Privacy Policy

Consent management via consent management platform Complianz GDPR/CCPA Cookie Consent

On our websites, we use the consent management tool Complianz GDPR/CCPA Cookie Consent, which we use to manage your consent to the use of cookies and similar technologies.

Description of the data processing and the purpose

We use the service to manage your consent to the use of cookies and similar technologies and subsequent data processing.

If you give your consent via our consent banner, the service processes the following data:

• the IP address of the connection you are using,
• the description of the web browser and operating system used,
• the language used by your browser and operating system,
• the address of the website on which you give your consent,
• the date and time of consent,
• the country from which you make your request,
• a pseudonym used to distinguish different users,
• your consent status with regard to the cookies and similar technologies we use or with regard to the services used, which serves as proof of your consent.

This data is logged on the provider’s servers. As part of the data processing, cookies are used to store your consent status in your end device, to read it out again when you visit the site again and to compare it.

In this way, we are able to check your consent status on all subsequent and future visits to our websites and to activate or deactivate cookies and other technologies in accordance with your decision to use them when you visit the site again.

The purpose and our legitimate interest are to use cookies and similar technologies on our websites in compliance with data protection regulations and to enable you to easily revoke your declarations of consent.

Legal basis for data processing

If we use cookies and similar technologies as part of the integration of the service or if data is stored on your end device or read from there by the service, this is done in accordance with Section 25 (2) TDDDG. Subsequent data processing takes place on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR.

Receiver

Im Rahmen der Nutzung der Plattform werden die über unsere Webseiten erhobenen Daten an nachfolgende Empfänger übermittelt:

Complianz BV
Kalmarweg 14-5

9723 JG, Groningen

Storage Duration

By integrating the services on our websites, data is transmitted to the above-mentioned recipients and stored there for a period of 12 months. No further storage of the data processed by the service and made available to us in our own systems takes place.

Google Fonts

We integrate Google Fonts web fonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, on our websites.

In the European Union (EU) and the European Economic Area (EEA), the services are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Description of the data processing and the purpose

Google Fonts enables us to use web fonts. For this purpose, the required Google Fonts is loaded from your web browser into your browser cache when you access our website. This is necessary so that your browser can also display a visually improved presentation of our texts. If your browser does not support this function, a standard font will be used by your computer for display.

Since Google Fonts is provided by Google and are reloaded from its servers when the page is accessed, the usage data technically required to access the page is also transmitted. In this respect, Google also receives your IP address, which is technically required to retrieve the content.

We use Google Fonts for optimization purposes, in particular to improve the use of our website for you and to make its design more user-friendly.

Legal basis for data processing

The legal basis for the integration and use of the service is your consent, provided you have given it via our consent management platform.

The use of cookies and similar technologies is based on § 25 section 1 TDDDG. The subsequent data processing is based on Art. 6 section 1 sentence 1 lit. a GDPR.

Your consent is voluntary and can be freely revoked at any time with effect for the future.

Receiver

As part of the use of the service, the data collected via our websites is transmitted to the following recipients:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland,
• Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

In principle, we have no influence on further data processing by the third-party provider.

Further information on the handling of personal data by Google can be found at https://policies.google.com/privacy?hl=de.

Data processing in third countries

When using the service, your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries, in particular in the USA.

For data transfers to the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 (1) GDPR in relation to companies with certification under the EU-U.S. Data Privacy Framework.

Google LLC is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: Participant Search (dataprivacyframework.gov).

If your data is transferred to other third countries for which no adequacy decision exists, there is a risk that the authorities there may access your data for security and monitoring purposes without you being informed or having the right to appeal.

To ensure an adequate level of data protection when transferring your data to the third country, standard data protection clauses of the European Commission are concluded in accordance with Art. 46 para. 2 lit. c GDPR. They oblige the recipient of the data to process it in accordance with the European level of protection.

If the standard data protection clauses are not sufficient to guarantee the level of protection, additional technical, contractual or organizational measures are taken to safeguard the transfer of data. We also regularly review and assess whether these additional measures continue to ensure an adequate level of data protection or whether further supplementary measures may need to be taken.

Storage duration

By integrating the services on our websites, data is transmitted to the above-mentioned recipients and stored there for a period of NUMBER of months. No further storage of the data processed by the service and made available to us in our own systems takes place.  

Google Photos 

This website uses “Google Photos”, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Description of the data processing and the purpose

Google Photos enables us to integrate and display image galleries on our website. The images are loaded by a server call, usually a Google server in the USA. This tells the server which page of our website you have visited. The IP address of the browser of the visitor’s end device is also stored by Google. 

We use Google Photos for optimization purposes, in particular to improve the use of our website for you and to make its design more user-friendly.

Legal basis for data processing

The use of cookies and similar technologies is based on Section 25 (1) TDDDG. The subsequent data processing is based on Art. 6 para. 1 sentence 1 lit. a GDPR.

Receiver

As part of the use of the service, the data collected via our websites is transmitted to the following recipients:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland,
• Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

In principle, we have no influence on further data processing by the third-party provider.

Further information on the handling of personal data by Google can be found at https://policies.google.com/privacy?hl=de.

Data processing in third countries

As personal data may be transferred by Google to affiliated companies and subcontractors in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection under the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search  

If your data is transferred to other third countries for which no adequacy decision exists, there is a risk that the authorities there may access your data for security and monitoring purposes without you being informed or having the right to appeal.

To ensure an adequate level of data protection when transferring your data to the third country, standard data protection clauses of the European Commission are concluded in accordance with Art. 46 para. 2 lit. c GDPR. They oblige the recipient of the data to process it in accordance with the European level of protection.

If the standard data protection clauses are not sufficient to guarantee the level of protection, additional technical, contractual or organizational measures are taken to safeguard the transfer of data. We also regularly review and assess whether these additional measures continue to ensure an adequate level of data protection or whether further supplementary measures may need to be taken.

Further information on data protection can be found in Google’s privacy policy: http://www.google.de/intl/de/policies/privacy 

Storage duration

By integrating the services on our websites, data is transmitted to the above-mentioned recipients and stored there for a period of NUMBER of months. No further storage of the data processed by the service and made available to us in our own systems takes place.

Google DoubleClick 

On our websites, we integrate DoubleClick Google advertising services and functions of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

In the European Union (EU) and the European Economic Area (EEA), the services are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Description of the data processing and the purpose

We use Google marketing services and functions to be able to place and control target group-oriented advertisements for our products and services via the Google advertising network and to be able to measure how successful these advertisements are.

Data collection and processing on our websites is carried out using cookies and JavaScript code, which is loaded when the page is accessed and executed in the browser of your end device. With the help of this JavaScript code, cookies can then be stored on your device and various information can be read from your device and from cookies stored on it. Details on the cookies and similar technologies used can be found above under “Data processing in connection with cookies and similar technologies” and via the information that you can access via our consent management platform.

In this way, Google is able to recognize website visitors and the devices they use pseudonymously. Visitors who have their own user account on Google platforms can also be identified by Google as visitors to our websites across all devices.

If you click on an ad placed for us via Google, cookies for conversion tracking are set by the website or app of other providers. These are read again when you visit our site. Data from the original website or app is processed to determine which search terms (keywords) you may have entered in a search engine, which advertisement or groups of advertisements you have clicked on and which of our online marketing campaigns the advertisement was assigned to.

We then collect data on our websites about how you have used our website and how you have interacted with the website content, e.g. which subpages have been accessed, which content has been clicked on or accessed or which forms or dialogs you have used. The conversion of an advertisement into a specific action by the website visitor on a website is referred to as conversion.

Google uses the processed information to compile summarized statistics for us, from which we can see how many users have reacted to our advertisements and in what way. We only receive summarized statistics (aggregated data) from Google, from which we as users of Google advertising services cannot draw any conclusions about individual persons.

Based on the statistics, we can optimize the effectiveness of our online advertising and manage our advertising strategy via Google advertising services.

Legal basis for data processing

The legal basis for the integration and use of the service is your consent, provided that you have given it via our consent management platform.

The use of cookies and similar technologies is based on Section 25 (1) TDDDG. The subsequent data processing is based on Art. 6 (1) (a) GDPR.

Your consent is voluntary and can be revoked at any time with effect for the future.

Recipient

When using the services, the data collected via our websites is transferred to the following recipients:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland,
• Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

We have no influence whatsoever on further data processing by third-party providers.

Further information on Google’s handling of personal data can be found at https://policies.google.com/privacy?hl=de.

Data processing in third countries

When using the service, your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA), in particular in the USA.

For data transfers to the US, there is an adequacy decision by the EU Commission pursuant to Art. 45 (1) GDPR with regard to companies certified under the EU-US Data Privacy Framework.

Google LLC is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: Participant Search (dataprivacyframework.gov).

When your data is transferred to other third countries for which no adequacy decision exists, there is a risk that local authorities may access your data for security and surveillance purposes without you being informed or being able to seek legal redress.

To ensure an adequate level of data protection when transferring your data to third countries, standard data protection clauses of the European Commission pursuant to Art. 46 (2) (c) GDPR are concluded. These clauses oblige the recipient of the data to process it in accordance with the European level of protection.

If the standard data protection clauses are not sufficient to guarantee the level of protection, additional technical, contractual, or organizational measures will be taken to secure the data transfer. In addition, regular reviews and assessments will be carried out to determine whether these additional measures continue to guarantee an adequate level of data protection or whether further supplementary measures need to be taken.

Storage period

By integrating the services on our websites, data is transmitted to the above-mentioned recipients and stored there for a period of NUMBER months. The data processed by the service and made available to us is not stored in our own systems beyond this period.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter ‘reCAPTCHA’) on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Description of data processing and purpose

reCAPTCHA is used to verify whether the data entered on our website (e.g., in a contact form) is entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. reCAPTCHA evaluates various information for analysis, e.g.,

• IP-Address
• Length of time spent by the website visitor on the website
• Mouse movements made by the user ^

The data collected during the analysis is forwarded to Google. 

YouTube

We embed videos from YouTube, a social media platform operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, on our websites.

In the European Union (EU) and the European Economic Area (EEA), the service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Description of data processing and purpose

Since embedded videos are loaded from the servers of the social media platform “YouTube” when the page is accessed, the usage data technically required for the page to be accessed is also transmitted. Google also receives your IP address, which is technically necessary for retrieving the content.

Legal basis for data processing

The legal basis for the integration and use of the service is your consent, provided that you have given this via our consent management platform.

The use of cookies and similar technologies is based on Section 25 (1) TDDDG. The subsequent data processing is based on Art. 6 (1) (a) GDPR.

Your consent is voluntary and can be revoked at any time with effect for the future.

Recipient

When using the services, the data collected via our websites is transferred to the following recipients:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland,
• Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

We have no influence whatsoever on further data processing by third-party providers.

Further information on Google’s handling of personal data can be found at https://policies.google.com/privacy?hl=de.

Data processing in third countries

When using the service, your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA), in particular in the USA.

For data transfers to the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 (1) GDPR with regard to companies certified under the EU-U.S. Data Privacy Framework.

Google LLC is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: Participant Search (dataprivacyframework.gov).

When your data is transferred to other third countries for which no adequacy decision exists, there is a risk that local authorities may access your data for security and surveillance purposes without you being informed or being able to seek legal redress.

To ensure an adequate level of data protection when transferring your data to third countries, standard data protection clauses of the European Commission pursuant to Art. 46 (2) (c) GDPR are concluded. These clauses oblige the recipient of the data to process it in accordance with the European level of protection.

If the standard data protection clauses are not sufficient to guarantee the level of protection, additional technical, contractual, or organizational measures will be taken to secure the data transfer. In addition, regular reviews and assessments will be carried out to determine whether these additional measures continue to guarantee an adequate level of data protection or whether further supplementary measures need to be taken.

Storage period

By integrating the services on our websites, data is transmitted to the above-mentioned recipients and stored there for a period of NUMBER months. The data processed by the service and made available to us is not stored in our own systems beyond this period.