Privacy Policy

Effective Date: 18.04.2024

Who We Are

The data controller within the meaning of the General Data Protection Regulation (DSGVO) and other data protection laws is:

The People Agency GmbH
Münzstraße 21 (2nd Courtyard / 5th Floor)
10178 Berlin
Germany

+49 40 2294 7444
crew@thepeopleagency.net
www.thepeopleagency.net

Contacting the Data Protection Officer

The data protection officer of the controller is:

DataCo GmbH
Nymphenburger Str. 86
80636 Munich
Germany

+49 89 7400 45840
www.dataguard.de

On this page, we inform you about the processing of your personal data on our website.

How we collect and use your personal data depends on how you interact with us or which services you use. We only collect, use, or share your personal data if we have a legitimate purpose and a legal basis for doing so.

What Do We Mean by Legal Basis?

Consent (Art. 6(1) Sentence 1 lit. a DSGVO) – You have given us your consent to process your personal data for the specific purpose we explained to you. You have the right to withdraw your consent at any time. Further information on how to withdraw your consent can be found in the sections “Exercising Your Rights” in the following parts of this privacy policy.

Contract (Art. 6(1) Sentence 1 lit. b DSGVO) – We need to use your data to fulfill a contract you have with us. Alternatively, it is necessary to use your data because we have asked you or because you have taken certain steps before entering this contract.

Legal Obligation (Art. 6(1) Sentence 1 lit. c DSGVO) – We must use your data to comply with the law.

Vital Interests (Art. 6(1) Sentence 1 lit. d DSGVO) – Processing your data is necessary to protect your vital interests or those of another person. For example, to protect you from serious physical harm.

Public Task (Art. 6(1) Sentence 1 lit. e DSGVO) – Processing your data is necessary for performing a task in the public interest or for an official function covered by law.

Legitimate Interests (Art. 6(1) Sentence 1 lit. f DSGVO) – Processing your data is necessary to support a legitimate interest that we or another party have, provided your interests do not override it.

Please note that we may not be able to provide our website services to you if your data is processed to fulfill a contract or a legal obligation and you do not provide the requested data.

Data Sharing and International Transfer

As explained in this privacy policy, we use various service providers who assist us in delivering our services and safeguarding your data. When we engage these service providers, it may be necessary to share your personal data with them.

We have agreements with all service providers to whom we disclose your data, obligating them to protect your data.

If your personal data is transferred outside the EU, we ensure that your personal data receives equivalent protection, either because the country to which your data is transferred has an “adequate” data protection standard according to the European Commission or by applying another safeguard, such as an extended contractual arrangement, namely, the Standard Contractual Clauses (SCCs) adopted by the European Commission.

For instance, when we use US service providers, we rely on either SCCs or the EU-US Data Privacy Framework, depending on the provider. You can request a copy of the SCCs that we have concluded with our service providers by sending an email to the address specified in this privacy policy.

Your Rights

If your personal data is processed, you are considered a data subject under the DSGVO, and you have the following rights with regard to the data controller:

  1. Right of Access (Art. 15 DSGVO) You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right to access this data and the following information:
    • Purposes of processing
    • Categories of personal data
    • Recipients or categories of recipients
    • Planned storage duration or the criteria for determining this duration
    • Existence of rights to rectification, erasure, restriction, or objection
    • Right to complain to the competent supervisory authority
    • Where applicable, the source of the data (if collected from a third party)
    • Where applicable, existence of automated decision-making, including profiling, with meaningful information about the logic involved, the scope, and the expected consequences
    • Where applicable, transfer of personal data to a third country or international organization
  1. Right to Rectification (Art. 16 DSGVO) If your personal data is incorrect or incomplete, you have the right to request immediate correction or completion of the personal data.
  1. Right to Restriction of Processing (Art. 18 DSGVO) If one of the following conditions is met, you have the right to request restriction of the processing of your personal data:
    • You dispute the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data.
    • In the case of unlawful processing, you oppose the erasure of personal data and request restriction of its use instead.
    • We no longer need your personal data for processing purposes, but you require it for the establishment, exercise, or defense of legal claims.
    • After you have objected to processing, pending verification of whether our legitimate grounds override yours.
  1. Right to Erasure (“Right to be Forgotten”) (Art. 17 DSGVO) If one of the following reasons applies, you have the right to request the immediate deletion of your personal data:
    • Your data is no longer necessary for the purposes for which it was originally collected.
    • You withdraw your consent, and there is no other legal basis for the processing.
    • You object to the processing, and there are no overriding legitimate grounds for processing, or you object according to Art. 21(2) DSGVO.
    • Your personal data has been unlawfully processed.
    • Deletion is required to comply with a legal obligation under Union or Member State law to which we are subject.
    • The personal data was collected in connection with information society services offered under Article 8(1) DSGVO.

Please note that the above reasons do not apply if processing is necessary:

  1. For exercising the right to freedom of expression and information;
  2. For compliance with a legal obligation or for the performance of a task carried out in the public interest to which we are subject;
  3. For reasons of public interest in public health;
  4. For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes;
  5. For the establishment, exercise, or defense of legal claims.
  1. Right to Data Portability (Art. 20 DSGVO) You have the right to receive your personal data in a structured, commonly used, and machine-readable format or to request its transfer to another controller.
  1. Right to Object to Certain Data Processing (Art. 21 DSGVO) You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1) Sentence 1 lit. e or f DSGVO. This also applies to profiling based on these provisions.

If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling, to the extent that it is related to such direct marketing.

  1. Right to Lodge a Complaint with a Supervisory Authority Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the DSGVO.

The supervisory authority with which the complaint has been lodged will inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 DSGVO.

A list of the locally responsible supervisory authorities in Germany can be accessed on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Provision of the Website and Creation of Log Files

  1. Description and Scope of Data Processing
    Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected:
  1. Date and time of access
  2. Websites from which the user’s system reaches our website
  3. Websites accessed by the user’s system via our website


This data is stored in the log files of our system. There is no storage of this data together with other personal data of the user.

  1. Purpose of Data Processing
    The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session.
    Storage in log files is done to ensure the functionality of the website. Additionally, the data helps us to optimize the website and ensure the security of our information technology systems. There is no evaluation of the data for marketing purposes in this context.
  1. Legal Basis for Data Processing
    The legal basis for the temporary storage of data and log files is Art. 6 (1) Sentence 1 lit. f DSGVO.
  1. Duration of Storage
    The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session is ended.
    In the case of storage of data in log files, this is the case after a maximum of fourteen days. Further storage is possible. In this case, the IP addresses of the users are deleted or anonymized so that an assignment of the calling client is no longer possible.
  1. Exercising Your Rights
    The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. The user may object to this. Whether the objection is successful is to be determined within the framework of a balance of interests.

Newsletter

  1. Description and Scope of Data Processing
    On our website, there is an option to subscribe to a free newsletter. When signing up for the newsletter, the data from the input mask is transmitted to us.
    To provide this service, we collect the following data from you:
  1. Email address
  2. Last name
  3. First name
  4. IP address of the calling device
  5. Date and time of registration


During the registration process, your consent to data processing is obtained, and reference is made to this privacy policy. No data is passed on to third parties in connection with the data processing for sending newsletters. The data is used exclusively for sending the newsletter.

  1. Purpose of Data Processing
    The collection of the user’s email address serves to deliver the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the used email address.
  1. Legal Basis for Data Processing
    The legal basis for processing the data after the user has registered for the newsletter is, with the user’s consent, Art. 6 (1) Sentence 1 lit. a DSGVO.
  1. Duration of Storage
    The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. The user’s email address will therefore be stored as long as the newsletter subscription is active.
    The other personal data collected during the registration process is usually deleted after a period of seven days.
  1. Exercising Your Rights
    The newsletter subscription can be canceled by the affected user at any time. For this purpose, there is a corresponding link in every newsletter. This also allows the withdrawal of consent to the storage of personal data collected during the registration process.

Email Contact

  1. Description and Scope of Data Processing
    On our website, it is possible to contact us via the provided email address. In this case, the user’s personal data transmitted by email will be stored. The data is used exclusively for processing the conversation.
  1. Purpose of Data Processing
    If contact is made via email, this also constitutes the necessary legitimate interest in processing the data.
  1. Legal Basis for Data Processing
    The legal basis for processing the data transmitted in the course of sending an email is Art. 6 (1) lit. f DSGVO. Our legitimate interest lies in optimally answering your request sent via email.
    If the email contact aims at the conclusion of a contract, then an additional legal basis for the processing is Art. 6 (1) lit. b DSGVO.
  1. Duration of Storage
    The data will be deleted as soon as it is no longer necessary for achieving the purpose of its collection. For the personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
    The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.
  1. Exercising Your Rights
    If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
    It is not mandatory to obtain explicit consent for data processing through activating a corresponding checkbox directly in the contact form.
    All personal data stored in the course of contacting us will be deleted in this case.

Contact Form

  1. Description and Scope of Data Processing
    Our website includes a contact form that can be used for electronic communication. If a user utilizes this option, the data entered in the input form will be transmitted to and stored by us.


At the time of sending the message, the following data is stored:

  1. Email address
  2. Last name
  3. First name
  4. IP address of the accessing device
  5. Date and time
  1. Purpose of Data Processing
    The processing of personal data from the input form or the provided email address is solely for handling the communication.
    The other personal data processed during the sending process helps prevent misuse of the contact form and ensures the security of our information technology systems.
  1. Legal Basis for Data Processing
    The legal basis for processing the data transmitted in the course of sending an email is Art. 6 (1) Sentence 1 lit. f DSGVO. Our legitimate interest lies in answering your request optimally, which you send to us via the contact form. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) Sentence 1 lit. b DSGVO.
  1. Duration of Storage
    The data will be deleted as soon as it is no longer necessary for achieving the purpose for which it was collected. For the personal data from the contact form input and those sent via email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the relevant matter has been conclusively clarified.
    The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.
  1. Exercising Your Rights
    If the user contacts us via the input form on the contact page, they can object to the storage of their personal data at any time by sending an email to:
    crew@thepeopleagency.net
    In such a case, all personal data stored in the course of communication will be deleted.

Company Presence

Instagram:
Instagram, Part of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland


On our company page, we provide information and offer Instagram users the opportunity to communicate with us.


If you take action on our Instagram company presence (e.g., comments, posts, likes), it may make your personal data (such as your real name or profile photo) public.

However, since we typically have no or limited influence over the processing of your personal data by Instagram, we cannot make any binding statements regarding the purpose and scope of the data processing.

We use our company presence on social networks to communicate and exchange information with (potential) customers. Specifically, we use our company page for:

  • Presenting our services and the agency on our website www.thepeopleagency.net, which also serves to introduce our talents. We display profiles and portfolios of our talents. The processing and display of this information always adhere strictly to applicable data protection regulations.

Publications on the company page may contain the following content:

  • Information about services
  • Customer contact

Users are free to disclose personal data through their activities.

If we process your personal data to evaluate your online behavior, offer contests, or conduct lead campaigns, this is done based on your express consent declaration, Art. 6 (1) Sentence 1 lit. a, Art. 7 DSGVO.


The legal basis for processing personal data for communication purposes with customers and interested parties is Art. 6 (1) Sentence 1 lit. f DSGVO. Our legitimate interest lies in optimally answering your request or providing the requested information. If the contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b DSGVO.

Data generated through the company page is not stored in our own systems.

For the processing of your personal data in third countries, we have appropriate safeguards in the form of standard data protection clauses according to Art. 46 (2) lit. c DSGVO. A copy of the standard data protection clauses can be requested from us.

You can object to the processing of your personal data collected as part of your use of our company presence and exercise your rights as a data subject, as outlined in the section “Your Rights” of this privacy policy. Please send an informal email to:
crew@thepeopleagency.net

For further information on the processing of your personal data by Instagram and the respective objection options, please visit:


Instagram: https://help.instagram.com/519522125107875

Use of Company Profiles on Professional Networks

  1. Scope of Data Processing
    The company profile is used for applications, information/PR, and active sourcing. We have no information about the processing of your personal data by the companies responsible for the company profile. For more information, please refer to the privacy policy of:
  1. LinkedIn

On our page, we provide information and offer users the opportunity to communicate. The company profile is used for applications, information/PR, and active sourcing.
We have no information about the processing of your personal data by the companies responsible for the company profile. For more information, please refer to the privacy policy of:

LinkedIn: https://www.linkedin.com/legal/privacy-policy

If you take actions on our company profile (e.g., comments, posts, likes), it may make your personal data (e.g., real name or profile photo) public.

  1. Legal Basis for Data Processing
    The legal basis for processing personal data for communication purposes with customers and interested parties is Art. 6 (1) Sentence 1 lit. f DSGVO. Our legitimate interest lies in optimally answering your request or providing the requested information. If the contact aims at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b DSGVO.
  1. Purpose of Data Processing
    Our company profile serves to inform users about our services. Each user is free to disclose personal data through their activities.
  1. Duration of Storage
    Data generated through the company profile is not stored in our own systems.
  1. Exercising Your Rights
    You can object to the processing of your personal data collected through the use of our company profile and exercise your rights as a data subject, as outlined in the “Your Rights” section of this privacy policy. To do this, send an informal email to the email address provided in this privacy policy.
    For further information on exercising your rights, please refer to:

LinkedIn:
https://www.linkedin.com/legal/privacy-policy

Hosting


The website is hosted on servers of a service provider contracted by us.


Our service provider is:


Macbay Digital, operated by Macbay Digital Inh. Sascha Liem, Urbanstraße 71, 10967 Berlin, Germany. More information can be found in the provider’s privacy policy: https://macbay.net/datenschutz/

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when visiting the website. The stored information includes:

  • Date and time of access
  • Websites from which the user’s system accesses our website
  • Websites accessed by the user’s system via our website

This data is not combined with other data sources. Data collection is based on Art. 6 (1) lit. f DSGVO. Our legitimate interest in processing this data lies in displaying our website without errors and optimizing its functions.

The location of the website server is geographically in Germany.

Geotargeting


We use the IP address and other information provided by the user (particularly postal code during registration or ordering) for regional audience targeting (so-called “geotargeting”).


Regional audience targeting is used, for example, to automatically display regional offers or advertisements that are often more relevant to users. The legal basis for using the IP address and possibly other information provided by the user (particularly postal code) is Art. 6 (1) lit. f DSGVO, based on our interest in ensuring more precise audience targeting and thus providing users with offers and advertisements of higher relevance.

Only part of the IP address and additional information provided by the user (particularly postal code) is read and not stored separately.

You can prevent geotargeting by using, for example, a VPN or proxy server that prevents accurate location tracking. Additionally, depending on the browser used, you can deactivate location tracking in the respective browser settings (if supported by the browser).

We use geotargeting on our website for the following purposes:

  • Performance measurement

Third-Party Integrated Services

We use various service providers to deliver the services offered on our website.
Generally, we have a legitimate interest in sharing your data with the relevant service providers when these services are essential for providing the core service available on the website.


If such services are required for additional services, extended features, or supplementary purposes, your personal data will only be shared with service providers if you provide your consent.

Use of Contact Form 7

  1. Scope of Personal Data Processing
    We use the Contact Form 7 plugin from RockLobster LLC, Sakai 810-0001 Fukuoka Prefecture Chuo-ku Tenjin 1-chome 8-1, Fukuoka City Hall, Japan (hereinafter referred to as RockLobster) to manage contact forms on our online presence. Data entered in forms is transmitted via email. This can result in the storage and evaluation of personal data, especially user activity (such as which pages were visited and which elements were clicked on) and device and browser information (such as the IP address and operating system). Data may be transferred to RockLobster servers in Japan. The EU has issued an adequacy decision for Japan, which can be viewed here:
    https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=OJ:L:2019:076


Further information on data processing by Contact Form 7 is available here:
https://contactform7.com/privacy-policy/

  1. Purpose of Data Processing
    The use of the Contact Form 7 plugin improves the user-friendliness of our online presence. We use this plugin to create, integrate, and display contact forms easily and attractively.
  1. Legal Basis for Processing Personal Data
    The legal basis for processing user personal data is the user’s consent according to Art. 6 (1) Sentence 1 lit. a DSGVO.
  1. Duration of Storage
    Your personal information is stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, e.g., for tax and accounting purposes.
  1. Exercising Your Rights
    You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the legality of the processing carried out based on the consent before its withdrawal.

You can prevent the collection and processing of your personal data by Contact Form 7 by disabling third-party cookies on your computer, using the “Do Not Track” function in a supported browser, disabling script code execution in your browser, or installing a script blocker like NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com).
For further information on objections and removal options against Contact Form 7, visit:

Use of Gravity Forms

  1. Scope of Personal Data Processing
    We use Gravity Forms by Rocketgenius Inc., 1620 Centerville Turnpike #102, Virginia Beach, VA 23464, USA (hereinafter referred to as Rocketgenius). Gravity Forms is a complete form management solution for WordPress, serving to improve the presentation of content on our online presence. According to Rocketgenius, they do not process personal data themselves and do not set cookies for the user.

Further information on data processing by Rocketgenius is available here:
https://www.gravityforms.com/privacy/

  1. Purpose of Data Processing
    The use of the Gravity Forms plugin improves the user-friendliness of our online presence. We use this plugin to create, integrate, and display forms easily and attractively.
  1. Legal Basis for Processing Personal Data
    The legal basis for processing user personal data is the user’s consent according to Art. 6 (1) Sentence 1 lit. a DSGVO.
  1. Duration of Storage
    Your personal information is stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, e.g., for tax and accounting purposes.
  1. Exercising Your Rights
    You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the legality of the processing carried out based on the consent before its withdrawal.
    You can prevent the collection and processing of your personal data by Rocketgenius by disabling third-party cookies on your computer, using the “Do Not Track” function in a supported browser, disabling script code execution in your browser, or installing a script blocker like NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com).
    Further information on objections and removal options against Rocketgenius can be found at:
    https://www.gravityforms.com/privacy/

Use of Instagram Plugin

  1. Scope of Personal Data Processing
    We use plugins from Instagram, a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, and its EU representative Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as Facebook). The integrated Instagram buttons allow us to link to our Instagram profile. A widget is also integrated, enabling us to display specific photos and videos from our Instagram profile on our website. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to a Facebook server. The plugin content is transmitted from there directly to your browser and integrated into the website. During this process, data is automatically transmitted to Instagram and stored on their servers. The data includes connection information (such as your IP address, date and time, and the requested URL) as well as the browser and operating system used.
    Your visit to our pages can thus be tracked by Instagram, even if you do not actively use the plugin functions. If you are logged into your Instagram account, clicking on the Instagram button links the contents of our pages with your Instagram profile, allowing Instagram to associate your visit to our pages with your user account. To prevent this direct association, you must log out of Instagram before visiting our website.
    Further information can be found in Instagram’s privacy policy:
    https://help.instagram.com/155833707900388
  1. Purpose of Data Processing

The use of the Instagram plugin serves to enhance our company’s public presence.

  1. Legal Basis for Processing Personal Data

The legal basis for processing users’ personal data is generally the user’s consent, according to Art. 6 (1) Sentence 1 lit. a DSGVO.

  1. Duration of Storage

Your personal information is stored as long as necessary to fulfill the purposes described in this privacy policy or as required by law, for example, for tax and accounting purposes.

  1. Exercising Your Rights

You have the right to withdraw your consent at any time. Withdrawing consent does not affect the legality of processing conducted based on consent before its withdrawal.
You can prevent the collection and processing of your personal data by Instagram by disabling third-party cookies on your computer, using the “Do Not Track” function of a supported browser, disabling script code execution in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.


Further information on objection and removal options regarding Instagram can be found at: https://help.instagram.com/155833707900388

Use of Wordfence Security

  1. Scope of Personal Data Processing
    Our online presence uses functions of Defiant Inc., 800 5th Ave., Suite 4100, Seattle, WA 98104, USA (hereinafter referred to as Defiant). Wordfence Security secures our online presence and protects visitors to our website from viruses and malware. When you visit a page with a plugin, a direct connection is established between your computer and the Defiant server. To identify whether the visitor is a human or a bot, the plugin sets cookies. Additional personal data may be stored and evaluated, particularly device and browser information (including IP address and operating system).


It is also possible to evaluate behavior based on sent notifications (e.g., how often a page is accessed). To protect against brute-force and DDoS attacks or comment spam, IP addresses are stored on Wordfence servers. IP addresses deemed safe are placed on a whitelist.


Further information on data processing by Defiant is available here:
https://www.wordfence.com/privacy-policy/

  1. Purpose of Data Processing
    The online presence uses this plugin to protect against viruses, malware, and attacks by cybercriminals.
  1. Legal Basis for Processing Personal Data
    The legal basis for processing users’ personal data is generally the user’s consent, according to Art. 6 (1) Sentence 1 lit. a DSGVO.
  1. Duration of Storage
    Your personal information is stored as long as necessary to fulfill the purposes described in this privacy policy or as required by law, for example, for tax and accounting purposes.
  1. Exercising Your Rights
    You have the right to withdraw your consent at any time. Withdrawing consent does not affect the legality of processing conducted based on consent before its withdrawal.
    You can prevent the collection and processing of your personal data by Wordfence Security by disabling third-party cookies on your computer, using the “Do Not Track” function in a supported browser, disabling script code execution in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
    Further information on objection and removal options regarding Wordfence Security can be found at:
    https://www.wordfence.com/privacy-policy/

Use of Newsletter2Go

  1. Scope of Personal Data Processing
    We use the service provider Newsletter2Go, provided by Newsletter2Go GmbH, Köpenicker Str. 126, 10179 Berlin, Germany (hereinafter referred to as Newsletter2Go), to send our newsletters. Newsletter2Go is a provider of email and SMS marketing, allowing us to communicate directly with potential customers via email and SMS newsletters. If you register for the newsletter, the data you provide during newsletter registration will be transferred to and stored by Newsletter2Go. Additional personal data may be stored and evaluated, especially user activity (such as which pages were visited and which elements were clicked) and device and browser information (such as IP address and operating system). Your data is also stored by Newsletter2Go for newsletter distribution. The data is not shared with third parties for the purpose of receiving the newsletter, and Newsletter2Go does not gain the right to distribute your data. After registering, Newsletter2Go will send you an email to confirm your registration. Furthermore, Newsletter2Go offers various analytics options regarding how newsletters are opened and used, such as the number of emails or SMS messages sent, rejected emails or SMS messages, and whether users unsubscribe from the list after receiving an email or SMS.
    Further information on data processing by Newsletter2Go is available here:
    https://www.newsletter2go.de/datenschutz/
  1. Purpose of Data Processing
    The personal data collected as part of a newsletter registration is used exclusively for sending our newsletter, possibly to invite users to events, and, if you are already a customer, for our customer email. Additionally, newsletter subscribers may be informed by email if this is necessary for operating the newsletter service or related registration, such as in the case of changes to the newsletter offering or technical changes.
  1. Legal Basis for the Processing of Personal Data
    The legal basis for processing users’ personal data is typically the user’s consent as per Art. 6(1) sentence 1 lit. a GDPR.
  1. Duration of Storage
    Your personal information is stored for as long as necessary to fulfill the purposes outlined in this privacy policy or as required by law. Additionally, you can contact Newsletter2Go to request the deletion of your data.
  1. Exercising Your Rights
    You have the right to withdraw your consent to data processing at any time. Withdrawing your consent does not affect the legality of processing conducted on the basis of consent up to the point of withdrawal. You can revoke your consent to data storage and its use for newsletter distribution by Newsletter2Go at any time by emailing Newsletter2Go or by clicking on the link provided in each newsletter.
    For more information on how to object to or request deletion of your data with Newsletter2Go, visit: Newsletter2Go Privacy Policy.

Use of WP Statistics

  1. Scope of Processing Personal Data
    We use the WP Statistics web analysis service for WordPress websites, provided by Verona Labs, Tornimäe 5, 10145 Tallinn, Estonia. WP Statistics helps us gain insights into visitor behavior on our website. It collects and processes data, including user activity (such as visited pages and clicked elements), device and browser information (including IP addresses that are anonymized for privacy protection, and operating systems). This allows us to evaluate personal data to improve website functionality and user experience.
  1. Purpose of Data Processing
    The use of WP Statistics aims to improve the usability and performance of our website. By analyzing website usage, we can optimize content, enhance navigation, and ensure a better user experience.
  1. Legal Basis for Processing Personal Data
    The legal basis for processing personal data via WP Statistics is the user’s consent as per Art. 6(1)(a) GDPR.
  1. Duration of Storage
    Your personal data collected by WP Statistics will only be stored as long as necessary for website analysis and improvement purposes. This duration is determined by specific analytical needs. Once the data is no longer required for these purposes, it will be promptly deleted or anonymized.

5. Exercising Your Rights
You have the right to withdraw your consent to data processing at any time. Withdrawing your consent does not affect the legality of processing based on consent prior to withdrawal. You can prevent WP Statistics from collecting and processing your personal data by configuring your browser to block cookies, using the “Do Not Track” function of a supported browser, disabling script code execution in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com).

Use of Borlabs Cookie

  • Scope of Processing Personal Data
    We use Borlabs Cookie, a cookie consent management tool provided by Borlabs GmbH, 22305 Hamburg, Germany. Borlabs Cookie helps us manage and document visitor consent for cookies and similar technologies on the website. When visitors interact with the consent banner, Borlabs Cookie processes data, including cookie preferences, device and browser information, IP address, and consent history. This data is essential for us to meet legal requirements and respect the privacy preferences of our visitors.
  • Purpose of Data Processing
    The primary purpose of using Borlabs Cookie is to enable our website to comply with the legal obligations of the GDPR and TTDSG. By effectively managing cookie consent, we ensure that our website respects visitors’ decisions regarding privacy and the use of cookies and related technologies.
  • Legal Basis for Processing Personal Data
    The processing of personal data by Borlabs Cookie is based on the legal requirement to obtain and document website visitors’ consent for cookies and similar technologies under Art. 6(1)(c) GDPR and § 25 TTDSG.
  • Duration of Storage
    The personal data collected by Borlabs Cookie is stored as long as necessary to document consent and comply with legal obligations. The storage period is determined by legal requirements for consent documentation. The data is securely deleted once it is no longer needed for its intended purpose or when statutory retention periods expire.
  • Exercising Your Rights
    For more information on how Borlabs Cookie processes personal data and about visitors’ rights, please refer to the Borlabs Cookie Privacy Policy.

This privacy policy was created with the support of DataGuard.