vorstand@jugendfoerderung-in-litauen.org
English

Privacy

Privacy policy

Introduction

With the following data protection declaration, we would like to inform you about the types of your personal data (hereinafter also referred to as “data”) that we process, for what purposes and to what extent. The data protection declaration applies to all processing of personal data carried out by us, both in the context of the provision of our services and in particular on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as the “Online Offer”).

The terms used are not gender specific.

Status: November 9, 2026

Table of contents

Responsible

Kinder- und Jugendförderung in Litauen e.V.
Board of the association: Otmar Debald
Lerchesbergring 107
60598 Frankfurt
Germany
E-mail address: vorstand@jugendfoerderung-in-litauen.org
Phone number: +49 69 74309064
Register number: VR 1979
Place of jurisdiction: Local Court (AG) Bad Homburg

Authorized representatives: Otmar Debald.

Legal notice: https://jugendfoerderung-in-litauen.org/en/imprint/

Processing overview

The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.

Types of data processed

  • Inventory data (e.g., names, addresses).
  • Content data (e.g. entries in online forms).
  • Contact information (e.g., email, phone numbers).
  • Meta/communication data (e.g. device information, IP addresses).
  • Usage data (e.g. web pages visited, interest in content, access times).
  • Contract data (e.g. subject matter of the contract, term, customer category).
  • Payment data (e.g. bank details, invoices, payment history).

Categories of persons concerned

  • Business and Contractual Partners.
  • Interested parties.
  • Communication partner.
  • Customers.
  • Members.
  • Users (e.g., website visitors, users of online services).

Processing purposes

  • Provision of our online offer and user-friendliness.
  • Direct marketing (e.g. by e-mail or postal mail).
  • Feedback (e.g. collecting feedback via online form).
  • Contact requests and communication.
  • Profiles with user-related information (creation of user profiles).
  • Reach measurement (e.g. access statistics, recognition of returning visitors).
  • Safety measures.
  • Provision of contractual services and customer service.
  • Managing and responding to inquiries.

Relevant legal bases

Below you will find an overview of the legal basis of the GDPR on the basis of which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or domicile. If, in addition, more specific legal bases are relevant in individual cases, we will inform you of these in the data protection declaration.

  • Consent (Art. 6 (1) p. 1 lit. a. DSGVO) – The data subject has given his/her consent to the processing of personal data concerning him/her for a specific purpose or purposes.
  • Contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO) – Processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the data subject’s request.
  • Legitimate interests (Art. 6 (1) p. 1 lit. f. DSGVO) – Processing is necessary for the purposes of the legitimate interests of the controller or a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.

National data protection regulations in Germany: In addition to the data protection regulations of the General Data Protection Regulation, national regulations on data protection apply in Germany. This includes, in particular, the Act on Protection against Misuse of Personal Data in Data Processing (Federal Data Protection Act – BDSG). In particular, the BDSG contains special provisions on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes and transmission, as well as automated decision-making in individual cases, including profiling. Furthermore, it regulates data processing for purposes of the employment relationship (Section 26 BDSG), in particular with regard to the establishment, implementation or termination of employment relationships as well as the consent of employees. Furthermore, state data protection laws of the individual federal states may apply.

Security measures

We take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons.

The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access to, input of, disclosure of, assurance of availability of and separation of the data. Furthermore, we have established procedures to ensure the exercise of data subject rights, the deletion of data, and responses to data compromise. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and processes in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.

Transmission of personal data

In the course of our processing of personal data, the data may be transferred to or disclosed to other entities, companies, legally independent organizational units or persons. The recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements that serve to protect your data with the recipients of your data.

Data processing in third countries

If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA)) or the processing takes place in the context of the use of third-party services or the disclosure or transfer of data to other persons, entities or companies, this will only be done in accordance with the legal requirements.

Subject to express consent or contractually or legally required transfer, we process or have the data processed only in third countries with a recognized level of data protection, contractual obligation by so-called standard protection clauses of the EU Commission, in the presence of certifications or binding internal data protection regulations (Art. 44 to 49 GDPR, EU Commission information page: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).

EU-U.S. Data Privacy Framework: On July 10, 2023, the European Commission adopted an adequacy decision for the USA (EU-U.S. Data Privacy Framework). Transfers to providers certified under this framework are based on this decision, otherwise on the European Commission's Standard Contractual Clauses. Which services we use and on what basis data is transferred to third countries is stated for each service in this privacy policy.

Data deletion

The data processed by us will be deleted in accordance with the legal requirements as soon as their consents permitted for processing are revoked or other permissions cease to apply (e.g. if the purpose of processing this data has ceased to apply or it is not required for the purpose).

Unless the data is deleted because it is required for other and legally permissible purposes, its processing will be limited to these purposes. I.e., the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law or whose storage is necessary for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural person or legal entity.

Our privacy notices may also contain further information on the retention and deletion of data, which will take precedence for the respective processing operations.

Cookies use

Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user’s computer. A cookie is primarily used to store information about a user during or after his visit within an online offer. Stored information may include, for example, language settings on a website, login status, a shopping cart, or where a video was watched. The term cookies also includes other technologies that perform the same functions as cookies (e.g., when user information is stored on the basis of pseudonymous online identifiers, also referred to as “user IDs”).

The following cookie types and functions are distinguished:

  • Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online offer and closed his browser.
  • Permanent cookies: Permanent cookies remain stored even after the browser is closed. For example, login status can be saved or preferred content can be displayed directly when the user revisits a website. Likewise, the interests of users used for reach measurement or marketing purposes may be stored in such a cookie.
  • First-party cookies: First-party cookies are set by us.
  • Third-party cookies (also: third-party cookies): Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
  • Necessary (also: essential or absolutely necessary) cookies: On the one hand, cookies may be absolutely necessary for the operation of a website (e.g., to store logins or other user input or for security reasons).
  • Statistics, marketing and personalization cookies: Furthermore, cookies are generally also used in the context of range measurement and when a user’s interests or behavior (e.g. viewing certain content, using functions, etc.) on individual websites are stored in a user profile. Such profiles are used, for example, to show users content that matches their potential interests. This process is also called “tracking”, i.e., following the potential interests of users. Insofar as we use cookies or “tracking” technologies, we will inform you separately in our data protection declaration or in the context of obtaining consent.

Notes on legal bases: The legal basis on which we process your personal data using cookies depends on whether we ask you for consent. If this is the case and you consent to the use of cookies, the legal basis for the processing of your data is the declared consent. Otherwise, the data processed with the help of cookies is processed on the basis of our legitimate interests (e.g. in the business operation of our online offer and its improvement) or, if the use of cookies is necessary to fulfill our contractual obligations.

Storage period: If we do not provide you with explicit information about the storage period of permanent cookies (e.g. in the context of a so-called cookie opt-in), please assume that the storage period can be up to two years.

General information on revocation and objection (opt-out): Depending on whether the processing is based on consent or legal permission, you have the option at any time to revoke any consent you have given or to object to the processing of your data by cookie technologies (collectively referred to as “opt-out”). You can initially declare your objection by means of your browser settings, e.g. by deactivating the use of cookies (whereby this may also limit the functionality of our online offer). An objection to the use of cookies for online marketing purposes may also be declared by means of a variety of services, especially in the case of tracking, via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/. In addition, you can receive further instructions on how to object in the context of the information on the service providers and cookies used.

Processing of cookie data on the basis of consent: We use a cookie consent management procedure under which users’ consents to the use of cookies, or to the processing operations and providers mentioned in the cookie consent management procedure, can be obtained and managed and revoked by users. The declaration of consent is stored so that it does not have to be repeated and the consent can be proven in accordance with the legal obligation. The storage can take place on the server side and/or in a cookie (so-called opt-in cookie, or with the help of comparable technologies), in order to be able to assign the consent to a user or their device. Subject to individual information on the providers of cookie management services, the following information applies: The duration of the storage of consent can be up to two years. Here, a pseudonymous user identifier is formed and stored with the time of consent, information on the scope of consent (e.g., which categories of cookies and/or service providers), as well as the browser, system, and end device used.

  • Types of data processed: Usage data (e.g. web pages visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

Cookie consent on this website: We obtain your consent via the HubSpot cookie banner, where you can allow or reject cookies by category. Without your consent we do not set any cookies for analytics or marketing purposes. You can change or withdraw your choice at any time via the "Cookie settings" link at the bottom of every page.

Without consent, only technically necessary cookies are set: __hs_cookie_cat_pref, __hs_opt_out and __hs_initial_opt_in store your decision in the cookie banner (up to 6 months); __cf_bm is set by Cloudflare, a service provider used by HubSpot, to fend off automated attacks (30 minutes). On pages with the contact or newsletter form, Google reCAPTCHA sets the cookie _GRECAPTCHA (see "Spam protection with Google reCAPTCHA"). We do not use Google Analytics, Google Tag Manager or Microsoft Clarity.

Services and service providers used:

  • HubSpot cookie banner: obtaining, storing and managing consent; Service provider: HubSpot Ireland Limited, Ireland; parent company: HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA; website: https://www.hubspot.com; privacy policy: https://legal.hubspot.com/privacy-policy; data processing agreement: https://legal.hubspot.com/dpa; storage location of our account: data center in Germany; basis for transfers to the USA: EU-U.S. Data Privacy Framework (HubSpot, Inc. is certified), supplemented by the European Commission's Standard Contractual Clauses; legal bases: legitimate interests (Art. 6 (1) (1) lit. f GDPR), for storing the decision on your device Section 25 (2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act).

Performance of duties under the Articles of Association or the Rules of Procedure

We process the data of our members, supporters, interested parties, business partners or other persons (collectively, “Data Subjects”) when we have a membership or other business relationship with them and perform our functions and are recipients of services and benefits. In other respects, we process the data of data subjects on the basis of our legitimate interests, e.g. when administrative tasks or public relations work are involved.

The data processed in this context, the type, scope and purpose and the necessity of its processing, are determined by the underlying membership or contractual relationship, from which the necessity of any data disclosures also arise (in addition, we refer to required data).

We delete data that is no longer required to fulfill our statutory and business purposes. This is determined according to the respective tasks and contractual relationships. We keep the data for as long as they may be relevant for the processing of the business, as well as with regard to any warranty or liability obligations based on our legitimate interest in regulating them. The need to retain the data is reviewed regularly; in all other respects, the statutory retention obligations apply.

  • Types of data processed: inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. e-mail, telephone numbers), contract data (e.g. subject matter of contract, term, customer category).
  • Data subjects: Users (e.g. website visitors, users of online services), members, business and contractual partners.
  • Purposes of processing: provision of contractual services and customer service, contact requests and communication, management and response to requests.
  • Legal basis: Contract fulfillment and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

Payment method

In the context of contractual and other legal relationships, due to legal obligations or otherwise on the basis of our legitimate interests, we offer data subjects efficient and secure payment options and use other service providers in addition to banks and credit institutions for this purpose (collectively, “payment service providers”).

The data processed by the payment service providers includes inventory data, such as the name and address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as the contract, total and recipient-related information. The information is necessary to carry out the transactions. However, the data entered is only processed by the payment service providers and stored with them. I.e., we do not receive any account or credit card related information, but only information with confirmation or negative information of the payment. Under certain circumstances, the data may be transmitted by the payment service providers to credit agencies. The purpose of this transmission is to check identity and creditworthiness. In this regard, we refer to the GTC and the data protection information of the payment service providers.

The terms and conditions and the data protection notices of the respective payment service providers, which can be accessed within the respective websites or transaction applications, shall apply to the payment transactions. We also refer to these for further information and assertion of revocation, information and other data subject rights.

  • Types of data processed: inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contract data (e.g. subject matter of contract, term, customer category), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
  • Affected persons: Customers, interested parties.
  • Purposes of processing: provision of contractual services and customer service.
  • Legal basis: Contract fulfillment and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

Services used and service providers:

Provision of the online offer and web hosting

In order to provide our online offer securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers managed by them) the online offer can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services, as well as security services and technical maintenance services.

The data processed in the course of providing the hosting service may include all information concerning the users of our online service that is generated in the course of use and communication. This regularly includes the IP address, which is necessary to be able to deliver the contents of online offers to browsers, and all entries made within our online offer or from websites.

Collection of access data and log files: We ourselves (or our web hosting provider) collect data on every access to the server (so-called server log files). The server log files may include the address and name of the web pages and files accessed, the date and time of access, the volume of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider.

The server log files may be used, on the one hand, for security purposes, e.g., to prevent server overload (especially in the case of abusive attacks, so-called DDoS attacks) and, on the other hand, to ensure the utilization of the servers and their stability.

  • Types of data processed: Content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Purposes of processing: provision of our online offer and user-friendliness.
  • Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

Our website consists of static pages without a database and without user accounts. Fonts and the search function are delivered from our own server; no data is transferred to third parties in the process.

Services and service providers used:

  • Railway: website hosting; service provider: Railway Corporation, 548 Market St PMB 68956, San Francisco, CA 94104, USA; website: https://railway.com; privacy policy: https://railway.com/legal/privacy; data processing agreement: https://railway.com/legal/dpa. The website is operated in Railway’s “EU West” region (data centre in Amsterdam, Netherlands); requests from Europe are generally also delivered via Railway’s European network nodes. As Railway is based in the USA, personal data (in particular server log files containing IP addresses) may nevertheless be processed in or accessed from the USA; any such transfer is based on the European Commission’s Standard Contractual Clauses (Art. 46 (2) lit. c GDPR).

Blogs and publication media

We use blogs or comparable means of online communication and publication (hereinafter "publication medium"). Readers' data is processed for the purposes of the publication medium only to the extent necessary for its presentation or for security reasons. We do not offer a comment function. For everything else, please refer to the information on the processing of visitors to our publication medium in this privacy policy.

  • Types of data processed: usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
  • Data subjects: users (e.g. website visitors, users of online services).
  • Purposes of processing: provision of our online offer and user-friendliness, security measures.
  • Legal bases: legitimate interests (Art. 6 (1) (1) lit. f GDPR).

Contact and request management

When contacting us (e.g. by contact form, e-mail, telephone or via social media) as well as in the context of existing user and business relationships, the information of the inquiring persons is processed to the extent necessary to respond to the contact requests and any requested measures.

The answering of contact inquiries as well as the administration of contact and inquiry data in the context of contractual or pre-contractual relationships is carried out to fulfill our contractual obligations or to answer (pre)contractual inquiries and otherwise on the basis of legitimate interests in answering inquiries and maintaining user or business relationships.

  • Types of data processed: inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms).
  • Affected persons: Communication partners.
  • Purposes of processing: contact requests and communication.
  • Legal basis: Contract fulfillment and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

Forms: Our contact, donation and newsletter forms are provided via HubSpot. Your entries are transmitted to HubSpot and stored in our HubSpot account. As soon as a form is displayed, your IP address and the address of the page you are viewing are transmitted to HubSpot for technical reasons. The form itself does not set any analytics cookies; HubSpot only links a submission to your previous page views if you have consented to analytics (see "Web analysis, monitoring and optimization").

Services and service providers used:

  • HubSpot: forms, contact management (CRM) and e-mail delivery; Service provider: HubSpot Ireland Limited, Ireland; parent company: HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA; website: https://www.hubspot.com; privacy policy: https://legal.hubspot.com/privacy-policy; data processing agreement: https://legal.hubspot.com/dpa; storage location of our account: data center in Germany; basis for transfers to the USA: EU-U.S. Data Privacy Framework (HubSpot, Inc. is certified), supplemented by the European Commission's Standard Contractual Clauses.

Spam protection with Google reCAPTCHA

Our contact form and our newsletter form are protected by Google reCAPTCHA. reCAPTCHA checks whether an entry was made by a human or by an automated program. For this purpose, information is transmitted to Google as soon as the form loads, in particular the IP address, browser and device information, the page viewed, language settings and information about usage behavior on the page (e.g. time spent, mouse and keyboard input). Google sets the cookie _GRECAPTCHA. The check runs in the background.

We use reCAPTCHA to protect our forms against spam and abusive automated submissions. Without this protection we cannot operate the forms reliably.

  • Types of data processed: usage data (e.g. websites visited, access times), meta/communication data (e.g. device information, IP addresses).
  • Data subjects: users (e.g. website visitors, users of online services).
  • Purposes of processing: security measures (protection against spam and abuse).
  • Legal bases: legitimate interests (Art. 6 (1) (1) lit. f GDPR); access to your device is necessary for the use of the form you requested (Section 25 (2) No. 2 TDDDG).

Services and service providers used:

Newsletter and electronic notifications

We send newsletters, e-mails and other electronic notifications (hereinafter “newsletter”) only with the consent of the recipients or a legal permission. Insofar as the contents of the newsletter are specifically described in the course of registration, they are decisive for the user’s consent. For the rest, our newsletters contain information about our services and us.

To subscribe to our newsletters, it is generally sufficient to enter your e-mail address. However, we may ask you to provide a name, for the purpose of personal address in the newsletter, or other information, if required for the purposes of the newsletter.

Double opt-in procedure: The registration for our newsletter is always carried out in a so-called double opt-in process. I.e., after registration you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can log in with foreign e-mail addresses. Subscriptions to the newsletter are logged in order to be able to prove the subscription process in accordance with legal requirements. This includes the storage of the login and confirmation time as well as the IP address. Likewise, changes to your data stored with the shipping service provider are logged.

Deletion and restriction of processing: We may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them in order to be able to prove consent formerly given. The processing of this data is limited to the purpose of a possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed at the same time. In the case of obligations to permanently observe objections, we reserve the right to store the e-mail address in a block list (so-called “block list”) for this purpose alone.

The logging of the registration process takes place on the basis of our legitimate interests for the purposes of proving its proper course. If we commission a service provider to send e-mails, this is done on the basis of our legitimate interests in an efficient and secure dispatch system.

Notes on legal basis: The newsletter is sent on the basis of the recipients’ consent or, if consent is not required, on the basis of our legitimate interests in direct marketing, if and to the extent that this is permitted by law, e.g. in the case of advertising to existing customers. Insofar as we commission a service provider to send e-mails, this is done on the basis of our legitimate interests. The registration process is recorded on the basis of our legitimate interests to demonstrate that it has been carried out in accordance with the law.

Contents: Information about us, our services, promotions and offers.

  • Types of data processed: inventory data (e.g. names, addresses), contact data (e.g. e-mail, phone numbers), meta/communication data (e.g. device information, IP addresses).
  • Affected persons: Communication partners.
  • Purposes of processing: direct marketing (e.g. by e-mail or postal mail).
  • Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
  • Option to object (opt-out): You can cancel the receipt of our newsletter at any time, i.e. revoke your consent or object to further receipt. You will find a link to cancel the newsletter either at the end of each newsletter or you can use one of the contact options given above, preferably e-mail, for this purpose.

Mailing service provider: Sign-up, management of recipients and delivery of our newsletter are handled via HubSpot (provider details under "Contact and request management"). The sign-up form is protected by Google reCAPTCHA (see "Spam protection with Google reCAPTCHA").

Measuring open and click rates: Our newsletters contain a so-called web beacon, a pixel-sized file that is retrieved from HubSpot when the newsletter is opened. Technical information (e.g. browser, system, IP address, time of retrieval) is recorded. It is also recorded whether and when a newsletter was opened and which links were clicked. We use this information to understand the reading habits of our recipients and to improve the newsletter. The measurement is part of your consent to receive the newsletter; it cannot be withdrawn separately, but you can unsubscribe from the newsletter at any time.

Web analysis, monitoring and optimization

Web analysis (also referred to as "reach measurement") is used to evaluate the flow of visitors to our online offer. It shows us, for example, which pages and posts are read and how visitors find our website.

For this purpose we exclusively use HubSpot's analytics functions, and only with your consent (cookie banner, category "Analytics"). Only then does HubSpot set cookies such as hubspotutk, __hstc and __hssc (up to 6 months), which recognize returning visits. If you submit one of our forms, HubSpot can link your previous page views to your request or newsletter sign-up. Without consent, HubSpot counts page views only in aggregated and anonymized form, without identifying cookies.

We do not use Google Analytics, Google Tag Manager or Microsoft Clarity.

  • Types of data processed: usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
  • Data subjects: users (e.g. website visitors, users of online services).
  • Purposes of processing: reach measurement (e.g. access statistics, recognition of returning visitors), profiles with user-related information (only after consent and submission of a form).
  • Legal bases: consent (Art. 6 (1) (1) lit. a GDPR, Section 25 (1) TDDDG); for the anonymized counting without cookies, legitimate interests (Art. 6 (1) (1) lit. f GDPR).
  • Opt-out: You can withdraw your consent at any time via the "Cookie settings" link at the bottom of every page.

Services and service providers used:

  • HubSpot Analytics: reach measurement; Service provider: HubSpot Ireland Limited, Ireland; parent company: HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA; website: https://www.hubspot.com; privacy policy: https://legal.hubspot.com/privacy-policy; data processing agreement: https://legal.hubspot.com/dpa; storage location of our account: data center in Germany; basis for transfers to the USA: EU-U.S. Data Privacy Framework (HubSpot, Inc. is certified), supplemented by the European Commission's Standard Contractual Clauses.

Modification and update of the privacy policy

We ask you to regularly inform yourself about the content of our privacy policy. We will adapt the privacy policy as soon as the changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.

Where we provide addresses and contact information for companies and organizations in this privacy statement, please note that the addresses may change over time and please check the information before contacting us.

Rights of the data subjects

As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Art. 15 to 21 GDPR:

  • Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 lit. e or f DSGVO; this also applies to profiling based on these provisions. If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
  • Right of revocation for consents: You have the right to revoke any consent you have given at any time.
  • Right of access: You have the right to request confirmation as to whether data in question is being processed and to obtain information about this data, as well as further information and a copy of the data in accordance with the legal requirements.
  • Right to rectification: In accordance with the law, you have the right to request that data concerning you be completed or that inaccurate data concerning you be rectified.
  • Right to erasure and restriction of processing: You have the right, in accordance with the law, to request that data relating to you be erased immediately or, alternatively, to request restriction of the processing of the data in accordance with the law.
  • Right to data portability: You have the right to receive data relating to you that you have provided to us in a structured, common and machine-readable format, or to request that it be transferred to another controller, in accordance with the law.
  • Complaint to supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the requirements of the GDPR.

Definitions

This section provides you with an overview of the terms used in this privacy statement. Many of the terms are taken from the law and defined especially in Art. 4 GDPR. The legal definitions are binding. The following explanations, on the other hand, are intended primarily to aid understanding. The terms are sorted alphabetically.

  • Personal data: “Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  • Profiles with user-related information: The processing of “profiles with user-related information”, or “profiles” for short, includes any type of automated processing of personal data that consists of using such personal data to analyze, evaluate or to predict certain personal aspects relating to a natural person (depending on the type of profiling, this may include different information concerning demographics, behavior and interests, such as interaction with websites and their content, etc.) (e.g. interests in certain content or products, click behavior on a website or location). Cookies and web beacons are often used for profiling purposes.
  • Reach measurement: Reach measurement (also known as web analytics) is used to evaluate the flow of visitors to an online offering and may include visitors’ behavior or interests in certain information, such as web page content. With the help of reach analysis, website owners can see, for example, at what time visitors visit their website and what content they are interested in. This allows them, for example, to better adapt the content of the website to the needs of their visitors. For reach analysis purposes, pseudonymous cookies and web beacons are often used to recognize returning visitors and thus obtain more precise analyses of the use of an online offer.
  • Controller: a “controller” is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
  • Processing: “Processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means. The term is wide-ranging and encompasses practically every handling of data, be it collection, evaluation, storage, transmission or deletion.

Created with free Datenschutz-Generator.de by Dr. Thomas Schwenke