Data protection

Data protection

Below you can find information on the processing of personal data when using our various websites.

In general, you can use the information we offer without registering and providing personal information (but see Section 3.4, Digital edition of the Deutsche Handwerksblatt). Under the circumstances, this may involve us processing personal data to provide the website, guarantee system security, create statistics on the use of the website or for personalised advertising. We only use cookies for statistics and marketing with your consent.

If you place an order, take part in a competition or cast a vote as part of a competition, subscribe to a newsletter or want to publish a comment on an article, we collect the data you provide us with.

1. General information

1.1. Controller
Verlagsanstalt Handwerk GmbH, Auf'm Tetelberg 7, D-40221 Dusseldorf, Telephone: 0211/390 98-0, Telefax: 0211/390 98-29, e-mail: info@verlagsanstalt-handwerk.de

1.2. Company data protection officer
exkulpa GmbH
Waldfeuchter Straße 266
D-52525 Heinsberg
Germany
Telephone: 02 452 / 993 311
E-mail: datenschutz@verlagsanstalt-handwerk.de

2. Processing of personal information when retrieving a website

2.1. Log files
We collect and save data for statistical purposes, to guarantee system security and to prevent abuse. For example, this includes your IP address, the Internet browser used, the website from which you reached our website, the offers visited on our website as well as the date and duration of your visit.

We use log files to safeguard our legitimate interests, analyse the use of our website, make the website user-friendly, guarantee system security and enable us to track abuse.

Together with the complete IP address, which permits identification of a particular Internet user, the data are saved in log files a maximum of once a week. The legal basis of the processing is Art. 6 (1) f of the General Data Protection Regulation (GDPR).

2.2. General information on cookies
Our websites use cookies. Cookies are small text files that are deposited on your computer and stored by your browser.

On the one hand, cookies differ according to their lifetime:

• Session cookies are only saved for the duration of the browser session and are then automatically deleted.
• Persistent cookies also continue to be saved after closing the browser until their validity expires or the cookie is deleted (e.g. by browser settings).

Cookies are used for different purposes:
• Necessary cookies are required to facilitate the presentation of the website.
• Statistics cookies enable us to evaluate the use of a website to make the information we offer user-friendly.
• Marketing cookies serve to detect the interests of the user and display personalised advertising.

Different cookies are used on our websites. You can discover in detail which cookies are used as necessary cookies and which ones for statistics and marketing - provided you give your consent to this - in the cookie banner.

Cookies for statistics and marketing are only placed if you gave your consent to these kinds of cookies. You can revoke your consent at any time. The cookie banner states when the lifetime of each cookie expires.

If the following statements refer to cookies, they apply in each case to the websites involved that use the tools described.

2.3. Necessary cookies
The legal foundation for the use of necessary cookies is Art. 6 (1) f GDPR. The use of necessary cookies serves to safeguard our legitimate interests, namely
• to save whether you have consented to the use of cookies for statistics and marketing to avoid having to ask you once again for this consent;
• to display the contents of our websites faster;
• to prevent improper uses and guarantee the security of our systems;

In general, you can prevent the placement of cookies by deactivating cookies in your browser settings. However, you may then be unable to use all of the functions of the website. Moreover, you can also have cookies deleted at any time from your browser.

2.4. Cloudflare
We use the CDN service of Cloudflare Inc., 101 Townsend St., San Francisco, California 94107, USA. CloudFlare offers a worldwide distributed content delivery network with DNS. Technically, the information transfer between your browser and our website is conducted via the CloudFlare network. Consequently, CloudFlare is able to analyse the data traffic between users and our websites, for example, to detect and ward off attacks on our services. Moreover, CloudFlare may save cookies on your computer for optimisation and analysis.

Cloudflare collects statistical data on website visits. The access data include: name of the website visited, file, date and time of visit, data quantity transferred, report on successful visit, browser type plus version, user operating system, referrer URL (previously visited site), IP address and requesting provider. Cloudflare uses the log data for statistical evaluation for the purpose of operation, security and optimisation of the offer.

This serves to safeguard our legitimate interests, namely, protecting the security of our systems. The legal foundation is Art. 6 (1)f GDPR.

2.5. Google reCAPTCHA
We use the “reCAPTCHA” function. The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use this function, for example, in order to be able to detect whether entries in online forms were made by people and not automatically running machines (so-called “bots”). The data processed can include IP addresses, information about operating systems, devices or browsers used, language settings, location, mouse movements, keystrokes, stay duration on websites, previously visited websites, interactions with reCAPTCHA on other websites, under certain circumstances cookies and results of manual detection processes (e.g. answering questions posed or selection of objects in pictures).

You can find more detailed information at https://www.google.com/recaptcha/ and https://policies.google.com/privacy.

The legal basis is Art. 6 (1) f GDPR. The use of reCAPTCHA serves to safeguard our legitimate interests, namely, preventing improper use.

2.6. Bitly
We use the service bitly from Bitly Inc., New York City, 139 5th Avenue, 5th floor, New York, NY 10010, USA. bitly facilitates abbreviation of long URLs.

If you click on a link abbreviated by bitly, a connection is established to bitly servers. The bitly server is informed which bitly links you visited. bitly also collects and saves your IP address, the time, date, location, referring website, browser type, cookie information, device identification, device settings and operating system in the case of mobile access.

We see all information only after anonymization by bitly. We only receive information on when a link was clicked, in what country and from which URL origin. Statistics on the abbreviated URL, for example the number of views and times of the links, can also be retrieved.

The legal basis is Art. 6 (1) f GDPR. The use of bitly serves to safeguard our legitimate interests, namely, providing user-friendly links.

You can find more information on the handling of user data in the data protection declaration of bitly at https://bitly.com/pages/privacy?lang=de

2.7. Use of Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called "cookies", text files that are stored on your computer and permit analysis of your use of the website. The information generated by the cookie on your use of this website (including your IP address) is transferred to a Google server in the USA and stored there. We point out that on this website Google Analytics has been expanded with the code “gat._anonymizelp();” in order to guarantee anonymised recording of IP addresses. As a result, your IP address is abbreviated by the last characters and can no longer be assigned to a particular computer.

Google will use this information to evaluate your use of the website, compile reports on website activities for the website operators and provide other services associated with the website use and Internet use. Google may also transfer this information to third parties under certain circumstances if this is legally required or if third parties process this data on behalf of Google. Under no circumstances will Google connect your IP address with other Google data.

The legal basis of the data processing is Section 15 (3) Telemedia Act (TMG), Art. 6 (1)a GDPR (consent). You can revoke your consent at any time.

In addition, you can object to the collection and use of your IP address by Google Analytics. You can find more information at https://tools.google.com/dlpage/gaoptout?hl=de.

2.8. Google Tag Manager
We use Google Tag Manager. Through this service, JavaScript tags can be administered across a website. The Google Tag Manager only implements tags. This means that no cookies are used for this and no personal data are recorded. The Google Tool Manager actuates other tags that in turn record data. However, the Google Tag Manager does not access such data.

2.9.1. Facebook plug-ins
We use the plug-ins of the social media network Facebook, operated by Facebook Ireland Limited.., Grand Canal Square, Dublin, Ireland, a subsidiary Facebook Inc., Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If you retrieve a page that includes such a plug-in, your browser establishes a direct connection with the servers of Facebook. The content of the plug-in is transmitted directly by Facebook to your browser and integrated by it in the website. This provides Facebook with the information that a user retrieved the corresponding page of the product offer. If you are a Facebook user and logged into Facebook, Facebook can assign your page retrieval to your Facebook account. If you interact with a plug-in, for example to share or “like” content, this information is transmitted directly from your browser to Facebook and stored there. Even if you are not a Facebook user or not logged into Facebook, it is possible that Facebook will store your IP address. According to Facebook, only an abbreviated, i.e. anonymised IP address, is stored of users from Germany.

You can discover the purpose and scope of the data collection and other processing and use of data by Facebook, as well as the associated rights and setting options to protect the privacy of users, in the data protection information of Facebook: http://www.facebook.com/policy.php.

If you do not want Facebook to collect data about you by means of the plug-in and link this with your membership data stored at Facebook, you must log out from Facebook before visiting our website. You can also block the plug-ins, for example by installing the browser add-on “Facebook Blocker.”

2.9.2. Twitter plug-ins
We use the plug-ins of Twitter, which are operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, a subsidiary of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. You can share an article on Twitter as logged-in Twitter user with the plug-in or share pages from this product offer in Twitter or follow the provider at Twitter. Even if you are not a Twitter user or not logged in to Twitter, your browser establishes a direct connection to the Twitter servers. The content of the Twitter buttons is transmitted by Twitter directly to the browser of the user. We have no influence on the scope of the data Twitter processes with the help of this plug-in. As far as we know, your IP address together with the URL of the page retrieved is transmitted to Twitter, but only used for the display of the button.

You can find more information on this in the data protection declaration of Twitter at http://twitter.com/privacy.

2.9.3. YouTube
We have integrated videos in our website that are saved in the YouTube service operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and that can be retrieved and played within our website.

We have integrated the videos in a way that ensures the active YouTube player is not loaded when loading a page. This only happens once you activate the player. This setting is saved in a cookie. When you play a video, a connection is established to a Google server. As a result, Google learns your IP address and the fact that you visited our website.

If you are logged into Google, Google can assign this information to your account as well as the playing of the video. You can hinder this by logging out of Google beforehand. You can find more information about data processing and information about data protection at www.google.de/intl/de/policies/privacy/.

Integration of the video serves to safeguard legitimate interests, namely, to provide a user-friendly website. The legal basis of the processing if Art. 6 (1) f GDPR.

Cookies are only placed in connection with an integrated YouTube video if you provided your consent to this. The legal basis for this is then Art. 6 (1) a GDPR.

2.9.4. Vimeo
We use plug-ins on some of our pages from the provider Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA. If you retrieve pages of our online offering featuring such a plug-in, a connection is established to the Vimeo servers and the plug-in presented. As a result, the Vimeo server is informed which of our servers you visited. If you are logged in as a member at Vimeo, Vimeo assigns this information to your personal user account. When using the plug-in, e.g. by clicking the start button of a video, this information is likewise assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our Internet page and deleting the corresponding cookies of Vimeo.

Integration of the video serves to safeguard legitimate interests, namely, to provide a user-friendly website. The legal basis of the processing is Art. 6 (1) f GDPR. Cookies are only placed in connection with an integrated YouTube video if you provided your consent to this. The legal basis for this is then Art. 6 (1) a GDPR.

You can find the data protection declaration of Vimeo Inc. at https://vimeo.com/privacy

2.9.5. Spotify
On some of our pages, we use the player of the provider Spotify in order to play audio recordings. If you retrieve the pages of our online offering fitted with such a player, a connection is established to the server of Spotify. As a result, Spotify is informed which of our servers you visited. If you are logged in to Spotify as a registered Spotify user, Spotify assigns this information to your personal user account. When using the plug-in, e.g. by clicking the start button of a recording, this information is likewise assigned to your user account. You can prevent this assignment by logging out of your Spotify user account before using our Internet page and deleting the corresponding cookies of Spotify.

Integration of the audio recordings serves to safeguard legitimate interests, namely, to provide a user-friendly website. The legal basis of the processing is Art. 6 (1) f GDPR.

Cookies are only placed in connection with integrated Spotify recordings if you provided your consent to this. The legal basis for this is then Art. 6 (1) a GDPR.

2.10. B2BIQ

2.10.1. Scope of the processing of personal data
The Verlagsanstalt Handwerk GmbH uses B2BIQ, an advertising integration service of B2B Media Group GmbH ("B2B Media Group"), a target group marketer. This uses cookies, text files that are stored in the browser of your computer and collect anonymous usage data. B2BIQ also uses so-called web beacons (invisible graphics). These web beacons permit the evaluation of information such as visitor traffic on the pages of this website. This information may be passed on by B2B Media Group to its contractual partners. If IP addresses are collected, they are rendered anonymous (hashed) by deleting the last number block. IP addresses of natural persons are excluded from further use (whitelist procedure). If available, information on longitude and latitude is also processed.

2.10.2. Purpose of the data processing
This data is used to evaluate the use of the website by visitors for the purpose of usage-based online advertising (OBA). In addition, an improvement of the internet offer is made possible. The information obtained is used to create anonymous usage profiles relating to visitor behaviour on our website. The data obtained this way is not used to personally identify the visitor to our website. It is processed solely for the purpose of collecting company-relevant information such as the company name. Based on the user's surfing behaviour, an interest in a specific B2B industry or topics can be assumed..

2.10.3. Legal basis for the processing of personal data
These cookies are not essential for the operation of the site and are therefore only set with given consent in accordance with Art. 6 (1) point (a) GDPR via the Consent Manager (Cookie Banner). Therefore, no personal data will be collected without the consent of the data subject.

2.10.4. Duration of storage
The data is deleted as soon as it is no longer required for the processing purposes, unless we are obliged to do so by law. Otherwise, the cookie data will be deleted no later than 12 months after collection from the access provider. The cookie has a maximum storage period of 2 months, 29 days.

2.10.5. Transferring data abroad
The information generated by cookies and web beacons about the use of this website and the delivery of advertising formats is transferred to a B2B Media Group server and stored there. The B2B Media Group and its servers are located in Germany.

2.10.6. Right of objection and removal
The user may at any time declare his or her opt-out and thus object to the cookie tracking in this regard: Opt-out. This will set a so-called opt-out cookie. The opt-out-cookie requires that a setting in the browser does not prevent the storage of cookies or deletes the cookie. After deleting the opt-out-cookie, the user needs to repeat the objection. Alternatively, the user can delete the cookies directly in the browser or set their browser settings to “do-not-track” from the beginning. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. Should you wish to obtain information about the information stored in your cookie, either send a request to info@verlagsanstalt-handwerk.de or datenschutz@b2bmg.com. Further information and the applicable privacy policy of B2B Media Group can be found HERE."

2.11.The ADEX

“The Verlagsanstalt Handwerk GmbH cooperates with B2B Media Group GmbH ("B2B Media Group"), a target group marketer. B2B Media Group uses so-called cookies, text files that are stored in the computer's browser. Pseudonymous usage data is collected in the form of cookie IDs and advertising IDs. Furthermore, so-called web beacons (invisible graphics) can be used. As far as IP addresses are collected, they are stored anonymously by deleting the last number block. This way, an assignment of the shortened IP address to the calling computer and direct personal identification is not possible.

The cookies used are those of The ADEX GmbH ("The ADEX"), a company that enables advertisers to deliver target-group oriented digital ads.

2.11.1. Scope of the processing of personal data
If users access individual pages of our website, the following data is stored:
Information about the Internet connection, the browser, the device, the website/app visited, the behaviour on websites (this includes information about what content users have viewed, how long they have viewed it and which applications they have used), advertising materials, the user’s decisions and location information.

2.11.2. Purpose of the data processing
We use the data described above for the following purposes:
For storing and/or accessing information on a device, for basic ad or content selection, for creating a personalized ad or content profile, for selecting personalized ads or content, for measuring performance, for applying market research to generate audience insights, for developing and improving products, for ensuring security, fraud prevention and debugging, for technically delivering ads, for matching offline and online data, for linking different devices, for receiving and using automatically-sent device characteristics for identification, and for using precise geolocation data.

Based on the user's surfing behaviour, an interest in a specific B2B industry or topics can be assumed. The B2B Media Group uses this information on behalf of Verlagsanstalt Handwerk GmbH to target usage-based online advertising to its users on the Internet.

2.11.3. Legal basis for the processing of personal data
For certain data processing by The ADEX cookie, legitimate interest is the basis for the processing. With that information the Verlagsanstalt Handwerk GmbH is able to continuously improve the website and its user-friendliness. For these purposes, the processing of the data is based on the legitimate interest according to Art. 6 (1) point (f) GDPR. Besides that, the processing of the data requires consent according to Art. 6 (1) point (a) GDPR.

2.11.4. Duration of storage
We do not store personal data any longer than necessary for the purpose for which it was collected, unless we are required to do so by law. The ADEX cookies are generally valid for 90 days, after which they and the associated data are deleted. If the cookie is recognised again on the user's device within this period, the term is extended again by 90 days.

2.11.5. Transferring data abroad
Both ADEX and B2B Media Group and their servers are located in Germany.

2.11.6. Right of objection and removal
The user may at any time declare his or her opt-out and thus object to the cookie tracking in this regard: ADEX Opt-out. This will set a so-called opt-out-cookie. The opt-out-cookie requires that a setting in the browser does not prevent the storage of cookies or deletes the cookie. After deleting the opt-out-cookie, the user needs to repeat the objection. Alternatively, the user can delete the cookies directly in the browser or set their browser settings to “do-not-track” from the beginning. Should you wish to obtain information about the information stored in your cookie, either send a request to info@verlagsanstalt-handwerk.de or legal@theadex.com."

3. Processing of the data you provide us with

3.1. Queries
If you contact us via e-mail or a contact form, we save your information for the purpose of processing the query and in the event of follow-up queries. The legal basis is Art. 6 (1) b GDPR (pre-contractual measures).

3.2. Orders

3.2.1. General
If you provide personal information as part of the order, we process this for handling the agreement. The legal basis is Art. 6 (1) b GDPR (contractual performance).

Forwarding of your personal data to third parties only occurs if this is necessary for the purpose of contractual processing (for example, to transport and payment service providers). The legal basis is Art. 6 (1) b GDPR (contractual performance).

A user account is not required; you can also order as guest.

If you place an order with us, we also offer online payments, among other things, as means of payment. We use several providers for processing online payments. If you make a payment via one of these providers, your payment data is transmitted to them.

The legal basis for the data processing in each case is Art. 6 (1) b GDPR, since processing of the data is required for payment and consequently conduct of the agreement.

3.2.2. PayPal
PayPal permits online payments to be made to third parties. The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg. If you select PayPal as means of payment, your data required for the payment process is automatically transmitted to PayPal. This normally involves the following data:

The data transmitted to PayPal may be transmitted by PayPal to credit bureaus. This purpose of this transmission is to check identity and creditworthiness. PayPal may also pass on your data to third parties if this is necessary for performance of the contractual obligations or order processing is to be carried out. You can view the data protection provisions of PayPal at https://www.paypal.com/de/webapps/mpp/ua/privacy-full/.

3.2.3. Mollie
We offer payment via Mollie. The provider of this payment service is Mollie B.V, Keizersgracht 313, 1016 EE Amsterdam, Netherlands. If you select payment via Mollie, the payment data you enter is transmitted to Mollie and the correspondingly selected payment providers.

You can find more detailed information about data protection at https://www.mollie.com/de/privacy.

3.2.4. Unzer
We offer payment via unzer. The provider of the payment service is unzer GmbH, Vangerowstraße 18, D–69115 Heidelberg, Germany. If you make the payment using unzer, unzer collects various pieces of different transaction data and passes it on to the bank at which you are registered at unzer. You can find details about the payment with unzer in the GTC and data protection provisions of unzer at: https://www.unzer.com/de/datenschutz/.

3.3. User account
You can create a free user account for your order and future orders where your master data remain saved and you can see your past orders. If you create a user account, we collect the data you provide to us, namely first and last name, your e-mail address and a self-chosen password.

We process this data in order to provide you with the functions of the user account. The legal basis is Art. 6 (1) b GDPR (pre-contractual measures and contractual performance). The data saved is only used for provision of digital editions.

3.4. Digital editions
To obtain the digital edition of the Deutsche Handwerksblatt, the eligible company must set up a free user account. We provide every new edition for retrieval in this user account and inform the company about this via e-mail. When setting up the user account, the name of the company, responsible chamber of handicrafts and an e-mail address are recorded, among other things. We send the access data for registration in the user account to this e-mail address.

The data mentioned remain saved for as long as the user account exists. The legal basis of the data processing is Art. 6 (1) b GDPR (performance of the user agreement).

3.5. Learning portal “Sackmann”
You can register with the learning portal with the access code included in the text book. You do not have to enter any personal data in doing so. If you only want to receive access to the contents of the learning portal, you remain completely anonymous to us. However, you cannot save any data in the learning portal without a user account.

The storage space for the user account is provided on our behalf by SilkCode GmbH, Luisenstraße 62, 47799 Krefeld. SilkCode processes the data on our behalf. The legal basis is the safeguarding of legitimate interests, namely, the provision of an efficient service offer, according to Art. 6 (1) f GDPR and order processing according to Art. 28 GDPR. Your data are processed exclusively in Germany.

3.6. Competitions

3.6.1. Processing of the personal data of the candidates
We process the data collected via the participation form, such as name, address, e-mail, telephone and fax number, the uploaded photos and videos and if applicable information about you with your consent exclusively for your participation in the competition. Participation in the competition is not possible without this consent. We use your e-mail address for communication as part of the participation in the competition for queries and notification if you are selected for the next round. Other information and photographs are published on the website upon introduction of the candidates.

The legal basis for the data processing is Art. 6 (1) a of the GDPR (consent of the data subject). You can revoke your consent at any time. However, further participation is not possible and you leave the competition automatically.

After termination of a competition, we delete the data if we are not legally obliged to preserve them or this is required for safeguarding of our legitimate interests (legal enforcement or warding off claims).

3.6.2. Voting
You can cast your vote anonymously for a candidate. However, we use a self-written tool in determining the vote, which by saving various data points is intended to hinder a user from being able to cast a vote for a candidate more than once. As a result, we can save the IP of the user, the user agent (which browser, operating system, etc.), the time of the last vote and a specific user session in a database.

The legal basis for the data processing is Art. 6 (1) f of the General Data Protection Regulation GDPR. The data processing serves to safeguard our legitimate interests, namely to prevent abusive vote casting and guaranteeing the proper course of the competition.

3.7. Newsletter
You must state your name and e-mail address in order to register for one of our e-mail newsletters. We process this data with your consent exclusively for the mailing of the newsletter(s) you requested. To confirm the registration, we send you an e-mail with a confirmation link. Only after activation of the confirmation link are you registered for the newsletter.

The legal basis for the data processing is Art. 6 (1) a of the GDPR (consent of the data subject). You can revoke your consent at any time; the easiest way to do so is by activating the cancellation link included at the end of every newsletter.

We use MailJet, a server of Mailgun Inc., 112 E Pecan St. #1135, San Antonio, TX 78205, USA. Mailgun processes personal data on our behalf (order processing according to Art. 28).

3.8. Commenting on articles
You have to state your name and e-mail address in order to be able to comment on an article. With your consent, your name and the time you despatched the comment are displayed publicly together with your comment. Your e-mail address is not published. We only use it if necessary in order to communicate with you. If you also provide us with your consent to do so, we notify you by e-mail if another user likewise writes a comment on the same article.

The legal basis for the data processing is Art. 6 (1) a of the GDPR (consent of the data subject). You can revoke your consent at any time. If you so wish, we can remove your name so that your comment is only published anonymously or we can delete your comment in full.

4. Safeguarding of legitimate interests and performance of legal obligations
We process your data for mailing advertising (this only applies to postal advertising; we only contact you by e-mail, telefax or telephone if you have given your express consent to this). If necessary, we process your data also for the assertion, enforcement or defence of legal claims. The legal basis is Art. 6 (1) f GDPR (safeguarding of our legitimate interest, namely direct advertising and assertion, enforcement or defence of legal claims).

In addition, we process your data for performance of our preservation obligations for business documents according to commercial law and tax law and disclose your data to third parties if we are legally obliged to do so, e.g. the internal revenue office. The legal basis is Art. 6 (1) c GDPR (performance of legal obligations).

5. Storage duration
We save your data only for as long as this is required for one of the above-mentioned purposes. You can see the lifetime of cookies in the cookie banner.

6. Recipient of data
In the following cases, we transmit your data to third parties:
• If this is necessary for the performance of our contractual obligations, especially to the commissioned credit institute during invoicing. The legal foundation in this case is Art. 6 (1) b GDPR.
• If this is necessary for safeguarding of our legitimate interests. Our legitimate interests in particular cover the assertion of claims. The legal foundation in this case is Art. 6 (1) f GDPR:
• For the performance of a legal obligation, e.g. vis-à-vis tax authorities. The legal foundation in this case is Art. 6 (1) c GDPR.

Our websites are hosted by the following providers:
• domainfactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning
• Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen
• STRATO AG, Pascalstraße 10, 10587 Berlin
The respective hoster processes personal data on our behalf (order processing according to Art. 28 GDPR).

In addition, data is transmitted to the above-mentioned service provider. If they have their registered offices in the USA, the following applies: since no appropriate data protection level according to Art. 45 GDPR has been identified, we use the standard clauses passed by the EU Commission as suitable guarantee according to Art. 46 GDPR. The standard contractual clauses are agreed as part of the data protection agreements with the corresponding service provider. You can view the standard contractual clauses here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

7. Your rights
If the particular legal conditions exist, you have the following rights:
• You are free to revoke the consent you issued to us at any time (Art. 7 (3) GDPR).
• You have the right to obtain information about the personal data saved about you (Art. 15 GDPR).
• You are entitled to request correction of inaccurate data (Art. 16 GDPR).
• You are entitled to demand erasure (Art. 17) or restriction of processing (Art. 18 GDPR) of data no longer needed. If statutory preservation obligations exist, e.g. for business correspondence under commercial law and tax law or another statutory exception exists, data are not deleted, but only the processing restricted.
• You are entitled to data portability (Art. 20 GDPR), i.e. the right to demand the data you provided to us in a structured, commonly-used and machine-readable format and to transmit these data to another controller without being hindered by us; if applicable, also the right to demand that we transmit the data directly to another controller if this technically feasible.
• You are entitled to lodge a complaint with a regulatory authority. The local regulatory body responsible for us is the State Officer for Data Protection and Freedom of Information, North Rhine Westphalia, Kavalleriestr. 2-4, 40213 Dusseldorf (https://www.ldi.nrw.de).

8. Right to object
You can object at any time to the processing of your data for the purpose of direct advertising and on special grounds also to the processing of your data otherwise to safeguard legitimate interests (Art. 20 GDPR).