[borlabs-cookie type=“btn-cookie-preference“ title=“Privacy Settings „/]

Privacy Policy

1. Data protection at a glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that allows you to be personally identified. For detailed information on data protection, please refer to our privacy policy listed below.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the „Note on the Controller“ section of this privacy policy.

How do we collect your data?

Your data is collected, in part, when you provide it to us. This may include, for example, data that you enter into a contact form.

Other data is automatically collected by our IT systems or with your consent when you visit the website. This mainly includes technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you access this website.

What do we use your data for?

Some data is collected to ensure error-free website delivery. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or other order inquiries.

What rights do you have regarding your data?

You have the right to receive free information about the origin, recipients, and purpose of your stored personal data at any time. You also have the right to request the correction or deletion of this data. If you have given consent for data processing, you can revoke this consent for the future at any time. Furthermore, you have the right to request the restriction of the processing of your personal data under certain circumstances. Finally, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time regarding this and other questions about data protection.

Analysis Tools and Third-Party Tools

When you visit this website, your browsing behavior can be statistically analyzed. This is done primarily using so-called analysis programs.

Detailed information about these analytics programs can be found in the following privacy policy.

2. Hosting

We host our website's content with the following provider:

External Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the hoster(s). This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses, and other data generated via a website.

External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing our online services securely, quickly, and efficiently through a professional provider (Art. 6(1)(f) GDPR). If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as consent includes the storage of cookies or access to information on the user's terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Our host will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

We use the following host(s):

Plusserver GmbH
Welserstraße 14
51149 Cologne

Order processing

We have entered into a Data Processing Agreement (DPA) for the use of the above-mentioned service. This is a data protection law-mandated agreement that ensures they process the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Privacy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data will be collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this happens.

We would like to point out that data transmission over the internet (e.g., in email communication) may be subject to security vulnerabilities. It is not possible to protect data completely against access by third parties.

Information on the Responsible Party

The data controller for this website is:

Apollo Vertrieb Photovoltaik GmbH

Am Hasenbiel 26-28
76297 Stutensee

Phone: +49 7244/737 24 69
E-Mail: info@avp-solar.de

The controller is the natural or legal person that, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage duration

Unless a more specific retention period is mentioned within this privacy policy, your personal data will remain with us until the purpose for data processing ceases to apply. If you assert a legitimate request for deletion or revoke consent for data processing, your data will be deleted, provided we have no other legally permissible grounds for storing your personal data (e.g., tax or commercial retention periods); in the latter case, deletion will occur after these grounds cease to apply.

General information on the legal basis for data processing on this website

To the extent that you have consented to data processing, we process your personal data on the basis of Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR, insofar as special categories of data pursuant to Art. 9 (1) GDPR are processed. In the event of express consent to the transfer of personal data to third countries, data processing shall also be based on Art. 49 (1) lit. a GDPR. To the extent that you have consented to the storage of cookies or access to information on your end device (e.g., via device fingerprinting), data processing shall additionally be based on § 25 (1) TDDDG. The consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the execution of pre-contractual measures, we process your data on the basis of Art. 6 (1) lit. b GDPR. Furthermore, we process your data if it is required for the fulfillment of a legal obligation on the basis of Art. 6 (1) lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. The relevant legal bases in each individual case are explained in the following paragraphs of this privacy policy.

Information on data transfer to third countries not maintaining an adequate level of data protection and on data transfer to US companies not DPF-certified

Among other things, we use tools from companies based in third countries with inadequate data protection and US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in these countries. Please note that a level of data protection comparable to that of the EU cannot be guaranteed in third countries with inadequate data protection.

We would like to point out that the USA, as a safe third country, generally has a level of data protection comparable to the EU. Data transfer to the USA is therefore permissible if the recipient has a certification under the „EU-US Data Privacy Framework“ (DPF) or has appropriate additional safeguards. Information on transfers to third countries, including data recipients, can be found in this privacy policy.

Recipients of personal data

In the course of our business activities, we collaborate with various external entities. This sometimes necessitates the transfer of personal data to these external entities. We only disclose personal data to external entities when it is necessary for the performance of a contract, when we are legally obligated to do so (e.g., disclosure of data to tax authorities), when we have a legitimate interest in the disclosure pursuant to Art. 6(1)(f) GDPR, or when another legal basis permits the data transfer. When using contract processors, we only transfer personal data of our customers based on a valid contract for contract processing. In the case of joint processing, a contract for joint processing is concluded.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent that has already been given at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases, as well as to direct marketing (Art. 21 GDPR)

If the data processing is based on Art. 6 Para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. You can find the respective legal basis on which a processing is based in this data protection declaration. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (objection pursuant to Art. 21 Para. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING, INCLUDING PROFILING WHEN IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to complain to the competent supervisory authority

In case of infringements of the GDPR, the data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to complain shall be without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have the data that we process automatically based on your consent or in fulfillment of a contract handed over to you or a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done to the extent that it is technically feasible.

Information, Rectification, and Deletion

Under applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing, and, if applicable, a right to correction or deletion of this data. You can contact us at any time for this and for further questions on the subject of personal data.

Right to restrict processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restrict processing exists in the following cases:

• If you dispute the accuracy of your personal data stored with us, we generally need time to verify it. For the duration of the check, you have the right to request restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, you can request a restriction on the processing of data instead of deletion.
• If we no longer need your personal data, but you need it for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
• If you have lodged an objection under Art. 21(1) GDPR, a balancing of interests between yours and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data may, apart from storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person, or for reasons of an important public interest of the European Union or of a Member State.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator, this page uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from „http://“ to „https://“ and by the padlock icon in your browser bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be intercepted by third parties.

Objection to advertising emails

The use of contact data published within the framework of the imprint obligation for sending unsolicited advertising and informational materials is hereby objected to. The operators of the sites expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, for example through spam emails.

4. Data Collection on This Website

Cookies

Our website uses so-called „cookies“. Cookies are small data packets and do not harm your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g., cookies for processing payment services).

Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or video playback). Other cookies can be used for analyzing user behavior or for advertising purposes.

Cookies that are necessary for the electronic communication process, to provide certain functionalities that you wish for (e.g. for the shopping cart function), or to optimize the website (e.g. cookies for measuring the web audience) (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is indicated. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. If consent has been requested for the storage of cookies and comparable recognition technologies, processing will take place exclusively on the basis of this consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); consent can be revoked at any time.

You can set up your browser to notify you when cookies are set, to allow cookies only in individual cases, to exclude the acceptance of cookies for specific cases or generally, and to enable the automatic deletion of cookies when closing the browser. When cookies are deactivated, the functionality of this website may be restricted.

You can find out which cookies and services are used on this website in this privacy policy.

Consent with Borlabs Cookie

Our website uses Borlabs Cookie's consent technology to obtain your consent for storing certain cookies in your browser or for using certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg (hereinafter referred to as Borlabs).

When you visit our website, a Borlabs cookie is stored in your browser, which saves your consent or revocation of consent. This data is not passed on to the provider of Borlabs Cookie.

The data collected will be stored until you request its deletion, delete the Borlabs cookie yourself, or the purpose for data storage ceases to apply. Mandatory legal retention periods remain unaffected. Details on data processing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

Borlabs cookie consent technology is used to obtain legally required consent for the use of cookies. The legal basis for this is Art. 6 (1) (c) GDPR.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of accessing computer
• Server request time
• IP Address

This data will not be merged with other data sources.

The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically flawless presentation and optimization of its website – server log files must be collected for this purpose.

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact information you provide there, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We will not pass on this data without your consent.

The processing of this data is based on Article 6(1)(b) GDPR, provided that your request relates to the fulfillment of a contract or is necessary for the performance of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), provided it has been requested; consent can be revoked at any time.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage, or the purpose for data storage ceases to apply (e.g., after your request has been processed). Mandatory legal provisions, particularly retention periods, remain unaffected.

Inquiry by email, phone, or fax

If you contact us by email, phone, or fax, your inquiry, including all personal data arising from it (name, inquiry), will be stored and processed by us for the purpose of handling your request. We will not disclose this data without your consent.

The processing of this data is based on Article 6(1)(b) GDPR, provided that your request relates to the fulfillment of a contract or is necessary for the performance of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), provided it has been requested; consent can be revoked at any time.

The data you send us via contact inquiries will remain with us until you request its deletion, revoke your consent for storage, or when the purpose for data storage ceases to apply (e.g., after your request has been fully processed). Mandatory legal provisions, especially statutory retention periods, remain unaffected.

5. Social Media

Facebook

This website integrates elements of the social network Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.

An overview of Facebook social media elements can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

When the social media element is active, a direct connection is established between your end device and the Facebook server. This allows Facebook to receive information that you have visited this website with your IP address. If you click the Facebook „Like button“ while logged into your Facebook account, you can link the content of this website to your Facebook profile. This enables Facebook to associate your visit to this website with your user account. We point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. You can find further information on this in Facebook's privacy policy at: https://de-de.facebook.com/privacy/explanation.

The use of this service is based on your consent according to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG. Consent can be revoked at any time.

Insofar as personal data is collected on our website with the help of the tool described herein and passed on to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of data and its transfer to Facebook. The processing by Facebook after the transfer is not part of the joint responsibility. The obligations incumbent upon us jointly have been laid down in a joint processing agreement. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of its products. You can assert your rights as a data subject (e.g., requests for information) regarding the data processed by Facebook directly with Facebook. If you assert your rights as a data subject with us, we are obligated to forward them to Facebook.

Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.

The company is certified under the „EU-US Data Privacy Framework“ (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Any company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452.

Instagram

This website incorporates features of the Instagram service. These features are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

When the social media element is active, a direct connection is established between your end device and the Instagram server. Instagram will then receive information about your visit to this website.

When you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. Please note that, as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by Instagram.

The use of this service is based on your consent according to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG. Consent can be revoked at any time.

To the extent that personal data is collected on our website with the help of the tool described here and passed on to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of data and its transfer to Facebook or Instagram. The processing by Facebook or Instagram after the transfer is not part of the joint responsibility. The obligations incumbent upon us jointly have been recorded in a joint processing agreement. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the privacy information when using the Facebook or Instagram tool, and for the legally compliant implementation of the tool on our website. Facebook is responsible for the data security of the Facebook or Instagram products. You can assert your rights as a data subject (e.g., requests for information) regarding the data processed by Facebook or Instagram directly with Facebook. If you assert your rights as a data subject with us, we are obligated to forward them to Facebook.

Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381.

For more information, please see Instagram's Privacy Policy: https://privacycenter.instagram.com/policy/.

The company is certified under the „EU-US Data Privacy Framework“ (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Any company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452.

LinkedIn

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

With every page request on this website that contains LinkedIn elements, a connection to LinkedIn's servers is established. LinkedIn will be informed that you have visited this website with your IP address. If you click on LinkedIn's „Recommend button“ and are logged into your LinkedIn account, LinkedIn can associate your visit to this website with you and your user account. We point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn.

The use of this service is based on your consent according to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG. Consent can be revoked at any time.

Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses. You can find details here: https://www.linkedin.com/help/linkedin/answer/a1343190/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=de

For more information, please refer to LinkedIn's Privacy Policy at: https://www.linkedin.com/legal/privacy-policy.

The company is certified under the „EU-US Data Privacy Framework“ (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Any company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5448.

XING

This website uses elements of the XING network. The provider is New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

Each time one of our pages containing elements from XING is accessed, a connection is established to XING's servers. To our knowledge, no personal data is stored. In particular, IP addresses are not stored, nor is usage behavior analyzed.

The use of this service is based on your consent according to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG. Consent can be revoked at any time.

You can find further information on data protection and the XING Share button in the XING privacy policy at: https://privacy.xing.com/de/datenschutzerklaerung.

6. Analysis Tools and Advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It merely serves to manage and deploy the tools integrated through it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google's parent company in the United States.

The use of Google Tag Manager is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and management of various tools on their website. If corresponding consent has been requested, the processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDP, insofar as the consent includes the storage of cookies or access to information on the user's end device (e.g., device fingerprinting) within the meaning of the TDDP. Consent can be revoked at any time.

The company is certified under the „EU-US Data Privacy Framework“ (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Any company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Hotjar

This website uses Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (Website: https://www.hotjar.com).

Hotjar is a tool for analyzing your user behavior on this website. Hotjar can record your mouse and scroll movements and clicks, among other things. Hotjar can also determine how long you hovered over a particular spot with your mouse pointer. From this information, Hotjar creates so-called heatmaps, which can show which areas of the website are preferred by website visitors.

Furthermore, we can determine how long you stayed on a page and when you left it. We can also see where you dropped off in filling out a contact form (so-called conversion funnels).

Furthermore, Hotjar can be used to gather direct feedback from website visitors. This feature is used to improve the website operator's web offerings.

Hotjar uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting).

Where consent has been obtained, the aforementioned service will be used exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 TTDSG. Consent can be revoked at any time. Where no consent has been obtained, this service will be used on the basis of Art. 6 para. 1 lit. f GDPR; the website operator has a legitimate interest in analyzing user behavior in order to optimize its web offering and advertising.

Disable Hotjar

If you want to disable data collection by Hotjar, click the following link and follow the instructions there: https://www.hotjar.com/policies/do-not-track/

Please note that disabling Hotjar must be done separately for each browser and/or device.

For more information about Hotjar and the data collected, please refer to Hotjar's privacy policy at the following link: https://www.hotjar.com/privacy

Order processing

We have entered into a Data Processing Agreement (DPA) for the use of the above-mentioned service. This is a data protection law-mandated agreement that ensures they process the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program by Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display ads on the Google search engine or on third-party websites when users enter specific search terms on Google (keyword targeting). Furthermore, targeted ads can be displayed based on user data available to Google (e.g., location data and interests) (audience targeting). As website operators, we can quantitatively evaluate this data by, for example, analyzing which search terms led to the display of our ads and how many ads resulted in corresponding clicks.

The use of this service is based on your consent according to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG. Consent can be revoked at any time.

Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses. You can find details here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

The company is certified under the „EU-US Data Privacy Framework“ (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Any company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Google Ads Remarketing

This website uses Google Ads Remarketing features. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

With Google Ads Remarketing, we can assign people who interact with our online offering to specific target audiences, in order to subsequently show them interest-based advertising on the Google advertising network (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Ads Remarketing can be linked to Google's cross-device functions. This allows interest-based, personalized advertising messages, which have been adapted to you based on your previous usage and browsing behavior on one device (e.g., a mobile phone), to be displayed on another of your devices (e.g., a tablet or PC).

If you have a Google Account, you can opt out of personalized advertising at the following link: https://adssettings.google.com/anonymous?hl=de.

The use of this service is based on your consent according to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG. Consent can be revoked at any time.

Further information and the privacy policy can be found in Google's privacy policy at: https://policies.google.com/technologies/ads?hl=de.

The company is certified under the „EU-US Data Privacy Framework“ (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Any company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Target group formation with customer matching

Among other methods, we use Google Ads Remarketing customer matching for audience building. In this process, we transfer specific customer data (e.g., email addresses) from our customer lists to Google. If the customers in question are Google users and logged into their Google account, they will be shown relevant advertising messages within the Google network (e.g., on YouTube, Gmail, or the search engine).

Google Conversion Tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Conversion Tracking, Google and we can detect whether a user has performed certain actions. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We do not receive any information that allows us to personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.

The use of this service is based on your consent according to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG. Consent can be revoked at any time.

More information on Google Conversion Tracking can be found in Google's Privacy Policy: https://policies.google.com/privacy?hl=de.

The company is certified under the „EU-US Data Privacy Framework“ (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Any company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Meta Pixel (formerly Facebook Pixel)

This website uses Meta's Conversion Tracking Pixel to measure conversions. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Meta, the data collected is also transferred to the USA and other third countries.

This allows the behavior of website visitors to be tracked after they have been redirected to the provider's website by clicking on a Meta ad. This enables the effectiveness of Meta ads to be evaluated for statistical and market research purposes, and future advertising measures to be optimized.

The data collected is anonymous to us as the operator of this website; we cannot draw conclusions about the identity of the users. However, the data will be stored and processed by Meta, making it possible to link it to the respective user profile on Facebook or Instagram, and for Meta to use the data for its own advertising purposes, in accordance with the Meta Data Usage Policy.https://de-de.facebook.com/about/privacy/can be used. This allows Meta to show ads on Facebook or Instagram pages and other advertising channels. As page operators, we cannot influence this use of data.

The use of this service is based on your consent according to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG. Consent can be revoked at any time.

We are using the advanced matching feature within the Meta Pixel.

The enhanced match allows us to transmit various types of data (e.g., city, state, zip code, hashed email addresses, names, gender, date of birth, or phone number) of our customers and prospects that we collect via our website to Meta. This allows us to tailor our advertising campaigns on Facebook and Instagram more precisely to people who are interested in our offers. Furthermore, enhanced match improves the assignment of website conversions and expands Custom Audiences.

To the extent that personal data is collected on our website and transferred to Meta with the help of the tool described here, both we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is exclusively limited to the collection of the data and its transfer to Meta. The processing by Meta after the transfer is not part of the joint responsibility. The obligations incumbent upon us jointly have been recorded in a joint processing agreement. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Meta tool and for the data protection-compliant implementation of the tool on our website. Meta is responsible for the data security of its products. You can assert your data subject rights (e.g., access requests) regarding data processed by Facebook or Instagram directly with Meta. If you assert your data subject rights with us, we are obliged to forward them to Meta.

Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

In Meta's Privacy Policy, you can find more information about protecting your privacy: https://de-de.facebook.com/about/privacy/.

You can also use the „Custom Audiences” remarketing feature in the Ad Settings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen deactivate. You must be logged in to Facebook to do this.

If you do not have an account with Facebook or Instagram, you can opt out of Meta's interest-based advertising on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

The company is certified under the „EU-US Data Privacy Framework“ (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Any company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452.

Meta Conversion API

We have integrated the Meta Conversion API on this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Meta, the data collected will also be transferred to the USA and other third countries.

The Meta Conversion API allows us to track website visitor interactions with our website and pass that data to Meta to improve advertising performance on Facebook and Instagram.

This includes, in particular, the time of access, the website accessed, your IP address, and your user agent, as well as possibly other specific data (e.g., purchased products, shopping cart value, and currency). A complete overview of the data that can be collected can be found here: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters.

The use of this service is based on your consent according to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG. Consent can be revoked at any time.

To the extent that personal data is collected on our website and transferred to Meta with the help of the tool described here, both we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is exclusively limited to the collection of the data and its transfer to Meta. The processing by Meta after the transfer is not part of the joint responsibility. The obligations incumbent upon us jointly have been recorded in a joint processing agreement. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Meta tool and for the data protection-compliant implementation of the tool on our website. Meta is responsible for the data security of its products. You can assert your data subject rights (e.g., access requests) regarding data processed by Facebook or Instagram directly with Meta. If you assert your data subject rights with us, we are obliged to forward them to Meta.

Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

In Meta's Privacy Policy, you can find more information about protecting your privacy: https://de-de.facebook.com/about/privacy/.

You can also use the „Custom Audiences” remarketing feature in the Ad Settings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen deactivate. You must be logged in to Facebook to do this.

If you do not have an account with Facebook or Instagram, you can opt out of Meta's interest-based advertising on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

The company is certified under the „EU-US Data Privacy Framework“ (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Any company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452.

Order processing

We have entered into a Data Processing Agreement (DPA) for the use of the above-mentioned service. This is a data protection law-mandated agreement that ensures they process the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Meta Custom Audiences

We use Meta Custom Audiences. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

When you visit or use our websites and apps, make use of our free or paid services, transmit data to us, or interact with our company's Facebook or Instagram content, we collect your personal data. If you give us your consent to use Meta Custom Audiences, we will transmit this data to Meta, with which Meta can show you relevant advertisements. Furthermore, target audiences can be defined with your data (Lookalike Audiences).

Meta processes these data as our processor. Details can be found in Meta's Terms of Service: https://www.facebook.com/legal/terms/customaudience.

The use of this service is based on your consent according to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG. Consent can be revoked at any time.

Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses. You can find details here: https://www.facebook.com/legal/terms/customaudience and https://www.facebook.com/legal/terms/dataprocessing.

The company is certified under the „EU-US Data Privacy Framework“ (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Any company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452.

LinkedIn Insight Tag

This website uses LinkedIn's Insight Tag. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Data processing by LinkedIn Insight Tag

With the help of the LinkedIn Insight Tag, we gather information about the visitors to our website. If a website visitor is registered on LinkedIn, we can analyze their professional data (e.g., career level, company size, country, location, industry, and job title) to better tailor our site to specific target audiences. Furthermore, we can use LinkedIn Insight Tags to measure whether website visitors make a purchase or take any other action (conversion tracking). Conversion tracking can also be performed across devices (e.g., from PC to tablet). The LinkedIn Insight Tag also offers a retargeting function, enabling us to show targeted ads outside of our website to website visitors, with LinkedIn stating that no identification of the advertising recipient takes place.

LinkedIn also collects so-called log files (URL, referrer URL, IP address, device and browser properties, and time of access). IP addresses are shortened or hashed (pseudonymized) (if they are used to reach LinkedIn members across devices). Direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data is then deleted within 180 days.

The data collected by LinkedIn cannot be assigned to specific individuals by us as the website operator. LinkedIn will store the collected personal data of website visitors on its servers in the USA and use it for its own advertising purposes. For details, please refer to LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.

Legal basis

To the extent consent has been obtained, the above-mentioned service is used exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 TTDSG. Consent can be withdrawn at any time. To the extent consent has not been obtained, this service is used on the basis of Art. 6 (1) lit. f GDPR; the website operator has a legitimate interest in effective advertising measures, including social media.

Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses. You can find details here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

The company is certified under the „EU-US Data Privacy Framework“ (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Any company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5448.

Objection to the use of LinkedIn Insight Tag

Object to the analysis of usage behavior and targeted advertising by LinkedIn at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Furthermore, LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To avoid a connection of data collected on our website by LinkedIn and your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

Order processing

We have entered into a Data Processing Agreement (DPA) for the use of the above-mentioned service. This is a data protection law-mandated agreement that ensures they process the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Using Stape.io

On our website, we use Stape.io, a service for server-side website data collection. Stape.io enables us to gather and process data about our website visitors' behavior without the need to store personal data directly in the user's browser. This helps protect our users' privacy while gaining valuable insights into website usage to continuously improve our online offerings.

Custom Loader

With Stape.io's „Custom Loader“ power-up, we can integrate specific server-side tracking and analytics tools without needing to load them directly in the user's browser. This reduces the reliance on cookies and other browser-stored technologies, thereby better protecting our users' privacy.

Cookie Keeper

The „Cookie Keeper“ power-up is used to efficiently manage our users„ consent settings regarding cookies and tracking technologies. Through this technology, we can ensure that our users“ preferences regarding data processing and tracking are respected and adhered to. The use of "Cookie Keeper" also helps us ensure compliance with data protection regulations such as GDPR.

Purpose of data processing

The data collected by Stape.io is used to analyze user behavior on our website, optimize our website and offerings for our visitors, and provide personalized content or advertising. This data is processed with the aim of improving our users' online experience and increasing the effectiveness of our website.

Legal basis

Stape.io processes data based on consent according to Art. 6 para. 1 lit. a GDPR, or, if the processing is necessary to safeguard our legitimate interests, based on Art. 6 para. 1 lit. f GDPR. Our legitimate interests lie in the analysis, optimization, and economic operation of our website.

Right of withdrawal

You have the right to withdraw your consent to data processing at any time with effect for the future. Likewise, you have the right to object to the processing of personal data concerning you, which is carried out on the basis of Art. 6 (1) lit. f GDPR, at any time for reasons arising from your particular situation.

For more information about the processing of your data and your rights associated with the use of Stape.io, please refer to our complete privacy policy.

Matomo

This website uses the open-source web analytics service Matomo.

With the help of Matomo, we are able to collect and analyze data on how website visitors use our website. This allows us to find out, among other things, when which page views were made and from which region they come. We also collect various log files (e.g., IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g., clicks, purchases, etc.).

The use of this analysis tool is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising. If corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

IP anonymization
When performing analysis with Matomo, we use IP anonymization. Your IP address is truncated before analysis, making it impossible to uniquely identify you.

Hosting

We host our website's content with the following provider:

External Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the hoster(s). This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses, and other data generated via a website.

External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing our online services securely, quickly, and efficiently through a professional provider (Art. 6(1)(f) GDPR). If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as consent includes the storage of cookies or access to information on the user's terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Our host will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

We use the following host(s):

Plusserver GmbH
Welserstraße 14
51149 Cologne