Provision of our online services and user-friendliness; information technology infrastructure (operation and provision of information systems and technical devices (computers, servers, etc.)); security measures. Establishment and implementation of employment relationships (processing of employee data in the context of the establishment and implementation of employment relationships).
Storage and deletion: Deletion in accordance with the information in the section "General information on data storage and deletion".

Further information on processing processes, procedures and services:

Provision of online offer on rented storage space: To provide our online offer, we use storage space, computing capacity and software that we rent or otherwise obtain from a corresponding server provider (also known as a "web host").
Collection of access data and log files: Access to our online offering is recorded in the form of so-called "server log files". The server log files may include the address and name of the web pages and files accessed, the date and time of access, data volumes transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider. The server log files can be used for security purposes, e.g. to prevent server overload (especially in the event of abusive attacks, so-called DDoS attacks), and also to ensure server utilisation and stability.
Google Search Console: Monitoring website performance, analysing search queries, detecting indexing problems, providing data on visibility in search results, checking mobile usability, identifying security problems and managing sitemaps;

Use of cookies

The term "cookies" refers to functions that store information on users' end devices and read it from them. Cookies can also be used for various purposes, for example to ensure the functionality, security and convenience of online offers and to create analyses of visitor flows. We use cookies in accordance with the statutory provisions. If necessary, we obtain the user's consent in advance. If consent is not required, we rely on our legitimate interests. This applies if the storage and reading of information is essential in order to be able to provide expressly requested content and functions. This includes, for example, saving settings and ensuring the functionality and security of our online offering. Consent can be revoked at any time. We provide clear information about the scope and which cookies are used.

Information on the legal basis under data protection law: Whether we process personal data using cookies depends on consent. If consent has been given, it serves as the legal basis. Without consent, we rely on our legitimate interests, which are explained above in this section and in the context of the respective services and procedures.

Storage duration: With regard to the storage duration, a distinction is made between the following types of cookies

Temporary cookies (also: session or session cookies): Temporarycookiesare deleted at the latest after a user has left an online service and closed their end device (e.g. browser or mobile application).
Permanent cookies: Permanent cookies remain stored even after the end device is closed. For example, the log-in status can be saved and favourite content can be displayed directly when the user visits a website again. The user data collected with the help of cookies can also be used to measure reach. If we do not provide users with explicit information on the type and storage duration of cookies (e.g. when obtaining consent), they should assume that they are permanent and that the storage duration can be up to two years.

General information on revocation and objection (opt-out): Users can revoke the consents they have given at any time and also declare an objection to processing in accordance with the legal requirements, including by means of their browser's privacy settings.

Processed data types: Meta, communication and process data (e.g. IP addresses, time data, identification numbers, persons involved). Usage data (e.g. page views and dwell time, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions).
Data subjects: Users (e.g. website visitors, users of online services).
Purposes of processing: Provision of our online services and user-friendliness.

Further information on processing processes, procedures and services:

Processing of cookie data on the basis of consent: We use a consent management solution in which user consent is obtained for the use of cookies or for the procedures and providers named in the consent management solution. This procedure is used to obtain, log, manage and revoke consent, in particular with regard to the use of cookies and comparable technologies that are used to store, read and process information on users' end devices. As part of this procedure, user consent is obtained for the use of cookies and the associated processing of information, including the specific processing and providers mentioned in the consent management procedure. Users also have the option of managing and revoking their consent. The declarations of consent are stored in order to avoid repeated requests and to be able to provide proof of consent in accordance with legal requirements. The storage takes place on the server side and/or in a cookie (so-called opt-in cookie) or by means of comparable technologies in order to be able to assign the consent to a specific user or their device. If no specific information on the providers of consent management services is available, the following general information applies: Consent is stored for up to two years. A pseudonymous user identifier is created, which is stored together with the time of consent, information on the scope of consent (e.g. relevant categories of cookies and/or service providers) and information on the browser, system and end device used.
Cookie opt-out: In the footer of our website you will find a link that you can use to change your cookie settings and revoke your consent.

Contact and enquiry management

When contacting us (e.g. by post, contact form, email, telephone or via social media) and as part of existing user and business relationships, the details of the enquiring persons are processed insofar as this is necessary to answer the contact enquiries and any measures requested.

Processed data types: inventory data (e.g. full name, residential address, contact information, customer number, etc.); contact data (e.g. postal and email addresses or telephone numbers); content data (e.g. text or image messages and contributions as well as the information relating to them, such as information on authorship or time of creation); usage data (e.g. page views and length of stay, click paths, intensity and frequency of use, device types and operating systems used, interactions with content and functions). Meta, communication and process data (e.g. IP addresses, time data, identification numbers, persons involved).
Data subjects: Communication partners; users (e.g. website visitors, users of online services). Business and contractual partners.
Purposes of processing: Communication; organisational and administrative procedures; feedback (e.g. collecting feedback via online form). Provision of our online services and user-friendliness.
Storage and deletion: Deletion in accordance with the information in the section "General information on data storage and deletion".

Further information on processing processes, procedures and services:

Contact form: When contacting us via our contact form, by email or other communication channels, we process the personal data transmitted to us to answer and process the respective request. This generally includes details such as name, contact information and any other information that is provided to us and is required for appropriate processing. We use this data exclusively for the stated purpose of establishing contact and communication.
Gmail: Sending and receiving emails, storing contacts in the address book, filter rules for sorting incoming emails, spam and virus protection, cloud storage for attachments and other content; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https://workspace.google.com/gmail/. Privacy Policy: https://policies.google.com/privacy.

Video conferences, online meetings, webinars and screen sharing

We use platforms and applications of other providers (hereinafter referred to as "conference platforms") for the purpose of conducting video and audio conferences, webinars and other types of video and audio meetings (hereinafter collectively referred to as "conference"). When selecting the conference platforms and their services, we observe the legal requirements.

Data processed by conference platforms: In the context of participation in a conference, the conference platforms process the personal data of the participants listed below. The scope of the processing depends on which data is required in the context of a specific conference (e.g. specification of access data or clear names) and which optional information is provided by the participants. In addition to processing for the purpose of holding the conference, the conference platforms may also process participants' data for security purposes or service optimisation. The processed data includes personal data (first name, surname), contact information (e-mail address, telephone number), access data (access codes or passwords), profile pictures, information on professional position/function, the IP address of the Internet access, information on the participants' end devices, their operating system, the browser and its technical and language settings, information on the content of the communication processes, i.e. entries in chats as well as audio and video data, as well as the use of other available functions (e.g. surveys). The content of communications is encrypted to the extent technically provided by the conference providers. If the participants are registered as users with the conference platforms, further data may be processed in accordance with the agreement with the respective conference provider.

Logging and recordings: If text entries, participation results (e.g. from surveys) and video or audio recordings are logged, this will be transparently communicated to participants in advance and they will be asked for consent where necessary.

Data protection measures for participants: Please note the details of how the conference platforms process your data in their data protection notices and select the security and data protection settings that are best for you in the conference platform settings. Please also ensure data and privacy protection in the background of your recording for the duration of a video conference (e.g. by informing roommates, locking doors and using the function to make the background unrecognisable if technically possible). Links to the conference rooms and access data may not be passed on to unauthorised third parties.

Notes on legal bases: If, in addition to the conference platforms, we also process users' data and ask users for their consent to use the conference platforms or certain functions (e.g. consent to the recording of conferences), the legal basis for processing is this consent. Furthermore, our processing may be necessary to fulfil our contractual obligations (e.g. in participant lists, in the case of processing the results of discussions, etc.). Otherwise, user data is processed on the basis of our legitimate interests in efficient and secure communication with our communication partners.

Types of data processed: inventory data (e.g. full name, home address, contact information, customer number, etc.); contact data (e.g. postal and email addresses or telephone numbers); content data (e.g. text or image messages and contributions as well as the information relating to them, such as Information on authorship or time of creation); usage data (e.g. page views and length of stay, click paths, intensity and frequency of use, device types and operating systems used, interactions with content and functions); image and/or video recordings (e.g. photographs or video recordings of a person); sound recordings. Log data (e.g. log files relating to logins or the retrieval of data or access times).
Data subjects: Communication partners; users (e.g. website visitors, users of online services). Depicted persons.
Purposes of Processing: Provision of contractual services and fulfilment of contractual obligations; Communication. Office and organisational procedures.
Storage and deletion: Deletion in accordance with the information in the section "General information on data storage and deletion".

Further information on processing processes, procedures and services:

Microsoft Teams: Used to conduct online events, conferences and communication with internal and external participants. Voice transmission, direct messages, group communication and collaboration functions are used; name, business contact details, work profile, participation and content (audio/video, voice, chat, files, voice transcription) are processed for purposes and out of interest in increasing efficiency and productivity, cost efficiency, flexibility, mobility, improved communication, IT security, use of a central platform and business processing by Microsoft. Audio signals are generally not stored unless recording is activated. Meeting and conference recordings are stored for 90 days by default, unless a different duration is specified. Chat and file content is saved according to the guidelines specified by the administrator or user; no automatic deletion is preset. Channels must be renewed every 180 days, otherwise content will be deleted. In addition, system-generated log, diagnostic and metadata is processed and diagnostic data is collected for product stability, security and improvement; service provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland; Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; Website: https://www.microsoft.com/de-de/microsoft-teams/. Privacy policy: https://privacy.microsoft.com/de-de/privacystatement, security information: https://www.microsoft.com/de-de/trustcenter.

Web analysis, monitoring and optimisation

Web analysis (also referred to as "reach measurement") is used to evaluate the flow of visitors to our online offering and may include behaviour, interests or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach analysis, we can, for example, recognise at what time our online offering or its functions or content are most frequently used or invite visitors to reuse them. We are also able to understand which areas require optimisation.

In addition to web analysis, we may also use test procedures, for example to test and optimise different versions of our online offering or its components.

Unless otherwise stated below, profiles, i.e. data summarised for a usage process, may be created for these purposes and information may be stored in a browser or end device and then read out. The information collected includes, in particular, websites visited and the elements used there as well as technical information such as the browser used, the computer system used and information on usage times. If users have consented to the collection of their location data from us or from the providers of the services we use, location data may also be processed.

In addition, the IP addresses of users are stored. However, we use an IP masking procedure (i.e. pseudonymisation by shortening the IP address) to protect users. In general, no clear user data (such as email addresses or names) is stored in the context of web analysis, A/B testing and optimisation, but pseudonyms. This means that neither we nor the providers of the software used know the actual identity of the users, but only the information stored in their profiles for the purpose of the respective process.

Notes on legal bases: If we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Otherwise, user data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to draw your attention to the information on the use of cookies in this privacy policy.

Processed data types: Usage data (e.g. page views and dwell time, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and functions). Meta, communication and process data (e.g. IP addresses, time data, identification numbers, persons involved).
Data subjects: Users (e.g. website visitors, users of online services).
Purposes of Processing: Remarketing; Targeting; Web Analytics (e.g. access statistics, recognition of returning visitors); Profiles with user-related information (Creating user profiles); Provision of our online services and usability. Tracking (e.g. interest/behavioural profiling, use of cookies).
Storage and deletion: Deletion in accordance with the information in the section "General information on data storage and deletion". Storage of cookies for up to 2 years (Unless otherwise stated, cookies and similar storage methods may be stored on users' devices for a period of two years).
Security measures: IP masking (pseudonymisation of the IP address).

Further information on processing operations, procedures and services:

Google Analytics: We use Google Analytics to measure and analyse the use of our online offering on the basis of a pseudonymous user identification number. This identification number does not contain any unique data, such as names or email addresses. It is used to assign analysis information to an end device in order to recognise which content users have called up within one or more usage processes, which search terms they have used, which they have called up again or which they have interacted with our online offering. The time of use and its duration are also stored, as well as the sources of the users who refer to our online offer and technical aspects of their end devices and browsers.
Pseudonymous profiles of users are created with information from the use of various devices, whereby cookies can be used. Google Analytics does not log or store individual IP addresses for EU users. However, Analytics provides rough geographic location data by deriving the following metadata from IP addresses: City (and the city's inferred latitude and longitude), Continent, Country, Region, Subcontinent (and ID-based counterparts). For EU traffic, the IP address data is used exclusively for this derivation of geolocalisation data before it is immediately deleted. It is not logged, is not accessible and is not used for other purposes. When Google Analytics collects measurement data, all IP queries are performed on EU-based servers before the traffic is forwarded to Analytics servers for processing; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https://marketingplatform.google.com/intl/de/about/analytics/; Security measures: IP masking (pseudonymisation of the IP address); Privacy Policy: https://policies.google.com/privacy; Data processing agreement: https://business.safety.google/adsprocessorterms/; Opt-Out: Opt-out plug-in: https://tools.google.com/dlpage/gaoptout?hl=de, Settings for the display of adverts: https://myadcenter.google.com/personalizationoff. Further information: https://business.safety.google/adsservices/ (types of processing and data processed).
Google as the recipient of consent: The consent given by users in the context of a consent dialogue (also known as "cookie opt-in/consent", 'cookie banner', etc.) fulfils several purposes. On the one hand, it serves to fulfil our obligation to obtain consent to the storage and reading of information on and from the user's end device (in accordance with ePrivacy guidelines). Secondly, it covers the processing of users' personal data in accordance with data protection regulations. In addition, this consent also applies to Google, as the company is obliged under the Digital Markets Act to obtain consent for personalised services. We therefore share the status of the consents given by users with Google. Our consent management software informs Google whether consent has been granted or not. The aim is to ensure that the consents given or not given by users are taken into account when using Google Analytics and when integrating functions and external services. For example, user consents and their revocation in the context of Google Analytics and other Google services in our online offering can be adjusted dynamically and depending on the user selection; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https://support.google.com/analytics/answer/9976101?hl=de. Privacy policy: https://policies.google.com/privacy.
Google Analytics (server-side use): We use Google Analytics to measure and analyse the use of our online services by users. Although user data is processed, it is not transmitted directly from the user's device to Google. In particular, the user's IP address is not transmitted to Google. Instead, the data is first transmitted to our server, where the user data records are assigned to our internal user identification number. Subsequent transmission from our server to Google only takes place in this pseudonymised form. The identification number does not contain any unique data, such as names or e-mail addresses. It is used to assign analysis information to an end device in order to recognise which content users have called up within one or more usage processes, which search terms they have used, which they have called up again or which they have interacted with our online offering. The time of use and its duration are also stored, as well as the sources of the users who refer to our online offering and technical aspects of their end devices and browsers. Pseudonymised profiles of users are created with information from the use of various devices, whereby cookies may be used. Analytics provides high-level geographic location data by collecting the following metadata from IP searches: "City" (and the derived latitude and longitude of the city), "Continent", "Country", "Region", "Subcontinent" (and the ID-based equivalents); Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https://marketingplatform.google.com/intl/de/about/analytics/; Privacy Policy: https://policies.google.com/privacy; Data Processing Agreement: https://business.safety.google/adsprocessorterms/. Further information: https://business.safety.google/adsservices/ (Types of processing and data processed).
Google Signals (Google Analytics function): Google signals are session data from websites and apps that Google associates with users who have signed in to their Google accounts and activated ad personalisation. This association of data with these logged-in users is used to enable cross-device reporting, cross-device remarketing and cross-device conversion measurement. This includes: Cross-platform reporting - linking data about devices and activity from different sessions using your User ID or Google Signals data, enabling an understanding of user behaviour at each step of the conversion process, from first contact to conversion and beyond; Remarketing with Google Analytics - creating remarketing audiences from Google Analytics data and sharing these audiences with linked advertising accounts; Demographics and interests - Google Analytics collects additional information about demographics and interests from users who are logged into their Google accounts and have ad personalisation enabled; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https://support.google.com/analytics/answer/7532985?hl=de; Privacy Policy: https://policies.google.com/privacy; Data Processing Agreement: https://business.safety.google/adsprocessorterms. Further information: https://business.safety.google/adsservices/ (Types of processing and data processed).
Target group formation with Google Analytics: We use Google Analytics to target adverts that are placed via Google's advertising services and those of its partners to those users who have already shown an interest in our online offering or who have certain characteristics (e.g. interests in specific topics or products that are determined based on the websites they visit). We transmit this data to Google as part of so-called "remarketing" or "Google Analytics audiences". The aim of using remarketing audiences is to ensure that our adverts match the potential interests of users as closely as possible; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https: //marketingplatform.google.com; Legal basis: https://business.safety.google/adsprocessorterms/; Privacy Policy: https://policies.google.com/privacy; Data processing agreement: https://business.safety.google/adsprocessorterms/; Further information: Types of processing and data processed: https://business.safety.google/adsservices/. Data processing conditions for Google advertising products and standard contractual clauses for third country transfers of data: https://business.safety.google/adsprocessorterms.
Google Tag Manager: We use Google Tag Manager, a software from Google that enables us to manage so-called website tags centrally via a user interface. Tags are small code elements on our website that are used to record and analyse visitor activity. This technology helps us to improve our website and the content offered on it. Google Tag Manager itself does not create any user profiles, does not store any cookies with user profiles and does not carry out any independent analyses. Its function is limited to simplifying the integration and management of tools and services that we use on our website and making them more efficient. Nevertheless, when using the Google Tag Manager, the IP address of the user is transmitted to Google, which is necessary for technical reasons in order to implement the services we use. Cookies may also be set in the process. However, this data processing only takes place if services are integrated via the Tag Manager. For more detailed information on these services and their data processing, please refer to the further sections of this privacy policy;
https://business.safety.google/adsprocessorterms.

Google Tag Manager (server-side use): Google Tag Manager is an application with which we can manage so-called website tags via an interface and thus integrate other services into our online offering (see also the further information in this privacy policy). The Tag Manager itself (which implements the tags) does not store any user profiles or cookies. The other services are integrated on the server side. This means that user data is not transmitted directly from their end device to the respective service or Google. In particular, the user's IP address is not transmitted to the other service. Instead, the data is first transmitted to our server, where the user's data records are assigned to our internal user identification number. The subsequent transmission of the data from our server to the servers of the respective service providers only takes place in this pseudonymised form. The user identification number does not contain any unique data, such as names or email addresses; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https://marketingplatform.google.com/intl/de/about/analytics/; Privacy Policy: https://policies.google.com/privacy; Data Processing Agreement: https://business.safety.google/adsprocessorterms/. Further information: https://business.safety.google/adsservices/ (Types of processing and data processed).
Microsoft Clarity: Web analytics, reach measurement and analysis of user behaviour in terms of usage and interests regarding functions and content as well as their duration of use on the basis of a pseudonymous user identification number and profiling; service provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland; Website: https://clarity.microsoft.com; Privacy Policy: https://privacy.microsoft.com/de-de/privacystatement. Data processing agreement: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA.

Online marketing

We process personal data for the purpose of online marketing, which may include in particular the marketing of advertising space or the presentation of advertising and other content (collectively referred to as "content") based on the potential interests of users and the measurement of their effectiveness.

For these purposes, so-called user profiles are created and stored in a file (the so-called "cookie") or similar procedures are used, by means of which the information about the user relevant to the presentation of the aforementioned content is stored. This may include, for example, content viewed, websites visited, online networks used, but also communication partners and technical information, such as the browser used, the computer system used and information on usage times and functions used. If users have consented to the collection of their location data, this can also be processed.

The IP addresses of users are also stored. However, we use available IP masking procedures (i.e. pseudonymisation by shortening the IP address) for user protection. In general, no clear user data (such as e-mail addresses or names) is stored as part of the online marketing process, but pseudonyms. This means that neither we nor the providers of the online marketing procedures know the actual identity of the users, but only the information stored in their profiles.

The statements in the profiles are generally stored in cookies or by means of similar procedures. These cookies can generally also be read later on other websites that use the same online marketing process, analysed for the purpose of displaying content, supplemented with further data and stored on the server of the online marketing process provider.

In exceptional cases, it is possible to assign clear data to the profiles, primarily if the users are, for example, members of a social network whose online marketing process we use and the network links the user profiles with the aforementioned data. Please note that users can make additional agreements with the providers, for example by giving their consent during registration.

In principle, we only receive access to summarised information about the success of our advertisements. However, as part of so-called conversion measurements, we can check which of our online marketing processes have led to a so-called conversion, i.e., for example, to the conclusion of a contract with us. The conversion measurement is used solely to analyse the success of our marketing measures.

Unless otherwise stated, we ask you to assume that the cookies used are stored for a period of two years.

Notes on legal bases: If we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Otherwise, user data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to draw your attention to the information on the use of cookies in this privacy policy.

Information on cancellation and objection:

We refer to the data protection notices of the respective providers and the objection options specified for the providers (so-called "opt-out"). If no explicit opt-out option has been specified, you have the option of switching off cookies in your browser settings. However, this may restrict the functions of our online offering. We therefore recommend the following additional opt-out options, which are summarised for the respective areas:

a) Europe: https://www.youronlinechoices.eu.

b) Canada: https://youradchoices.ca/.

c) USA: https://optout.aboutads.info/.

d) Cross-territory: https://optout.aboutads.info.

Processed data types: Content data (e.g. text or image messages and contributions as well as the information relating to them, such as information on authorship or time of creation); usage data (e.g. page views and length of stay, click paths, intensity and frequency of use, device types and operating systems used, interactions with content and functions); meta, communication and procedural data (e.g. IP addresses, time data, identification numbers, participating users). (e.g. IP addresses, time data, identification numbers, persons involved); event data (Facebook) ("event data" is information that is sent to the provider Meta, for example via Meta pixels (whether via apps or other channels) and relates to persons or their actions. This data includes, for example, details of website visits, interactions with content and functions, app installations and product purchases. Event data is processed with the aim of creating target groups for content and advertising messages (custom audiences). It is important to note that event data does not include actual content such as comments written, login information or contact information such as names, email addresses or telephone numbers. "Event data" is deleted by Meta after a maximum of two years, and the target groups created from it disappear when our Meta user accounts are deleted); contact information (Facebook) ("contact information" is data that (clearly) identifies data subjects, such as names, e-mail addresses and telephone numbers, which can be transmitted to Facebook, e.g. via Facebook pixels or uploads for matching purposes in order to create custom audiences. After matching for the purpose of creating target groups, the contact information is deleted).
Data subjects: Users (e.g. website visitors, users of online services).
Purposes of Processing: Web Analytics (e.g. access statistics, recognition of returning visitors); Targeting (e.g. profiling based on interests and behaviour, use of cookies); Conversion tracking (Measurement of the effectiveness of marketing activities); Custom Audiences; Marketing; Profiles with user-related information (Creating user profiles); Provision of our online services and usability; Remarketing; A/B Tests. Cross-device tracking (cross-device processing of user data for marketing purposes).
Storage and deletion: Deletion in accordance with the information in the section "General information on data storage and deletion". Storage of cookies for up to 2 years (Unless otherwise stated, cookies and similar storage methods may be stored on users' devices for a period of two years).
Security measures: IP masking (pseudonymisation of the IP address).

Further information on processing operations, procedures and services:

Meta pixel and target group formation (custom audiences): With the help of the meta pixel (or comparable functions, for the transmission of event data or contact information via interfaces in apps), it is possible for the Meta company, on the one hand, to determine the visitors to our online offering as a target group for the display of adverts (so-called "meta ads"). Accordingly, we use the meta pixel to display the meta ads placed by us only to those users on Meta platforms and within the services of Meta's cooperating partners (so-called "audience network" https://www.facebook.com/audiencenetwork/ ) who have also shown an interest in our online offering or who have certain characteristics (e.g. interest in certain topics or products that can be seen from the websites visited) that we transmit to Meta (so-called "custom audiences"). With the help of the meta pixel, we also want to ensure that our meta ads correspond to the potential interest of users and are not annoying. With the help of the meta pixel, we can also track the effectiveness of the meta ads for statistical and market research purposes by seeing whether users have been redirected to our website after clicking on a meta ad (so-called "conversion measurement"); service provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/privacy/policy/; Data Processing Agreement: https://www.facebook.com/legal/terms/dataprocessing; Further information: Event user data, i.e. behavioural and interest data, is processed for the purposes of targeted advertising and targeting on the basis of the joint controllership agreement ("Controller Addendum", https://www.facebook.com/legal/controller_addendum). The joint controllership is limited to the collection by and transfer of data to Meta Platforms Ireland Limited, a company based in the EU. The further processing of the data is the sole responsibility of Meta Platforms Ireland Limited, which in particular concerns the transfer of the data to the parent company Meta Platforms, Inc. in the USA (on the basis of the standard contractual clauses concluded between Meta Platforms Ireland Limited and Meta Platforms, Inc.)
Extended comparison for the Meta pixel: In addition to the processing of event data in the context of the use of the Meta pixel (or comparable functions, e.g. in apps), contact information (data identifying individual persons, such as names, e-mail addresses and telephone numbers) is also collected by Meta within our online offering or transmitted to Meta. The processing of contact information is used to create target groups (so-called "custom audiences") for the display of content and advertising information based on the presumed interests of users. The collection, transmission and comparison with data available at Meta is not carried out in plain text, but as so-called "hash values", i.e. mathematical representations of the data (this method is used, for example, when storing passwords). After matching for the purpose of creating target groups, the contact information is deleted; Privacy Policy: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; Data Processing Agreement: https://www.facebook.com/legal/terms/dataprocessing. Further information: https://www.facebook.com/legal/terms/data_security_terms.
Meta - Target group formation via data upload: Creation of target groups for marketing purposes - We transmit contact information (names, e-mail addresses and telephone numbers) in list form to Meta for the purpose of creating target groups (so-called "custom audiences") for the display of content and advertising information based on the presumed interests of users. The transmission and comparison with data available at Meta does not take place in plain text, but as so-called "hash values", i.e. mathematical representations of the data (this method is used, for example, when storing passwords). After matching for the purpose of creating target groups, the contact information is deleted; service provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/privacy/policy/. Data processing agreement: https://www.facebook.com/legal/terms/dataprocessing.
Facebook Ads: Display of adverts within the Facebook platform and analysis of the ad results; Service provider Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/privacy/policy/; Opt-Out: We refer to the data protection and advertising settings in the user's profile on the Facebook platforms as well as to Facebook's consent procedures and contact options for exercising information and other data subject rights, as described in Facebook's privacy policy; Further information: Event user data, i.e. behavioural and interest data, is processed for the purposes of targeted advertising and targeting on the basis of the joint controllership agreement ("Controller Addendum", https://www.facebook.com/legal/controller_addendum). The joint controllership is limited to the collection by and transfer of data to Meta Platforms Ireland Limited, a company based in the EU. The further processing of the data is the sole responsibility of Meta Platforms Ireland Limited, which in particular concerns the transfer of the data to the parent company Meta Platforms, Inc. in the USA (on the basis of the standard contractual clauses concluded between Meta Platforms Ireland Limited and Meta Platforms, Inc.)
Google Ad Manager: We use the "Google Ad Manager" service to place adverts in the Google advertising network (e.g. in search results, in videos, on websites, etc.). Google Ad Manager is characterised by the fact that ads are displayed in real time based on the presumed interests of users. This allows us to display adverts for our online offering to users who may have a potential interest in our offering or have previously shown an interest in it, and to measure the success of the adverts; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy; Further information: Types of processing and data processed: https://business.safety.google/adsservices/; Data processing conditions for Google advertising products: Information on the services Data processing terms between controllers and standard contractual clauses for third country transfers of data: https://business.safety.google/adscontrollerterms. If Google acts as a processor, data processing terms for Google advertising products and standard contractual clauses for third country transfers of data: https://business.safety.google/adsprocessorterms.
Google Ads and conversion measurement: online marketing process for the purpose of placing content and adverts within the service provider's advertising network (e.g. in search results, in videos, on websites, etc.) so that they are displayed to users who have a presumed interest in the adverts. In addition, we measure the conversion of the adverts, i.e. whether users have taken them as an opportunity to interact with the adverts and use the advertised offers (so-called conversions). However, we only receive anonymous information and no personal information about individual users; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy; Further information: Types of processing and data processed: https://business.safety.google/adsservices/. Data processing conditions between controllers and standard contractual clauses for third country transfers of data: https://business.safety.google/adscontrollerterms.
Google Ads Remarketing: Google Remarketing, also known as retargeting, is a technology that allows users who use an online service to be added to a pseudonymous remarketing list so that users can be shown adverts on other online offers based on their visit to the online service; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy; Further information: Types of processing and data processed: https://business.safety.google/adsservices/. Data processing conditions between controllers and standard contractual clauses for third country transfers of data: https://business.safety.google/adscontrollerterms.
Extended conversions for Google Ads: If users click on our Google adverts and subsequently use the advertised service (so-called "conversion"), the data entered by the user, such as the email address, name, home address or telephone number, may be transmitted to Google. The hash values are then compared with existing Google accounts of the users in order to better analyse and improve the interaction of the users with the ads (e.g. clicks or views) and thus their performance. Website: https://support.google.com/google-ads/answer/9888656.
Google Adsense with non-personalised ads: We use the Google Adsense service to place non-personalised ads in our online offering. These ads are not based on individual user behaviour, but are selected based on general characteristics such as the content of the page or your approximate geographical location. We receive remuneration for displaying or otherwise using these adverts; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy; Further information: Types of processing and data processed: https://business.safety.google/adsservices/. Data processing conditions for Google advertising products: Information on the services Data processing terms between controllers and standard contractual clauses for third country transfers of data: https://business.safety.google/adscontrollerterms.
Instagram Ads: Placement of ads within the Instagram platform and evaluation of ad results; service provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; Website: https://www.instagram.com; Privacy Policy: https://privacycenter.instagram.com/policy/; Opt-Out: We refer to the data protection and advertising settings in the user's profile on the Instagram platform and as part of Instagram's consent procedure and Instagram's contact options for exercising information and other data subject rights in Instagram's privacy policy; Further information: Event user data, i.e. behavioural and interest data, is processed for the purposes of targeted advertising and targeting on the basis of the joint controllership agreement ("Controller Addendum", https://www.facebook.com/legal/controller_addendum). The joint controllership is limited to the collection by and transfer of data to Meta Platforms Ireland Limited, a company based in the EU. The further processing of the data is the sole responsibility of Meta Platforms Ireland Limited, which in particular concerns the transfer of data to the parent company Meta Platforms, Inc. in the USA.
LinkedIn Insight Tag: Code that is loaded when a user visits our online offering and tracks the user's behaviour and conversions and stores them in a profile (possible uses: measuring campaign performance, optimising ad delivery, building custom and lookalike audiences); service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Website: https://www.linkedin.com; Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Cookie Policy: https://www.linkedin.com/legal/cookie_policy; Data Processing Agreement: https://www.linkedin.com/legal/l/dpa. Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Microsoft Advertising: Online marketing process for the purpose of placing content and adverts within the service provider's advertising network (e.g. in search results, in videos, on websites, etc.) so that they are displayed to users who have a presumed interest in the adverts. In addition, we measure the conversion of the adverts, i.e. whether users have taken them as an opportunity to interact with the adverts and use the advertised offers (so-called conversion). However, we only receive anonymous information and no personal information about individual users; service provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland; Website: https://about.ads.microsoft.com/; Privacy Policy: https://privacy.microsoft.com/de-de/privacystatement. Option to object (opt-out): https://account.microsoft.com/privacy/ad-settings/.
Facebook Conversions API: We use the "Conversions API" from Facebook. The Conversions API is an interface that sends event data from our servers directly to Facebook. The functionality and processing of data as part of the Conversions API corresponds to the functionality and processing as part of the use of the<