1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about the handling of your personal data when using our website. Personal data is all data that can be used to personally identify you.
1.2 The controller for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is Bünyamin Alirkilicarslan, Ads-Tracking, Michael-Vehe-Str. 17, 74078 Heilbronn, Germany, email: firstname.lastname@example.org. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser bar.
If you merely use our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website:
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.
In order to make the visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
If individual cookies implemented by us also process personal data, processing is carried out in accordance with Art. 6 (1) lit. b GDPR either for the performance of the contract or in accordance with Art. 6 (1) lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
We may work with advertising partners who help us make our internet offering more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we cooperate with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the data collected in the following paragraphs.
Please note that you can set your browser so that you are informed about the setting of cookies and can individually decide on their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers at the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Please note that if you do not accept cookies, the functionality of our website may be limited.
4.1 Microsoft Bookings
This website uses the "Microsoft Bookings" software from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft") to provide an online appointment booking function.
For the purpose of making appointments, the first and last name as well as the email address (and, if a telephone appointment is desired, the telephone number) will be collected in accordance with Art. 6 para. 1 lit. b GDPR and transmitted to Microsoft based on our legitimate interest in effective customer management and efficient appointment management, and stored there for appointment organization. After the appointment has been held or after the agreed appointment period has expired, your data will be deleted by Microsoft. We have concluded a contract with Microsoft for the use of Microsoft Bookings as an order processor, which obliges Microsoft to protect the data of our site visitors and not to disclose it to third parties. Processing regularly takes place within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. However, data transfers to the USA cannot be ruled out. For the transfer of data from the EU to the USA, Microsoft relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
For further information on Microsoft Bookings and Microsoft's data protection regulations, please visit: https://privacy.microsoft.com/de-de/privacystatement
4.2 In the course of contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after final processing of your request, provided that it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no legal storage obligations to the contrary.
We offer visitors to our website the opportunity to contact us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the so-called "business version" of WhatsApp for this purpose.
If you contact us via WhatsApp on the occasion of a specific business transaction (e.g. a placed order), we will store and use the mobile phone number you use at WhatsApp and - if provided - your first and last name pursuant to Art. 6 (1) lit. b GDPR for processing and answering your request. On the basis of the same legal basis, we may ask you for additional data (order number, customer number, address or e-mail address) via WhatsApp in order to be able to assign your request to a specific process.
If you use our WhatsApp contact for general inquiries (e.g. about the range of services, availability or our website), we will store and use the mobile phone number you use at WhatsApp and - if provided - your first and last name pursuant to Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in providing the desired information efficiently and promptly.
Your data will only be used for answering your request via WhatsApp. No data will be passed on to third parties.
Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Facebook Inc. in the USA. We use a mobile device to operate our WhatsApp Business account, in whose address book only the WhatsApp contact data of those users are stored who have also contacted us via WhatsApp.
Sending newsletters to existing customers by email
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. We do not need to obtain separate consent from you for this purpose in accordance with § 7 (3) of the German Unfair Competition Act (UWG). The data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 (1) lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible party mentioned at the beginning. You will only incur transmission costs at the basic rates. After receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.
Facebook Pixel for creating custom audiences with extended data matching (without cookie consent tool) Within our online offering, the so-called "Facebook Pixel" of the social network Facebook is used in the mode of extended data matching, which is operated by Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
Based on his express consent, when a user clicks on a Facebook ad displayed by us, the URL of our linked page is appended by Facebook Pixel. Then this URL parameter is written into the user's browser by cookie after redirection, which is set by our linked page itself. In addition, specific customer data such as the email address, which we collect on our website linked with the Facebook ad during processes such as purchases, account registrations, or registrations, are collected (extended data matching) by this cookie. The cookie is then read by Facebook Pixel and enables forwarding of the data, including the specific customer data, to Facebook.
With the help of the Facebook Pixel with extended data matching, Facebook can, on the one hand, precisely determine the visitors of our online offering as a target group for the display of ads (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel with extended data matching to display the Facebook Ads we have placed only to those Facebook users who have shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products that are determined based on the visited websites) which we transmit to Facebook (so-called "Custom Audiences"). With the help of Facebook Pixel with extended data matching, we also want to ensure that our Facebook Ads correspond to the potential interests of the users and do not appear intrusive. This way, we can further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Compared to the standard version of Facebook Pixel, the function of extended data matching helps us to better measure the effectiveness of our advertising campaigns by capturing more assigned conversions. All transmitted data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with Facebook's data usage policy ( https://www.facebook.com/about/privacy/ ). The data may enable Facebook and its partners to place advertisements on and off Facebook. These processing operations only take place with the express consent given in accordance with Art. 6 para. 1 lit. a GDPR.
Consent to the use of the Facebook Pixel may only be given by users who are older than 13 years of age. If you are younger, we ask you to seek permission from your parents or legal guardians. The information generated by Facebook is generally transmitted to and stored on a server operated by Facebook, which may also involve a transfer to the servers of Facebook Inc. in the USA. You can revoke your consent at any time by deactivating Facebook Pixel tracking. For this purpose, you can set an opt-out cookie by clicking the link below, which will disable Facebook Pixel tracking:
Deactivate Facebook Pixel
This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will need to click the link above again.
7.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies", which are text files that are stored on your device and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transmitted to and stored on a server operated by Google, which may also involve a transfer to the servers of Google LLC. in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes direct personal reference. With this extension, your IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area prior to transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a server of Google LLC. in the USA and truncated there.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with further services related to website and internet use. The IP address transmitted by your browser in the context of Google (Universal) Analytics is not merged with other Google data.
Google Analytics also allows the creation of statistics on age, gender, and interests of website visitors based on an evaluation of interest-based advertising and third-party information, using a special feature called "demographic characteristics". This allows the definition and differentiation of user groups for the purpose of targeted marketing measures. However, data records collected via "demographic characteristics" cannot be assigned to a specific person.
Details on the processing triggered by Google Analytics and Google's handling of website data can be found here: https://policies.google.com/technologies/partner-sites.
All of the processing described above, particularly the use of Google Analytics cookies to read information on the device being used, only occurs if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google Analytics will not be used during your visit to the site.
You can withdraw your consent at any time with effect for the future. To exercise your revocation, please disable this service in the "cookie consent tool" provided on the website. We have concluded a contract data processing agreement with Google for the use of Google Analytics, which obligates Google to protect the data of our website visitors and not to share it with third parties. Google relies on so-called standard data protection clauses of the European Commission for the transfer of data from the EU to the USA, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de.
As an extension of Google Analytics, this website also uses the "UserIDs" function. By assigning individual UserIDs, we can have cross-device reports created by Google (so-called "cross-device tracking"). This means that your usage behavior, when you have given your corresponding consent to the use of Google Analytics in accordance with Art. 6 para. 1 lit. a GDPR, can also be analyzed across devices if you have set up a personal account on this website and are logged in with your corresponding login data on different devices. The data collected in this way shows, among other things, on which device you clicked on an ad for the first time and on which device the corresponding conversion took place.
7.2 Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows the analysis of website usage. Google Analytics 4 uses so-called "cookies" by default. Cookies are text files that are stored on your device and allow for an analysis of your website usage. The information collected through cookies about your use of the website (including the IP address truncated to its last octet transmitted from your device, see below) is generally transmitted to and stored and processed by a Google server. This may also involve transmission of information to the servers of Google LLC, located in the United States, and further processing of the information there. When using Google Analytics 4, the IP address transmitted by your device during your use of the website is always collected and processed in anonymized form only by default and automatically, so that direct personal reference of the collected information is excluded. This automatic anonymization is achieved by truncating the IP address transmitted by your device within the Member States of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA) to its last octet.
To ensure compliance with European data protection standards even in the event of data being transferred from the EU or EEA to the USA and any subsequent processing there, Google relies on the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google. Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at the following link: https://policies.google.com/privacy?hl=en&gl=en You can find details on the data processing triggered by Google Analytics 4 and how Google handles website data here: https://policies.google.com/technologies/partner-sites
Google Ads Marketing
Our website uses the functions of Google Ads remarketing, with which we advertise this website in Google search results as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google sets a cookie in the browser of your device, which enables interest-based advertising based on a pseudonymous cookie ID and the pages you visit. Further data processing only takes place if you have consented to Google that your Internet and app browser history will be linked by Google to your Google account and that information from your Google account will be used to personalize ads that you view on the web. If you are logged in to Google during your visit to our website in this case, Google will use your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. For this purpose, your personal data will be temporarily linked by Google with Google Analytics data in order to form target groups. As part of the use of Google Ads remarketing, personal data may also be transmitted to servers of Google LLC in the USA. All processing described above, in particular the setting of cookies to read information on the device used, will only take place if you have given us your express consent in accordance with Art. 6 para. 1 lit. a DSGVO. Without this consent, the use of Google Ads remarketing will not take place during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “cookie consent tool” provided on the website.
You can also permanently object to the setting of cookies by Google Ads remarketing by downloading and installing the browser plug-in available at the following link:
9.1 Use of Youtube videos
Regardless of whether the embedded videos are played back, a connection to the Google network is established every time this website is accessed, which can trigger further data processing operations without our influence. All processing operations described above, in particular the reading of information on the user's device via the tracking pixel, will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, the use of YouTube videos during your visit to the site will not take place.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website via alternative options communicated to you on the website.
9.2 - Microsoft Teams
We use the service "Microsoft Teams" provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA (hereinafter referred to as "Microsoft Teams") to conduct online meetings, video conferences and/or webinars. When using Microsoft Teams, various data is processed, and the extent of the processed data depends on the information you provide before or during your participation in an online meeting, video conference, or webinar. Communication participant data is processed and stored on Microsoft Teams servers. This data may include your login information (name, email address, phone (optional), and password) and meeting data (topic, participant IP address, device information, description (optional)). In addition, visual and audio contributions from participants, as well as speech inputs in chats, may be processed.
The legal basis for the processing of personal data necessary for the performance of a contract with you (this also applies to processing operations required to carry out pre-contractual measures) is Art. 6 para. 1 lit. b GDPR. If you have given us consent for the processing of your data, processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR. Consent given may be revoked at any time with effect for the future.
10.1 Cookie Consent Tool
This website uses a "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The cookie consent tool is presented to users in the form of an interactive user interface when the page is loaded, where consent for specific cookies and/or cookie-based applications can be given by checking the appropriate boxes. By using the tool, all cookies/services that require consent will only be loaded if the respective user gives their consent by checking the box. This ensures that such cookies are only set on the respective user's device if consent has been given.
The tool uses technically necessary cookies to store your cookie preferences. Personal user data is generally not processed.
In individual cases, however, if personal data such as the IP address is processed for the purpose of storing, assigning, or logging cookie settings, this is done on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management, and thus a legally compliant design of our website, pursuant to Art. 6 para. 1 lit. f GDPR. Another legal basis for processing is also Art. 6 para. 1 lit. c GDPR. As controllers, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user's consent.
Further information on the operator and the settings options of the cookie consent tool can be found directly in the corresponding user interface on our website.
10.2 – Wordfence
This website uses the plugin "Wordfence", a service of Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter "Wordfence") for security purposes. The plugin protects the website and the associated IT infrastructure against unauthorized third-party access, cyberattacks, viruses, and malware. Wordfence collects users' IP addresses and, if necessary, other data about their behavior on our website (in particular, URLs accessed and header information) to detect and prevent illegitimate site access and threats. The collected IP address is compared with a list of known attackers. If the collected IP address is identified as a security risk, Wordfence can automatically block site access. The information collected is transmitted to a server of Defiant Inc. in the USA and stored there.
The described data processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interests in protecting the website against harmful cyber attacks and maintaining structural and data integrity and security.
Defiant Inc. relies on the standard data protection clauses according to Art. 46 para. 2 lit. c GDPR as the legal basis for the transfer of data to the USA.
If website visitors have login rights, Wordfence also sets cookies (= small text files) on the visitor's device used. The cookies can read certain location and device information, enabling an assessment of whether the login-authorized access comes from a legitimate person. At the same time, access rights can be evaluated via the cookies and released through an internal firewall according to the authorization level. Finally, the cookies are used to register irregular access by site administrators from new devices or new locations and notify other administrators of this.
For security purposes, this website uses the "Wordfence" plugin, a service provided by Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter "Wordfence"). The plugin protects the website and the associated IT infrastructure against unauthorized third-party access, cyber attacks, as well as viruses and malware. Wordfence collects the IP addresses of users and, if necessary, additional data about their behavior on our website (in particular, URLs accessed and header information) to detect and prevent illegitimate page access and threats. The collected IP address is compared with a list of known attackers. If the collected IP address is recognized as a security risk, Wordfence can automatically block it for page access. The information collected is transmitted to a server of Defiant Inc. in the USA and stored there.
The data processing described above is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interests in protecting the website against harmful cyber attacks and in preserving the integrity and security of the structure and data.
Defiant Inc. relies on the standard data protection clauses according to Art. 46 para. 2 lit. c GDPR as the legal basis for the transfer of data to the USA.
If website visitors have login rights, Wordfence also sets cookies (= small text files) on the visitor's device used. The cookies enable certain location and device information to be read, allowing an assessment of whether the authorized login access comes from a legitimate person. At the same time, access rights can be evaluated through the cookies and released through an internal firewall according to the authorization level. Finally, the cookies serve to register irregular accesses by page administrators from new devices or new locations and to notify other administrators about this.
These cookies are only set if a user has login rights. Wordfence does not set cookies for site visitors without login authorization.
If personal data is processed via cookies, the processing takes place in accordance with Art. 6 para. 1 lit f. GDPR based on our legitimate interest in preventing illegitimate access to the site management and in defending against unauthorized administrator access.
11.1 The applicable data protection law grants you, as the data subject, the following rights (rights of information and intervention) with regard to the processing of your personal data by the controller, with reference to the legal basis indicated for the respective exercise requirements:
11.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTERESTS IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH FUTURE EFFECT.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT ADVERTISING PURPOSES.
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and - if applicable - additionally by the respective statutory retention period (e.g. commercial and tax retention periods).
When processing personal data based on explicit consent in accordance with Art. 6 (1) (a) GDPR, these data will be stored until the data subject revokes their consent.
If there are legal retention periods for data processed on the basis of Art. 6 (1) (b) GDPR within the scope of contractual or similar legal obligations, this data will be routinely deleted after the retention periods have expired, provided that it is no longer necessary for the fulfillment or initiation of the contract and/or there is no legitimate interest on our part in further storage.
When processing personal data based on Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises their right to object in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject or the processing serves the assertion, exercise or defense of legal claims.
When processing personal data for the purpose of direct marketing based on Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises their right to object in accordance with Art. 21 (2) GDPR.
Unless otherwise specified in the other information in this statement regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.