Privacy Policy

We explain to you how we handle your personal data in this data protection declaration. The applicable data protection law applies, in particular the General Data Protection Regulation (GDPR). With the exception of the service providers and third parties we name in this privacy policy, we do not pass on any data to third parties. If you have any questions, please feel free to contact us.

Contents

Responsible person

Responsible for data processing

Andras Vincze-Nagy
Rosenplan 5
19395 Plau am See

General information

Provision of data

In order to use our website, there is generally no legal or contractual requirement to provide personal data. If the provision of data is necessary to conclude a contract or the user is obliged to provide personal data, we will communicate this fact and the consequences of non-provision in this data protection declaration.

Data transfer to third parties

We may use service providers and third parties located in countries outside the European Union and the European Economic Area. Unless the user has given his consent to the data transfer, the transfer of personal data to such third countries takes place on the basis of an adequacy decision by the European Commission (Art. 45 GDPR) or we have provided appropriate guarantees to ensure data protection (Art.  46 GDPR). If there is an adequacy decision by the European Commission for the transfer of data to a third country, we will point this out in this data protection declaration. Furthermore, users can obtain a copy of the appropriate guarantees from us, provided they are not already included in the data protection declarations of the service providers or third-party providers.

Automated decision making

If we carry out automated decision-making, including profiling, we will inform you in this data protection declaration about this circumstance, about the logic involved and the scope and intended effects of such processing. Otherwise, automated decision-making does not take place.

Processing for other purposes

Data is generally only processed for the purposes for which it was collected. If, in exceptional cases, they are to be further processed for other purposes, we will inform you about these other purposes before this further processing and make all other relevant information available (Article 13 Paragraph 3 GDPR).

Data processing when you access the website

Every time our website is accessed, the user's browser transmits various data. For the duration of your visit to the website, the following data will be processed and stored in log files even after the connection ends:

  • Browser type and version used
  • Operating system
  • Pages and files retrieved
  • Amount of data transferred
  • Date and time of retrieval
  • The user's provider
  • IP address
  • Referrer URL

The processing of this data is necessary in order to be able to deliver the website to the user and optimize it for their device. The storage in log files serves to improve the security of our website (e.g. protection against DDOS attacks).

The legal basis for the processing is Article 6 Paragraph 1 Subparagraph 1 Letter f) GDPR. Our legitimate interest lies in providing the website and improving website security. Log files are automatically deleted after 30 days.

Cookies, web beacons and mobile identifiers

Click here to change the cookie settings.

We use technologies on our website to recognize the device used. These can be cookies, web beacons and/or mobile identifiers.

Recognizing a device can basically be done for different purposes. It may be necessary to provide functions on our website, for example to provide a shopping cart. In addition, the technologies mentioned can be used to track the behavior of users on the site, for example for advertising purposes. We describe separately in this privacy policy which technologies we use and for what purposes.

For a better understanding, we will explain in general terms how cookies, web beacons and mobile identifiers work:

  • Cookies are small text files that contain certain information and are stored on the user's device. It is usually an identification number that is assigned to a device (cookie ID).

  • A web beacon is a transparent graphic file that is integrated on a page and enables log file analysis.

  • A mobile identifier is a unique number (mobile ID) that is stored on a mobile device and can be read by a website.

Cookies may be necessary for our website to function properly. The legal basis for the use of such cookies is Article 6 Paragraph 1 Subparagraph 1 Letter f) GDPR. Our legitimate interest lies in providing the functions of our website.

We use cookies that are not necessary for the operation of our website in order to make our offer more user-friendly or to be able to understand the use of our website. The legal basis here depends on whether the user's consent must be obtained or whether we can rely on a legitimate interest. The user can revoke their consent at any time, among other things, through the settings in their browser.

The user can prevent and object to the processing of data using cookies through the appropriate settings in their browser. In the event of an objection, not all functions of our website may be available. We provide separate information about further options for objecting to the processing of personal data through cookies in this data protection declaration. If necessary, we provide links with which a contradiction can be explained. These are labeled “Opt-Out”.

Contact

If you contact us, we process the user's details, date and time for the purpose of processing the request, including any queries.

The legal basis for data processing is Article 6 Paragraph 1 Subparagraph 1 Letter f) GDPR. Our legitimate interest lies in answering our users' inquiries. Additional legal basis is Article 6 Paragraph 1 Subparagraph 1 Letter b) GDPR if processing is necessary for the fulfillment of a contract or to carry out pre-contractual measures.

The data will be deleted as soon as the request, including any queries, has been answered. We check at regular intervals, but at least every two years, whether data collected in connection with contact must be deleted.

Competitions

We offer our users the opportunity to participate in competitions. It is possible that we refer to a separate data protection declaration for processing the data. Where this is not the case, we process the data provided by the user (e.g. name, email address). This is done in order to be able to carry out the competition, in particular to determine and, if necessary, notify the winner. The legal basis for the processing is Article 6 Paragraph 1 Subparagraph 1 Letter b) GDPR. The data will not be processed for any other purposes and will be deleted three months after the winner has been determined.

Comments

On our website we give users the opportunity to leave their own comments. When a comment is sent to us, we process the user's information. To protect against misuse of the comment function (e.g. through spam or criminal content), we also process the date, time and the user's IP address.

The legal basis for the processing is Article 6 Paragraph 1 Subparagraph 1 Letter f) GDPR. Our legitimate interest is to be able to offer the comment function and to protect ourselves from misuse.

Registration for a user account

Users can register for our offer on our website. In this context, we process the data entered during registration. We have the email address confirmed by sending a link (double opt-in) to prevent misuse of the registration function. For this purpose, we also process the date and time and the user’s IP address. For verification purposes, we also process the date, time and IP address of the user when you click on the confirmation link.

The data will be deleted at the end of the year when the user account is deleted after three years, unless there is a longer legal retention requirement.

The legal basis for processing is Article 6 Paragraph 1 Subparagraph 1 Letter a) GDPR, provided we obtain the user's consent. If the processing is necessary for the fulfillment of a contract or to carry out pre-contractual measures, it is based on Article 6 Paragraph 1 Subparagraph 1 Letter b) GDPR. The legal basis for this is Article 6 Paragraph 1 Subparagraph 1 Letter f) GDPR. Our legitimate interest is to enable users to access our offer that requires registration, to protect ourselves against misuse of the registration function and to be able to provide evidence of proper registration. After the user account has been deleted, our legitimate interest also lies in defending against possible claims.

Other Third Party Services

Google Analytics

We use Google Analytics to analyze the use of our website. Provider: Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

In order to be able to track the user's activities on the website, a cookie is placed on the device. We use Google Analytics with the anonymize IP extension. The user's IP address is automatically shortened before it is transmitted to servers in the USA. Among other things, the approximate geographical location, device, screen resolution, browser and pages visited including the length of stay are evaluated.

To the extent that we obtain the user's consent, the processing of data takes place on the legal basis of Article 6 Paragraph 1 Subparagraph 1 Letter a) GDPR. Furthermore, it is based on Article 6 Paragraph 1 Subparagraph 1 Letter f) GDPR. Our legitimate interest lies in optimizing our website, improving our offers and online marketing.

The data collected by Google Analytics is automatically deleted after 14 months.

Opt-Out

Google Analytics privacy policy

Google Adsense
We use Google Adsense. Provider: Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
We place personalized advertisements via Google Adsense. Google uses cookies and web beacons to analyze user behavior and select appropriate advertising. Among other things, visits to our website and other websites that use Google Adsense are evaluated and assigned to a user ID. The data will not be merged with other user data stored by Google.
If we obtain the user's consent, the processing takes place on the legal basis of Article 6 Paragraph 1 Subparagraph 1 Letter a) GDPR. Furthermore, it is based on Article 6 Paragraph 1 Subparagraph 1 Letter f) GDPR. Our legitimate interest lies in delivering interest-based advertising.
Users can object to Google's use of data for personalized advertising at any time using the following opt-out.

Opt-Out

Google Adsense privacy policy

Cloudflare

We use the content delivery network (CDN) Cloudflare CDN. Provider: Cloudflare Inc., 101 Townsend Street, San Francisco, California 94107.

Content is loaded from CDN servers. In order for a connection to be established, it is technically necessary to transmit the user's IP address.

The legal basis for the processing is Article 6 Paragraph 1 Subparagraph 1 Letter f) GDPR. Our legitimate interest is to improve the speed and availability of our website.

Cloudflare privacy policy

Facebook Social Plugins

We integrate content and buttons from the social network Facebook on our website via a plugin. Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

In order to be able to load content from Facebook, it is technically necessary to transfer the user's IP address to the company. If the user is logged in to Facebook, the visit to a page can be assigned to the account.

To the extent that we obtain the user's consent, the processing of data takes place on the legal basis of Article 6 Paragraph 1 Subparagraph 1 Letter a) GDPR. Furthermore, it is based on Article 6 Paragraph 1 Subparagraph 1 Letter f) GDPR. Our legitimate interest in integrating Facebook content and buttons lies in the user-friendly design of our website.

Data protection declaration of Facebook Social Plugins

YouTube

We embed videos from YouTube. Provider: Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. We use the extended data protection mode so that YouTube does not track user behavior unless the user watches the video. In order to be able to provide videos, it is technically necessary to transfer the user's IP address to YouTube.

The use of YouTube takes place on the legal basis of Article 6 Paragraph 1 Subparagraph 1 Letter f) GDPR. Our legitimate interest lies in improving the user experience of our website and displaying content that is interesting for our users.

You can object to personalized advertising by Google at any time by using the following opt-out.

Opt-Out

YouTube privacy policy

Google reCAPTCHA

To increase the security and availability of our website, we use the reCAPTCHA service. Provider: Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

With queries we want to ensure that actions on our site are not triggered by bots. To do this, it is technically necessary to transfer the user's IP address to Google.

The legal basis for the processing is Article 6 Paragraph 1 Subparagraph 1 Letter f) GDPR. Our legitimate interest is to ensure website security and protect against spam and misuse.

reCAPTCHA privacy policy

FontAwesome

On our website we use icons from Font Awesome. Provider: Fonticons Inc., Corporation Trust Center 1209 Orange St., Wilmington, New Castle, DE 19801, USA.

Technically, the icons are provided via the content delivery network StackPath. Provider: StackPath LLC, 2021 McKinney Ave. Suite 1100, Dallas, TX 75201. Content is loaded from CDN servers. In order for a connection to be established, it is technically necessary to transmit the user's IP address. Fonticons processes data about the use of the CDN, but stores it in an identifiable form for a few weeks at most.

The legal basis for the processing is Article 6 Paragraph 1 Subparagraph 1 Letter f) GDPR. Our legitimate interest lies in the user-friendly design and improving the speed and availability of our website.

We have concluded a data protection agreement with Fonticons. By means of standard contractual clauses approved by the EU Commission, we have provided the company with appropriate guarantees for the protection of personal data (Article 28 GDPR).

Fonticons privacy policy

StackPath privacy policy

Google Fonts

We use Google Fonts on our website. Provider: Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Fonts are loaded from Google server. In order to establish a connection to the server, it is technically necessary to transfer the user's IP address.

The legal basis for processing is Article 6 Paragraph 1 Subparagraph 1 Letter f) GDPR. Our legitimate interest lies in shortening loading times and ensuring uniform presentation on different devices.

Google Fonts privacy policy

Social network profiles

We are present on one or more social networks. Specifically, these are: Facebook, Twitter or Instagram. When you contact us, we process personal data as described above under contacting us.

The providers of social networks process data in accordance with their data protection regulations, which can be accessed here:

If a user is logged in to their account, the activities on our profile in the respective social network may be assigned to them. This can be done across devices and, if necessary, without logging in, for example using cookies or mobile identifiers. Social network providers use the collected data to create pseudonymized user profiles, which they can use to display personalized advertising.

Rights of data subjects

If the user's personal data is processed, he or she is the data subject within the meaning of the GDPR. Data subjects have the following rights:

Right to information: The data subject has the right to request confirmation as to whether personal data concerning him or her is being processed. If personal data is processed, the data subject has the right to free information and a copy of the personal data that is the subject of the processing.

Right to rectification: The data subject has the right to request the immediate correction of incorrect or incomplete personal data.

Right to deletion: The data subject has the right to request the immediate deletion of personal data concerning him or her in accordance with the legal provisions.

Right to restriction of processing: The data subject has the right to request a restriction on the processing of personal data concerning him or her in accordance with the legal provisions.

Right to data portability: The data subject has the right to receive the personal data concerning him or her in a structured, common and machine-readable format or to request that it be transmitted to another person responsible.

Right to object: The data subject has the right, for reasons arising from his or her particular situation, to object at any time to the processing of personal data concerning him or her, which is based on Article 6 Paragraph 1 Subparagraph 1 Letter e ) or f) GDPR, to lodge an objection; This also applies to profiling based on these provisions. If personal data is processed for the purpose of direct advertising, the data subject has the right to object at any time to the processing of personal data concerning him or her for the purpose of such advertising; This also applies to profiling insofar as it is connected to such direct advertising.

Right of withdrawal: The data subject has the right to revoke their consent at any time.

Right to complain: The data subject has the right to complain to a supervisory authority.

Status of the data protection declaration: December 7, 2023

This data protection declaration was created with the generator from Einfach Abmahnsicher in cooperation with PRIGGE recht created.