Everybody should have the possibility to reach his desired services and information easily and simply on the Internet. It is a special concern of ours to inform you directly and to make our offers and services easily and clearly accessible.

As an end consumer and entrepreneur you have the inalienable right that your data is handled in accordance with the law and furthermore with care. These rights and obligations are secretly reduced to the word data protection. However, this term does not go far enough. After all, this is about the protection of people. Therefore there is a need for information and clarification about your data and how we handle it.

In the following, we would like to inform you about the precautions we have taken to protect the data you send to us. In addition, we would like to inform you about which data we collect, how we store this data and how we process it.

Note: All offers of the Mephisto Make-up Artist School Hasso von Hugo GmbH are directed at end users and entrepreneurs.

Who are we?

Mephisto make-up artist school Hasso von Hugo GmbH
Lützowstr. 105
Recognized supplementary school
10785 Berlin
kontakt@maskenbildnerschule.de

Who is responsible for data protection in our company?

Everyone at our company is responsible for data protection.

What happens when I use the website for purely informational purposes?

If you use our website for purely informational purposes, i.e. if you neither register as a user nor otherwise transmit information, we collect the following data from you: IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request originated, browser, operating system and its interface, language and version of the browser software. We receive this data via cookies and directly from your browser. The purpose of this processing is to provide our website and for statistical evaluation.

The legal basis for this is Article 6 paragraph 1 sentence 1 letter f DSGVO, according to which the processing of personal data may also be carried out without the consent of the data subject if the processing is necessary to safeguard the legitimate interests of the controller or of a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular if the data subject is a child. The aforementioned purposes are in our interest. If we use cookies, we refer to our explanations under „How do we use cookies on this website?

Note on the responsible body

The person responsible for data processing on this website is

Mephisto Make-up Art School Hasso von Hugo GmbH
Lützowstr. 105
Recognized supplementary school
10785 Berlin
kontakt@maskenbildnerschule.de

Responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Informational use of our website

data categories
Within the scope of the informational use of our website, we process the following data: IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request comes, browser, operating system and its interface, language and version of the browser software.

If you come to us via a link that you received from one of our referrers from our partner program (affiliate), we process the affiliate ID (cookie).

Sources
We receive this data directly from your browser and, if applicable, via cookies.
purposes
The collection of this data enables you to visit our website and, if applicable, to fulfill our obligations in the partner program and to address us in advertising.
Storage period
We will delete the data as soon as it is no longer required for visiting our site or until you request its deletion, whichever is earlier.
Legal basis
Article 6 paragraph 1 lit. f DSGVO

Registration to use the internal area

data categories
In the context of the registration to and the use of the internal area of our website the following data are processed for your contractual partner Digistore24 GmbH: mandatory fields ➔ first name, last name, e-mail, street, house number, zip code, city, country, telephone number, payment data voluntary fields ➔ telephone number, voucher code

After registration, their complete actions are documented as instructions in the internal area.

Sources
Your entries in the registration area
purposes
Initiation and implementation of the contractual relationship
Save time
The data will be deleted as soon as Digistore24 orders this.
legal basis
Article 6 paragraph 1 lit. b DSGVO Note: Order processing with DigiStore according to Article 28 DSGVO

Newsletter subscription

data categories
We process the following data within the scope of newsletter registration and newsletter delivery: e-mail address, IP address when registering, date and time of registration, IP address when confirming, date and time of confirmation, bounce status, referrer (URL of registration), IP address when cancelling, date and time of cancellation, first name and surname, SMS: cell phone number, date and time of registration, date and time of cancellation, SMS status, see also our explanations under „What happens to your data when you subscribe to our newsletter?

sources
We receive this data directly from you
purposes
advertising, market research or for the design of our website to meet the needs of our customers.
Save time
We delete the data as soon as it is no longer required for the purpose stated on the left or until you request its deletion, whichever is earlier.
Legal basis
Article 6 paragraph 1 lit. a DSGVO (You can revoke your consent at any time with effect for the future).

Conclusion of an information contract

data categories
If you conclude an information contract with us, according to which we are obliged to send you training contents and comparable information on a regular basis, we process the following data: E-mail address, IP address upon registration, date and time of registration, IP address upon confirmation, date and time of confirmation, bounce status, referrer (URL of registration), IP address upon cancellation, date and time of cancellation, first name and surname, SMS: cell phone number, date and time of registration, date and time of cancellation, SMS status,

Please also read our explanations under „What happens to your data when the information contract is fulfilled?

sources
Your data within the scope of the conclusion of the information contract
purposes
The fulfillment of the information contract
Save time
After expiration of the legal storage obligations
legal basis
Article 6 paragraph 1 lit. b DSGVO

Google Analytics

data categories
Google Analytics, see our explanations under „How do we use Google Analytics? (also with regard to sources, purposes, storage period)

sources
Your visitor behavior on our website, cookies
purposes
advertising, market research or for the design of our website according to your needs.
Save time
We delete the data as soon as it is no longer required for the purpose stated on the left or until you request its deletion, whichever is earlier.

Social Media Plug-in „Facebook“

data categories
Social Media Plug-in „Facebook“, see our comments below: „How do we use social media plug-ins?“ (also with regard to sources, purposes, storage duration)

sources
Your visitor behavior on our website, cookies
purposes
advertising, market research or for the design of our website according to your needs.
Save time
We will delete the data as far as we are able and as soon as they are no longer required for the purpose stated on the left or until you request their deletion, whichever is earlier.

Social Media Plug-in „Google+“

data categories
Social Media Plug-in „Google+“, see our comments below: „How do we use social media plug-ins?“ (also with regard to sources, purposes, storage duration)

sources
Your visitor behavior on our website, cookies
purposes
advertising, market research or for the design of our website according to your needs.
Save time
We delete the data as soon as it is no longer required for the purpose stated on the left or until you request its deletion, whichever is earlier.

Social Media Plug-in „LinkedIn“

data categories
Social Media Plug-in „LinkedIn“, see our explanations below: „How do we use Social-Media-Plug-ins?“ (also with regard to sources, purposes, storage duration)

sources
Your visitor behavior on our website, cookies
purposes
advertising, market research or for the design of our website according to your needs.
Save time
We delete the data as soon as it is no longer required for the purpose stated on the left or until you request its deletion, whichever is earlier.

YouTube

data categories
YouTube, cf. our comments below: „How do we use YouTube?“ (also with regard to sources, purposes, storage period)

sources
Your visitor behavior on our website, cookies
purposes
advertising, market research or for the design of our website according to your needs.
Save time
We delete the data as soon as it is no longer required for the purpose stated on the left or until you request its deletion, whichever is earlier.

Google Adwords Conversion

data categories
Google Adwords Conversion, see our explanations under „How do we use Google Adwords Conversion“ (also with regard to sources, purposes, storage period)

sources
Your visitor behavior on our website, cookies
purposes
advertising, market research or for the design of our website according to your needs.
Save time
We delete the data as soon as it is no longer required for the purpose stated on the left or until you request its deletion, whichever is earlier.

Google Remarketing

data categories
Google Remarketing, see our explanations under „How do we use Google Remarketing? (also with regard to sources, purposes, storage period)

sources
Your visitor behavior on our website, cookies
purposes
advertising, market research or for the design of our website according to your needs.
Save time
We delete the data as soon as it is no longer required for the purpose stated on the left or until you request its deletion, whichever is earlier.

Facebook Custom Audiences

data categories
Facebook Custom Audiences, see our explanations under „How do you use Facebook Custom Audiences? (also with regard to sources, purposes, storage period)

sources
Your visitor behavior on our website, cookies
purposes
advertising, market research or for the design of our website according to your needs.
Save time
We delete the data as soon as it is no longer required for the purpose stated on the left or until you request its deletion, whichever is earlier.
Legal basis
Article 6 paragraph 1 lit. a/b DSGVO

A/B testing

data categories
A/B testing, see our explanations under „How do we use A/B testing? (also with regard to sources, purposes, storage duration)

sources
Your visitor behavior on our website, cookies
purposes
advertising, market research or for the design of our website according to your needs.
Save time
We delete the data as soon as it is no longer required for the purpose stated on the left or until you request its deletion, whichever is earlier.

What happens during the purely informational use of the Internet site?

If you use our website for purely informational purposes, i.e. if you neither register as a user nor otherwise transmit information, we collect the following data from you IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transmitted in each case, website from which the request originates, browser, operating system and its interface, language and version of the browser software. If you come to us via a link that you received from one of our referrers from our partner program (affiliate), we process the affiliate ID (cookie). We receive this data via cookies and directly from your browser. The purpose of this processing is to provide our website and for statistical analysis. The legal basis for this is Article 6 paragraph 1 sentence 1 letter f DSGVO, according to which the processing of personal data may be carried out without the consent of the data subject if the processing is necessary to safeguard the legitimate interests of the controller or of a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular if the data subject is a child. The aforementioned purposes are in our interest. If we use cookies, we refer to our explanations under „How do we use cookies on this website?

How do we use cookies on this Internet page?

The Internet pages partly use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called „session cookies“. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.

Furthermore, cookies are stored on your computer when you use the website. Cookies are small text files that are stored on your hard drive in accordance with the browser you are using and through which certain information flows to the site that sets the cookie (in this case, to us). Cookies cannot execute programs or transfer viruses to your computer. They are used to make the Internet offer as a whole more user-friendly and effective. The cookies are deleted at the latest when the following period expires: 365 days.

What happens when using our contact field ?

If you communicate with us via our contact field, we collect the following data: First name, last name, e-mail address, website, cell phone number, phone number, subject, message. Only you know the reasons for contacting us; the reaction to this immediately describes the purpose of the processing. Insofar as a concrete contractual relationship is involved, whether in connection with the initiation, implementation or termination, the legal basis for processing is Article 6 paragraph 1 letter b DSGVO. In this case, we store the data until the end of the statutory retention period. In all other cases, the legal basis is Article 6 paragraph 1 sentence 1 letter f DSGVO, according to which the processing of personal data may also be carried out without the consent of the data subject if the processing is necessary to safeguard the legitimate interests of the controller or of a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular if the data subject is a child. Communication outside of a contractual relationship is in our mutual interest. We store your data until the purpose resulting from the legitimate interest is fulfilled.

What happens when registering for and using the internal area ?

In the context of the registration to and the use of the internal area of our website the following data are processed for your contractual partner Digistore24 GmbH: mandatory fields: First name, last name, e-mail, street, house number, postal code, city, country, telephone number, payment data, voluntary fields: Telephone number, voucher code, After registration your complete actions will be documented as instructions in the internal area. . Within the internal area we register your actions as far as this is necessary for the provision of the hereby pursued contractual relationship. Legal basis is article 6 paragraph 1 lit. b DSGVO. We store the data until the end of the legal retention period.

What happens during the processing of customer and contract data?

We collect, process and use personal data only to the extent that they are necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We collect, process and use personal data on the use of our Internet pages (usage data) only to the extent necessary to enable or charge the user for the use of the service.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

What happens when data is transferred by concluding a contract for services and digital content?

We only transfer personal data to third parties if this is necessary for the execution of the contract, for example to the credit institution commissioned with the handling of payments.

A further transmission of the data is not carried out or only if you have expressly agreed to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 Par. 1 letter b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

What happens with your data during our newsletter?

(1) With your consent you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent. The legal basis is then your consent pursuant to Article 6 paragraph 1 sentence 1 lit. a DSGVO. We store the data until your consent is revoked.

(2) We use the so-called double-opt-in procedure to register for our newsletter. This means that after your registration, we will send you an e-mail to the e-mail address provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month. In addition, we store your IP address and the time of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

(3) We process the following data within the scope of newsletter registration and newsletter delivery: E-mail address, IP address upon registration, date and time of registration, IP address upon confirmation, date and time of confirmation, bounce status, referrer (URL of registration), IP address upon cancellation, date and time of cancellation, first name and surname, SMS: cell phone number, date and time of registration, date and time of cancellation, SMS status.

(4) You can revoke your consent to the sending of the newsletter and unsubscribe from the newsletter at any time. You can revoke your consent by clicking on the link provided in each newsletter e-mail, [via this form on the website,] by e-mail to [Newsletter@example.com] or by sending a message to the contact details given in the imprint.

(5) We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the analysis we link the data mentioned in paragraph 3 and the web beacons with your e-mail address and an individual ID. OPTIONAL: Links received in the newsletter also contain this ID] [EITHER:] The data is collected pseudonymously, the IDs are therefore not linked to your other personal data, a direct personal reference is excluded. OR:] With the data thus obtained, we create a user profile to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on and deduce your personal interests. We link this data to actions you take on our website. [END of Alternatives] You can object to this tracking at any time by clicking on the separate link provided in each e-mail or by informing us via another contact channel. The information is stored as long as you have subscribed to the newsletter. After you unsubscribe, we store the data purely statistically and anonymously. OPTIONAL: Such tracking is also not possible if you have deactivated the display of images in your e-mail program by default. In this case the newsletter will not be displayed completely and you may not be able to use all functions. If you display the images manually, the tracking mentioned above will take place].

How do we use click-tip?

(1) We use click-tip. The provider of Klick-Tipp is KLICK-TIPP LIMITED, 15 Cambridge Court, 210 Shepherd’s Bush Road, London W6 7NJ, United Kingdom (from now on: Klick-Tipp). You can find more information on data protection at Klick-Tipp at https://www.klick-tipp.com/datenschutzerklärung. You can also find out more about the possible applications and the way in which your data is processed under https://www.klick-tipp.com/handbuch.

(2) Our contractual partner, Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim in Germany, in its function as reseller, has enabled us to gain access to the click-tip services. Abstractly, we have commissioned Klick-Tipp to do so in accordance with Article 28 DSGVO. At first we carefully selected Klick-Tipp. Afterwards we bound Klick-Tipp according to the contract and thus made sure that we kept full control over the data and that Klick-Tipp followed our instructions. Finally, we will regularly check and monitor Klick-Tipp to ensure that Klick-Tipp continues to comply with data protection laws.

(3) We use so-called tags in communications with you (e.g. for processing the contract or for follow-up e-mails). You can find more information about this here: https://www.klick-tipp.com/handbuch/erste-schritte/tag-erstellen. Contract decisions are not based on this. The tags are mainly used to enable us to fulfil our obligations in the pre-contractual and contractual relationship. They also enable us to communicate with you automatically, which increases our availability and thus our service level. If we use the tags to send advertising messages, this is part of the legal basis. We also use the tags for the improvement of the advertising address.  Therefore, if you do not want analysis by click-tip, you must unsubscribe from the newsletter or webinar. For this purpose, we provide a corresponding link in every message that is aimed at this. You can also unsubscribe from the newsletter or webinar directly on the website.

(4) Klick-Tipp provides interfaces for the use of other third-party service providers. Insofar as we use third-party service providers via these interfaces, we refer to the remaining data protection declaration and the declarations on third-party service providers there.

How do we use Google Analytics?

(1) This website uses Google Analytics, a web analysis service of Google Inc. („Google“). Google Analytics uses „cookies“, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before this happens. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage.

The legal basis is Article 6 paragraph 1 sentence 1 letter f DSGVO, Article 6 paragraph 1 sentence 1 letter f DSGVO, according to which the processing of personal data may also be carried out without the consent of the data subject if the processing is necessary to protect the legitimate interests of the data controller or a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular if the data subject is a child. It is our legitimate business interest to evaluate user behavior on this website. Your interests are protected by your avoidance options, which we will describe later, and by anonymization. We have also concluded an order processing agreement with the provider, thus ensuring our right to issue instructions to the provider.  We delete the data after 14 months at the latest.

(2) The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google.

(3) You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension „_anonymizeIp()“. This allows IP addresses to be further processed in a shortened form, thus excluding the possibility of personal references. If the data collected about you contains a personal reference, this is immediately excluded and the personal data is immediately deleted.

(5) This website uses the function „demographic characteristics“ of Google Analytics. This allows reports to be generated which contain statements on the age, gender and interests of the site visitors. This data comes from interest-based advertising by Google as well as from visitor data from third parties. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google Account or generally prohibit the collection of your data by Google Analytics as described in the section „Objection to data collection by Google“.

(6) We use Google Analytics to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

(7) Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, Privacy policy: http://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.

Opposition against data collection by Google

.
You can prevent the collection of your data by Google Analytics by clicking on the following link An opt-out cookie will be set to prevent the collection of your information on future visits to this site: [borlabs_cookie_opt_out tracking=“google-analytics“]

You can find more information on how Google Analytics handles user data in the Google privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

How do we use Google AdWords and Google Conversion Tracking?

.
This website uses Google AdWords. AdWords is an online advertising program of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States („Google“).

In the context of Google AdWords we use the so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the Internet browser stores on the user’s computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not expired, Google and we can recognize that the user clicked on the ad and was redirected to that page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked through the websites of AdWords customers. The information collected through the conversion cookie is used to compile conversion statistics for AdWords customers who have opted in to conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users. If you do not wish to participate in tracking, you can opt-out of this use by slightly disabling the Google conversion tracking cookie on your web browser under User Preferences. You will then not be included in the conversion tracking statistics.

The storage of „conversion cookies“ is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the analysis of user behavior in order to optimize both his website and his advertising.

More information on Google AdWords and Google Conversion Tracking can be found in the Google data protection regulations: https://www.google.de/policies/privacy/.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

How do we use Google Remarketing?

We use the Google Remarketing application. This is a procedure with which we would like to address you again. By means of this application, our advertisements can be shown to you after visiting our website during your further internet use. This is done by means of cookies stored in your browser, which are used by Google to record and evaluate your usage behavior when you visit various websites. In this way Google can determine your previous visit to our website. A combination of the data collected within the scope of remarketing with your personal data, which may be stored by Google, does not take place by Google according to its own statements. According to Google, pseudonymisation is used in remarketing. This is done across all devices on all end devices to which you are logged in with a Google account or were logged in for even a short moment. You have the possibility to revoke this consent at any time; this can be done by simple message, without preconditions and with effect for the future to the contact channels mentioned in our imprint.

How do we use Google reCAPTCHA?

We use „Google reCAPTCHA“ (hereinafter „reCAPTCHA“) on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“).

The purpose of reCAPTCHA is to check whether the data input on our websites (e.g. in a contact form) is done by a human being or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For analysis purposes, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.

The data processing is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting his web offers from abusive automated spying and from SPAM.

Further information on Google reCAPTCHA and Google’s privacy policy can be found in the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

How do we use Google Web Fonts?

.
This site uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.

For this purpose, the browser you are using must connect to the servers of Google. This enables Google to know that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offers. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO.

If your browser does not support Web Fonts, a standard font from your computer will be used.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in the Google privacy policy: https://www.google.com/policies/privacy/.

How do we use Google Maps?

.
This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an attractive presentation of our online offers and to make it easy to find the places we have indicated on the website. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO.

More information on the handling of user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

How do we use social media plug-ins?

(1) We currently use the following social media plug-ins: Facebook, Google+, Twitter, Instagram. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the initial letter or logo of the provider on the box. We give you the opportunity to communicate directly with the provider of the plug-in by clicking the button. Only if you click on the marked box and thereby activate it, the plug-in provider will receive the information that you have accessed the corresponding website of our online offer. In addition, the data mentioned in paragraph 3 will be transmitted. In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymized immediately after it is collected. By activating the plug-in, your personal data is thus transmitted to the respective plug-in provider and stored there (in the case of US providers in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the grayed-out box.

(2) We have no influence on the collected data and data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also have no information about the deletion of the collected data by the plug-in provider.

(3) The plug-in provider stores the data collected about you as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the purpose of presenting need-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user.

(4) The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data collected by us will be directly assigned to your existing account with the plug-in provider. If you click on the activated button and, for example, link the page, the plug-in provider will also save this information in your user account and publicly share it with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as you can then avoid being assigned to your profile with the plug-in provider.

(5) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the following data protection declarations of these providers. There you will also find further information on your rights and settings options for protecting your privacy.

(6) We also maintain a company website with each of these providers. If you interact with this company site, the provider may process your data as described in paragraphs 2 to 5.

(7) The legal basis is Article 6 paragraph 1 sentence 1 letter f DSGVO, Article 6 paragraph 1 sentence 1 letter f DSGVO, according to which the processing of personal data may be carried out without the consent of the data subject if the processing is necessary to safeguard the legitimate interests of the controller or of a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular if the data subject is a child. It is our legitimate business interest to give you the opportunity to interact with us voluntarily in social networks – as described here.

(8) Addresses of the respective plug-in providers and URL with their data protection information:

a) Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US privacy shield, https://www.privacyshield.gov/EU-US-Framework.

b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

c) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US privacy shield, https://www.privacyshield.gov/EU-US-Framework.

d) Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA, https://help.instagram.com/155833707900388.

How do we use YouTube videos?

(1) We have integrated YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website. . Here we have also implemented a two-click solution, see our explanations under „How do we use social media plug-ins?

(2) By visiting the website, YouTube receives the information that you have called up the corresponding subpage of our website. In addition, the data mentioned in paragraph 3 is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not want the assignment with your profile on YouTube, you have to log out before activating the button. YouTube stores your data as user profiles and uses them for the purpose of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the purpose of providing need-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

(3) For more information on the purpose and scope of data collection and processing by YouTube, please refer to the Privacy Policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

(4) We also maintain a company website with this provider. If you interact with this company site, it is possible that the provider may process your data as described in paragraphs 2 and 3.

(5) The legal basis is Article 6 paragraph 1 sentence 1 letter f DSGVO, Article 6 paragraph 1 sentence 1 letter f DSGVO, according to which the processing of personal data may also be carried out without the consent of the data subject if the processing is necessary to protect the legitimate interests of the controller or of a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data outweigh the data subject’s own interests or fundamental rights and freedoms, in particular if the data subject is a child. Here we refer to our interest in direct advertising according to ErwG 47 a.E. DSGVO.

How do we use Vimeo?

(1) Our website includes plugins from the Vimeo video portal of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. Each time you access a page that offers one or more Vimeo video clips, a direct connection is established between your browser and a Vimeo server in the USA. Information about your visit and your IP address is stored there. Through interaction with the Vimeo plug-ins (e.g. clicking the start button), this information is also transmitted to Vimeo and stored there. . Here we have also implemented a two-click solution, see our explanations under „How do we use social media plug-ins?

(2) If you have a Vimeo user account and do not want Vimeo to collect information about you through this website and link it to your membership data stored at Vimeo, you must log out of Vimeo before visiting this website.

(3) The privacy policy for Vimeo with more detailed information on the collection and use of your data by Vimeo can be found at http://vimeo.com/privacy.

(4) Vimeo also calls up the Google Analytics tracker via an iFrame in which the video is called up. This is Vimeo’s own tracking, which we do not have access to. You can stop tracking by Google Analytics by using the deactivation tools that Google offers for some Internet browsers. Furthermore, users can prevent the collection of data generated by Google Analytics and related to their use of the website (including their IP address) from being sent to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

(5) The legal basis is Article 6 paragraph 1 sentence 1 letter f DSGVO, Article 6 paragraph 1 sentence 1 letter f DSGVO, according to which the processing of personal data may be carried out without the consent of the data subject if the processing is necessary to safeguard the legitimate interests of the controller or of a third party, except where such interests or fundamental rights and freedoms of the data subject which require the protection of personal data are overridden, in particular where the data subject is a child. Here we refer to our interest in direct advertising according to ErwG 47 a.E. DSGVO.

How do we use Facebook pixels with extended matching ?

With your consent you have allowed us to use the analysis tool Facebook-Pixel from Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US privacy shield, https://www.privacyshield.gov/EU-US-Framework. Facebook pixel is an analysis tool that can be used to measure the effectiveness of advertising. It is usually used to understand and trace the actions of people on a website. You implement the Facebook pixel on a website by placing the pixel code in the header of the website. If someone then visits the website and performs an action (for example, makes a purchase), the Facebook pixel is triggered and the action is reported. In this way, you can find out when a customer performs an action and evaluate it. There is also the possibility of advanced matching, which we also use and which is also covered by your consent. The Facebook pixel makes it possible to transmit customer data such as first name, last name, email address, etc. to Facebook and enrich it with existing tracking data. This makes it possible to also collect data from non-facebook users or to record users who are not logged in to Facebook while visiting a website. In this way, website visitors are tracked via Facebook, which deliberately prevents the storage of third-party cookies. You have the possibility to revoke this consent at any time; this can be done by sending a simple message, without preconditions and with effect for the future to the contact channels mentioned in our imprint.

[borlabs_cookie_opt_out tracking=“facebook-pixel“]

How do we use the tool Facebook Custom Audiences?

The website also uses the remarketing function „Custom Audiences“ of Facebook Inc. („Facebook“). This enables users of the website to be presented with interest-related advertisements („Facebook Ads“) when they visit the social network Facebook or other websites that also use the process. In this way, we pursue the interest in displaying ads that are of interest to you in order to make our website more interesting for you.  Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Facebook Custom Audiences, Facebook receives the information that you have called up the corresponding website of our Internet presence or clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and store your IP address and other identifying features. It is possible for logged-in users to deactivate the „Facebook Custom Audiences“ function under https://www.facebook.com/settings/?tab=ads#_. Further information on data processing by Facebook can be found at https://www.facebook.com/about/privacy. You can revoke your consent at any time by informing us informally via one of the contact channels specified in our imprint. The legal basis is Article 6 paragraph 1 sentence 1 lit. f DSGVO, according to which the processing of personal data may be carried out without the consent of the data subject if the processing is necessary to safeguard the legitimate interests of the controller or of a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data outweigh this, in particular if the data subject is a child. Here we refer to our interest in direct advertising according to ErwG 47 a.E. DSGVO. We delete the data as soon as the purpose no longer applies, at the latest when you opt against processing.

How do we use A/B testing ?

(1) This website also carries out analyses of user behaviour via so-called A/B testing. In doing so, we can display our websites with slightly different content, depending on a profile assignment. This enables us to analyse our offer, improve it regularly and make it more interesting for you as a user.

(2) For this evaluation, cookies (for more details see paragraph 3) are stored on your computer. The information collected in this way is stored by the responsible person exclusively on his server in Germany. You can prevent the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, we point out that you may not be able to use our website to its full extent. The prevention of the storage of cookies is possible through the settings in your browser.

(3) Before the analyses are carried out, the IP addresses are further processed in a shortened form so that a direct personal reference can be excluded. The IP address transmitted by your browser is not merged with other data collected by us.

(4) The service provider of the analysis is KLICK-TIPP LIMITED, 15 Cambridge Court, 210 Shepherd’s Bush Road, London W6 7NJ. You can obtain information from the third party provider on data protection at https://www.klick-tipp.com/datenschutzerklärung.

(5) The legal basis is Article 6 paragraph 1 sentence 1 letter f DSGVO, Article 6 paragraph 1 sentence 1 letter f DSGVO, according to which the processing of personal data may be carried out without the consent of the data subject if the processing is necessary to protect the legitimate interests of the controller or of a third party, except where such interests or fundamental rights and freedoms of the data subject which require the protection of personal data are overridden, in particular where the data subject is a child. Here we refer to our interest in direct advertising according to ErwG 47 a.E. DSGVO. We delete the data as soon as the purpose no longer applies, at the latest when you opt against processing.

Encrypted payment transactions on this website

If there is an obligation to provide us with your payment data (e.g. account number for direct debit authorization) after the conclusion of a chargeable contract, this data is required for payment processing.

The payment transactions via the usual means of payment (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from „http://“ to „https://“ and by the lock symbol in your browser line.

In the case of encrypted communication, your payment data that you transmit to us cannot be read by third parties.

How do we set PayPal

On our website we offer payment via PayPal among other things. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter „PayPal“).

If you choose to pay via PayPal, the payment data you enter will be transmitted to PayPal.

The transmission of your data to PayPal is based on art. 6 para. 1 lit. a DSGVO (consent) and art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). You have the possibility to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations carried out in the past.

Are we obliged to collect this data? What happens if we do not collect these data?

There is no legal obligation to collect this data. However, there is the possibility that if the collection of data is not carried out, the visit of our website may be made more difficult.

To whom do we transfer the data? And: Do the data leave the European Union or the European Economic Area ?

The following companies receive the above mentioned data. In the following, we point out if the data leaves the European Union or the European Economic Area:

Third country reference:

• • Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; weitere Informationen zur Datenerhebung: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other applications sowie http://www.facebook.com/about/privacy/your-info everyoneinfo.
  • Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de.
  • Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy.
  • Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA, https://help.instagram.com/155833707900388
  • Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA

Other:

• Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 (Google Analytics)

Do we guarantee sufficient data security?

We maintain current technical measures to ensure data security, in particular to protect your personal data from dangers during data transmission and from third parties gaining knowledge of it. These measures are adapted to the current state of the art.

Which rights do you have?

You have some rights. You have the right of access to the personal data processed concerning you, as well as the right to rectification or cancellation, restriction of processing, opposition to processing and data transferability. You also have the possibility to complain about us to the supervisory authority responsible for us. We respectfully point out that this right may be subject to conditions which we will insist on being met

How do we use SSL or TLS encryption?

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from „http://“ to „https://“ and by the lock symbol in your browser line.

If the SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.