Privacy policy

General

As the operator of this website and as a company, we come into contact with your personal data. This refers to all data that says something about you and with which you can be identified. In this privacy policy, we would like to explain to you in what way, for what purpose, and on what legal basis we process your data.

The party responsible for data processing on this website and in our company is:

Flusspool GmbH

Grepperstrasse 23

6403 Küssnacht

Switzerland

Phone: +41 (0) 41-790 72 88

Email: infos[at]schwimmkanal.ch

General information

SSL or TLS encryption

When you enter your data on websites, place online orders, or send emails over the internet, you must always expect that unauthorized third parties may access your data. Complete protection against such access is not possible. However, we do everything in our power to protect your data as best as possible and to close security gaps as far as we can.

An important protective mechanism is the SSL or TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognize the encryption by the padlock icon in front of the internet address entered in your browser and by the fact that our internet address begins with https:// instead of http://.

How long do we store your data?

In some places in this privacy policy, we inform you about how long we or the companies that process your data on our behalf store your data. If such information is missing, we store your data until the purpose of the data processing no longer applies, you object to the data processing, or you withdraw your consent to the data processing.

In the event of an objection or withdrawal, however, we may continue to process your data if at least one of the following conditions is met:

We have compelling legitimate grounds for continuing the data processing that outweigh your interests, rights, and freedoms (only in the case of an objection to data processing; if the objection is directed against direct marketing, we cannot put forward any legitimate grounds).
The data processing is necessary to assert, exercise, or defend legal claims (does not apply if your objection is directed against direct marketing).
We are legally obligated to retain your data.

In this case, we will delete your data as soon as the condition(s) no longer apply.

Data transfer to the USA

We also use tools on our website from companies that transfer your data to the USA and store and, if necessary, further process it there. The European Commission has adopted an adequacy decision for the EU-US Data Privacy Framework. This establishes that the USA ensures an adequate level of protection for personal data from the EU transferred to US companies. This decision is based on new safeguards and measures introduced by the USA to meet data protection requirements. The adequacy decision includes, among other things, limitations and safeguards regarding access to data by US intelligence services. Binding safeguards have been introduced to limit access by US intelligence services to what is necessary and proportionate to protect national security. In addition, enhanced oversight of the activities of US intelligence services has been established to ensure that the limitations on surveillance activities are respected. An independent redress mechanism has also been set up to handle and resolve complaints from European citizens regarding access to their data. The EU-US Data Privacy Framework thus enables European companies to transfer data to certified US companies without having to introduce additional data protection safeguards. You can view a list of all certified companies at the following link: https://www.dataprivacyframework.gov/s/participant-search

A change in the European Commission's decision cannot be ruled out.

Your Rights

Objection to data processing

IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS FOR PROCESSING YOUR DATA AND THEREFORE BASE THIS ON ART. 6 PARA. 1 SENTENCE 1 LIT. F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THIS UNDER ART. 21 GDPR. THIS ALSO APPLIES TO PROFILING BASED ON THE AFOREMENTIONED PROVISION. THE PREREQUISITE IS THAT YOU PROVIDE REASONS FOR THE OBJECTION ARISING FROM YOUR PARTICULAR SITUATION. A JUSTIFICATION IS NOT REQUIRED IF THE OBJECTION IS DIRECTED AGAINST THE USE OF YOUR DATA FOR DIRECT MARKETING.

THE CONSEQUENCE OF THE OBJECTION IS THAT WE MAY NO LONGER PROCESS YOUR DATA. THIS ONLY DOES NOT APPLY IF ONE OF THE FOLLOWING CONDITIONS IS MET:

WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS.
THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.

THE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION IS DIRECTED AGAINST DIRECT MARKETING OR PROFILING ASSOCIATED WITH IT.

Other rights

Revocation of your consent to data processing

Many data processing operations take place on the basis of your consent. You grant this, for example, by checking a corresponding box on online forms before sending the form, or by allowing certain cookies when you visit our website. You can withdraw your consent at any time without giving reasons (Art. 7 Para. 3 GDPR). From the time of withdrawal, we may no longer process your data. The only exception: we are legally obligated to retain the data for a certain period of time. Such retention periods exist in particular in tax and commercial law.

Right to lodge a complaint with the competent supervisory authority

If you believe that we are violating the General Data Protection Regulation (GDPR), you have the right to lodge a complaint with a supervisory authority under Art. 77 GDPR. You can contact a supervisory authority in the Member State of your place of residence, your place of work, or the place where the alleged violation took place. The right to lodge a complaint exists in addition to administrative or judicial remedies.

Right to data portability

Data that we process automatically on the basis of your consent or in fulfillment of a contract must be handed over to you or a third party in a common machine-readable format if you request it. We can only transfer the data to another controller as far as this is technically possible.

Right to information, deletion, and rectification of data

Under Art. 15 GDPR, you have the right to receive information free of charge about which personal data we have stored about you, where the data comes from, to whom we transfer the data, and for what purpose it is stored. If the data is incorrect, you have a right to rectification (Art. 16 GDPR); under the conditions of Art. 17 GDPR, you may request that we delete the data.

Right to restriction of processing

In certain situations, you can request that we restrict the processing of your data under Art. 18 GDPR. The data may then – apart from storage – only be processed as follows:

with your consent
to assert, exercise, or defend legal claims
to protect the rights of another natural or legal person
for reasons of important public interest of the European Union or a Member State

The right to restriction of processing exists in the following situations:

You have disputed the accuracy of your personal data stored by us and we need time to verify this. The right exists for the duration of the verification.
The processing of your personal data is unlawful or was unlawful in the past. Here, the right exists as an alternative to deleting the data.
We no longer need your personal data, but you need it to exercise, defend, or assert legal claims. Here, the right exists as an alternative to deleting the data.
You have lodged an objection under Art. 21 Para. 1 GDPR and your interests and ours must now be weighed against each other. The right exists as long as the result of the weighing has not yet been determined.

Hosting and Content Delivery Networks (CDN)

External hosting

Our website is hosted on a server of the following internet service provider (hoster):

Hostpoint AG

Neue Jonastrasse 60

8640 Rapperswil-Jona

Has a data processing agreement been concluded with the hoster or are standard contractual clauses (SCC) used?

Yes

How do we process your data?

The hoster stores all data of our website. This also includes all personal data that is recorded automatically or through your input. This can include in particular: your IP address, pages accessed, names, contact details and inquiries, as well as meta and communication data. When processing data, our hoster adheres to our instructions and always processes the data only to the extent necessary to fulfill the performance obligation towards us.

On what legal basis do we process your data?

Since we address potential customers via our website and maintain contacts with existing customers, the data processing by our hoster serves the initiation and fulfillment of contracts and is therefore based on Art. 6 Para. 1 lit. b) GDPR. Furthermore, it is our legitimate interest as a company to provide a professional internet presence that meets the necessary requirements for security, speed, and efficiency. In this respect, we also process your data on the basis of Art. 6 Para. 1 lit. f) GDPR.

Data collection on this website

Use of Cookies

Our website places cookies on your device. These are small text files that serve different purposes. Some cookies are technically necessary for the website to function at all (necessary cookies). Others are required to perform certain actions or functions on the site (functional cookies). For example, without cookies, it would not be possible to use the benefits of a shopping cart in an online shop. Still other cookies serve to analyze user behavior or optimize advertising measures. If we use third-party services on our website, e.g., to process payment transactions, these companies may also leave cookies on your device when you access the website (so-called third-party cookies).

How do we process your data?

Session cookies are only stored on your device for the duration of a session. As soon as you close the browser, they disappear automatically. Permanent cookies, on the other hand, remain on your device unless you delete them yourself. This can, for example, lead to your user behavior being permanently analyzed. You can influence how your browser handles cookies via the settings in your browser:

Do you want to be informed when cookies are set?
Do you want to exclude cookies generally or for certain cases?
Do you want cookies to be automatically deleted when the browser is closed?

If you deactivate or do not allow cookies, the functionality of the website may be restricted.

If we use cookies from other companies or for analysis purposes, we will inform you about this within the framework of this privacy policy. We also request your consent in this regard when you access our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our online offers can be used by visitors without technical problems and that all desired functions are available to them. The storage of necessary and functional cookies on your device is therefore based on Art. 6 Para. 1 lit. f) GDPR. We use all other cookies on the basis of Art. 6 Para. 1 lit. a) GDPR, provided you give us corresponding consent. You can withdraw this at any time with effect for the future. If you consented to the placement of necessary and functional cookies when consent was requested, the storage of these cookies also takes place exclusively on the basis of your consent.

Cookie consent with Complianz

What is Complianz?

Consent Management Provider (CMP) for obtaining, processing, and forwarding GDPR-compliant consents

Who processes your data?

Complianz is a locally integrated tool; processing is carried out directly by the controller. The provider of Complianz is Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands

How do we process your data?

We use Complianz to obtain your consent for the storage of cookies on your device and to document it in a data protection-compliant manner. When you visit our website and close the Complianz cookie window with the request for consent, the following data is stored:

Your IP address (from which your country is also determined)
the browser used
the language used
the website accessed

In addition, Complianz stores various cookies in your browser to be able to assign the granted consents or their withdrawal to your browser. All recorded data is stored until the cookies are no longer needed, you delete the Complianz cookies, or you request us to delete the data. This only does not apply if we are legally obligated to retain the data. A connection to third-party servers is not established.

On what legal basis do we process your data?

We are legally obligated to obtain the consent of our website visitors for the use of certain cookies. To fulfill this obligation, we use Complianz. The legal basis for data processing is therefore Art. 6 Para. 1 lit. c) GDPR.

Server log files

Server log files record all requests and accesses to our website and record error messages. They also include personal data, in particular your IP address. However, this is anonymized by the provider after a short time, so that we cannot assign the data to you personally. The data is automatically transmitted from your browser to our provider.

How do we process your data?

Our provider stores the server log files to be able to track activities on our website and to identify errors. The files contain the following data:

Browser type and version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address (anonymized if necessary)

We do not combine this data with other data, but use it only for statistical evaluation and to improve our website.

On what legal basis do we process your data?

We have a legitimate interest in our website running error-free. It is also our legitimate interest to receive an anonymized overview of the accesses to our website. Data processing is therefore lawful according to Art. 6 Para. 1 lit. f) GDPR.

Contact form

You can send us a message via the contact form on this website.

How do we process your data?

We store your message and the information from the form in order to process your inquiry, including follow-up questions. This also applies to the contact details provided. We do not pass the data on to other persons without your consent.

How long do we store your data?

We delete your data as soon as one of the following occurs:

Your inquiry has been conclusively processed.
You request us to delete the data.
You withdraw your consent to storage.

This only does not apply if we are legally obligated to retain the data.

On what legal basis do we process your data?

If your inquiry is related to our contractual relationship or serves the implementation of pre-contractual measures, we process your data on the basis of Art. 6 Para. 1 lit. b) GDPR. In all other cases, it is our legitimate interest to effectively process inquiries addressed to us. The legal basis for data processing is therefore Art. 6 Para. 1 lit. f) GDPR. If you have consented to the storage of your data, Art. 6 Para. 1 lit. a) GDPR is the legal basis. In this case, you can withdraw your consent at any time with effect for the future.

Request by e-mail, telephone or fax

You can send us a message by email or fax or call us.

How do we process your data?

We store your message as well as your self-provided contact details or the transmitted telephone number in order to process your inquiry, including follow-up questions. We do not pass the data on to other persons without your consent.

How long do we store your data?

We delete your data as soon as one of the following occurs:

Your inquiry has been conclusively processed.
You request us to delete the data.
You withdraw your consent to storage.

This only does not apply if we are legally obligated to retain the data.

On what legal basis do we process your data?

Social Media Plugins

Use of Social Media Plugins

Regular use

We use social media plugins on our website. You can recognize them by the logos of the social networks. Thanks to the plugins, you can easily share the content on our website in social networks. Which plugins we use in detail can be seen from the list at the end of this section. Here you will also find the information relevant to data protection law from the networks.

How do we process your data?

Due to the embedded plugins, a connection to the servers of the social networks is established when you visit our website. This happens even if you do not share any content. In this way, the providing companies learn that the website was visited via your IP address. If you are logged into your account in a social network when visiting our website, the transmitted data can also be assigned to your personal profile. If you do not want this, you must log out of your account before continuing to surf the internet.

Except for Xing, all networks store the IP address. Other personal data may be added. Your data is usually transferred to servers in the USA. If this is the case, you can see from the information on the networks provided below on what basis this happens in each case.

On what legal basis do we process your data?

For the success of our company, it is important to be present in social networks. It is therefore our legitimate interest to use social media plugins to ensure that the content of our website or our offers can be easily shared. The legal basis for data processing is Art. 6 Para. 1 lit. f) GDPR.

If you have consented to the data processing, we process your data exclusively on the basis of Art. 6 Para. 1 lit. a) GDPR. You can withdraw your consent at any time. From the time of withdrawal, we may no longer process your data.

By activating the button, you grant your consent for a link to the social network concerned to be established, your IP address and, if applicable, other data to be transmitted, and your surfing behavior to be tracked by the social media company. Thus, data processing is lawful according to Art. 6 Para. 1 lit. a) GDPR. You can withdraw your consent at any time. From the time of withdrawal, we may no longer process your data.

Which social media plugins do we use?

Instagram

What is Instagram?

Social network

Who processes your data?

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Where can you find more information about data protection at Instagram?

https://instagram.com/about/legal/privacy/

On what basis do we transfer your data to the USA?

On the basis of the adequacy decision of the European Commission and the corresponding certification of the company.

Analysis Tools and Advertising

We use the following tools to analyze the behavior of our website visitors and to show you advertising.

Google Tag Manager

What is Google Tag Manager?

Tag management system for integrating tracking codes and conversion pixels from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about data protection at Google Tag Manager?

https://policies.google.com/privacy

On what basis do we transfer your data to the USA?

On the basis of the adequacy decision of the European Commission and the corresponding certification of the company.

How do we process your data?

We use Google Tag Manager. The tool helps us to integrate tracking codes and conversion pixels into our website, to manage them, and to deploy them. Google Tag Manager itself does not create user profiles, does not place cookies on your device, and does not analyze your behavior as a user. However, it records your IP address and transmits it to Google servers in the USA.

On what legal basis do we process your data?

We have a legitimate interest in the fast and uncomplicated integration and management of various tools on our website. The use of Google Tag Manager is therefore lawful according to Art. 6 Para. 1 lit. f) GDPR. If you have consented to the transfer of your IP address, we process your data exclusively on the basis of Art. 6 Para. 1 lit. a) GDPR. You can withdraw your consent at any time with effect for the future.

Google Analytics

What is Google Analytics?

Tool for analyzing user behavior from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Has a data processing agreement been concluded with Google Analytics?

Yes

Where can you find more information about data protection at Google Analytics?

https://support.google.com/analytics/answer/6004245?hl=de

On what basis do we transfer your data to the USA?

On the basis of the adequacy decision of the European Commission and the corresponding certification of the company.

How can you prevent data collection?

Among other things, with a browser plugin: https://tools.google.com/dlpage/gaoptout?hl=en

How do we process your data?

We are always interested in optimizing our web offering for visitors to our website and placing advertising optimally. Google Analytics helps us with this, a tool that analyzes user behavior and thus provides us with the necessary data basis for adjustments. Through the tool, we receive information about the origin of our visitors, their page views, and their length of stay on the pages, as well as the operating system they use.

Standard processing

To record the data, Google Analytics uses cookies, device fingerprinting, or other technologies for recognizing users. The data is transmitted to Google servers in the USA and summarized in a profile using the IP address also recorded, which can be assigned to you or your device.

You can prevent Google from processing your data by installing a browser plugin that Google itself provides: https://tools.google.com/dlpage/gaoptout?hl=en.

IP anonymization

We have activated the "IP anonymization" function within Google Analytics. For you, this means that Google shortens your IP address (from the EU or the EEA) before transmission to the USA. Only in exceptional cases does Google transmit the full IP address to servers in the USA and shorten it there.

Demographic characteristics

We use the "demographic characteristics" function of Google Analytics to be able to show visitors to our website suitable advertisements within the Google advertising network. As a result, reports can be created that contain statements on the age, gender, and interests of our site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. It is not possible to assign the recorded data to specific persons.

You can deactivate the function in the settings of your Google account.

How long do we store your data?

Data stored at the user and event level that is linked to cookies, user identifiers (e.g., user IDs), or advertising IDs is deleted or anonymized by Google after 14 months according to its own information (cf. https://support.google.com/analytics/answer/7667196?hl=en).

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in analyzing user behavior for the purpose of optimizing our web offering and the advertising placed there. Data processing is therefore lawful according to Art. 6 Para. 1 lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or have consented to data processing by Google Analytics in another way, Art. 6 Para. 1 lit. a) GDPR is the exclusive legal basis. You can withdraw your consent at any time with effect for the future.

Google Ads

What is Google Ads?

Online advertising program from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Has a data processing agreement been concluded with Google Ads?

Yes

Where can you find more information about data protection at Google Ads?

https://policies.google.com/privacy?hl=de&gl=de

On what basis do we transfer your data to the USA?

On the basis of the adequacy decision of the European Commission and the corresponding certification of the company.

How do we process your data?

We use Google Ads. Google's advertising program enables us to display advertisements in the Google search engine or on third-party websites when visitors to our website enter certain search terms on Google (keyword targeting). Furthermore, we can place targeted advertisements based on the user data available at Google (e.g., location data and interests) (target group targeting). We evaluate the recorded data quantitatively by, for example, analyzing which search terms led to the display of our advertisements and how many ads led to corresponding clicks.

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in the placement and evaluation of advertisements. Data processing is therefore lawful according to Art. 6 Para. 1 lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or have consented to data processing by Google in another way, Art. 6 Para. 1 lit. a) GDPR is the exclusive legal basis. You can withdraw your consent at any time with effect for the future.

Google Conversion Tracking

What is Google Conversion Tracking?

Tool for analyzing user behavior from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Has a data processing agreement been concluded with Google Conversion Tracking?

Yes

Where can you find more information about data protection at Google Conversion Tracking?

https://www.google.de/intl/de/policies/privacy/

On what basis do we transfer your data to the USA?

On the basis of the adequacy decision of the European Commission and the corresponding certification of the company.

How do we process your data?

We are always interested in optimizing our web offering for users and placing advertising optimally. For this purpose, we also use Google Conversion Tracking. With its help, we can record whether and how often visitors to our website have clicked on certain buttons and which products were viewed and purchased particularly frequently (conversion statistics). In the course of data collection and storage, we do not receive any information with which we can personally identify individual visitors. Google itself uses cookies or comparable recognition technologies for identification.

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in analyzing user behavior for the purpose of optimizing our web offering and the advertising placed there. Data processing is therefore lawful according to Art. 6 Para. 1 lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or have consented to data processing by Google Conversion Tracking in another way, Art. 6 Para. 1 lit. a) GDPR is the exclusive legal basis. You can withdraw your consent at any time with effect for the future.

META Pixel

What is META Pixel?

Tool for analyzing user behavior that measures the effectiveness of advertising on Facebook

Who processes your data?

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland

Has a data processing agreement been concluded with META Pixel?

Yes

Where can you find more information about data protection at META Pixel?

https://de-de.facebook.com/about/privacy/

On what basis do we transfer your data to the USA?

On the basis of the adequacy decision of the European Commission and the corresponding certification of the company.

How can you prevent data processing?

If you have a Facebook account: Deactivate the remarketing function "Custom Audiences" in the Ad Settings section (https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen).

If you do not have a Facebook account: Deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/uk/your-ad-choices/.

How do we process your data?

We use the META Pixel on our website. The analysis tool helps us to learn more about the behavior of visitors to our website after they have clicked on one of our advertisements on Facebook. This allows us to measure how effective our Facebook advertising is and align future advertising measures with the insights gained. The data that Facebook records via the pixel is anonymous to us as the operator of this website. We therefore cannot identify you as a visitor. However, the data is stored and processed by Facebook. Thus, Facebook establishes a connection to your Facebook account via the pixel and uses the data beyond that to place advertising itself within and outside the network (cf. Facebook Data Use Policy). In the course of storage and processing, Facebook also transmits the data to the USA and other third countries.

If you have a Facebook account, you can deactivate the remarketing function "Custom Audiences" in the Ad Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

If you do not have a Facebook account, it is possible to deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/uk/your-ad-choices/.

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in effective advertising measures in social networks. Data processing is therefore lawful according to Art. 6 Para. 1 lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or have consented to data processing by Facebook in another way, Art. 6 Para. 1 lit. a) GDPR is the exclusive legal basis. You can withdraw your consent at any time with effect for the future.

Rapidmail

What is Rapidmail?

Service for sending newsletters and analyzing recipient behavior

Who processes your data?

rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau, Germany

Has a data processing agreement been concluded with Rapidmail?

Yes

Where can I find more information about data protection at Rapidmail?

https://www.rapidmail.de/datenschutz

How do we process your data?

We use Rapidmail for our newsletter distribution. The service manages the data of newsletter subscribers for us, sends our newsletter, and analyzes our newsletter campaigns.

If you would like to receive our newsletter, we require your email address. We will also use a confirmation email (double opt-in process) to verify that you are indeed the owner of this email address. We do not collect any further data, or only on a voluntary basis. We use your data exclusively for sending the newsletter.

If we send a newsletter via Rapidmail and you open it, a file contained in the newsletter automatically connects to Rapidmail's servers. This allows the service to know that the newsletter has been opened and to register all clicks on the links contained therein. In addition, Rapidmail collects technical information such as the time of retrieval, IP address, browser type, and operating system.

You can unsubscribe from the newsletter at any time.

How long do we store your data?

After you have unsubscribed, the data will be deleted from the newsletter distribution list. In certain circumstances, we may also place your email address on a blacklist; this is necessary, for example, if we have received an objection to advertising from you. Storage then takes place on the basis of Art. 6 Para. 1 lit. f) GDPR.

Furthermore, we reserve the right to delete the data at any time after the purpose of collection has ceased to exist or at our own discretion.

On what legal basis do we process your data?

By entering your name on the subscriber list, you consent to data processing by Rapidmail. This is therefore lawful on the basis of Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent by unsubscribing from the newsletter or by sending us an informal notification. For us, this means that we may no longer send you newsletters from that point onwards.

Plugins and Tools

YouTube (with enhanced data protection)

What is YouTube?

Video platform

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about data protection at YouTube?

https://www.youtube.com/intl/ALL_de/howyoutubeworks/our-commitments/protecting-user-data/?gclid=EAIaIQobChMIztKuysSW-gIVjgwGAB0euwPlEAAYASAAEgLBXfD_BwE

How do we process your data?

You can watch YouTube videos on our website. In doing so, Google, as the provider of YouTube, collects and stores certain information about you. However, since we use YouTube in enhanced data protection mode, this only happens when you start a video. Specifically, the following happens in this case:

Google's servers are informed which of our pages were visited from your device. If you are logged into your YouTube account while browsing, Google can assign your surfing behavior directly to your personal profile. If you do not want this, you must log out of your YouTube account before continuing to surf the internet.
Google receives information about visitors to our website via cookies, device fingerprinting, or similar recognition technologies. On this basis, the company then creates video statistics, makes its application more attractive to users, and prevents attempted fraud.
In some cases, your data may be processed beyond this. However, details are beyond our knowledge. We also have no influence over the processing.

Even if you do not start a YouTube video on our website, Google establishes a connection to its DoubleClick network and possibly to other partners. The enhanced data protection mode therefore does not mean that Google does not process any of your data at all when you visit our website.

On what legal basis do we process your data?

By integrating YouTube videos, we want to make our website as well as our services and offers more appealing. This is our legitimate interest as a company and is therefore lawful under Art. 6 Para. 1 lit. f) GDPR.

If you have consented to data processing, we process your data exclusively on the basis of Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time. From the time of revocation, we may no longer process your data.

Google Fonts (local hosting)

We use fonts from the US company Google on our website. We have installed the fonts locally so that no connection to Google's servers takes place when you visit our website.

Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=en.

Google Maps

What is Google Maps?

Map service provided by Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about data protection at Google?

https://policies.google.com/privacy?hl=de

On what basis do we transfer your data to the USA?

On the basis of the European Commission's adequacy decision and the company's corresponding certification.

How do we process your data?

We use Google Maps on our website. To enable you to use all the functions of the map service, Google stores your IP address on one of its servers in the USA.

On what legal basis do we process your data?

Google Maps ensures that the locations specified on our website are easier for visitors to find. As a company, we have a legitimate interest in this. Data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR.

Google reCAPTCHA

What is Google reCAPTCHA?

Test tool for distinguishing between humans and computers from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about data protection at Google?

https://policies.google.com/privacy?hl=de

On what basis do we transfer your data to the USA?

On the basis of the European Commission's adequacy decision and the company's corresponding certification.

How do we process your data?

We use Google reCAPTCHA to check whether data entered into forms on our website comes from a human or a computer. For you, this means that the test tool analyzes your behavior as a visitor to our website based on various characteristics. The analysis does not only start when you use the test tool, but as soon as you access our website. Various data are recorded, e.g., the IP address, the time spent on our website, and mouse movements made. The data is forwarded to Google.

On what legal basis do we process your data?

As a company, we have a legitimate interest in protecting our web offerings from spam and abusive spying. Data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR.

Wordfence

What is Wordfence?

Firewall and security scanner for WordPress websites

Who processes your data?

Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA

Has a data processing agreement been concluded with Wordfence?

Yes

Where can you find more information about data protection at Wordfence?

https://www.wordfence.com/privacy-policy/

On what basis do we transfer your data to the USA?

On the basis of standard contractual clauses of the European Commission (cf. https://www.wordfence.com/help/general-data-protection-regulation/)

How do we process your data?

To protect our website from malicious traffic, we use the Wordfence plugin. It identifies and blocks data that contains harmful code or content, and checks core files, themes, and plugins for malware, broken URLs, backdoors, SEO spam, malicious redirects, and code injections. To enable these measures to be carried out, our website is permanently connected to the servers of Defiant Inc. in the USA. On these servers, access to our website is compared with the data that Wordfence has stored in its database and blocked if necessary.

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in protecting ourselves from malicious traffic. Data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR.

Elementor

What is Elementor?

Plugin for creating websites

Who processes your data?

Elementor 8 THE GRN STE A DOVER, DE 19901 USA

Has a data processing agreement been concluded with Elementor?

Yes

Where can you find more information about data protection at Elementor?

https://elementor.com/about/privacy/

On what basis do we transfer your data to the USA?

Elementor complies with the standard contractual clauses of the European Commission (cf. https://elementor.com/about/privacy/)

How do we process your data?

We use the "Elementor Website Builder for WordPress" plugin on our website. This plugin does not process any personal data. However, cookies are used to store the number of page views and active sessions of the user.

On what legal basis do we process your data?

By integrating the Elementor plugin, we want to make our website as well as our services and offers more appealing. This is our legitimate interest as a company and is therefore lawful under Art. 6 Para. 1 lit. f) GDPR.

Other services and data processing

Amelia booking tool

Data processing on social media

What is social media?

By social media, we mean the social networks on which we have created publicly accessible profiles. You can read which specific social networks these are further down.

Who processes your data?

The respective operating companies of the social networks. The individual operators can be found below under the respective networks.

How is your data processed?

Operators of social networks are generally able to record and evaluate comprehensive data about the behavior of visitors and users of the network. It is not possible for us to trace all processing operations in the social networks we use, which is why further processing operations not listed here may be carried out by the operators of the social networks. You can find further information on this in the terms of use and privacy policies of the respective social networks.

The processing of your data can be triggered by visiting the social network's website or our profile page there. Even if you access a website that uses certain content from the network, e.g., like or share buttons, data can already be transferred to the operators of the social network. If you are a user of the social network yourself and are logged into your user account, your visit to our profile page can be assigned to your account by the operator of the social network. Even if you have not registered a user account yourself or are not logged in, it is possible that the operator of the network still collects your personal data, e.g., by recording your IP address or setting cookies. With this data, the operators can create user profiles adapted to your behavior and interests and show you interest-based advertising inside and outside the network. If you are a registered user of the network, the interest-based advertising can also be displayed on all devices on which you are or were logged in.

On what legal basis is your data processed?

Our profiles in social networks are intended to ensure the most comprehensive presence of our company on the internet. As a company, we have a legitimate interest in this. Data processing is therefore lawful under Art. 6 Para. 1 lit. f GDPR.

The data processing operations and analyses carried out by the operators of the social networks themselves may be based on other legal bases. These must be specified by the operators of the social networks.

Who is responsible for processing your data and how can you assert your rights?

When you visit one of our profiles on social networks, we are jointly responsible with the operator of the respective network for the data processing operations triggered during this visit. In principle, you can assert your rights both against us and against the operator of the respective network.

Despite the joint responsibility with the operators of the social networks, our influence on the data processing operations of the respective operator is limited and is primarily based on the operator's specifications.

How long is your data stored?

When we collect data via our profiles on social networks, it is deleted from our systems as soon as the purpose for its storage no longer applies, you request us to delete it, or you revoke your consent to storage. Stored cookies remain on your end device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.

We have no influence on how long the operators of the social networks store your data, which the operators collect for their own purposes. You can obtain information on this directly from the operator of the respective social network, e.g., in the respective privacy policy.

Which social media do we use?

YouTube

What is YouTube?
A social network in the form of an online video portal

Who processes your data?
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Is your data transferred to third countries?
Yes

Where can you find more information about data protection at YouTube?
https://policies.google.com/privacy?hl=en

Where can you as a user adjust your privacy settings?
https://policies.google.com/privacy?hl=en#infochoices