Your data, protected.

Data Protection Declaration

This data protection declaration clarifies the type, scope and purpose of the processing of personal data (hereinafter "data") within our online offer and the websites, functions and contents connected to it, as well as external online presences such as our social media profiles (hereinafter collectively "online offer"). With regard to terminology used (e.g. "Processing" or "responsible person"), we refer to the definitions in Art. 4 GDPR.

Responsible Party

Types of Data Processed

• Inventory data (e.g., names, addresses).
• Contact details (e.g., email, phone numbers).
• Content data (e.g., text input, photographs, videos).
• Usage data (e.g., websites visited, interest in content, access times).
• Meta / communication data (e.g., device information, IP addresses).

Categories of Subjects

Visitors and users of the online offer (hereinafter collectively "users").

Purpose of Processing

• Providing the online offer, its functions and content.
• Answering contact inquiries and communicating with users.
• Safety measures.
• Range measurement / marketing.

Terms Used

Personal data refers to any information that relates to an identified or identifiable natural person ("data subject").

Processing means any process carried out with or without the help of automated procedures in connection with personal data.

Pseudonymization is the processing of personal data in such a way that it can no longer be assigned to a specific data subject without additional information.

Profiling refers to any type of automated processing of personal data used to analyze or predict personal aspects related to a natural person.

Person responsible refers to the natural or legal person, public authority, agency, or other body that alone or jointly decides on the purposes and means of processing personal data.

Processor refers to a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the person responsible.

Relevant Legal Bases

In accordance with Art. 13 GDPR, we inform you of the legal basis for our data processing. Unless stated otherwise, the legal basis includes:

• Consent: Art. 6 Para. 1 lit. a and Art. 7 GDPR.
• Performance of services: Art. 6 Para. 1 lit. b GDPR.
• Legal obligations: Art. 6 Para. 1 lit. c GDPR.
• Legitimate interests: Art. 6 Para. 1 lit. f GDPR.
• Vital interests: Art. 6 Para. 1 lit. d GDPR.

Safety Measures

In accordance with Art. 32 GDPR, we take suitable technical and organizational measures to ensure a level of protection appropriate to the risk, considering the state of the art, implementation costs, the nature, scope, context, and purposes of processing, and the risk to the rights and freedoms of natural persons.

Measures include ensuring confidentiality, integrity, and availability of data, and controlling access, input, transfer, availability, and separation of data. We also incorporate data protection principles through technology design and data protection–friendly default settings (Art. 25 GDPR).