We have created this privacy statement (version 03/2023-312449265) in order to provide you with the best possible information in accordance with the General Data Protection Regulation (EU) 2016/679 and applicable national laws to explain which personal data (data for short) we as the responsible party - and the processors (e.g. providers) commissioned by us - will process in the future and process, and which lawful options you have. The terms used are to be understood as gender-neutral.
In short: We inform you comprehensively about data that we process about you.
Privacy notices usually sound very technical and use legal terminology. This privacy statement is intended to explain the most important things as simply and transparently as possible. Insofar as it is conducive to transparency, technical terms are explained in a reader-friendly manner and links to further information are provided. In this way, we provide information in clear and simple language that we only process personal data in the course of our business activities if there is a corresponding legal basis. This is certainly not possible by providing the most concise, unclear and legalistic explanations possible, as is often standard practice on the Internet when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps there is one or two pieces of information that you did not yet know. If you still have questions, we would like to ask you to contact the responsible party named below or in the imprint, to follow the available links and to look at further information on third-party sites. Our contact details can of course also be found in the imprint.
This data protection declaration applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (order processors). By personal data, we mean information in the meaning of Art. 4 No. 1 DSGVO, such as a person's name, e-mail address, and postal address. The processing of personal data ensures that we can offer and charge for our services, and products, whether online or offline. The scope of this privacy policy includes:
In short: the data protection declaration applies to all areas in which personal data is processed in a structured manner within the company via the aforementioned channels. If we enter into legal relationships with you outside of these channels, we will inform you separately if necessary.
In the following privacy statement, we provide you with transparent information about the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which enable us to process personal data. As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can of course read this EU General Data Protection Regulation online on EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679.
We only process your data if at least one of the following conditions applies:
Further conditions such as the performance of recordings in the public interest and the exercise of official authority as well as the protection of vital interests do not generally occur with us. If such a legal basis should be relevant, it will be indicated at the appropriate place.
In addition to the EU regulation, national laws also apply:
If other regional or national laws apply, we will inform you about them in the following sections.
If you have any questions about data protection or the processing of personal data, you will find the contact details of the responsible person or office below:Reyk Carstens Karl-Marx-Straße 4, 16548 Glienicke, DeutschlandAuthorized to represent: Reyk CarstensE-mail: mentalmaths.eu@gmail.com
Imprint: https://mentalmaths.eu/imprint
The fact that we only store personal data for as long as it is absolutely necessary for the provision of our services and products applies as a general criterion to us. This means that we delete personal data as soon as the reason for processing the data no longer exists. In some cases, we are required by law to store certain data even after the original purpose has ceased to exist, for example for accounting purposes.
Should you wish your data to be deleted or revoke your consent to data processing, the data will be deleted as soon as possible and insofar as there is no obligation to store it. Sollten Sie die Löschung Ihrer Daten wünschen oder die Einwilligung zur Datenverarbeitung widerrufen, werden die Daten so rasch wie möglich und soweit keine Pflicht zur Speicherung besteht, gelöscht.
We will inform you about the specific duration of the respective data processing below, provided that we have further information on this.
In accordance with Articles 13, 14 of the GDPR, we inform you about the following rights you have, to ensure that data processing is fair and transparent:
In short: You have rights - do not hesitate to contact the responsible person listed above!
If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can complain to the supervisory authority. For Austria, this is the data protection authority, whose website you can find at https://www.dsb.gv.at/ In Germany, there is a data protection officer for each federal state. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI) The following local data protection authority is responsible for our company:
State Commissioner for Data Protection: Dagmar HartgeAddress: Stahnsdorfer Damm 77, 14532 KleinmachnowPhone no..: 03 32 03/356-0E-mail address: poststelle@lda.brandenburg.deWebsite: https://www.lda.brandenburg.de/lda/de/
We only transfer or process data to countries outside the EU (third countries) if you consent to this processing, if this is required by law or contractually necessary and in any case only to the extent that this is generally permitted. Your consent is in most cases the most important reason that we have data processed in third countries. Processing personal data in third countries such as the U.S., where many software vendors provide services and have their server locations, may mean that personal data is processed and stored in unexpected ways.
We expressly point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. Data processing by US services (such as Google Analytics) may result in data not being processed and stored anonymously. Furthermore, US government authorities may be able to access individual data. In addition, it may happen that collected data is linked with data from other services of the same provider, if you have a corresponding user account. Where possible, we try to use server locations within the EU, if this is offered.
We will inform you in more detail about data transfer to third countries, if applicable, at the appropriate places in this privacy policy.
To protect personal data, we have implemented both technical and organizational measures. Where possible, we encrypt or pseudonymize personal data. In this way, we make it as difficult as possible for third parties to infer personal information from our data.
Article 25 of the GDPR speaks here of "data protection through technical design and through data protection-friendly default settings" and thus means that both software (e.g., forms) and hardware (e.g., access to the server room) should always be designed with security in mind and that appropriate measures should be taken. If necessary, we will go into more detail on specific measures below.
TLS, encryption and https sound very technical and they are. We use HTTPS to transfer data over the internet in a tap-proof way. This means that the complete transmission of all data from your browser to our web server is secured - no one can "listen in".
In this way, we have introduced an additional layer of security and meet data protection through technology design (Article 25 paragraph 1 DSGVO). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data. You can recognize the use of this protection of data transmission by the small lock symbol at the top left of the browser, to the left of the Internet address (e.g., example.com) and the use of the scheme https (instead of http) as part of our Internet address. If you want to know more about encryption, we recommend the Google search for "Hypertext Transfer Protocol Secure wiki" to get good links to further information.
We do not knowingly collect any Personal Information from children under the age of 13. If you are under the age of 13, please do not submit any Personal Information through our Website. We encourage parents and legal guardians to monitor their children's Internet usage and to help enforce this Policy by instructing their children never to provide Personal Information through our Website without their permission. If you have reason to believe that a child under the age of 13 has provided Personal Information to us through our Website, please contact us.
Our website uses HTTP cookies to store user-specific data. Below we explain what cookies are and why they are used so that you can better understand the following privacy policy.
Whenever you browse the Internet, you use a browser. Popular browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.
One thing cannot be denied: Cookies are really useful little helpers. Almost all websites use cookies. More precisely, they are HTTP cookies, as there are other cookies for other applications. HTTP cookies are small files that are stored on your computer by our website. These cookie files are automatically placed in the cookie folder, effectively the "brain" of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.
Cookies store certain user data about you, such as language or personal page settings. When you return to our site, your browser transmits the "user-related" information back to our site. Thanks to cookies, our site knows who you are and offers you the setting you are used to. In some browsers, each cookie has its own file, in others, such as Firefox, all cookies are stored in a single file.
There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. Also, the expiration time of a cookie varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other "pests". Cookies also cannot access information on your PC.
For example, cookie data may look like this:
Name: _gaValue: GA1.2.1326744211.152312449265-9Purpose: Differentiation of website visitorsExpiration date: After 2 years
The question of which cookies we use in particular depends on the services used and is clarified in the following sections of the privacy policy. At this point, we would like to briefly discuss the different types of HTTP cookies.
We can distinguish 4 types of cookies:
Essential cookiesThese cookies are necessary to ensure basic functions of the website. For example, these cookies are needed when a user adds a product to the shopping cart, then continues surfing on other pages and later goes to the checkout. Through these cookies, the shopping cart is not deleted even if the user closes his browser window.
Purposeful cookiesThese cookies collect information about user behavior and whether the user receives any error messages. In addition, these cookies are also used to measure the loading time and the behavior of the website with different browsers.
Target oriented cookiesThese cookies provide a better user experience. For example, entered locations, font sizes or form data are stored.
Advertising cookiesThese cookies are also called targeting cookies. They are used to deliver customized advertising to the user. This can be very convenient, but also very annoying.
Usually, when you visit a website for the first time, you are asked which of these cookie types you want to allow. And, of course, this decision is also stored in a cookie.
If you would like to know more about cookies and technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Request for Comments from the Internet Engineering Task Force (IETF) called "HTTP State Management Mechanism".
The purpose ultimately depends on the cookie in question. You can find more details about this below or from the manufacturer of the software that sets the cookie.
Cookies are small helpers for many different tasks. Unfortunately, it is not possible to generalize what data is stored in cookies, but we will inform you about the processed or stored data in the following privacy policy.
The storage period depends on the particular cookie and is specified further below. Some cookies are deleted after less than an hour, others can remain stored on a computer for several years.
You can also influence the storage period yourself. You can manually delete all cookies at any time via your browser (see also "Right of objection" below). Furthermore, cookies that are based on consent will be deleted at the latest after revocation of your consent, whereby the legality of the storage remains unaffected until then.
How and whether you want to use cookies, you decide. Regardless of which service or website the cookies come from, you always have the option to delete, disable or only partially allow cookies. For example, you can block third-party cookies, but allow all other cookies.
If you want to determine which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:
Chrome: Delete, enable and manage cookies in Chrome
Safari: Managing cookies and website data with Safari
Firefox: Delete cookies to remove data that websites have placed on your computer
Internet Explorer: Delete and manage cookies
Microsoft Edge: Delete and manage cookies
If you do not want to have cookies in principle, you can set up your browser so that it always informs you when a cookie is to be set. In this way, you can decide for each individual cookie whether you allow the cookie or not. The procedure varies depending on the browser. It is best to search for the instructions in Google using the search term "delete cookies Chrome" or "disable cookies Chrome" in the case of a Chrome browser.
The so-called "Cookie Guidelines" have been in place since 2009. These state that the storage of cookies requires your consent (Article 6 paragraph 1 (a) DSGVO). Within the EU countries, however, there are still very different reactions to these directives. In Austria, however, this directive was implemented in Section 96 paragraph 3 of the Telecommunications Act (TKG). In Germany, the Cookie Directives were not implemented as national law. Instead, this directive was largely implemented in Section 15 paragraph 3 of the German Telemedia Act (TMG).
For absolutely necessary cookies, even in the absence of consent, there are legitimate interests (Article 6 paragraph 1 (f) DSGVO), which in most cases are economic in nature. We want to provide visitors to the website with a pleasant user experience and for this purpose certain cookies are often absolutely necessary.
If cookies are used that are not absolutely necessary, this only happens in the case of your consent. The legal basis in this respect is Art. 6 paragraph 1 (a) DSGVO.
In the following sections, you will be informed in more detail about the use of cookies, if used software uses cookies.
When you register with us, personal data may be processed if you enter personal data or data such as the IP address is collected in the course of processing. What we mean by the rather unwieldy term "personal data", you can read below.
Please only enter data that we need for registration and for which you have the release of a third party, if you are registering on behalf of a third party. If possible, use a secure password that you do not use anywhere else and an email address that you check regularly.
In the following we inform you about the exact kind of data processing, because you should feel comfortable with us!
When you register, we take certain data from you and later allow you to easily log in online and use your account with us. Having an account with us has the advantage that you do not have to re-enter everything every time. Saves time, effort and ultimately prevents errors in the provision of our services.
In short, we process personal data to enable the creation and use of an account with us.If we didn 't do that, you would have to enter all the data each time, wait for us to approve it, and enter it all again. We and many, many customers would not like that. What would you think of that?
All the data you provided in the course of registration, enter during registration or enter in the course of managing your data in the account.
During registration we process the following types of data:
When you log in, we process the data you enter when you log in, such as username and password, and data collected in the background, such as device information and IP addresses.
During account use, we process data that you enter during account use and which is created in the course of using our services.
We store the data entered at least for as long as the account linked to the data exists with us and is used, as long as contractual obligations exist between us and, if the contract ends, until the respective claims arising from it have become time-barred. In addition, we store your data as long as and to the extent that we are subject to legal obligations to store it. Thereafter, we retain accounting records pertaining to the contract (invoices, contract documents, account statements, etc.) as well as other relevant business documents for the legally prescribed period (usually several years).
You have registered, entered data and want to revoke the processing? No problem. As you can read above, the rights under the General Data Protection Regulation also exist during and after registration, login or deletion of the account with us. Contact the data protection officer above to exercise your rights. If you already have an account with us, you can easily view or manage your data and texts in the account.
By carrying out the registration process, you are entering into a pre-contractual agreement with us to conclude a contract of use via our platform (although this does not automatically give rise to an obligation to pay).You invest time to enter data and register, and we provide our services after logging into our system and viewing your customer account. We also fulfill our contractual obligations. Finally, we need to keep registered users informed of important changes by email. Thus, Art. 6 para. 1 lit. b DSGVO (performance of pre-contractual measures, fulfillment of a contract) applies.
If necessary, we also obtain your consent, e.g. if you voluntarily provide more than the absolutely necessary data or if we may send you advertising. Art. 6 para. 1 lit. a DSGVO (consent) therefore applies.
We also have a legitimate interest in knowing who we are dealing with in order to contact them in certain cases. In addition, we need to know who is using our services and whether they are being used as specified in our terms of use, so Art. 6 para. 1 lit. f DSGVO (Legitimate Interests) applies.
Registration with pseudonyms
Pseudonyms can be used during registration, which means that you do not have to register with us with your real name. This ensures that your name cannot be processed by us.
IP address storage
In the course of registration, login and account use, we store the IP address in the background for security reasons in order to be able to determine the legitimate use.
When you visit websites nowadays, certain information - including personal data - is automatically created and stored, including on this website. This data should be processed as sparingly as possible and only with justification. By the way, by website we mean the entirety of all web pages on a domain, i.e. everything from the home page (homepage) to the very last subpage (like this one). By domain, we mean, for example, example.de or sampleexample.com.
When you want to view a website on a computer, tablet, or smartphone, you use a program called a web browser to do so. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari. We say browser or web browser for short.
To display the website, the browser must connect to another computer where the website 's code is stored: the web server. Operating a web server is a complicated and costly task, which is why this is usually done by professional providers. These offer web hosting and thus ensure reliable and error-free storage of website data. A whole lot of technical terms, but please stay tuned, it gets better!
When the browser on your computer (desktop, laptop, tablet or smartphone) connects and during data transfer to and from the web server, personal data may be processed. On the one hand, your computer stores data; on the other hand, the web server must also store data for a while to ensure proper operation.
The purposes of data processing are:
Even while you are visiting our website right now, our web server, which is the computer on which this website is stored, usually automatically stores data such as:
As a rule, the above data is stored for two weeks and then automatically deleted. We do not pass on this data, but we cannot exclude the possibility that this data may be viewed by authorities in the event of unlawful conduct.
In short:Your visit is logged by our provider (company that runs our website on special computers (servers)), but we do not share your data without consent!
The lawfulness of the processing of personal data in the context of web hosting results from Art. 6 para. 1 lit. f DSGVO (protection of legitimate interests), because the use of professional hosting with a provider is necessary to present the company on the Internet in a secure and user-friendly manner and to be able to pursue attacks and claims from this if necessary.
As a rule, there is a contract between us and the hosting provider for commissioned processing pursuant to Art. 28 f. DSGVO, which ensures compliance with data protection and guarantees data security.
We use the web hosting provider Vercel for our website. The service provider is the American company Vercel Inc, 440 N Barranca Ave #4133, Covina, CA 91723, USA.
Vercel also processes data from you in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks to the legality and security of data processing.
As a basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there, Vercel uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to and stored in third countries (such as the USA). Through these clauses, Vercel undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses, among others, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
Vercel holds a contract on commissioned processing in accordance with Art. 28 DSGVO, which acts as the data protection law basis for our customer relationship with Vercel. This refers to the EU standard contractual clauses in terms of content. You can find it here: https://vercel.com/legal/dpa
To learn more about the data processed through the use of Vercel, see the Privacy Policy on https://vercel.com/legal/privacy-policy.
We use software on our website to evaluate the behavior of website visitors, known as web analytics for short. This involves collecting data that is stored, managed and processed by the respective analytic tool provider (also known as a tracking tool). The data is used to create analyses of user behavior on our website and made available to us as the website operator. In addition, most tools offer various testing options. For example, we can test which offers or content are best received by our visitors. To do this, we show you two different offers for a limited period of time. After the test (so-called A/B test), we know which product or content our website visitors find more interesting. For such test procedures, as for other analytics procedures, user profiles can also be created and the data stored in cookies.
With our website we have a clear goal in mind: we want to deliver the best web offer on the market for our industry. To achieve this goal, we want to offer the best and most interesting offer on the one hand, and on the other hand make sure that you feel completely comfortable on our website. With the help of web analysis tools, we can take a closer look at the behavior of our website visitors and then improve our web offer for you and us accordingly. For example, we can see how old our visitors are on average, where they come from, when our website is most visited or which content or products are particularly popular. All this information helps us to optimize the website and thus best adapt it to your needs, interests and wishes.
Exactly what data is stored depends, of course, on the analysis tools used. But as a rule, for example, which content you view on our website, which buttons or links you click on, when you access a page, which browser you use, which device (PC, tablet, smartphone, etc.) you use to visit the website or which computer system you use is stored. If you agreed that location data may also be collected, these may also be processed by the web analytics tool provider.
In addition, your IP address is also stored. According to the General Data Protection Regulation (DSGVO), IP addresses are personal data. However, your IP address is usually stored pseudonymously (i.e. in an unrecognizable and shortened form). For the purpose of testing, web analysis and web optimization, no direct data, such as your name, age, address or email address are stored as a matter of principle. All this data, if collected, is stored pseudonymously. Thus, you cannot be identified as a person.
How long the respective data is stored always depends on the provider. Some cookies store data only for a few minutes or until you leave the website again, other cookies can store data for several years.
We will inform you about the duration of data processing below, provided we have further information on this. In general, we process personal data only as long as it is absolutely necessary for the provision of our services and products. If it is required by law, as for example in the case of accounting, this storage period may also be exceeded.
You also have the right and the possibility to revoke your consent to the use of cookies or third-party providers at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection through cookies by managing, disabling or deleting cookies in your browser.
You can change the cookie settings by clicking this button:
The use of web analytics requires your consent, which we have obtained with our cookie popup. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur during the collection by web analytics tools.
In addition to consent, there is a legitimate interest on our part to analyze the behavior of website visitors and thus to improve our offer technically and economically. With the help of web analytics, we detect errors in the website, can identify attacks, and improve economic efficiency. The legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we use the tools only insofar as you have given consent.
Since web analytics tools use cookies, we also recommend that you read our general privacy policy on cookies. To find out exactly which of your data is stored and processed, you should read the privacy statements of the respective tools.
Information on specific web analytics tools, if any, is provided in the following sections.
We use on our website the analysis tracking tool Google Analytics (GA) of the American company Google Inc. For the European area the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google Analytics collects data about your actions on our website. For example, when you click on a link, this action is stored in a cookie and sent to Google Analytics. Using the reports we receive from Google Analytics, we can better tailor our website and service to your preferences. In the following, we will go into more detail about the tracking tool and, in particular, inform you about what data is stored and how you can prevent this.
Google Analytics is a tracking tool used for traffic analysis of our website. For Google Analytics to work, a tracking code is built into the code of our website. When you visit our website, this code records various actions you take on our website. Once you leave our website, this data is sent to the Google Analytics servers and stored there.
Google processes the data and we receive reports about your user behavior. These reports may include, but are not limited to, the following:
Our goal with this website is clear: we want to provide you with the best possible service. The statistics and data from Google Analytics help us achieve this goal.
The statistically evaluated data shows us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimize our site so that it is found more easily by interested people on Google. On the other hand, the data helps us to better understand you as a visitor. Thus, we know very well what we need to improve on our website in order to provide you with the best possible service. The data also helps us to carry out our advertising and marketing measures in a more individual and cost-effective way. After all, it only makes sense to show our products and services to people who are interested in them.
Google Analytics uses a tracking code to create a random, unique ID associated with your browser cookie. This is how Google Analytics recognizes you as a new user. The next time you visit our site, you will be recognized as a "returning" user. All collected data is stored together with this user ID. This is how it is possible to evaluate pseudonymous user profiles in the first place.
To be able to analyze our website with Google Analytics, a property ID must be inserted into the tracking code. The data is then stored in the corresponding property. For each newly created property, the Google Analytics 4 property is default. Alternatively, you can also create the Universal Analytics property. Depending on the property used, data is stored for different lengths of time.
Identifiers such as cookies and app instance IDs measure your interactions on our website. Interactions are all types of actions you take on our website. If you also use other Google systems (such as a Google account), data generated through Google Analytics may be linked to third-party cookies. Google does not share Google Analytics data unless we, as the website operator, authorize it. Exceptions may occur if required by law.
The following cookies are used by Google Analytics:
Note: This list cannot claim to be exhaustive, as Google is constantly changing the choice of its cookies.
Here we show you an overview of the most important data collected with Google Analytics:
Other data include contact details, any ratings, playing media (e.g. when you play a video via our site), sharing content via social media or adding to your favorites. The enumeration does not claim to be complete and only serves as a general orientation of the data storage by Google Analytics.
Google has their servers spread all over the world. Most servers are located in America and consequently your data is mostly stored on American servers. Here you can read exactly where Google data centers are located:https://www.google.com/about/datacenters/locations/?hl=de
Your data is distributed on different physical data carriers. This has the advantage that the data can be retrieved more quickly and is better protected against manipulation. In every Google data center, there are corresponding emergency programs for your data. If, for example, the hardware at Google fails or natural disasters paralyze servers, the risk of a service interruption at Google still remains low.
The data retention period depends on the properties used. When using the newer Google Analytics 4 properties, the retention period of your user data is set to 14 months. For other so-called event data, we have the option to choose a retention period of 2 months or 14 months.
For Universal Analytics properties, Google Analytics has a default retention period of 26 months for your user data. Then your user data is deleted. However, we have the option to choose the retention period of user data ourselves. We have five variants available for this purpose:
In addition, there is also the option that data will only be deleted if you no longer visit our website within the period we have selected. In this case, the retention period is reset each time you visit our website again within the specified period.
Once the specified period has expired, the data is deleted once a month. This retention period applies to your data associated with cookies, user recognition and advertising IDs (e.g. DoubleClick domain cookies). Reporting results are based on aggregated data and are stored separately from user data. Aggregated data is a merging of individual data into a larger unit.
Under European Union data protection law, you have the right to access, update, delete, or restrict your data. Using the browser add-on to disable Google Analytics JavaScript (ga.js, analytics.js, dc.js), you can prevent Google Analytics from using your data. You can download the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de download and install. Please note that this add-on only disables data collection by Google Analytics.
If you basically want to disable, delete or manage cookies, you can find the corresponding links to the respective instructions of the most popular browsers under the section "Cookies".
The use of Google Analytics requires your consent, which we have obtained with our cookie popup. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur during the collection by web analytics tools.
In addition to the consent, there is a legitimate interest on our part to analyze the behavior of website visitors and thus to improve our offer technically and economically. With the help of Google Analytics, we detect website errors, can identify attacks and improve the economic efficiency. The legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use Google Analytics if you have given your consent.
Google also processes data from you in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks to the legality and security of data processing.
Google uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO) as the basis for data processing for recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there. Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.
We hope we have been able to provide you with the most important information about Google Analytics data processing. If you want to learn more about the tracking service, we recommend these two links: https://marketingplatform.google.com/about/analytics/terms/de/ and https://support.google.com/analytics/answer/6004245?hl=de.
We have turned on the advertising reports features in Google Analytics. The demographic and interest reports contain information on age, gender and interests. This allows us - without being able to assign this data to individual persons - to get a better picture of our users. You can learn more about the advertising functions on https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad.
You can control the use of your Google Account activity and information under "Advertising Settings" on https://adssettings.google.com/authenticated.
We have implemented Google Analytics IP address anonymization on this website. This feature was developed by Google to enable this website to comply with applicable data protection regulations and recommendations of local data protection authorities when they prohibit storage of the full IP address. The anonymization or masking of the IP takes place as soon as the IP addresses arrive in the Google Analytics data collection network and before any storage or processing of the data takes place.
You can find more information about IP anonymization on https://support.google.com/analytics/answer/2763052?hl=de.
We use TikTok Pixel, a conversion tracking tool for advertisers, on our website. The service provider is the Chinese company TikTok. The company TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland) is responsible for the European region.
TikTok also processes data from you in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks for the legality and security of the data processing.
As a basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there, TikTok uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, TikTok undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses, among others, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
To learn more about the standard contractual clauses and the data processed through the use of TikTok Pixel, see the Privacy Policy on https://www.tiktok.com/legal/privacy-policy-eea?lang=de or https://ads.tiktok.com/i18n/official/policy/controller-to-controller.
For our website we use the Google Tag Manager of the company Google Inc. For the European area the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. This Tag Manager is one of many helpful marketing products from Google. Through the Google Tag Manager, we can centrally incorporate and manage code sections from various tracking tools that we use on our website.
In this privacy policy, we want to explain in more detail what Google Tag Manager does, why we use it, and in what form data is processed.
Google Tag Manager is an organizational tool that allows us to include and manage website tags centrally and via a user interface. Tags are small sections of code that, for example, record (track) your activities on our website. For this purpose, JavaScript code sections are inserted into the source code of our page. The tags often come from Google-internal products such as Google Ads or Google Analytics, but tags from other companies can also be included and managed via the manager. Such tags perform different tasks. They can collect browser data, feed marketing tools with data, embed buttons, set cookies and also track users across multiple websites.
As the saying goes: organization is half the battle! And that of course also applies to the maintenance of our website. In order to make our website as good as possible for you and all the people who are interested in our products and services, we need various tracking tools such as Google Analytics. The collected data from these tools show us what you are most interested in, where we can improve our services and which people we should still show our offers to. And for this tracking to work, we need to embed appropriate JavaScript codes into our website. In principle, we could include each code section of each tracking tool separately in our source code. However, this requires a relatively large amount of time and it's easy to lose track. That's why we use the Google Tag Manager. We can easily incorporate the necessary scripts and manage them from one place. Moreover, Google Tag Manager offers an easy-to-use interface and you don't need any programming skills. This is how we manage to keep order in our tag jungle.
The Tag Manager itself is a domain that does not set any cookies or store any data. It acts as a mere "manager" of the implemented tags. The data is collected by the individual tags of the different web analytics tools. The data is virtually passed through to the individual tracking tools in the Google Tag Manager and is not stored.
However, the situation is completely different with the embedded tags of the various web analysis tools, such as Google Analytics. Depending on the analysis tool, various data about your web behavior is usually collected, stored and processed with the help of cookies. For this, please read our privacy texts on the individual analysis and tracking tools that we use on our website.
In the Tag Manager account settings, we have allowed Google to receive anonymized data from us. However, this is only the use and usage of our Tag Manager and not your data stored via the code sections. We allow Google and others to receive selected data in anonymized form. We thus consent to the anonymous sharing of our website data. Which summarized and anonymous data is forwarded exactly, we could not find out - despite long research. In any case, Google deletes all information that could identify our website. Google combines the data with hundreds of other anonymous website data and creates user trends as part of benchmarking measures. Benchmarking compares our own results with those of our competitors. Processes can be optimized on the basis of the information collected.
When Google stores data, this data is stored on Google's own servers. The servers are distributed all over the world. Most of them are located in America. Under https://www.google.com/about/datacenters/locations/?hl=de you can read exactly where the Google servers are located.
How long the individual tracking tools store data from you can be found in our individual privacy texts for the individual tools.
The Google Tag Manager itself does not set cookies, but manages tags from various tracking websites. In our privacy texts for the individual tracking tools, you will find detailed information on how to delete or manage your data.
Please note that when using this tool, data from you may also be stored and processed outside the EU. Most third countries (including the USA) are not considered secure under current European data protection law. Data to insecure third countries may therefore not simply be transferred, stored and processed there unless there are suitable safeguards (such as EU standard contractual clauses) between us and the non-European service provider.
The use of Google Tag Manager requires your consent, which we have obtained with our cookie popup. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur during the collection by web analytics tools.
In addition to consent, there is a legitimate interest on our part to analyze the behavior of website visitors and thus to improve our offer technically and economically. With the help of Google Tag Manager, we can improve our economic efficiency. The legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests) . Nevertheless, we only use the Google Tag Manager if you have given your consent.
Google also processes data from you in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks for the legality and security of data processing.
Google uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO) as the basis for data processing for recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there. Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/
If you want to learn more about Google Tag Manager, we recommend you to read the FAQs at https://support.google.com/tagmanager/?hl=de#topic=3441530.
Online marketing refers to all measures that are carried out online to achieve marketing goals such as increasing brand awareness or closing a deal. Furthermore, our online marketing measures aim to draw people's attention to our website. In order to be able to show our offering to many interested people, we therefore engage in online marketing. This usually involves online advertising, content marketing or search engine optimization. To enable us to use online marketing efficiently and in a targeted manner, personal data is also stored and processed. On the one hand, the data helps us to show our content only to those people who are really interested in it, and on the other hand, we can measure the advertising success of our online marketing measures.
We want to show our website to every person who is interested in our offer. We are aware that this is not possible without consciously set measures. That's why we do online marketing. There are various tools that make it easier for us to work on our online marketing measures and, in addition, always provide suggestions for improvement via data. This allows us to target our campaigns more precisely to our target group. So the purpose of these online marketing tools we use is ultimately to optimize our offering.
In order for our online marketing to work and the success of the measures can be measured, user profiles are created and data is stored, for example, in cookies (these are small text files). With the help of this data, we can not only place advertisements in the classic sense, but also directly on our website, display our content in the way you prefer. For this purpose, there are various third-party tools that offer these functions and accordingly also collect and store data from you. In the named cookies are stored, for example, which web pages you have visited on our website, how long you have looked at these pages, which links or buttons you click or from which website you have come to us. In addition, technical information may also be stored. For example, your IP address, which browser you use, from which device you visit our website or the time when you accessed our website and when you left it again. If you have consented that we may also determine your location, we may also store and process this.
Your IP address is stored in pseudonymized form (i.e., shortened). Unique data that directly identifies you as a person, such as name, address or e-mail address, is also only stored in pseudonymized form as part of the advertising and online marketing processes. We can therefore not identify you as a person, but we have only the pseudonymized stored information in the user profiles.
The cookies may also be deployed, analyzed and used for advertising purposes on other websites that use the same advertising tools. The data may then also be stored on the servers of the advertising tools providers.
In exceptional cases, unique data (name, e-mail address, etc.) may also be stored in the user profiles. This data is stored, for example, if you are a member of a social media channel that we use for our online marketing measures and the network links previously received data with the user profile.
With all the advertising tools we use, which stores data from you on their servers, we only ever receive aggregate information and never data that makes you recognizable as an individual. The data only shows how well set advertising measures worked. For example, we see which measures have persuaded you or other users to come to our website and purchase a service or product there. Based on the analyses, we can improve our advertising offer in the future and adapt it even more precisely to the needs and wishes of interested persons.
We will inform you about the duration of data processing below, provided we have further information on this. In general, we process personal data only as long as it is absolutely necessary for the provision of our services and products. Data that is stored in cookies is stored for different lengths of time. Some cookies are deleted as soon as you leave the website, others may be stored in your browser for several years. In the respective privacy statements of the individual providers, you will usually receive detailed information about the individual cookies used by the provider.
You also have the right and the possibility to revoke your consent to the use of cookies or third-party providers at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection through cookies by managing, disabling or deleting cookies in your browser. The lawfulness of the processing until the revocation remains unaffected.
Since online marketing tools can usually use cookies, we also recommend that you read our general privacy policy on cookies. To find out exactly which of your data is stored and processed, you should read the privacy statements of the respective tools.
If you have consented that third-party providers may be used, the legal basis of the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur when collected by online marketing tools.
We also have a legitimate interest in measuring online marketing measures in anonymized form in order to optimize our offering and our measures with the help of the data obtained. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use the tools if you have given your consent.
Information on specific online marketing tools - if available - can be found in the following sections.
We use Google AdSense on this website. This is an advertising program of the company Google Inc. In Europe, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google AdSense allows us to display ads on this website that match our theme. In this way, we offer you ads that ideally represent a real added value for you. In the course of this privacy text about Google AdSense, we explain why we use Google AdSense on our website, which of your data is processed and stored, and how you can prevent this data storage.
The Google AdSense advertising program has been around since 2003, but unlike Google Ads (formerly Google AdWords), you can't place ads yourself. Google AdSense displays advertisements on websites, such as ours. The biggest advantage of this advertising service compared to some others is that Google AdSense only shows you ads that match our content. Google has its own algorithm that calculates which ads you will see. Of course, we only want to show you ads that you are interested in and that add value. Google checks which ads are suitable for our website and for our users based on your interests or user behavior and based on our offer. At this point, we would like to mention that we are not responsible for the selection of the advertisements. We only offer the advertising space with our website. The selection of the displayed advertising is made by Google. Since August 2013, the ads are also adapted to the respective user interface. This means that no matter whether you visit our website from your smartphone, your PC or laptop, the ads adapt to your end device.
Running a quality website requires a lot of dedication and great effort. Basically, we are never done working on our website. We always try to maintain our site and keep it as up-to-date as possible. Of course, we also want to achieve economic success with this work. That's why we decided to use advertisements as a source of income. However, the most important thing for us is not to disturb your visit on our website by these ads. With the help of Google AdSense you will only be offered ads that fit our topics and your interests.
Similar to Google indexing for a website, a bot examines the relevant content and offers on the page. Then the ads are adjusted and presented according to content. In addition to the content overlap between the ad and the website offer, AdSense also supports interest-based targeting. This means that Google also uses your data to offer advertising tailored to you. So you get advertising that ideally offers you real added value and we have a higher chance of earning a little something.
In order for Google AdSense to display customized advertising tailored to you, cookies are used, among other things. Cookies are small text files that store certain information on your computer.
In AdSense, cookies are intended to enable better advertising. The cookies do not contain any personally identifiable data. However, it should be noted that Google considers data such as "pseudonymous cookie IDs" (name or other identifier is replaced by a pseudonym) or IP addresses as non-personally identifiable information. However, under the GDPR, this data may be considered personal data. Google AdSense sends a cookie to the browser after every impression (this is always the case when you see an ad), every click and every other activity that leads to a call to the Google AdSense servers. If the browser accepts the cookie, it is stored there.
Third-party vendors may place and read cookies in your browser or use web beacons as part of AdSense to store data they receive from ad delivery on the site. Web beacons are small graphics that do log file analysis and log file recording. This analysis enables statistical analysis for online marketing.
Google may collect certain information about your user behavior on our website through these cookies. This includes:
In the process, Google analyzes and evaluates the data on the displayed advertising media and your IP address. Google uses the data primarily to measure the effectiveness of an ad and to improve the advertising offer. This data is not linked to personal data that Google may have about you via other Google services.
In the following, we present cookies that Google AdSense uses for tracking purposes. Here we refer to a test website that has Google AdSense installed exclusively:
Note:This list cannot claim to be exhaustive, as experience has shown that Google changes its choice of cookies time and again.
Google collects your IP address and various activities you perform on the website. Cookies store this information about interactions on our website. According to Google, the company collects and stores the specified information in a secure manner on Google's in-house servers in the USA.
If you do not have a Google account or are not logged in, Google stores the collected data with a unique identifier (ID) mostly on your browser. The unique IDs stored in cookies are used, for example, to ensure personalized advertising. If you are logged into a Google account, Google may also collect personal data.
You can delete some of the data that Google stores at any time (see next section). Much of the information stored in cookies is automatically deleted after a certain period of time. However, there is also data that is stored by Google for a longer period of time. This is the case when Google, due to economic or legal necessities, has to store certain data over an indefinite longer period of time.
You always have the option to delete or disable cookies that are on your computer. How exactly this works depends on your browser. Under the section "Cookies" you will find the corresponding links to the respective instructions of the most popular browsers.
If you do not want to have cookies in principle, you can set up your browser so that it always informs you when a cookie is to be set. This way you can decide for each individual cookie whether you allow the cookie or not. By downloading and installing this browser plug-in on https://support.google.com/ads/answer/7395996 all "advertising cookies" will also be disabled. Keep in mind that by disabling these cookies you do not prevent the advertisements, but only the personalized advertising.
If you have a Google account, you can visit the website https://adssettings.google.com/authenticated deactivate personalized advertising. You will continue to see ads here as well, but they will no longer be customized to your interests. Still, the ads are displayed based on a few factors, such as your location, browser type, and search terms used.
If you have consented to Google AdSense being used, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur during the collection by Google AdSense.
On our part, there is also a legitimate interest in using Google AdSense to optimize our online service and our marketing measures. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use Google AdSense if you have given your consent.
Google also processes data from you in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks for the legality and security of data processing.
Google uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO) as the basis for data processing for recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there. Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/
You can find out which data Google basically collects and what they use this data for on https://www.google.com/intl/de/policies/privacy/.
Cloud services provide us, as website operators, with storage space and computing power via the Internet. Data can be transferred to an external system, processed and stored via the Internet. The corresponding cloud provider takes over the management of this data. Depending on the requirements, an individual person or even a company can choose the storage space size or computing power. Cloud storage is accessed via an API or via storage protocols. API stands for Application Programming Interface and means a programming interface that connects software with hardware components.
We use cloud services for several reasons. A cloud service offers us the possibility to store our data securely. In addition, we have access to the data from different locations and devices, giving us more flexibility and facilitating our work processes. A cloud storage also saves us money because we don't have to build and manage our own infrastructure for data storage and data security. By storing our data centrally in the cloud, we can also expand our fields of application and manage our information much better.
So, as a website operator or as a company, we primarily use cloud services for our own purposes. For example, we use the services to manage our calendar, to store documents or other important information in the cloud. However, personal data about you may also be stored in the process. This is the case, for example, if you provide us with your contact details (such as name and email address) and we store our customer data with a cloud provider. Consequently, data that we process from you may also be stored and processed on external servers. If we offer certain forms or content from cloud services on our website, cookies may also be set for web analytics and advertising purposes. Furthermore, such cookies remember your settings (such as the language used) so that the next time you visit our website you will find your familiar web environment.
Much of the data we store in the cloud has no personal reference, but some data is considered personal data according to the definition of the GDPR. This is often customer data such as name, address, IP address or telephone number, or technical device information. Furthermore, videos, images and audio files can also be stored in the cloud. Exactly how the data is collected and stored depends on the service in question. We try to use only services that are very trustworthy and professional with the data. Basically, the services, such as Amazon Drive, have access to the stored files in order to offer their own service accordingly. For this, however, the services need permissions, such as the right to copy files due to security aspects. This data is processed and managed within the scope of the services and in compliance with the applicable laws. This also includes the DSGVO for US providers (via the standard contractual clauses). These cloud services also work in some cases with third-party providers who may process data under instruction and in accordance with the privacy policy and further security measures. We would like to emphasize again here that all known cloud services (such as Amazon Drive, Google Drive or Microsoft Onedrive) obtain the right to have access to stored content in order to be able to offer and optimize their own service accordingly.
We will inform you about the duration of data processing below, if we have further information on this. In general, cloud services store data until you or we revoke the data storage or delete the data again. In general, personal data is only stored as long as it is absolutely necessary for the provision of the services. However, a final data deletion from the cloud may take several months. This is the case because the data is usually not only stored on one server, but is divided among various servers.
You also have the right and the possibility to revoke your consent to data storage in a cloud at any time. If cookies are used, you also have a right of revocation here. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection through cookies by managing, deactivating or deleting cookies in your browser. We also recommend that you read our general privacy policy on cookies. To find out exactly what data of yours is stored and processed, you should read the privacy statements of the respective cloud providers.
We use cloud services mainly based on our legitimate interests (Art. 6 (1) lit. f DSGVO) in a good security and storage system.
Certain processing, in particular the use of cookies and the use of storage functions require your consent. If you have consented that data of you can be processed and stored at cloud services, this consent is considered the legal basis of the data processing (Art. 6 para. 1 lit. a DSGVO). Most of the services we use set cookies in your browser to store data. That is why we recommend that you read our privacy text about cookies carefully and view the privacy policy or cookie policy of the respective service provider.
Information on special tools - if available - can be found in the following sections.
We use the cloud service MongoDB for our website. The service provider is the American company MongoDB Inc, 1633 Broadway, 38th Floor, New York, NY 10019, USA.
MongoDB also processes data from you in the USA. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks to the lawfulness and security of data processing.
As a basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there, MongoDB uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, MongoDB undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
MongoDB holds a contract on commissioned processing in accordance with Art. 28 DSGVO, which acts as the data protection basis for our customer relationship with MongoDB. This refers to the EU standard contractual clauses in terms of content. You can find it here: https://www.mongodb.com/legal/dpa.
You can learn more about the data processed by using MongoDB in the Privacy Policy on https://www.mongodb.com/legal/privacy-policy.
We use online payment systems on our website that allow us and you a secure and smooth payment process. Among other things, personal data may be sent to the respective payment provider, stored and processed there. Payment providers are online payment systems that allow you to place an order via online banking. In this case, the payment processing is carried out by the payment provider you have chosen. We then receive information about the payment made. This method can be used by any user who has an active online banking account with PIN and TAN. There are hardly any banks left that do not offer or accept such payment methods.
Of course we want to offer the best possible service with our website and our integrated online store, so that you feel comfortable on our site and use our offers. We know that your time is precious and especially payment processes must work quickly and smoothly. For these reasons we offer you various payment providers. You can choose your preferred payment provider and pay in the usual way.
Exactly which data is processed depends, of course, on the respective payment provider. But basically, data such as name, address, bank data (account number, credit card number, passwords, TANs, etc.) are stored. These are necessary data to be able to carry out a transaction at all. In addition, any contractual data and user data, such as when you visit our website, what content you are interested in or which sub-pages you click on, may also be stored. Your IP address and information about the computer you are using are also stored by most payment providers.
The data is usually stored and processed on the servers of the payment providers. We as the website operator do not receive this data. We are only informed whether the payment has worked or not. For identity and credit checks, it may happen that payment providers forward data to the appropriate body. For all payment transactions, the business and data protection principles of the respective provider always apply. Therefore, please always take a look at the general terms and conditions and the privacy policy of the payment provider. You also have the right to have data deleted or corrected at any time. Please contact the respective service provider regarding your rights (right of revocation, right to information and right to be affected).
We will inform you about the duration of data processing below if we have further information on this. In general, we process personal data only as long as it is absolutely necessary for the provision of our services and products. If it is required by law, for example in the case of accounting, this storage period may be exceeded. For example, we keep accounting documents relating to a contract (invoices, contract documents, account statements, etc.) for 10 years (§ 147 AO) and other relevant business documents for 6 years (§ 247 HGB) after they are created.
You always have the right to information, correction and deletion of your personal data. If you have any questions, you can also contact responsible persons of the payment provider used at any time. You can find contact details either in our specific privacy policy or on the website of the corresponding payment provider.
You can delete, disable, or manage cookies that payment providers use for their functions in your browser. Depending on which browser you use, this works in different ways. Please note, however, that the payment process may then no longer work.
We therefore offer other payment service providers in addition to the traditional banking/credit institutions for the processing of contractual or legal relationships (Art. 6 para. 1 lit. b DSGVO). In the privacy statements of the individual payment providers (such as Amazon Payments, Apple Pay oder Discover), you will be provided with a detailed overview of data processing and data storage. In addition, if you have any questions about data protection-related topics, you can always contact the persons responsible.
Information on the specific payment providers - if available - can be found in the following sections.
We use the online payment service PayPal on our website. The service provider is the American company PayPal Inc. The company PayPal Europe (S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) is responsible for the European region.
PayPal also processes data from you in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks for the legality and security of data processing.
As a basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there, PayPal uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data comply with European data protection standards even if they are transferred to third countries (such as the USA) and stored there. Through these clauses, PayPal undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
For more information about the standard contractual clauses and about the data processed through the use of PayPal, please see the privacy policy on https://www.paypal.com/webapps/mpp/ua/privacy-full.
We use a payment tool from the American technology company and online payment service Stripe on our website. For customers within the EU, Stripe Payments Europe (Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) is responsible. This means that if you choose Stripe as your payment method, your payment will be processed through Stripe Payments. In doing so, data necessary for the payment process will be forwarded to Stripe and stored. In this privacy policy, we provide you with an overview of this data processing and storage by Stripe and explain why we use Stripe on our website.
The technology company Stripe offers payment solutions for online payments. With Stripe it is possible to accept credit and debit card payments in our webshop. Stripe takes care of the entire payment process. A big advantage of Stripe is, for example, that you never have to leave our website or store during the payment process and the payment processing is very fast.
Of course we want to offer the best possible service with our website and our integrated online store, so that you feel comfortable on our site and use our offers. We know that your time is precious and therefore especially payment processes have to work quickly and smoothly. In addition to our other payment providers, we have found a partner in Stripe that ensures secure and fast payment processing.
If you choose Stripe as your payment method, personal data will also be transmitted from you to Stripe and stored there. This is transaction data. This data includes the payment method (i.e. credit card, debit card or account number), bank code, currency, amount and date of payment. In the case of a transaction, your name, e-mail address, billing or shipping address, and sometimes your transaction history may also be transmitted. This data is necessary for authentication. Furthermore, Stripe may collect name, address, phone number and your country in addition to technical data about your device (such as IP address) for fraud prevention, financial reporting and to fully provide its own services.
Stripe does not sell any of your data to unrelated third parties, such as marketing agencies or other companies that have nothing to do with the Stripe company. However, the data may be shared with internal departments, a limited number of external Stripe partners, or for regulatory compliance purposes, for example. Stripe also uses cookies to collect data. Here is a selection of cookies that Stripe may set during the payment process:
Personal data is generally stored for the duration of the service provision. This means that the data is stored until we terminate the cooperation with Stripe. However, in order to comply with legal and regulatory obligations, Stripe may also store personal data beyond the duration of the service provision. Because Stripe is a global company, data may also be stored in any country where Stripe provides services. Thus, data may also be stored outside your country, for example in the USA.
Please note that when using this tool, data from you may also be stored and processed outside the EU. Most third countries (including the USA) are not considered secure under current European data protection law. Data to insecure third countries may therefore not simply be transferred, stored and processed there unless there are suitable safeguards (such as EU standard contractual clauses) between us and the non-European service provider.
You always have the right to information, correction and deletion of your personal data. If you have any questions, you can also contact the Stripe team at any time via https://support.stripe.com/contact/email.
You can delete, disable, or manage cookies that Stripe uses for its functions in your browser. Depending on which browser you use, this works in different ways. Under the section "Cookies" you will find the corresponding links to the respective instructions of the most popular browsers.
We therefore offer the payment service provider Stripe in addition to the traditional banking/credit institutions for the processing of contractual or legal relationships (Art. 6 para. 1 lit. b DSGVO). The successful use of the service further requires your consent (Art. 6 para. 1 lit. a DSGVO), as far as the admission of cookies is necessary for the use.
Stripe also processes data from you in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks for the legality and security of data processing.
Stripe uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO) as the basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there. Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, Stripe undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
For more information on the standard contractual clauses and on the data processed through the use of Stripe, please refer to the Privacy Policy on https://stripe.com/at/privacy.
We use several tools on our website that serve our web design. Web design is not, as often assumed, only about that our website looks pretty, but also about functionality and performance. But of course, the appropriate appearance of a website is also one of the major goals of professional web design. Web design is a branch of media design and deals with the visual as well as the structural and functional design of a website. The goal is to use web design to improve your experience on our website. In web design jargon, this is referred to as user experience (UX) and usability. User experience refers to all impressions and experiences that the website visitor experiences on a website. Usability is a sub-item of user experience. This refers to the user-friendliness of a website. The main emphasis here is on ensuring that content, subpages or products are clearly structured and that you can easily and quickly find what you are looking for. In order to provide you with the best possible experience on our website, we also use so-called third-party web design tools. In this privacy policy, the category "web design" therefore includes all services that improve the design of our website. These can be, for example, fonts, various plugins or other integrated web design functions.
How you absorb information on a website depends very much on the structure, functionality and visual perception of the website. Therefore, a good and professional web design became more and more important for us as well. We are constantly working on improving our website and also see this as an extended service for you as a website visitor. Furthermore, a beautiful and functioning website also has economic advantages for us. After all, you will only visit us and take advantage of our offers if you feel completely comfortable.
When you visit our website, web design elements may be embedded in our pages that can also process data. Exactly what data is involved depends, of course, strongly on the tools used. Further below you can see exactly which tools we use for our website. We recommend that you also read the respective privacy policy of the tools used for more detailed information on data processing. In most cases, you will find out there which data is processed, whether cookies are used and how long the data is stored. Through fonts such as Google Fonts, for example, information such as language settings, IP address, browser version, browser screen resolution and browser name are also automatically transmitted to the Google servers.
How long data is processed is very individual and depends on the web design elements used. For example, if cookies are used, the retention period can be as short as a minute or as long as a few years. Please make yourself clear in this regard. For this purpose, we recommend on the one hand our general text section on cookies, as well as the privacy statements of the tools used. There you will usually find out exactly which cookies are used and what information is stored in them. Google font files, for example, are stored for one year. This is to improve the loading time of a website. In principle, data is only ever stored for as long as is necessary for the provision of the service. In the case of legal requirements, data may also be stored for longer.
You also have the right and the possibility to revoke your consent to the use of cookies or third-party providers at any time. This works either via our cookie management tool or via other opt-out functions. You can also prevent data collection through cookies by managing, disabling or deleting cookies in your browser. However, under web design elements (mostly fonts), there is also data that cannot be deleted quite so easily. This is the case when data is automatically collected directly when a page is called up and transmitted to a third-party provider (such as Google). In this case, please contact the support of the respective provider. In the case of Google, you can reach the support under https://support.google.com/?hl=de.
If you have consented to web design tools being used, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur when web design tools are used. From our side, there is also a legitimate interest to improve the web design on our website. After all, only then can we provide you with a beautiful and professional web offer. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use web design tools insofar as you have given your consent. In any case, we want to emphasize this again here.
Information on specific web design tools - if available - is provided in the following sections.
On our website we use Google Fonts. These are the "Google Fonts" of the company Google Inc. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.
You do not need to log in or enter a password to use Google Fonts. Furthermore, no cookies are stored in your browser. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, the requests for CSS and fonts are completely separate from all other Google services. If you have a Google account, you do not need to worry that your Google account information, while using Google Fonts, will be transmitted to Google. Google records the usage of CSS (Cascading Style Sheets) and the fonts used and stores this data securely. We'll look at exactly what the data storage looks like in more detail.
Google Fonts (formerly Google Web Fonts) is a directory of over 800 fonts that Google provides their users free of charge.
Many of these fonts are released under the SIL Open Font License, while others are released under the Apache License. Both are free software licenses.
With Google Fonts, we can use fonts on our own website, and not have to upload them to our own server. Google Fonts is an important component to keep the quality of our website high. All Google Fonts are automatically optimized for the web and this saves data volume and is a big advantage especially for mobile use. When you visit our site, the low file size ensures a fast loading time. Furthermore, Google Fonts are secure web fonts. Different image synthesis systems (rendering) in different browsers, operating systems and mobile devices can lead to errors. Such errors can sometimes visually distort texts or entire web pages. Thanks to the fast Content Delivery Network (CDN), there are no cross-platform problems with Google Fonts. Google Fonts supports all major browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2+ and iOS 4.2+ (iPhone, iPad, iPod). So, we use the Google Fonts to make all our online service as beautiful and consistent as possible.
When you visit our website, the fonts are reloaded via a Google server. Through this external call, data is transmitted to the Google servers. In this way, Google also recognizes that you or your IP address is visiting our website. The Google Fonts API is designed to reduce the use, storage, and collection of end-user data to what is necessary for proper font delivery. By the way, API stands for "Application Programming Interface" and serves, among other things, as a data transmitter in the software field.
Google Fonts stores CSS and font requests securely at Google and is therefore protected. Through the collected usage figures, Google can determine how well the individual fonts are received. Google publishes the results on internal analysis pages, such as Google Analytics. In addition, Google also uses data from its own web crawler to determine which websites are using Google fonts. This data is published to the Google Fonts BigQuery database. Entrepreneurs and developers use Google's BigQuery web service to be able to examine and move large amounts of data.
It should be noted, however, that each Google Font request also automatically transmits information such as language settings, IP address, browser version, browser screen resolution and browser name to the Google servers. Whether this data is also stored cannot be clearly determined or is not clearly communicated by Google.
Google stores requests for CSS assets for one day on its servers, which are mainly located outside the EU. This allows us to use fonts with the help of a Google stylesheet. A stylesheet is a format template that can be used to easily and quickly change the design or font of a web page, for example.
The font files are stored by Google for one year. Google thus pursues the goal of fundamentally improving the loading time of web pages. When millions of web pages reference the same fonts, they are cached after the first visit and immediately reappear on all other web pages visited later. Sometimes Google updates font files to reduce file size, increase language coverage, and improve design.
The data that Google stores for one day or one year cannot simply be deleted. The data is automatically transmitted to Google when the page is called up. To be able to delete this data prematurely, you must contact Google support at https://support.google.com/?hl=de&tid=312449265. In this case, you only prevent data storange if you do not visit our site.
Unlike other web fonts, Google allows us unlimited access to all fonts. So we can access an unlimited sea of fonts and get the most out of them for our website. You can find more about Google Fonts and other questions on https://developers.google.com/fonts/faq?tid=312449265. There, Google addresses privacy-related matters, but really detailed information about data storage is not included. It is relatively difficult to get really precise information about stored data from Google.
If you have consented to Google Fonts being used, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur during the collection by Google Fonts.
On our part, there is also a legitimate interest in using Google Font to optimize our online service. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use Google Font if you have given your consent.
Google also processes data from you in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks for the legality and security of data processing.
Google uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO) as the basis for data processing for recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there. Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the US. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
The Google Ads Data Processing Terms, which also correspond to the standard contractual clauses for Google Fonts, can be found at https://business.safety.google/adsprocessorterms/.
You can also find out which data is basically collected by Google and what this data is used for on https://www.google.com/intl/de/policies/privacy/.
On our website we use Google Fonts of the company Google Inc. For the European area the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible. We may have embedded the Google fonts locally, i.e. on our web server - not on Google's servers. This means that there is no connection to Google servers and thus no data transfer or storage.
Congratulations! If you are reading these lines, you have really "fought" your way through our entire privacy policy, or at least scrolled this far. As you can see from the scope of our privacy policy, we take the protection of your personal data, anything but lightly. It is important to us to inform you to the best of our knowledge and belief about the processing of personal data. However, we do not only want to tell you which data is processed, but also to explain the reasons for the use of various software programs. As a rule, privacy statements sound very technical and legalistic. However, since most of you are not web developers or lawyers, we also wanted to take a different approach linguistically and explain the facts in simple and clear language. Of course, this is not always possible due to the subject matter. Therefore, the most important terms are explained in more detail at the end of the privacy policy. If you have any questions about data protection on our website, please do not hesitate to contact us or the responsible office. We wish you a nice time and hope to welcome you on our website again soon.
All texts are copyright protected.
Source: Created with the Privacy Policy generator from AdSimple
Login to Mental Maths and start your journey to transform your mental math skills in minutes a day! Training mental math offers a whole lot of benefits, dont miss out on the opportunity to unlock your full potential, think faster and stimulate your brainpower.