Data protection information

In the following, we will inform you about the collection of personal data when using our website. Personal data in the sense of Art. 4 No. 1 EU General Data Protection Regulation (GDPR) is all information that can be related to you personally, such as name, address, e-mail addresses, user behavior.

Responsible and data protection officer
The controller for the processing of personal data within the meaning of the GDPR is:
ecoligoinvest GmbH
Zimmerstr. 90
10117 Berlin
support@ecoligo.com
You can contact our data protection officer at:
Lawyer Christian Krösch
SLK Compliance Services GmbH
KönigsbrückerStraße 76
01099 Dresden
Germany
+49 351 89676360
datenschutz@slk-compliance.de

General information about the collection, transfer and storage duration of personal data
The primary purpose of data processing is to provide access to our website and to establish and fulfill a contractual relationship with you. When you contact us by email, using a contact form or by telephone, we store the data you provide (e.g. your email address, possibly your name and your telephone number) in order to process your request. The primary legal basis for this is Art. 6 (1) b) GDPR. In addition, your separate consent may be obtained in accordance with Art. 6 (1) a) GDPR. We also process your data in order to fulfill our legal obligations, in particular in the area of commercial and tax law. This is done on the basis of Art. 6 (1) c) GDPR. Where necessary, we also process your data on the basis of Art. 6 (1) f) GDPR in order to protect our legitimate interests or those of third parties. These interests may arise, for example, for advertising, provided that you have not objected to the use of your data, the assertion of legal claims and defense in legal disputes, ensuring the IT security of our company, and for business management and development of services and products.
We only pass on your personal data to third parties if you have given your consent to do so in accordance with Art. 6 (1) a) GDPR, if the disclosure is necessary in accordance with Art. 6 (1) f) GDPR to assert, exercise or defend legal claims or to protect our legitimate interests (e.g. affiliated companies, courts, tax advisors, lawyers) and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data, in the event that there is a legal obligation to disclose it under Art. 6 (1) c) GDPR (e.g. tax authorities) and this is legally permissible and necessary under Art. 6 (1) b) GDPR for the performance of a contract with you (e.g. banks, logistics service providers, IT service providers).
Depending on which services you use on our website or request from us, your personal data may be transferred to a third country. Should we transfer personal data to recipients outside the European Economic Area (EEA), the transfer will only take place if the EU Commission has confirmed that the third country has an adequate level of data protection, if other appropriate data protection safeguards (e.g. binding internal data protection rules or EU standard contractual clauses) are in place, or if an exception for the transfer under Art. 49 GDPR exists.
We delete your personal data as soon as it is no longer required for the purposes stated in this data protection information. After termination of the contractual relationship, your personal data will be stored for as long as we are legally obliged to do so. This regularly arises from legal obligations to provide evidence and to retain data, which are regulated, among other places, in the German Commercial Code and the German Fiscal Code. The storage periods are up to ten years. Furthermore, personal data may be stored for the period during which claims can be asserted against us (statutory limitation period of three or up to thirty years).
You are only required to provide us with the personal data that is necessary for the provision and use of certain functions of our website or the establishment and execution of a contractual relationship and the fulfillment of the associated contractual obligations or that we are legally obliged to collect. Without this data, we will not be able to provide the website and certain website functions and to conclude and execute a contract with you.

Collection and processing of personal data on our website
Visiting our website
If you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server and that is technically necessary for the presentation of our website and to ensure stability and security. This includes the IP address, the request from your browser and the time of this request. In addition, the status and the amount of data transferred as part of this request are recorded. We also collect product and version information about the browser used and your system's operating system. We also record the website from which our site was accessed. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to your browser. To do this, your IP address must remain stored for the duration of the session. The processing of the remaining data is carried out to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the stability and security of our systems. The legal basis is Art. 6 para. 1 f) GDPR, based on a consideration of our above-mentioned legitimate and overriding interests. We transfer the collected data to external service providers (hosting providers, IT service providers, web agencies) who support us in data processing for the above-mentioned purposes.
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended. Otherwise, the data will be deleted within a few days at the latest after the website has been accessed.

Cookies
When you use our website, we may collect information through the use of cookies or similar technologies (“cookies”). Cookies are small text files that are stored by your browser on your device for the purpose of storing certain information. If you later return to our website using the same device, the information stored in cookies will be sent back to either our website or another website to which the cookie belongs. The stored and returned information enables the respective website to recognize that you have already accessed and visited it with the browser of your end device. Only the cookie itself is identified on your end device. We use cookies to improve our website, to store information about your favorite activities on the website and thus to align our website with your individual interests, as well as to fulfill legal requirements.
This website uses the following types of cookies, the scope and functioning of which are explained below:
Essential cookies
Functional cookies
Performance cookies
Marketing cookies
Other third-party services
Essential cookies are cookies without which you would not be able to use our website as intended or without which we would not be able to provide you with our website. These include, for example, functions such as setting and saving your data protection settings, filling in and saving user input and security functions. These cookies are used without your consent. However, you have the option to disable these cookies via your browser settings. The legal basis for the processing of personal data using strictly necessary cookies is Art. 6 para. 1 c) GDPR or Art. 6 para. 1 f) GDPR, based on a consideration of our legitimate and overriding interests in the technically smooth provision of our website and the services offered via it.
Functional cookies enable us to store the functions you request or the information you provide and, based on this, to offer you a better and more personalized experience when using our website. The legal basis for the processing of personal data using functional cookies is your consent in accordance with Art. 6 (1) a) GDPR.

We use performance cookies to understand how visitors use our website, in particular which areas they visit and how much time they spend on the website. In addition, we collect information and register error messages with the aim of improving our website. The legal basis for the processing of personal data using performance cookies is your consent in accordance with Art. 6 (1) a) GDPR. We use marketing cookies to be able to display personalized advertising content to you and to measure the effectiveness of our marketing campaigns. To do this, we use the services and cookies of third-party providers. These third-party providers may use them to create a profile of your interests and display relevant ads on other websites. When you visit another website, the cookie from your browser is recognized by the website and selected ads are displayed to you based on the information stored in this cookie. The legal basis for the processing of personal data using marketing cookies is your consent in accordance with Art. 6 (1) a) GDPR. Third-party services are integrated into our website. These include, for example, the integration of map services, social media plugins or search engines. In doing so, data may be collected and transmitted by these third-party providers when you visit our website using cookies. To what extent, for what purposes and on what legal basis a third-party provider processes data for its own purposes can be found in the following information. You can delete all cookies that have been set via your browser. In addition, you can set your browser to prevent websites from storing and reading cookies. You can revoke your consent to the use of cookies at any time with effect for the future, provided that these are not absolutely necessary. You can find the link to the cookie settings in the footer of our website.

Cookiebot
We use the consent management platform Cookiebot from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. In doing so, we collect your consent or the revocation of your consent (cookie preferences), communication data (e.g. IP address, browser information) and usage data (e.g. date and time of visit). We use Cookiebot to obtain, manage and document your consent to the storage of certain cookies on your device. The legal basis for the processing of the data is Art. 6 (1) (c) GDPR. In addition to the processing of the above-mentioned data by Cookiebot, we also forward the collected data to external service providers (e.g. platform, hosting, support service providers) for processing in accordance with the above-mentioned purposes (implementation of cookie consent management). The collected personal data will be deleted as soon as it is no longer required for the processing purposes. As long as processing operations to which the consent relates take place, the collected data will be stored to fulfill the accountability obligation in accordance with Art. 5 (2) GDPR. Insofar as the data provided is subject to tax and commercial law retention requirements, it will be stored for the duration of the retention requirements of up to ten years and then deleted, unless you have consented to further storage have consented to further storage or if further processing of the data is necessary for the assertion, exercise or defense of legal claims (statutory limitation period of three years, Section 195 BGB, accountability according to Art. 5 (2) GDPR).

Registration and use of our platform, payment service providers

To access the information and financing projects and to be able to invest on the platform, you must register by providing your name and email address. We use the so-called double opt-in procedure for registration, i.e. your registration is only complete when you have confirmed your registration via a confirmation email sent to you for this purpose by clicking on the link contained therein. The provision of the aforementioned data is mandatory; all other information can be provided voluntarily by using our platform. The legal basis for the processing of this personal data is Art. 6 (1) (b) GDPR. If you wish to invest on our platform, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your investment. Mandatory information required for the execution of the contracts is marked separately; any further information is voluntary. The legal basis for the processing of this personal data is Art. 6 (1) (b) GDPR. We store the voluntary data provided by you for the duration of your use of our platform, unless you delete it beforehand. Your address, payment and other contract data will be stored for a period of ten years after the execution of the contract for the duration of the tax and commercial law retention requirements and then deleted, unless you have consented to further storage or further processing of the data is required for the assertion, exercise or defense of legal claims. The legal basis for the processing of personal data for the purpose of fulfilling the legal archiving and retention obligations is Art. 6 (1) (c) GDPR. We process the data you provide in the context of the investment in order to broker the investment in our capacity as a contractually bound agent. Your registration, contract and investment data will be forwarded to the responsible liability umbrella, CONCEDUS GmbH, Schlehenstraße 6, 90542 Eckental. We are entitled to pass on this personal data in accordance with Art. 6 (1) b) GDPR. The liability umbrella is responsible for this processing of your data, including the collection of your data, in order to fulfill the obligations under the Money Laundering Act. In addition, we pass on your data to our payment service provider, secupay AG, Goethestr. 6, 01896 Pulsnitz (“secupay”). This enables us to process payments promptly and in compliance with the law. When processing payments via secupay, you transmit the payment data to secupay. The personal data exchanged with secupay is first name, last name, address, email address, IP address, telephone number, or other data necessary for payment processing. The data is transmitted for the purpose of payment processing. The legal basis for the processing of this personal data is Art. 6 (1) b), c) and f) GDPR. We will only transfer other personal data to secupay if there is a legitimate interest in the transfer. Secupay may pass on the personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfill the contractual obligations or if the data is to be processed in the order. The applicable data protection provisions of secupay may be retrieved under https://www.secupay.com/de/datenschutz. You are not required to provide the personal data mentioned above. The shared data is required for the conclusion of a contract. Without the provision of the data, communication, the conclusion of a contract or the processing of a contract may not be possible.

Google Ads Conversion and Remarketing
We use the advertising system Google Ads, of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to draw attention to our offer with the help of advertising (so-called Google Ads) on Google and other external websites. Google is responsible for delivering Google Ads and the associated data processing. You can find more information about Google Ads at: https://ads.google.com/intl/de_DE/home/. We use conversion tracking as part of our use of Google Ads. When you click on a Google ad, Google stores cookies on your device, which usually expire after 30 days, and collects data about your visits to our website, including the URL, referrer URL, IP address, device and browser characteristics, and timestamps. The cookies make it possible to recognize which of our offers you have viewed and subsequently used. Google provides us with statistical evaluations that show which parameters of the Google Ads placed work and where there is a need for optimization. We also use Google Ads Remarketing. This involves our Google ads being displayed on third-party websites when these users or user groups visit a Google website or a website in the Google advertising network. With Google Ads Remarketing, we analyze your usage behavior on our website, for example, which of our offers you were interested in. Based on this, you can be shown targeted advertising even after you have left our website on other websites. Google stores cookies for this purpose on your device, which usually lose their validity after 30 days. The cookies make it possible to recognize and analyze which of our offers you are interested in. We use conversion tracking to determine how effectively clicks on Google ads lead to specific activities on our site, such as purchases, registrations, or form completions. We use remarketing to target users or user groups that have already interacted with our site. The legal basis for the use of Google Ads Conversion and Remarketing is your consent in accordance with Art. 6 (1) a) GDPR. In addition to the processing of the above-mentioned data by Google, we transfer the collected data to external service providers (e.g. platform, hosting, support and analysis service providers) for processing in accordance with the above-mentioned purposes (implementation of and support with targeted advertising and analysis of the impact and efficiency of this advertising). In cases in which personal data is transferred under Google's own responsibility to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, these transfers are subject to the standard contractual clauses in accordance with Art. 46 GDPR and the EU-US Data Privacy Framework (DPF). The data protection agreement with Google with reference to the standard contractual clauses is available here: https://business.safety.google/controllerterms/. The personal data collected will be deleted as soon as they are no longer needed for the processing purposes, which is regularly the case after a period of six months from the collection of the data.

Google Analytics
We use the web analysis service Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies, which are stored on your end device and enable an analysis of your use of the website. When data is collected in Google Analytics 4, no IP addresses are logged or stored. All IP addresses of users in the EU that are collected via EU domains and servers are deleted before recording. Google does not collect precise location data. Instead, only general metadata such as “city”, “continent”, “country”, “region” and “subcontinent” are derived from the IP addresses. These metadata are deleted immediately and are used only to analyze general geographical information. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the website operator. We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our services and make them more interesting for you as a user. The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 (1) a) GDPR. In addition to the processing of the above-mentioned data by Google, we transfer the collected data to external service providers (e.g. platform, hosting, support and analysis service providers) for processing in accordance with the above-mentioned purposes (performance and support of web analysis). For the exceptional cases in which personal data is transferred under Google's own responsibility to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, these transfers are subject to the standard contractual clauses in accordance with Art. 46 GDPR and the EU-US Data Privacy Framework (DPF). The terms and conditions for contract data processing for Google advertising products with reference to the standard contractual clauses are available here: https://business.safety.google/adsprocessorterms/. The personal data collected will be deleted as soon as they are no longer needed for the processing purposes, which is regularly the case after a period of two months from the date the data was collected.

Microsoft Advertising UET
We use the Microsoft Advertising advertising system, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (“Microsoft”), to draw attention to our offering with the help of advertising (Microsoft Advertising ads) on Microsoft Bing and other external websites. Microsoft is solely responsible for the delivery of Microsoft Advertising ads and the associated data processing. You can find more information about Microsoft Advertising at: https://privacy.microsoft.com/de-de/privacystatement. As part of our use of Microsoft Advertising, we use Microsoft Advertising Universal Event Tracking (Microsoft Advertising UET). When you click on a Microsoft Advertising ad, Microsoft stores cookies on your device, which usually expire after 390 days. Microsoft collects your IP address, which is encrypted by Microsoft, a unique identification number (GUID) assigned to your browser, and/or an identification number (ID) assigned to you if you are authenticated through your Microsoft account. This allows Microsoft to track the activities of users of our website. Microsoft provides us with statistical evaluations that show which parameters of the Microsoft Advertising ads that have been placed work and where there is a need for optimization. Microsoft is solely responsible for all processing of personal data using Microsoft Advertising UET. Microsoft also uses this data to improve Microsoft Advertising and related services. We do not have access to the personal data collected through Microsoft Advertising UET. We use Microsoft Advertising UET to determine how effectively clicks on Microsoft Advertising ads lead to certain activities on our site, such as purchases, registrations, or form submissions. The legal basis for the use of Microsoft Advertising UET is your consent in accordance with Art. 6 (1) a) GDPR. In addition to the processing of the above-mentioned data by Microsoft, we transfer the collected data to external service providers (e.g. platform, hosting, support and analysis service providers) for processing in accordance with the above-mentioned purposes (implementation and support for targeted advertising and analysis of the impact and efficiency of this advertising). In cases in which personal data is transferred under Microsoft's own responsibility to Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, USA, these transfers are subject to the standard contractual clauses in accordance with Art. 46 GDPR and the EU-US Data Privacy Framework (DPF). These can be requested from Microsoft: https://www.microsoft.com/de-de/concern/privacy. The personal data collected will be deleted as soon as it is no longer needed for the processing purposes for which Microsoft, as the controller, is responsible. Further information can be found here: https://privacy.microsoft.com/dede/privacystatement.

Snowplow
ecoligo uses the data collected with Snowplow for range measurement. This also includes URL parameters to be able to assign a website visit and the associated interactions to a specific source (e.g. an online banking search). This enables ecoligo to find out how the ecoligo offering is received and whether improvements are needed. ecoligo uses the data collected with Snowplow to optimize the service portal in terms of technology and content. To do this, anonymous information about user behavior, the technology used and user feedback is collected. This data helps to understand the needs and problems of users and to adapt the service portal accordingly. Technical optimization includes, for example, improving loading times, adapting navigation and optimizing the search function. Content optimization includes, for example, improving article quality, adapting topics and improving user-friendliness. By using Snowplow data, ecoligo can make the service portal more customer-oriented and improve the user experience. For more information about how Snowplow processes data, the settings options and data protection, please refer to the following Snowplow websites: Snowplow terms of use: https://snowplow.io/standard-terms-andconditions-uk/ Privacy Policy: https://snowplow.io/privacy-policy/.

Meta Pixel Conversion Tracking, Website Custom Audience, Retargeting
We use the analysis tool Meta Pixel, provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). Meta Pixel uses JavaScript code and cookies to track the effectiveness of Facebook ads (“conversion tracking”), create target groups for future Facebook ads (“website custom audiences”) and to be able to address users again later (“retargeting”). When you click on a Facebook ad, Meta stores cookies on your device. These cookies make it possible to recognize which of our offers you have viewed and subsequently used. By integrating the Meta Pixel, Facebook receives the information that you have accessed the corresponding page of our website or clicked on one of our ads. If you are registered with a Meta service, Meta can assign the visit to your account. Meta provides us with statistical evaluations that show which parameters of the Facebook ads placed work and where there is room for improvement. Based on the Meta Pixel, we also create target groups (“Website Custom Audiences”) in order to display Facebook ads only to those users who show interest in our offers or similar offers. Based on this data, Meta can then only display the respective Facebook ads to those users who fall into the above-mentioned target group. We also use the option to retarget you with appropriate advertising at a later date. We use conversion tracking to determine how effectively clicks on Facebook ads lead to certain activities on our website, such as purchases, registrations or filling out forms. We use Website Custom Audiences and Retargeting to efficiently and effectively target users or user groups who have already interacted with our website or our offers. The legal basis for the use of Meta Pixel is your consent in accordance with Art. 6 (1) a) GDPR. For some of the data processing carried out in connection with Meta Pixel, we are jointly responsible with Facebook within the meaning of Art. 26 GDPR. This joint responsibility includes the collection of such personal data (“Event Data”, https://www.facebook.com/legal/terms/businesstools_jointprocessing) using Meta Pixels and its subsequent transmission to Meta for the purposes of (i) display relevant advertising based on user interests, (ii) deliver commercial and transactional messages, and (iii) improve ad delivery and personalize features and content. Meta remains solely responsible for any processing of this data after it has been transmitted to Facebook. We have entered into an agreement with Meta (“Controller Addendum”, https://www.facebook.com/legal/controller_addendum) that sets out the respective responsibilities for fulfilling the obligations under the GDPR with regard to joint processing. According to this, we are responsible for providing information on the joint processing of personal data. Meta is responsible for enabling the rights of data subjects in accordance with Art. 15-20 GDPR with regard to the personal data stored by Meta after joint processing. The contact details of the controller and the data protection officer of Meta are available here: https://www.facebook.com/about/privacy. In addition to the processing of the above-mentioned data by Meta, we also transfer the collected data to external service providers (e.g. platform, hosting, support and analysis service providers) for processing in accordance with the above-mentioned purposes (implementation of and support for targeted advertising and analysis of the effectiveness and efficiency of this advertising). In cases where personal data is transferred under Meta's own responsibility to Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, these transfers are subject to the standard contractual clauses in accordance with Art. 46 GDPR and the EU-US Data Privacy Framework (DPF). The meta-contractual addendum for the transfer of European data with reference to the standard contractual clauses is available here: https://www.facebook.com/legal/EU_data_transfer_addendum. The personal data collected will be deleted as soon as they are no longer required for the processing purposes, which is regularly the case after a period of six months from the date of collection.

FinanceAds
We use the financeAds affiliate network of financeAds GmbH & Co. KG, Karlstraße 9, 90403 Nuremberg (“financeAds”) to draw attention to our offer with the help of advertising in the financeAds network. As part of the use of financeAds, we use conversion tracking. If you click on one of our affiliate links in the financeAds network, financeAds stores cookies on your device to recognize that you clicked on the ad and were redirected to our site. finance Ads stores an individual sequence of numbers for each transaction, which does not reveal the name of the specific user, but contains information about the campaign from us, the advertising partner, the user action and the device used. In addition, information is stored to confirm that a transaction has taken place and to implement correct commission allocation, billing and reporting. This information includes, among other things, the order value, the product type and the distribution channel. The processing of user data by financeAds does not require the user to be directly identified, so financeAds generally only processes so-called “pseudonymous” data. We receive from financeAds the total number of users who clicked on one of our ads and were redirected to a page with conversion tracking. We use conversion tracking with financeAds to assign the registration to the correct affiliate partner in FinanceAds and to be able to pay the commission correctly. The legal basis for the use of conversion tracking by financeAds is an overriding interest on our part in accordance with Art. 6 (1) f) GDPR. Without this conversion tracking using cookies, it would not be possible for us to securely track registrations. The personal data collected will be deleted as soon as it is no longer needed for the processing purposes. The individual number sequence is stored for 60 days.

ecoligo affiliate program
We operate our own affiliate program to increase the effectiveness of our advertising efforts and to enable the allocation of registrations to our affiliates. When you click on one of our affiliate links, a cookie is stored on your browser that remains active for 60 days. This cookie contains information such as the affiliate ID that identifies the affiliate concerned, the banner ID that indicates the advertising material used, and the campaign ID that identifies the affiliate campaign used. We use conversion tracking to create a bill for the agent's commission, since it is only possible to track which advertising partner referred you as a user via the cookie. The legal basis for the use of conversion tracking is Art. 6 para. 1 f) GDPR. In doing so, we pursue our legitimate interest in correct billing with our advertisers as a result of the assignment of a success of advertising media or advertising integrations. In addition to the processing of the above-mentioned data by our own affiliate network, we transmit the collected data for processing to QualityUnit, s.r.o., Vajnorská 100/A, 831 04 Bratislava, Slovakia (Post Affiliate Pro), who support us as a technical service provider in the implementation of our affiliate program. We also send information to Post Affiliate Pro to confirm that a transaction has taken place and to implement correct commission allocation, billing and reporting. This information includes, among other things, the investment date, the order value, a numeric identification of the investment and a numeric identification of the investor, without disclosing the name of the user. The personal data will be deleted as soon as it is no longer needed for the processing purposes described or the storage period of the cookie expires.

Taboola Pixel
We use the marketing tool Outbrain Amplify from Taboola Europe Limited, 2nd Floor, Aldgate House, 33 Aldgate High St, London EC3N 1DL, UK (“Taboola”) to draw attention to our offering with the help of advertising in Taboola's advertising network. Taboola is responsible for the delivery of advertisements on other sites and the associated data processing. We only provide Taboola with content that Taboola delivers to readers within its advertising network based on their interests. You can find more information about Taboola at: https://www.taboola.com/policies/privacy-policy#notice-to-individuals-within-the-europeaneconomic-area-eea. As part of our use of Taboola, we use conversion tracking using the Taboola pixel. We use the Taboola pixel to display our advertising based on your surfing behavior and customer interest. Taboola uses cookies for this purpose to determine which websites you visit frequently and how you navigate our website. If you click on one of our advertisements in the Taboola network, Taboola stores cookies on your device and assigns you a unique user ID (UUID). This UUID is tied to your device and varies depending on the browser combination. In addition, further data is collected, including communication data (e.g. IP address, browser information, device information) and usage data (e.g. websites visited, interest in content, date, time and duration of visit). Based on this data, it is possible to recognize which of our offers you have viewed and subsequently used. We use conversion tracking to determine how effectively clicks on ads in the Taboola network lead to specific activities on our site, such as purchases, registrations, or form completions. The legal basis for the use of Taboola Pixel is your consent in accordance with Art. 6 (1) a) GDPR. In addition to the processing of the above-mentioned data by Taboola, we also forward the collected data to external service providers (e.g. platform, hosting, support and analysis service providers) for processing in accordance with the above-mentioned purposes (implementation of and support with targeted advertising and analysis of the effectiveness and efficiency of this advertising). An adequacy decision has been made regarding the transfer of personal data to Taboola. In cases in which personal data is transferred by Taboola to Taboola, Inc.1115 Broadway, 7th Floor, New York, New York 10010, USA under its own responsibility, these transfers are subject to the standard contractual clauses in accordance with Art. 46 GDPR. Taboola's privacy policy with reference to the standard contractual clauses is available here: https://www.taboola.com/policies/privacy-policy#notice-to-individuals-within-the-europeaneconomic-area-eea. The personal data collected will be deleted as soon as it is no longer needed for the purposes for which it was processed, which is regularly the case after a period of 13 months from the date the data was collected.

Further information on data processing on and off our website
Contact and communication
We also collect your personal data when you provide it to us voluntarily by email, via a contact form on our website, by post or by telephone. We then collect the information that arises in the course of establishing contact and/or working together. This includes, in particular, names and transmitted contact data, date and reason for making contact. The personal data collected about you is used for the purpose of providing you with the requested products or services and corresponding with you (legal basis Art. 6 (1) (b) GDPR), for the fulfilment of legal legal obligations (legal basis Art. 6 (1) (c) GDPR) or on the basis of our or third-party legitimate interests (legal basis Art. 6 (1) (f) GDPR) as described in this privacy policy. You are not required to provide the aforementioned personal data. The data provided may be required for the conclusion of a contract. Without the provision of the data, communication, conclusion of a contract or contract processing may not be possible. A transfer of the data relevant in the respective individual case takes place on the basis of the statutory provisions or a contractual agreement to public bodies in the presence of overriding legal provisions, to external service providers or other contractors and to other external bodies, insofar as you have given your consent or a transfer is permitted for reasons of overriding interest. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Insofar as the data provided is subject to tax and commercial law retention requirements, it will be stored for the duration of the retention requirements of ten years and then deleted, unless you have consented to further storage or if further processing of the data is necessary for the assertion, exercise or defense of legal claims (statutory limitation period of three or up to thirty years).

Newsletter
With your consent, you can subscribe to our newsletter, which we use to inform you about our offers. The advertised goods and services are named in the declaration of consent. We use the so-called double opt-in procedure to register for our newsletter. This means that after your registration, we will send you an e-mail to the e-mail address provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to verify your registration and, if necessary, to clarify any possible misuse of your personal data. The legal basis is Art. 6 (1) a) and c), Art. 7 (1), Art. 5 (2) GDPR. The only mandatory information for sending the newsletter is your e-mail address, which is marked separately. The provision of further data is voluntary and is used to address you personally. After your confirmation, we store the data you have provided for the purpose of sending you the newsletter. The legal basis for this is Art. 6 (1) a) GDPR. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. The user's e-mail address is therefore stored as long as the newsletter subscription is active. We may store inactive e-mail addresses for up to three years in order to be able to prove that consent has been given and to defend against possible claims. The legal basis is Art. 6 para. 1 c), Art. 5 para. 2 GDPR. You can revoke your consent to receive the newsletter and to the personal evaluation of your usage behavior (performance measurement) at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail or by sending a message to the contact details given in the imprint. The newsletter is sent by Hubspot, an e-mail marketing service provided by HubSpot Germany GmbH, c/o HubSpot Ireland Limited, HubSpot House, One Sir John Rogerson's Quay, Dublin 2, Ireland (“HubSpot”). Hubspot uses this information to send and measure the success of the newsletter on our behalf. In cases where personal data is transferred from HubSpot to HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA, these transfers are subject to the standard contractual clauses in accordance with Art. 46 GDPR and the EU-US Data Privacy Framework (DPF). For more information, please visit: https://legal.hubspot.com/dpa. Our newsletters contain so-called web beacons, i.e. a pixel-sized file that is retrieved by HubSpot when the newsletter is opened. As part of this retrieval, technical information, such as data about the browser and your system, as well as your IP address and the time of the retrieval, are collected for the purpose of technical improvement of the services based on the technical data or the target groups and their reading behavior. In addition, an evaluation of your usage behavior is carried out to determine whether the newsletters were opened, when they were opened and which links were clicked. The evaluations serve to recognize the reading habits of our users and to adapt our content to them or to be able to offer different content according to the individual interests of our users. This performance measurement is included in the consent according to Art. 6 para. 1 a) GDPR for sending the newsletter. A revocation can therefore only be made together with the consent to send the newsletter.

Objection or revocation against the processing of your data
If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation influences the permissibility of the processing of your personal data after you have expressed it to us. If we base the processing of your personal data on the weighing of interests, you can object to the processing. This is the case if the processing is not necessary, in particular, to fulfill a contract with you, which we describe in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. If your objection is justified, we will review the situation and either discontinue or adjust the data processing or point out to you our compelling legitimate grounds for continuing the processing. Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the contact details provided above.

Your rights
In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you may request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to complain, the origin of your data, if not collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information about the details. In accordance with Art. 16 GDPR, you have the right to request the immediate correction of incorrect or incomplete personal data stored by us. In accordance with Art. 17 of the GDPR, you have the right to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims. Pursuant to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you oppose the erasure of the data, if we no longer need the data but you require it for the establishment, exercise or defense of legal claims, or if you have objected to the processing pursuant to Art. 21 GDPR. You have the right, in accordance with Art. 20 GDPR, to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller. In accordance with Art. 7 (3) GDPR, you have the right to revoke the consent you have given us at any time. As a result, we are no longer allowed to continue the data processing based on this consent in the future. You also have the right, in accordance with Article 77 of the GDPR, to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, regarding the processing of your personal data by us if you consider that the processing of personal data relating to you infringes the GDPR.

---------

The Data Protection Statement is written in and shall be legally binding and decisive in German only. The English language translation is provided for convenience purposes only.