1) Introduction and Contact Information of the Data Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about the handling of your personal data when using our website. Personal data includes all data with which you can be personally identified.
1.2 The data controller for the data processing on this website, in accordance with the General Data Protection Regulation (GDPR), is David Spaeth, Petersweg 22, 22946 Großensee, Germany, Tel.: +491724328742, Email: spaeth.david@gmail.com. The data controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
2) Data Collection When Visiting Our Website
2.1 When you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we collect only the data that your browser sends to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website:
• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/reference from which you accessed the page
• Browser used
• Operating system used
• IP address used (if applicable, in anonymized form)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. There is no further sharing or use of the data. However, we reserve the right to retrospectively check the server log files should concrete evidence of unlawful use come to our attention.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser's address bar.
3) Cookies
To make your visit to our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of the cookies we use are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device and allow us to save your settings for future visits (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of cookie settings in your web browser.
If individual cookies used by us also process personal data, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of a contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of your consent, or in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a user-friendly and effective design of the site visit.
You can configure your browser settings to inform you about the placement of cookies and to decide on their acceptance individually or to exclude the acceptance of cookies for specific cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contact
When you contact us (e.g., via contact form or email), personal data is collected. The data collected when using a contact form can be seen from the respective contact form. This data is exclusively stored and used for the purpose of responding to your request or for contacting you and the associated technical administration.
The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after the final processing of your inquiry, provided that there are no statutory retention obligations to the contrary.
5) Use of Customer Data for Direct Advertising
5.1 Subscription to our Email Newsletter
When you subscribe to our email newsletter, we regularly send you information about our offers. The mandatory information for sending the newsletter is solely your email address. Providing additional data is voluntary and is used to address you personally. For sending the newsletter, we use the double opt-in procedure. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm that you wish to receive the newsletter by clicking on a corresponding link.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you subscribe to the newsletter, we store your IP address provided by the internet service provider (ISP), as well as the date and time of the subscription, to trace any potential misuse of your email address at a later date. The data collected during the newsletter subscription is used exclusively for the purpose of advertising via the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the data controller mentioned at the beginning. After unsubscribing, your email address will be promptly deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use it for other purposes that are legally permitted and which we will inform you about in this statement.
5.2 HubSpot
The dispatch of our email newsletters is carried out by this provider: HubSpot Ireland Ltd., 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.
Based on our legitimate interest in effective and user-friendly newsletter marketing, we share the data you provided during newsletter registration in accordance with Art. 6 para. 1 lit. f GDPR with this provider so that they can handle the newsletter dispatch on our behalf.
Subject to your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, the provider also conducts a statistical evaluation of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the content of the newsletter. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated but not merged with other data sets.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider to protect the data of our website visitors and prohibit unauthorized disclosure to third parties.
6) Online Marketing
HubSpot
For the provision and synchronization of various customer management services, this website uses the software-based marketing service of the following provider: HubSpot Ireland Ltd., 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.
The service allows for automated processing of feed activities, control of advertising in deployed marketing channels, analysis of marketing measures, as well as central email marketing and contact management.
To fulfill these various functions, cookies are used, which are small text files stored locally in the cache of your web browser on your device and allow us to analyze your use of the website. These cookies collect specific information, such as IP address, location, and time of page access.
All the processing described above, especially the setting of cookies to read information on the device used, is only carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent given at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
Other legal bases for data processing carried out in the context of specific service functions (e.g., the necessity of explicit consent under Art. 6 para. 1 lit. a GDPR for sending newsletters) remain unaffected.
We have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and prohibit unauthorized disclosure to third parties.
7) Web Analysis Services
7.1 Google Tag Manager
This website uses the "Google Tag Manager," a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").
The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and calibrating, controlling, and linking them through a unified user interface. The Google Tag Manager itself does not store information on user devices or read it. The service does not perform independent data analyses. However, the Google Tag Manager transfers your IP address to Google when you visit a page and may store it there. It may also be transferred to servers of Google LLC in the United States.
This processing is only carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. The use of Google Tag Manager during your visit to our website is not possible without this consent. You can revoke your consent at any time with effect for the future. To exercise your revocation, please disable this service in the "cookie consent tool" provided on the website.
We have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and prohibit unauthorized disclosure to third parties.
For data transfers to the United States, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a European Commission adequacy decision.
7.2 Matomo
This website uses a web analysis service provided by the following provider: InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand ("Matomo").
To protect website visitors, Matomo uses a "config_id" to enable various analyses of page usage within a short time window of up to 24 hours. The "config_id" for the page is a randomly generated, time-limited hash of a limited set of visitor settings and attributes. The config_id or config hash is a string calculated for a visitor based on their operating system, browser, browser plugins, IP address, and browser language. Matomo does not use device fingerprinting and uses an anonymized IP address of the page visitor for the creation of the config_id.
If the processed information includes personal user data, processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes. To object to data processing of your visitor data in the future, we provide a separate opt-out option on our website.
If data collected with Matomo technology (including your pseudonymized IP address) is transferred to servers in New Zealand and processed for usage analysis purposes, we hereby inform you that the European Commission has issued an adequacy decision for New Zealand, attesting to compliance with European data protection standards.
If data is also transferred to the provider's servers and the web analysis service has not been locally installed on our server, we have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and prohibit unauthorized disclosure to third parties.
8) Retargeting/Remarketing and Conversion Tracking
Facebook Pixel for Creating Custom Audiences
Within our online offering, we use the "Facebook Pixel" service provided by the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
When a user clicks on an advertisement placed by us on Facebook, the URL of our linked page is extended with a parameter using "Facebook Pixel." After redirection, this URL parameter is then entered into the user's browser via a cookie set by our linked page.
This allows Facebook, on the one hand, to determine the visitors of our online offering as a target group for displaying ads (so-called "Facebook Ads"). Accordingly, we use the service to display Facebook Ads only to Facebook users who have shown an interest in our online offering or who possess certain characteristics (e.g., interests in specific topics or products determined based on the visited web pages), which we transmit to Facebook (so-called "Custom Audiences").
On the other hand, "Facebook Pixel" can be used to track whether users were redirected to our website after clicking on a Facebook advertisement and which actions they performed there (so-called "conversion tracking").
The data collected is anonymous to us, meaning it does not allow us to draw conclusions about the identity of users. However, Facebook stores and processes the data, so that it may be linked to the respective user profile and used by Facebook for its own advertising purposes.
All the processing described above, especially the setting of cookies to read information on the device used, is only carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent given at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
We have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and prohibit unauthorized disclosure to third parties. The data generated by Facebook is generally transmitted to and stored on a server operated by Facebook; in this context, it may also be transferred to servers of Meta Platforms Inc. in the United States.
For data transfers to the United States, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a European Commission adequacy decision.
9) Site Functionalities
9.1 Facebook Plugins
Our website uses plugins from the social network provided by the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
These plugins enable direct interactions with content on the social network.
To enhance the protection of your data when visiting our website, the plugins are initially deactivated using a "2-click" or "Shariff" solution integrated into the page.
This integration ensures that when you visit a page on our website that contains such plugins, no connection is established with the provider's servers.
Only when you activate the plugins and thereby grant your consent for data transmission in accordance with Art. 6 para. 1 lit. a GDPR does your browser establish a direct connection to the provider's servers. Regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), your browser, and your browsing history is transmitted to the provider and may be processed there.
If you are logged into an existing user profile on the provider's social network, information about interactions performed via the plugins may also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin through a new click. However, revocation does not affect the data that has already been transmitted to the provider.
Data may also be transferred to: Meta Platforms Inc., USA.
We have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and prohibit unauthorized disclosure to third parties.
For data transfers to the United States, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a European Commission adequacy decision.
9.2 Instagram Plugins
Our website uses plugins from the social network provided by the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
These plugins enable direct interactions with content on the social network.
To enhance the protection of your data when visiting our website, the plugins are initially deactivated using a "2-click" or "Shariff" solution integrated into the page.
This integration ensures that when you visit a page on our website that contains such plugins, no connection is established with the provider's servers.
Only when you activate the plugins and thereby grant your consent for data transmission in accordance with Art. 6 para. 1 lit. a GDPR does your browser establish a direct connection to the provider's servers. Regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), your browser, and your browsing history is transmitted to the provider and may be processed there.
If you are logged into an existing user profile on the provider's social network, information about interactions performed via the plugins may also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin through a new click. However, revocation does not affect the data that has already been transmitted to the provider.
Data may also be transferred to: Meta Platforms Inc., USA.
We have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and prohibit unauthorized disclosure to third parties.
For data transfers to the United States, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a European Commission adequacy decision.
9.3 Google Web Fonts
This page uses web fonts from the following provider to ensure consistent font display: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
When you visit a page, your browser loads the necessary web fonts into its cache to display text and fonts correctly and establishes a direct connection to the provider's servers. In the process, certain browser information, including your IP address, is transmitted to the provider.
Data may also be transferred to: Google LLC, USA.
The processing of personal data in connection with the use of the font provider is only carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service using the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a default font will be used on your computer.
For data transfers to the United States, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a European Commission adequacy decision.
10) Tools and Miscellaneous
Cookie Consent Tool
This website uses a "Cookie Consent Tool" to obtain effective user consents for cookies requiring consent and cookie-based applications. The "Cookie Consent Tool" is displayed to users as an interactive user interface when the page is accessed, allowing consents to be granted for specific cookies and/or cookie-based applications by checking boxes. By using the tool, all cookies/services requiring consent are only loaded when the respective user grants the corresponding consents by checking boxes. This ensures that such cookies are only set on the user's device when consent is given.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.
In individual cases, if personal data processing (such as the IP address) is required for storing, assigning, or logging cookie settings, it is done based on our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies, and thus in the legally compliant design of our website, pursuant to Art. 6 para. 1 lit. f GDPR. Another legal basis for processing is Art. 6 para. 1 lit. c GDPR. As controllers, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user's consent.
If necessary, we have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and prohibit unauthorized disclosure to third parties.
Further information about the operator and the settings of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.
11) Rights of the Data Subject
11.1 Under the applicable data protection law, you have the following rights with respect to the processing of your personal data by the controller (information and intervention rights), with reference to the specified legal basis for each right:
• Right to information pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to be informed pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent pursuant to Art. 7 para. 3 GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.
11.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTEREST PURSUANT TO AN INTERESTS BALANCING, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. UPON EXERCISING YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. HOWEVER, FURTHER PROCESSING WILL BE PERMITTED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING AT ANY TIME. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.
UPON EXERCISING YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNING YOU FOR DIRECT MARKETING PURPOSES.
12) Duration of Personal Data Storage
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and, if applicable, by the respective statutory retention period (e.g., retention periods under commercial and tax law).
When processing personal data based on explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the data in question will be stored until you revoke your consent.
If there are legal retention periods for data processed within the scope of contractual or quasi-contractual obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, unless it is required for the performance of a contract or for contract initiation, or unless we have a legitimate interest in continued storage.
When processing personal data based on Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.
When processing personal data for the purpose of direct marketing based on Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 para. 2 GDPR.
Unless otherwise specified in specific processing situations in the other information provided in this statement, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.