Privacy policy

This translation is provided for information. Only the German version is legally binding.

Privacy policy
Hair Doctors GmbH

§ 1 INFORMATION ON THE COLLECTION OF PERSONAL DATA

(1) Below we inform you about the collection of personal data when you use our website. Personal data is any data that can be related to you personally, e.g. name, address, email addresses, user behaviour.

(2) The controller pursuant to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR, German: DS-GVO) is

Hair Doctors GmbH 
Rosemeyerstr. 2-4
44139 Dortmund

Phone: +49 (0) 231. 533 01 650
Fax: +49 (0) 231. 54 504 901
Email: kontakt@hair-doctors.de
Website: www.hair-doctors.de

(see also our imprint at https://hair-doctors.de/en/imprint/)

The controller’s data protection officer is: Toni Arckel
Email: datenschutz @ hair-doctors . de

If you contact the data protection officer by letter or fax, please mark your letter:

“For the attention of the data protection officer”

(3) When you contact us by email or via a contact form, we store the data you provide (your email address, your name, your website and any further information you submit) in order to answer your questions. We delete the data arising in this context once storage is no longer necessary, or restrict its processing if statutory retention obligations apply.

(4) If we use contracted service providers for individual functions of our offering or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes. In doing so, we also state the defined criteria for the storage period.

§ 2 YOUR RIGHTS

You have the following rights vis-à-vis us with regard to the personal data concerning you:

(1) Right of access pursuant to Art. 15 GDPR (DS-GVO)

You can ask us to confirm whether personal data concerning you is being processed by us. If this is the case, you have a right of access to this personal data and to the following information:

• the purposes of the processing
• the categories of personal data being processed
• the recipients or categories of recipients to whom your personal data has been or will be disclosed
• the planned storage period for the personal data concerning you or, if specific information on this is not possible, the criteria for determining the storage period
• the existence of a right to rectification, erasure, restriction of processing or to object to the processing
• the existence of a right to lodge a complaint with a supervisory authority,
• the source of your data if it was not collected from you by us
• the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the significance and envisaged consequences of such processing for you, as well as your right to be informed about the safeguards pursuant to Art. 46 GDPR (DS-GVO) that exist when your data is transferred to third countries

(2) Right to rectification pursuant to Art. 16 GDPR (DS-GVO)

You have a right vis-à-vis us to rectification and/or completion if the processed personal data concerning you is inaccurate or incomplete.

(3) Right to erasure pursuant to Art. 17 GDPR (DS-GVO)

a) Obligation to erase

You can request that we erase the personal data concerning you without undue delay, and we are obliged to erase this data without undue delay where one of the following grounds applies:

• The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
• You withdraw the consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR (DS-GVO), and there is no other legal basis for the processing.
• You object to the processing pursuant to Art. 21 para. 1 GDPR (DS-GVO) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR (DS-GVO).
• The personal data concerning you has been processed unlawfully.
• The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union law or the law of the Member States to which we are subject.
• The personal data concerning you has been collected in relation to the offer of information society services pursuant to Art. 8 para. 1 GDPR (DS-GVO).

b) Information to third parties

If we have made the personal data concerning you public and are obliged to erase it pursuant to Art. 17 para. 1 GDPR (DSGVO), we will take reasonable steps, including technical measures, taking into account the available technology and the cost of implementation, to inform controllers which are processing the personal data that you, as the data subject, have requested the erasure by them of all links to, or copies or replications of, this personal data.

c) Exceptions

In particular, the right to erasure does not exist if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.

(4) Right to restriction of processing pursuant to Art. 18 GDPR (DS-GVO)

You can request the restriction of processing of the personal data concerning you under the following conditions:

• If you contest the accuracy of the personal data concerning you, for a period enabling us to verify the accuracy of the personal data.
• If the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead.
• If we no longer need the personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims.
• If you have objected to the processing pursuant to Art. 21 para. 1 GDPR (DSGVO) and it has not yet been established whether the legitimate grounds of the controller override your grounds.

Where the processing of personal data concerning you has been restricted, this data may – with the exception of its storage – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If processing has been restricted under the conditions mentioned above, we will inform you before the restriction is lifted.

(5) Right to notification pursuant to Art. 19 GDPR (DS-GVO)

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort.

You have the right vis-à-vis us to be informed about these recipients.

(6) Right to data portability pursuant to Art. 20 GDPR (DS-GVO)

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, as the controller to which the personal data was provided, where

• the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR (DSGVO) or Art. 9 para. 2 lit. a GDPR (DSGVO) or on a contract pursuant to Art. 6 para. 1 lit. b GDPR (DSGVO), and
• the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from us to another controller, where technically feasible. This must not adversely affect the freedoms and rights of others.

(7) Right to object pursuant to Art. 21 GDPR (DS-GVO)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 lit. e or f (lit. f governs the processing of personal data based on a balancing of interests. This is the case in particular where the processing is not necessary for the performance of a contract with you, which we explain in each case in the following description of the functions) GDPR (DSGVO); this also applies to profiling based on these provisions.
We will then no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you have the option of exercising your right to object by automated means using technical specifications.

(8) Right to withdraw consent pursuant to Art. 7 para. 3 GDPR (DSGVO)

You have the right to withdraw your declaration of consent under data protection law at any time with effect for the future. In the event of withdrawal, we will erase the data concerned without undue delay, unless further processing can be based on a legal basis permitting processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until its withdrawal.

(9) Automated individual decision-making, including profiling, pursuant to Art. 22 GDPR (DS-GVO)

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

• is necessary for entering into, or the performance of, a contract between you and the controller,
• is authorised by Union or Member State law to which the controller is subject and this law contains suitable measures to safeguard your rights and freedoms and your legitimate interests, or
• is based on your explicit consent.

However, these decisions must not be based on special categories of personal data under Art. 9 para. 1 GDPR (DSGVO), unless Art. 9 para. 2 lit. a or g applies and suitable measures to safeguard the rights and freedoms and your legitimate interests have been taken.

With regard to the cases mentioned in the bullet points above, we take suitable measures to safeguard the rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on our part, to express your own point of view and to contest the decision.

(10) Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR (DS-GVO)

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR (DSGVO).

The supervisory authority with which the complaint has been lodged will inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR (DSGVO).

§ 3 COLLECTION OF PERSONAL DATA WHEN YOU VISIT OUR WEBSITE

(1) If you use the website for information purposes only, i.e. if you do not register or otherwise send us information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (the legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR (DS-GVO)):

• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software

(2) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using, and through which certain information flows to the body that sets the cookie (in this case, us). Cookies cannot run programs or transfer viruses to your computer. They serve to make the website more user-friendly and effective overall.

(3) Use of cookies:

a) This website uses the following types of cookies, whose scope and functioning are explained below:

• Transient cookies (see b)
• Persistent cookies (see c)

b) Transient cookies are deleted automatically when you close the browser. These include, in particular, session cookies. They store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close the browser.

c) Persistent cookies are deleted automatically after a specified period, which may differ depending on the cookie. You can delete cookies at any time in the security settings of your browser.

d) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. Please note that you may then not be able to use all the functions of this website.

e) We use cookies to be able to identify you on subsequent visits if you have a user account with us. Otherwise you would have to log in again for each visit.

f) The Flash cookies used are not captured by your browser but by your Flash plug-in. We also use HTML5 storage objects, which are stored on your device. These objects store the required data independently of the browser you use and have no automatic expiry date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, e.g. “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. We also recommend that you regularly delete your cookies and your browser history manually.

If you do not want us to track your activities, then click here to deactivate Google Analytics. 

§ 4 FURTHER FUNCTIONS AND OFFERS ON OUR WEBSITE

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you will generally need to provide further personal data, which we use to provide the respective service and to which the data processing principles mentioned above apply.

(2) In some cases, we use external service providers to provide all of our services and – in connection with this – to process your data. They have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly. These include in particular, but not exclusively:

Westfalenklinik Fachklinik für Plastische und Ästhetische Chirurgie GmbH, Rosemeyerstr. 2-4, 44139 Dortmund
Weight Doctors GmbH, Rosemeyerstr. 2-4, 44139 Dortmund
Alster-Klinik Hamburg GmbH, Rothenbaumchaussee 7, 20148 Hamburg
Klinik am Seestern GmbH, Am Seestern 4, 40547 Düsseldorf

(3) We may also pass on your personal data to third parties if participation in promotions, advertising measures, prize draws, conclusions of contracts or similar services are offered by us together with partners. You will receive more information on this when you provide your personal data or below in the description of the offer.

(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this in the description of the offer.

§ 5 USE OF OUR CUSTOMER PORTAL “PRAXISMANAGER”

(1) If you wish to use our portal, you must log in by entering your email address/your URL and a password of your choice. Your real name must be used as the user name; pseudonymous use is not possible. You can change the password for your first login to the portal sent to you by project management at any time as you wish using the “Forgot password” function. We recommend that you set a new password the first time you log in and choose a password consisting of at least eight characters. For security reasons, you should use both upper- and lower-case letters as well as numbers. If you are unsure how to choose a secure password, you can, for example, have a password generated here: https://www.passwort-generator.com/

(2) When you use our portal, we store your master data required for the performance of the contract, including your address and URL, until the cooperation has ended and the statutory periods for storing your data have expired. We also store the voluntary data you provide for the duration of your use of the portal, unless you delete it beforehand. You can manage and change all details in the protected customer area. Your access to the portal is deactivated when the contract ends. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR (DS-GVO).

(3) To prevent unauthorised access by third parties to your personal data, the connection is encrypted using TLS technology.

§ 6 NEWSLETTER

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The goods and services advertised are named in the declaration of consent.

(2) We use the so-called double opt-in procedure for registering for our newsletter. This means that after you register, we send an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you used and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to investigate any possible misuse of your personal data.

(3) The only mandatory information for sending the newsletter is your email address. Providing further, separately marked data is voluntary and is used to be able to address you personally. After your confirmation, we store your email address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR (DS-GVO).

(4) You can withdraw your consent to receiving the newsletter and unsubscribe from the newsletter at any time. You can declare your withdrawal by clicking on the link provided in every newsletter email, by email to

newsletter @ hair - doctors . de

or by sending a message to the contact details given in the imprint.

(5) Please note that we analyse your user behaviour when sending the newsletter. For this analysis, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the analyses, we link the data mentioned in § 3 and the web beacons with your email address and an individual ID. Links received in the newsletter also contain this ID. With the data obtained in this way, we create a user profile in order to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters and which links you click in them, and infer your personal interests from this. We link this data with actions you take on our website. You can object to this tracking at any time by clicking the separate link provided in every email or by informing us via another contact channel. The information is stored for as long as you are subscribed to the newsletter. After you unsubscribe, we store the data purely statistically and anonymously. Such tracking is also not possible if you have deactivated the display of images by default in your email program. In this case, the newsletter will not be displayed to you in full and you may not be able to use all functions. If you display the images manually, the tracking mentioned above takes place.

§ 7 WEB ANALYTICS

1. Use of Google Analytics

(1) This website uses Google Analytics, a web analytics service of Google LLC (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymisation is activated on this website, however, your IP address will first be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services related to website use and internet use.

(2) The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

(3) You can prevent cookies from being stored by adjusting your browser software accordingly; however, please note that in this case you may not be able to use all the functions of this website to their full extent. In addition, you can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension “_anonymizeIp()”. As a result, IP addresses are processed further in truncated form, so that they cannot be linked to a person. Insofar as the data collected about you can be related to you personally, this is therefore excluded immediately and the personal data is thus deleted without delay.

(5) We use Google Analytics to be able to analyse the use of our website and to improve it regularly. The statistics obtained allow us to improve our offering and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR (DS-GVO).

(6) Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: https://www.google.com/analytics/terms/de.html,

privacy overview: https://safety.google/privacy/privacy-controls/,

the terms of service: https://policies.google.com/terms?hl=de&gl=de

and the privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

(07) This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out using a user ID.

2. Use of eTracker

(1) On this website, data is collected and stored for marketing and optimisation purposes using technologies of etracker GmbH (https://www.etracker.com). User profiles can be created from this data under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the site visitor’s internet browser. The cookies enable the internet browser to be recognised. Without the separately given consent of the data subject, the data collected with the eTracker technologies is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym. You can object to the collection and storage of data at any time with effect for the future by email to datenschutz@Hair Doctors.de (subject: “Please exclude me from eTracker counting”).

(2) We use eTracker to be able to analyse the use of our website and to improve it regularly. The statistics obtained allow us to improve our offering and make it more interesting for you as a user. The data collected is stored permanently and analysed under a pseudonym. The legal basis for the use of eTracker is Art. 6 para. 1 sentence 1 lit. f GDPR (DS-GVO).

(3) Third-party information: etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg;

https://www.etracker.com/de/datenschutzerklaerung/.html. The legal basis for the use of eTracker is Art. 6 para. 1 sentence 1 lit. f GDPR (DS-GVO).

3. Use of Jetpack/formerly WordPress.com Stats

(1) This website uses the web analytics service Jetpack (formerly: WordPress.com Stats) to be able to analyse the use of our website and to improve it regularly. The statistics obtained allow us to improve our offering and make it more interesting for you as a user. We also use the system for measures to protect the security of the website, e.g. detecting attacks or viruses. For the exceptional cases in which personal data is transferred to the USA, Automattic Inc. has submitted to the EU-US Privacy Shield,

https://www.privacyshield.gov. The legal basis for the use of Jetpack is Art. 6 para. 1 sentence 1 lit. f GDPR (DS-GVO).

(2) For this analysis, cookies (more on this in § 3) are stored on your computer. The information collected in this way is stored on a server in the USA. If you prevent cookies from being stored, please note that you may not be able to use this website to its full extent. You can prevent cookies from being stored via the settings of your browser or by clicking the button “Click here to Opt-out” at https://www.quantcast.com/opt-out.

(3) This website uses Jetpack with an extension through which IP addresses are truncated directly after their collection before further processing, in order to rule out any link to a person.

(4) Third-party information: Automattic Inc., 60 29 th Street #343, San Francisco, CA 94110–4929, USA, https://automattic.com/privacy, and of the third-party provider of the tracking technology: Quantcast Inc., 201 3 rd St, Floor 2, San Francisco, CA 94103–3153, USA, https://www.quantcast.com/privacy.

§ 8 SOCIAL MEDIA

1. Use of social media plug-ins

(1) We currently use the following social media plug-ins: Facebook, Instagram and Twitter. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognise the provider of the plug-in by the marking on the box, showing its initial letter or its logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it does the plug-in provider receive the information that you have accessed the corresponding page of our online offering. In addition, the data mentioned in § 3 of this policy is transmitted. In the case of Facebook, according to Facebook Inc., the IP address is anonymised immediately after collection in Germany. By activating the plug-in, personal data is therefore transmitted from you to the respective plug-in provider and stored there (in the USA in the case of US providers). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via the security settings of your browser before clicking on the greyed-out box.

(2) We have no influence on the data collected and the data processing operations, nor are we aware of the full extent of the data collection, the purposes of the processing or the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

(3) The plug-in provider stores the data collected about you as user profiles and uses them for the purposes of advertising, market research and/or designing its website to meet needs. Such an analysis is carried out in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact the respective plug-in provider. Via the plug-ins we give you the opportunity to interact with the social networks and other users, so that we can improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f GDPR (DS-GVO).

(4) The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect about you is assigned directly to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid being assigned to your profile with the plug-in provider.

(5) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the privacy policies of these providers listed below. There you will also find further information on your rights in this regard and on the settings available to protect your privacy.

(6) Addresses of the respective plug-in providers and URLs of their privacy notices:

1. a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA;

https://www.facebook.com/policy.php; further information on data collection: https://www.facebook.com/help/186325668085084,   https://www.facebook.com/about/privacy/your-info-on-other#applications and https://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield,  https://www.privacyshield.gov/EU-US-Framework.

1. b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA;

https://policies.google.com/technologies/partner-sites?hl=de. Google has submitted to the EU-US Privacy Shield,  https://www.privacyshield.gov/EU-US-Framework.

1. c) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA;

https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

1. d) Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA;

https://www.instagram.com/about/legal/privacy. Instagram has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

2. Embedding of YouTube videos

(1) We have embedded YouTube videos in our online offering, which are stored at

https://www.youtube.com/ and can be played directly from our website. They are all embedded in “extended privacy mode”, which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos is the data mentioned in paragraph 2 transmitted. We have no influence on this data transmission.

(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in § 3 of this policy is transmitted. This happens regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data is assigned directly to your account. If you do not want it to be assigned to your YouTube profile, you must log out before activating the button. YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or designing its website to meet needs. Such an analysis is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube.

(3) Further information on the purpose and scope of the data collection and its processing by YouTube can be found in its privacy policy. There you will also find further information on your rights and on the settings available to protect your privacy: https://policies.google.com/privacy?hl=de&gl=de. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

3. Embedding of Google Maps

(1) On this website we use the Google Maps service. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

(2) By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in § 3 of this policy is transmitted. This happens regardless of whether Google provides a user account via which you are signed in or whether no user account exists. If you are signed in to Google, your data is assigned directly to your account. If you do not want it to be assigned to your Google profile, you must sign out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or designing its website to meet needs. Such an analysis is carried out in particular (even for users who are not signed in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google.

(3) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the provider’s privacy policies. There you will also find further information on your rights in this regard and on the settings available to protect your privacy: https://policies.google.com/privacy?hl=de&gl=de. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

§ 9 ONLINE ADVERTISING

1. Use of Google Ads Conversion

(1) We use the Google Ads service to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Ads). In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. Our interest in doing so is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

(2) These advertising media are delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. If you reach our website via a Google ad, Google Ads stores a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The analysis values usually stored for this cookie are the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed).

(3) These cookies enable Google to recognise your internet browser. If a user visits certain pages of the website of an Ads customer and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user clicked on the ad and was forwarded to this page. Each Ads customer is assigned a different cookie. Cookies can therefore not be tracked across the websites of Ads customers. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive statistical analyses from Google. On the basis of these analyses, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.

(4) Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: by integrating Ads Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and store your IP address.

(5) You can prevent participation in this tracking procedure in various ways: a) by adjusting your browser software accordingly; in particular, suppressing third-party cookies means that you will not receive ads from third-party providers; b) by deactivating the cookies for conversion tracking by setting your browser to block cookies (https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de),  https://adssettings.google.de/authenticated, whereby this setting is deleted when you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the self-regulation campaign “About Ads” via the link http://optout.aboutads.info/?c=2&lang=EN, whereby this setting is deleted when you delete your cookies; d) by permanent deactivation in your Firefox, Internet Explorer or Google Chrome browsers at the link  https://support.google.com/ads/answer/7395996. Please note that in this case you may not be able to use all the functions of this offering to their full extent.

(6) The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f GDPR (DS-GVO). Further information on data protection at Google can be found here: https://policies.google.com/privacy?hl=de and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at https://www.networkadvertising.org/. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

2. Remarketing

In addition to Ads Conversion, we use the Google Remarketing application. This is a procedure with which we would like to address you again. Through this application, our advertisements can be displayed to you as you continue to use the internet after visiting our website. This is done by means of cookies stored in your browser, via which Google records and evaluates your usage behaviour when you visit various websites. In this way, Google can determine your previous visit to our website. According to Google’s own statements, Google does not merge the data collected as part of remarketing with your personal data that may be stored by Google. In particular, according to Google, pseudonymisation is used in remarketing.

3. Facebook Custom Audiences

• This website also uses the remarketing function “Custom Audiences” of Facebook Inc. (“Facebook”). This allows interest-based advertisements (“Facebook ads”) to be shown to users of the website when they visit the social network Facebook or other websites that also use the procedure. Our interest in doing so is to show you advertising that is of interest to you, in order to make our website more interesting for you.
• Due to the marketing tool used, your browser automatically establishes a direct connection to Facebook’s servers. We have no influence on the scope and use of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: by integrating Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding page of our website or clicked on an ad from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will find out and store your IP address and other identifying features.

(3) Logged-in users can deactivate the “Facebook Custom Audiences” function at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen#_.

• The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f GDPR (DS-GVO). Further information on data processing by Facebook can be found at https://www.facebook.com/about/privacy.

§ 10 STATUS AND UPDATING OF THIS PRIVACY POLICY

This privacy policy is current as of 1 February 2020. We reserve the right to update the privacy policy in due course in order to improve data protection and/or to adapt it to changes in official practice or case law.