Privacy Policy

Privacy Policy

The operators of these pages treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

As a rule, this website can be used without providing personal data. Where personal data, such as name, address or email address, is collected on these pages, this is done on a voluntary basis wherever possible. This data will not be passed on to third parties without your explicit consent.

Please note that data transmission on the Internet, for example when communicating by email, may have security gaps. Complete protection of data against access by third parties is not possible.

I. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection provisions is:

Gordon Axmann
Cologne, Germany
Tel. see contact page
Mail: see contact page

II. Name and address of the data protection officer

The data protection officer of the controller is:

Gordon Axmann
Cologne, Germany
Tel. see contact page
Mail: see contact page

III. General information on data processing

1. Scope of the processing of personal data

We generally process personal data of our users only insofar as this is necessary to provide a functional website and our content and services. Personal data is usually processed only with the user’s consent. An exception applies where prior consent cannot be obtained for factual reasons and processing is permitted by law.

2. Legal basis for the processing of personal data

Where we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(a) GDPR serves as the legal basis.

Where processing of personal data is necessary for the performance of a contract to which the data subject is party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required for pre-contractual measures.

Where processing of personal data is necessary for compliance with a legal obligation to which we are subject, Art. 6(1)(c) GDPR serves as the legal basis.

Where vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis.

Where processing is necessary to safeguard a legitimate interest of our organisation or of a third party, and the interests, fundamental rights and freedoms of the data subject do not override that interest, Art. 6(1)(f) GDPR serves as the legal basis.

3. Erasure of data and storage period

The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Storage may also take place where this has been provided for by European or national legislators in EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or erased when a storage period prescribed by such provisions expires, unless further storage is necessary for the conclusion or performance of a contract.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Each time this website is accessed, our system automatically records data and information from the computer system of the accessing computer.

The following data is collected:

(1) information about the browser type and version used
(2) the user’s operating system
(3) the user’s Internet service provider
(4) the user’s IP address
(5) date and time of access
(6) websites from which the user’s system reaches our website
(7) websites accessed by the user’s system via our website

This data is also stored in our system’s log files. IP addresses are anonymised. This data is not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for temporary storage of the data and log files is Art. 6(1)(f) GDPR.

3. Purpose of data processing

Temporary storage of the IP address by the system is necessary to deliver the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

Storage in log files is carried out to ensure the functionality of the website. The data also helps us optimise the website and ensure the security of our information technology systems. No evaluation of the data for marketing purposes takes place in this context.

These purposes also constitute our legitimate interest in data processing pursuant to Art. 6(1)(f) GDPR.

4. Duration of storage

The data is erased as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collected to provide the website, this is when the respective session ends.

In the case of data stored in log files, this is after no more than seven days. Longer storage is possible. In that case, users’ IP addresses are erased or altered so that assignment to the accessing client is no longer possible.

5. Possibility of objection and removal

The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, the user has no option to object.

V. Use of cookies

a) Description and scope of data processing

Our website uses cookies. Cookies are text files stored in or by the Internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables the browser to be identified when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require the accessing browser to be identifiable even after a page change.

The following data is stored and transmitted in the cookies:

(1) session ID
(2) login status
(3) language setting

c) Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without cookies. For these functions, it is necessary that the browser is recognised again after a page change.

We require cookies for the following applications:

(1) session ID
(2) login status
(3) language setting

The user data collected through technically necessary cookies is not used to create user profiles.

These purposes also constitute our legitimate interest in the processing of personal data pursuant to Art. 6(1)(f) GDPR.

e) Duration of storage, objection and removal options

Cookies are stored on the user’s computer and transmitted from it to our site. As a user, you therefore have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, not all functions of the website may be fully usable.

VI. Other technologies used

Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. When you open a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google servers. This allows Google to know that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

If your browser does not support web fonts, a standard font from your computer will be used.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

Google reCAPTCHA

We use “Google reCAPTCHA” on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

reCAPTCHA is used to check whether data entered on our websites, for example in a contact form, is entered by a human being or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of website visitors on the basis of various characteristics. This analysis starts automatically as soon as the website visitor enters the website. reCAPTCHA evaluates various information, such as IP address, time spent on the website or mouse movements made by the user. The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.

Data processing is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its web offerings against abusive automated spying and spam.

Further information on Google reCAPTCHA and Google’s privacy policy can be found at: https://www.google.com/intl/en/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

YouTube

Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plugin, a connection to YouTube servers is established. The YouTube server is informed which of our pages you visited.

If you are logged into your YouTube account, you allow YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

Further information on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/en/policies/privacy.

Amazon Associates programme

The operator of this site participates in the Amazon EU Associates programme. Links to Amazon.de may be included on our pages, through which we may earn advertising reimbursement. No cookies are set on our website for this purpose. Further information on data use by Amazon can be found in Amazon’s privacy policy: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401

PayPal

It may be that we provide a payment function on our website for certain clearly identified content. In this case, we may offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”).

If you select payment via PayPal, the payment data you enter will be transmitted to PayPal.

Your data is transmitted to PayPal on the basis of Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (processing for the performance of a contract). You may revoke your consent to data processing at any time. Revocation does not affect the lawfulness of processing operations carried out in the past.

VII. Newsletter

1. Description and scope of data processing

Our website may offer the possibility to subscribe to a free newsletter. When registering for the newsletter, the data from the input form is transmitted to us.

Email address, and where applicable name

In addition, the following data is collected during registration:

(1) IP address of the accessing computer
(2) date and time of registration

Your consent is obtained during the registration process and reference is made to this privacy policy.

In connection with data processing for the sending of newsletters, no data is passed on to third parties. The data is used exclusively for sending the newsletter.

2. Legal basis for data processing

The legal basis for processing the data after the user has registered for the newsletter is Art. 6(1)(a) GDPR, provided the user has given consent.

3. Purpose of data processing

The collection of the user’s email address serves to deliver the newsletter.

The collection of other personal data during the registration process serves to prevent misuse of the services or of the email address used.

4. Duration of storage

The data is erased as soon as it is no longer necessary for the purpose for which it was collected. The user’s email address and, where applicable, name and form of address are therefore stored for as long as the newsletter subscription is active.

The other personal data collected during the registration process is usually erased after seven days.

5. Objection and removal options

The newsletter subscription can be cancelled by the data subject at any time. For this purpose, every newsletter contains a corresponding link.

This also enables withdrawal of consent to the storage of personal data collected during the registration process.

6. Mailing statistics

Our newsletters contain an image file that is loaded from the servers of the newsletter provider when the newsletter is opened. This collects information such as the time of opening, the approximate place of opening, the IP address and data about your web browser and system. This data is used to technically improve the services.

It is also transmitted which links contained in the newsletter are visited. For technical reasons, this information can be assigned to individual users. However, it is not our intention to observe individual users, but rather to obtain general reactions to our content in order to improve our service.

VIII. Registration

We do not offer registration on our site.

IX. Contact form and email contact

1. Description and scope of data processing

Our website may provide a contact form for electronic contact. If a user makes use of this option, the data entered in the input form is transmitted to us and stored. This data includes:

Email address, name

At the time the message is sent, the following data is also stored:

(1) date and time

Alternatively, contact may be made via the email address provided. In this case, the personal data transmitted with the email is stored.

No data is passed on to third parties in this context. The data is used exclusively for processing the conversation.

2. Legal basis for data processing

The legal basis for processing the data is Art. 6(1)(a) GDPR if the user has given consent.

The legal basis for processing data transmitted in the course of sending an email is Art. 6(1)(f) GDPR. If the email contact aims at concluding a contract, Art. 6(1)(b) GDPR is an additional legal basis for processing.

3. Purpose of data processing

The processing of personal data from the input form serves us solely to process the contact request. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data is erased as soon as it is no longer necessary for the purpose for which it was collected. For personal data from the contact form and data sent by email, this is the case when the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process is erased no later than after seven days.

5. Objection and removal options

The user may revoke consent to the processing of personal data at any time. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

The revocation is made informally by email. All personal data stored in the course of contact will be erased in this case.

X. Rights of the data subject

If personal data concerning you is processed, you are a data subject within the meaning of the GDPR and you have the following rights against the controller:

1. Right of access

You may request confirmation from the controller as to whether personal data concerning you is processed by us.

If such processing takes place, you may request information from the controller about the following:

(1) the purposes for which the personal data is processed;
(2) the categories of personal data processed;
(3) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
(4) the planned duration of storage of the personal data concerning you or, if specific information is not possible, criteria for determining the storage period;
(5) the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
(6) the existence of a right to lodge a complaint with a supervisory authority;
(7) any available information on the origin of the data if the personal data is not collected from the data subject;
(8) the existence of automated decision-making including profiling pursuant to Art. 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved and the significance and intended effects of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

2. Right to rectification

You have a right to rectification and/or completion against the controller if the processed personal data concerning you is inaccurate or incomplete. The controller must make the correction without delay.

3. Right to restriction of processing

Under the following conditions, you may request restriction of the processing of personal data concerning you:

(1) if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify its accuracy;
(2) if the processing is unlawful and you oppose erasure of the personal data and request restriction of its use instead;
(3) if the controller no longer needs the personal data for the purposes of processing, but you need it for the establishment, exercise or defence of legal claims; or
(4) if you have objected to processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the legitimate grounds of the controller override your grounds.

Where processing of the personal data concerning you has been restricted, such data may, apart from storage, be processed only with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.

If processing has been restricted under the above conditions, you will be informed by the controller before the restriction is lifted.

4. Right to erasure

a) Obligation to erase

You may require the controller to erase personal data concerning you without delay, and the controller is obliged to erase such data without delay where one of the following grounds applies:

(1) the personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed;
(2) you withdraw your consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR and there is no other legal basis for the processing;
(3) you object to processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for processing, or you object pursuant to Art. 21(2) GDPR;
(4) the personal data concerning you has been unlawfully processed;
(5) erasure of the personal data concerning you is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject;
(6) the personal data concerning you was collected in relation to information society services offered pursuant to Art. 8(1) GDPR.

b) Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Art. 17(1) GDPR, the controller will take reasonable measures, including technical measures, taking into account available technology and implementation costs, to inform controllers processing the personal data that you as the data subject have requested erasure of all links to, or copies or replications of, such personal data.

c) Exceptions

The right to erasure does not apply insofar as processing is necessary

(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation requiring processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to above is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(5) for the establishment, exercise or defence of legal claims.

5. Right to notification

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort.

You have the right to be informed about these recipients by the controller.

6. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, where

(1) the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR; and
(2) the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The rights and freedoms of other persons must not be adversely affected.

The right to data portability does not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on those provisions.

The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to processing for such marketing; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for those purposes.

You have the option, in connection with the use of information society services and notwithstanding Directive 2002/58/EC, to exercise your right to object by automated means using technical specifications.

8. Right to withdraw consent under data protection law

You have the right to withdraw your data protection consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before withdrawal.

9. Automated individual decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

(1) is necessary for entering into or performing a contract between you and the controller;
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(3) is based on your explicit consent.

However, such decisions must not be based on special categories of personal data pursuant to Art. 9(1) GDPR unless Art. 9(2)(a) or (g) GDPR applies and suitable measures have been taken to protect your rights and freedoms and legitimate interests.

In the cases referred to in (1) and (3), the controller will implement suitable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention by the controller, to express your point of view and to contest the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority with which the complaint was lodged will inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.