Privacy Policy

Privacy policy - status: 20.12.2022

We appreciate your use of our website. The protection of your personal data is important to us and we want you to feel safe when using our website. Therefore, in the following we would like to inform you in detail about the data processing procedures on our Internet presence vialutions.com and all associated subdomains.

Name and contact details of the responsible data protection supervisor

(1) In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.

(2) The responsible party pursuant to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is the

VIALUTIONS GmbH
Neuhausweg 7
13583 Berlin
Phone: +49 30 20847839
E-Mail: datenschutz@vialutions.com

You can reach our data protection supervisor at datenschutz@vialutions.com or by mail by adding “data protection supervisor”.

The contact details of our external data protection supervisor are:

Oliver Greiner
entplexit GmbH
Kölner Straße 12
65760 Eschborn

Your rights as a data subject

(1) If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

Right of access (art. 15 GDPR)

You have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

Right of rectification (art. 16 GDPR)

You have the right to request the correction of incorrect or incomplete personal data stored by us without delay.

Right to erasure (art. 17 GDPR)

You have the right to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.

Right to restrict data processing (art. 18 GDPR)

You have the right to request the restriction of the processing of your personal data, provided that the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to art. 21 GDPR.

Right to data portability (art. 20 GDPR)

You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.

Right to object to processing (art. 21 GDPR)

You have the right to object to the processing of personal data concerning you, at any time, on grounds relating to your particular situation. In particular, you may object to the processing of your personal data for purposes of advertising and data analysis as well as any associated profiling. In the event of your objection, we will review the factual situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

Right of revocation (Art. 7 para. 3 GDPR)

You have the right to revoke your previously given consent at any time with effect for the future. This has the consequence that we can no longer continue the data processing based on this consent for the future.

Right of appeal (art. 77 GDPR)

You also have the right to complain to a data protection supervisory authority about our processing of your personal data. The following data protection supervisory authority is responsible for us: Berlin Commissioner for Data Protection and Freedom of Information: https://www.datenschutz-berlin.de/

(2) You can send inquiries regarding your data subject rights directly to datenschutz@vialutions.com.

Collection of personal data when visiting our website

When you access the website, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is art. 6 para. 1 lit. f GDPR):

– IP-Address

– Date and time of the request

– Time zone difference from Greenwich Mean Time (GMT)

– Content of the request (concrete page)

– Access status/HTTP status code

– Data volume transferred in each case

– Website from which the request comes

– Browser

– Operating system and its interface

– Language and version of the browser software

The aforementioned data will be processed by us for the following purposes:

  • Ensuring a smooth connection to the website,
  • Ensuring comfortable use and technical optimization of our website,
  • Evaluation of system security and stability as well as for other administrative purposes.

This above-mentioned information is temporarily stored in a so-called log file. In the case of storage of data in log files, these are deleted after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

Usage of Cookies

(1) In addition to the previously mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive associated with the browser you are using and through which the entity that sets the cookie (in this case by us) receives certain information. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offer as a whole more user-friendly and effective.

(2) Types of cookies

This website uses the following types of cookies, the scope and functionality of which are explained below:

– Transient cookies (for this a)

– Persistent cookies (for this b).

a) Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website, for example, to prevent you from having to log in again each time you change pages. The session cookies are deleted when you log out or close the browser.

b) Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. How long the cookie remains on your device depends on the duration or expiration date of the particular cookie and your browser settings. You can delete the cookies in the security settings of your browser at any time. Through these cookies, the website remembers your information and settings the next time you visit. This will give you faster and more convenient access to the website, as you will not have to set your language preference again, for example.

(3) We use cookies based on our legitimate interests (Technically Necessary Cookies) or based on your consent (Optional Cookies), according to your selection of the cookie banner displayed when you access the website. You can also configure your browser setting according to your preferences and, for example, refuse to accept third-party cookies or all cookies. This may result in a functional restriction of our offers.
We have compiled information for you on all cookies used in our cookie notices.

Recipients or categories of recipients

(1) In the course of our activities and services, it may become necessary for us to disclose the personal data stored about you to natural persons, legal entities or other entities. We enter into contract processing agreements with our service providers, where relevant, to ensure that they may only process your personal data in a manner that we have explicitly instructed them to do. Furthermore, we ensure that they have taken the necessary technical and organizational measures to process your data securely and only store your personal data for as long as is really necessary. External service providers who may receive personal data generally fall under the following categories of recipients:

– Credit institutions and providers of payment services for settlements as well as processing of payments (online payment providers)

– Parcel shippers

– IT service provider to maintain our IT infrastructure.

– Cloud-Providers

– Service provider for the optimization of the online services

– Collection service providers and lawyers to collect receivables and enforce claims in court. If, in the event of collection, personal data (customer and contact data, payment and consumption data and data on the debt) is transferred to a collection service provider, we will inform you in advance of the intended transfer.

(2) If data is processed in countries outside the EU, we ensure that your personal data is processed in accordance with the European level of data protection. In the absence of a decision by the EU Commission, we only transfer data to service providers from third countries that offer suitable guarantees in accordance with Art. 46 GDPR (usually EU standard contractual clauses). In cases where this cannot be ensured even by this contractual extension, we will endeavor to obtain additional regulations and commitments from the recipient in the respective country.

Contact via e-mail or contact form

(1) A contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. These data are:

– Name

– E-Mail address

– if necessary, further personal data in the free text field

– if applicable, further data about the FriendlyCaptcha service (see below) and IP address, as well as date and time of contact

When contacting us (for example, by e-mail or after using the contact form), the information you provide will be processed for the purpose of processing the request and in the event that follow-up questions arise. The other personal data processed during the submission process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.

(2) For the processing of the data, your consent is obtained during the submission process and reference is made to this privacy policy. Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data will be used exclusively for the processing of the conversation. The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

(3) The personal data collected by us in this context will be deleted when the matter relating to the contact has been fully clarified and it is also not expected that the specific contact will be relevant again in the future, unless there are legal storage obligations to the contrary.

Newsletter

(1) We send newsletters, emails and other electronic notifications with promotional information. Our newsletters contain information about our products, offers, promotions and our company. With the following information we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your rights of objection.

(2) For the registration to our newsletter we use a logged double opt-in procedure. I.e. after registration you will receive an email asking you to confirm your registration. This confirmation is necessary so, that no one can log in with foreign e-mail addresses. Subscriptions to the newsletter are logged in order to be able to prove the subscription process in accordance with legal requirements. This includes the storage of the login and confirmation time, as well as the IP address. Likewise, changes to your data stored with the shipping service provider are logged. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

(3) To subscribe to the newsletter, it is sufficient to provide your e-mail address. The provision of further data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. Sending the newsletter and measuring its success are based on your consent pursuant to Art. 6 para. 1 letter a, Art. 7 GDPR.

(4) You can revoke your consent to receive the newsletter and unsubscribe at any time. You can declare the revocation by clicking on the link provided in every newsletter e-mail, by e-mail or by sending a message to the contact details provided in the imprint.

(5) For sending the newsletter, we use the provider HubSpot, 2nd Floor, 30 North Wall Quay, Dublin 1, Irland. HubSpot is a software company from the USA with a branch in Ireland. Since a transfer of personal data to the USA takes place, further protection mechanisms are required to ensure the data protection level of the GDPR. In order to ensure this, we have concluded an order processing contract with the provider and have included so-called standard data protection clauses in accordance with art. 46 para. 2 lit. c) GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we will endeavor to obtain additional arrangements and commitments from the recipient in the USA. You can view the privacy policy of the shipping service provider and further details on data processing here. There you will also find more information about the storage period and the transfer of data to contractual partners of HubSpot.

(6) We expressly point out that there is currently no adequate level of data protection in the USA and that we had to adopt the standard contractual clauses offered by HubSpot unchanged. We would also like to point out, that we have no influence on the content of the contracts or on access to your data in the USA by contractual partners of the provider or US authorities.

Presence on Social-Media, Portals

(1) We are represented as operators with online presences in the social networks and platforms listed below. In terms of data protection law, we are jointly responsible with the respective platform operator within the meaning of art. 26 GDPR and, where possible, have concluded corresponding contracts with the platform operator. The details of the joint responsibility agreements can be found below in the details of the respective platform operator, in particular in the details of the Facebook Fanpage.

(2) Our online presences on social media channels serve the purposes of advertising, market research and to offer a further opportunity to communicate with customers, interested parties and users. If you contact us via our social media channels, we process the data that you provide to us as well as the data that is necessary to process the request. In these cases, we have a legitimate interest in communicating directly with the users of the platform and optimizing the design of our online presence (art. 6 para. 1 sentence 1 lit. f) GDPR). If the contact can be considered as a contract initiation, Art. 6 para. 1 letter b GDPR also serves as the legal basis for the processing of the data. If the user has given his consent to the operators of the respective social media platforms (e.g. by a checkbox opt-in), the processing is carried out on the basis of Art. 6 para. 1 letter a GDPR. You can revoke your consent at any time vis-à-vis the provider of the respective platform with effect for the future.

(3) When you access our social media pages, your user data is collected and provided to us by the provider. However, the exact types of data vary from provider to provider generally include the following information:

– Follower: Number and deposited profiles; information on growth and development over a defined time frame.

-Reach: number of people who see a specific post; number of interactions on a post. This can be used, for example, to determine which content is better received by the community than others.

-Ad performance: How many people were reached and interacted with a post or paid ad?

-Demographics: average age of visitors, gender, place of residence, language.

(4) We would like to point out that you use the social media company pages offered by us and the functions of the platforms on your own responsibility. This applies in particular to the use of interactive functions (e.g. sharing, commenting). Since our social media channels are operated by the providers of the respective social network, there may be a supplementary use of your personal data by the latter over which we have no influence. This often involves the collection of their IP address, the creation of static evaluations and the processing of other information stored in the form of cookies. Often, this data is also used to show you interest-based advertising within and outside the platforms. We, as the operator, have no influence on the generation and display and can neither turn off this function nor prevent the processing of the data.

(5) Regardless of where you reside, your information will be transferred to, stored and used in the United States, Ireland and any other country where the Platform Operators do business. Third-country transfers are usually legally regulated by the conclusion of the standard contractual clauses (see above). However, we expressly point out that your data will be transferred to countries (especially the USA) where there is currently no adequate level of data protection. If the data is transferred to the U.S., there is a risk that your data may be processed by U.S. authorities for control and monitoring purposes, without you possibly having any legal remedies. Dies kann für verschiedene Zwecke der Fall sein, z. B. zum Speichern oder Verarbeiten.

(6) Below we have compiled further details on the respective platform providers for you. More detailed information on the terms of use and data protection of the respective platform as well as a detailed description of further data processing and the respective objection options can be found on the websites of the providers at:

Facebook (Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; the data controller for individuals living outside the United States is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter: Facebook); for more information on Facebook’s data collection, see here and here. You can access the joint responsibility agreement within the meaning of art. 26 of the GDPR (the so-called Site Insights Supplement) here. As part of the so-called Page Insights supplement with Facebook, it was agreed who fulfills which obligations under the GDPR. The primary responsibility under the GDPR for processing Insights data lies with Facebook. Accordingly, Facebook complies with all obligations under the GDPR with respect to the processing of Insights Data (including Articles 12 and 13 of the GDPR, Articles 15 to 22 of the GDPR, and Articles 32 to 34 of the GDPR). Your data subject rights can be asserted with us or Facebook Ireland Limited (“Facebook Ireland”). If you contact us as a data subject under the GDPR regarding the processing of Insights data and the obligations assumed by Facebook Ireland under the Page Insights Supplement, we are obliged to forward all relevant information in this regard to Facebook Ireland.

Xing (New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany); The privacy policy can be found here. Xing unfortunately does not currently offer a shared responsibility agreement.

LinkedIn (LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland). You can find LinkedIn’s privacy policy here. Opt-Out Link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. You can access the shared responsibility agreement provided by LinkedIn here.

YouTube (YouTube LLC with its principal place of business at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube LLC is represented by Google LLC with headquarters at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; the data controller for persons living outside the United States is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); Google Privacy Policy and Terms of Use.

(7) The assertion of data subject rights and requests for information can most effectively be addressed directly to the providers of the platforms, as only they have access to your data and can take immediate action. If our involvement is required for this purpose, we will support you in enforcing your data subject rights if necessary.

Facebook Page Insights – "Facebook Fanpages" and analytics from LinkedIn and YouTube

(1) When you visit our Facebook page, Facebook collects, among other things, your IP address and other information that is present on your PC in the form of cookies. This information is used to provide us, as the operator of the Facebook page, with statistical information about the use of the Facebook page. This statistical data is available to us, the operator of the site, via the so-called “Insights” of the Facebook page. These statistics are generated and provided solely by Facebook. We as the operator have no influence on the generation and presentation. We cannot turn off this feature or prevent the generation and processing of the data. Facebook provides more information about “Insights” at the following link: http://www.facebook.com/help/pages/insights.

(2) The following data is provided to us by Facebook through “Insights”: Number of page views, “Like” information, page activity, reach, video views, post interactions, post reach, comments, shared content, replies, gender ratio, regional distribution of users (origin related to country and city), language, calls and clicks in the store, clicks on route planners and clicks on phone numbers.

(3) The operation of this Facebook page and the associated processing of users’ personal data is based on Art. 6 para. 1 letter f) GDPR, our legitimate interest in providing a timely and supportive information and interaction opportunity for and with users and visitors to our Facebook page.

(4) LinkedIn and YouTube

LinkedIn: In connection with the operation of our LinkedIn profile, we use LinkedIn Page Analytics. We thus receive information about the use of our content. For more information on the data protection of the LinkedIn platform, please refer to LinkedIn’s privacy policy.

Youtube: In connection with the operation of our Youtube account, we use the Youtube analysis functions. By means of the analysis function, we can analyze the use and statistically evaluate. You can find more information in Google’s privacy policy.

Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

(2) We use Google Analytics to have the use of our website analyzed by Google in order to be able to improve it regularly. The statistics obtained enable us to improve our offer and make it more interesting for you as a user and to increase the success of our marketing campaigns. For this purpose, we collect your usage data, e.g. your IP address, the pages you visit (click path), conversions such as newsletter sign-ups or downloads, clicks, dwell time, region or the technical information about your browser. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. For more information on the risks of data transfer to the USA, please refer to 8. of this privacy policy (social media platforms).

(3) If you are logged in with your Google account, your data can be directly assigned to it. If you do not wish to be associated with your Google profile, you must log out. For more information on the purpose and scope of data collection and processing, as well as further information on your rights in this regard and settings options for protecting your privacy, please refer to Google’s privacy policy.

(4) The legal basis for this data processing is, according to Art. 6 para. 1 p. 1 lit. a) GDPR your consent, which you have given via the cookie banner. You can revoke your consent at any time with effect for the future by calling up the cookie settings and changing your selection there. You may also refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by not giving your consent to the cookie setting or by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout.

(5) The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as processor. For this purpose, we have entered into an order processing agreement with Google and have concluded the EU standard data protection clauses. Google LLC, headquartered in California, USA, and, if applicable, US authorities may access the data stored by Google.

(6) This website uses Google Analytics with the extension “anonymizeIp”. This means that IP addresses are processed in abbreviated form, which means that we cannot link them to a specific person. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

(7) This website also uses Google Analytics for cross-device analysis of visitor flows, which is performed via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data”, “Personal data”.

(8) We have entered into an order processing agreement and, where possible, a joint responsibility agreement with Google for the use of Google Analytics.

(9) For more information on how long data is stored and how it is shared, please see the User Terms; and Google’s Privacy Policy.

Microsoft Azure Marketplace

(1) We use the “Microsoft Azure Marketplace” of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; responsible for data processing within the scope of the GDPR is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown Dublin 18, Ireland. Information on the processing of personal data by Microsoft can be found here.

(2) We process your communication data (e.g. name, telephone, company e-mail, address, company affiliation) as well as information on product interests. The legal basis is the processing of your contact for the purpose of initiating a contract in accordance with Art.6 para. 1 p.1 letter b) GDPR. In addition, the use of Microsoft Azure and the associated data processing is based on our legitimate interest in providing a secure, error-free website (Art. 6 para. 1 lit. f GDPR).

Your personal contact data is transmitted to us by Microsoft when you use the “Contact me” button as part of our product offering on the Azure Marketplace. If cookies are set on our website by the Microsoft service, your consent obtained via the cookie banner serves us as the legal basis pursuant to Art. 6 para. 1 lit. a GDPR.

(3) We have concluded an order processing agreement with Microsoft including the current standard contractual clauses, which you can view here. You can find further data protection information here. For more information on the risks of data transfer to the USA, please refer to 8. of this privacy policy (social media platforms).

Video and audio conferences, webinars, meetings

(1) We use the Microsoft Teams platform of Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399 USA (platform operator) to conduct video or audio conferences. In doing so, as a host or moderator, the personal data stored in your account will be processed for the administration of the rooms. As a participant, you can decide whether to join the chat or share your microphone or camera. You are free to use a pseudonym instead of your real name. As a rule, the following data with personal reference is processed during use: User data, video, audio and text data, meeting metadata, meeting recordings (optional). We have no influence on the system-side processing of technical information such as device/hardware information (e.g. IP address, operating system data of the end device as well as time and date of access) by the service provider. Microsoft processes so-called telemetry data itself.

(2) If an online meeting is being recorded, you will learn about it via an advance notice from the organizer or via a technical signal. You can disable your camera and its microphone by yourself and leave the meeting at any time. Recording saves the data of the audio and video meeting and optionally the messages in the chat, question or poll function.

(3) We store your personal data as long as a contractual relationship with you exists, we have a legitimate interest in the further storage and use or we are legally obliged to do so. As a rule, we will delete the collected data from our databases after the webinar has been held. The legal basis is Art. 6 para. 1 p.1 letter b) GDPR. The legal basis for the processing of personal data that you can optionally disclose about yourself is your consent pursuant to Art. 6 para. 1 letter a), 7 GDPR.

(4) The recipient of the data is the platform operator, who acts as an order processor for us. For this purpose, we have concluded an order processing agreement and the EU standard data protection clauses with the platform operator (see above Microsoft Azure Marketplace). In the case of US providers, US authorities may be able to access the data stored by the provider. The platform provider says it protects all data in Microsoft Teams by default using technologies such as TLS, MTLS and SRTP in Microsoft data centers. This means that encryption is performed according to the Internet standard corresponding Transport Layer Security (TLS) and Mutual TLS (MTLS).

(5) The privacy policy of MS-Teams or Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399 USA can be found here. For more information on the risks of data transfer to the USA, please refer to 8. of this privacy policy (social media platforms).

Use of FriendlyCaptcha for spam protection

(1) We have integrated the spam protection FriendlyCaptcha of Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, on our website. This tool verifies that input from website visitors is actually made by a human and not by a machine or automated program. FriendlyCaptcha collects your IP address, technical details about your web browser and, if applicable, operating system, the subdomain accessed with metadata such as the date and time of the request and, if applicable, other entries that you are asked to make via FriendlyCaptcha.

When using FriendlyCaptcha, no automatic cookies are set. This will not happen until you click the button to start the “Anti-Robot Verification”. The provider has summarized details of this processing for you in its privacy policy. The setting of these cookies does not require separate consent within the meaning of § 25 (1) TTDSG, as they are technically necessary cookies (§ 25 II TTDSG) that we need to operate our website for the reasons stated below.

(2) We use FriendlyCaptcha exclusively to secure the contact options we provide for you against misuse and resulting risks of failure, as well as to detect and prevent use of our website designed to cause technical damage. The storage and analysis of the data is thus based on a legitimate interest in protecting our web offers from abusive automated spying and from SPAM (basis of Art. 6 para. 1 lit. f) GDPR). The transfer of your data collected via our website to the provider is secured by the order processing agreement concluded with FriendlyCaptcha.

(3) If we obtain data via FriendlyCaptcha, we only process it for as long as is necessary to check your data entry and then delete it, provided there are no legal retention periods to the contrary.

Embedding of Videos

(1) We have integrated YouTube videos into our online offering for marketing purposes (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which are stored on www.youtube.com and can be played directly from our website. These are integrated in “extended data protection mode”, i.e. no cookies are set by YouTube to analyze user behavior, e.g. to personalize video playback. Instead, video recommendations are based on the current video. The legal basis for this is Art. 6 para. 1 letter f) GDPR. Our legitimate interest lies in the quality improvement of our Internet presence. If cookies are set via YouTube, we obtain your consent for this in accordance with Art. 6 para. 1 lit. a) GDPR, § 25 TTDSG.

(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This results in the transmission of certain user data to YouTube. Eine Übermittlung der Daten an YouTube erfolgt unabhängig davon, ob YouTube ein Nutzerkonto bereitstellt, über das Sie eingeloggt sind, oder ob kein Nutzerkonto besteht. If you are logged in to Google, your data is directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. For the purpose of functionality as well as for the analysis of user behavior, YouTube permanently stores cookies on your end device via your Internet browser. If you do not agree with this processing, you have the option to prevent the storage of cookies by a setting in your Internet browser. YouTube continues to store your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of user profiles, and you must contact YouTube to exercise this right. YouTube may process your personal data on servers in the USA, among other places.

(3) For more information on the purpose and scope of data collection, your rights, settings options for protecting your privacy, and processing by YouTube, please see Google’s privacy policy.