Status: 23 February 2024<\/p>\n\n
Michael H\u00f6pfl
Email address: mail@michael-hoepfl.com<\/p>\n\n
The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.<\/p>\n\n
Relevant legal bases under the GDPR: <\/strong>Below you will find an overview of the legal bases of the GDPR on the basis of which we process personal data. Please note that, in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or registered office. Should more specific legal bases apply in individual cases, we will inform you of these in the privacy policy.<\/p>\n\n National data protection regulations in Germany: <\/strong>In addition to the data protection provisions of the GDPR, national data protection regulations apply in Germany. In particular, this includes the German Federal Data Protection Act (Bundesdatenschutzgesetz \u2013 BDSG). The BDSG contains special provisions concerning, among other things, the right of access, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes, transfers, and automated individual decision-making including profiling. In addition, the data protection laws of the individual federal states may apply.<\/p>\n\n Reference to the applicability of the GDPR and the Swiss FADP: <\/strong>This privacy notice serves to provide information both under the Swiss Federal Act on Data Protection (Swiss FADP) and under the General Data Protection Regulation (GDPR). For reasons of broader geographical applicability and comprehensibility, we therefore use the terminology of the GDPR. In particular, instead of the Swiss FADP terms \u201cprocessing\u201d of \u201cpersonal data\u201d, \u201coverriding interest\u201d and \u201csensitive personal data\u201d, we use the GDPR terms \u201cprocessing\u201d of \u201cpersonal data\u201d, \u201clegitimate interest\u201d and \u201cspecial categories of data\u201d. However, within the scope of application of the Swiss FADP, the legal meaning of these terms continues to be determined in accordance with the Swiss FADP.<\/p>\n\n We take appropriate technical and organizational measures in accordance with legal requirements, taking into account the state of the art, implementation costs and the nature, scope, circumstances and purposes of processing as well as the different probabilities of occurrence and the extent of threats to the rights and freedoms of natural persons, in order to ensure a level of security appropriate to the risk.<\/p>\n\n The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access, input, disclosure, safeguarding availability and separation of the data. Furthermore, we have established procedures to ensure the exercise of data subject rights, deletion of data and responses to threats to the data. We also take the protection of personal data into account when developing or selecting hardware, software and procedures, in accordance with the principles of data protection by design and data protection-friendly default settings.<\/p>\n\n Data processing in third countries: If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or if processing takes place in connection with the use of third-party services or the disclosure or transfer of data to other persons, bodies or companies, this is done only in accordance with legal requirements. If the level of data protection in the third country has been recognized by means of an adequacy decision (Art. 45 GDPR), this serves as the basis for the data transfer. Otherwise, data transfers take place only if the level of data protection is otherwise safeguarded, in particular through standard contractual clauses (Art. 46 para. 2 lit. c) GDPR), explicit consent, or in the case of transfers required by contract or law (Art. 49 para. 1 GDPR). We also inform you of the basis for third-country transfers for the individual providers from third countries, with adequacy decisions taking precedence. Information on third-country transfers and existing adequacy decisions can be found in the information provided by the EU Commission: https:\/\/commission.europa.eu\/law\/law-topic\/data-protection\/international-dimension-data-protection_en?prefLang=de.<\/a><\/p>\n\n EU-US Trans-Atlantic Data Privacy Framework: As part of the so-called \u201cData Privacy Framework\u201d (DPF), the EU Commission has also recognized the level of data protection for certain companies in the USA as adequate under the adequacy decision of 10 July 2023. The list of certified companies and further information about the DPF can be found on the website of the U.S. Department of Commerce at https:\/\/www.dataprivacyframework.gov\/<\/a> (in English). In this privacy notice, we indicate which service providers we use are certified under the Data Privacy Framework.<\/p>\n\n Rights of data subjects under the GDPR: As a data subject, you are entitled to various rights under the GDPR, arising in particular from Articles 15 to 21 GDPR:<\/p>\n\n Cookies are small text files or other storage records that store information on end devices and read information from end devices. For example, they may store the login status in a user account, the contents of a shopping cart in an e-shop, content accessed or functions used in an online offering. Cookies may also be used for various purposes, such as ensuring the functionality, security and convenience of online offerings and analyzing visitor flows.<\/p>\n\n Information on consent: <\/strong>We use cookies in accordance with legal requirements. We therefore obtain users\u2019 prior consent unless this is not required by law. In particular, consent is not required if storing and reading information, including cookies, is strictly necessary to provide users with a telemedia service they have expressly requested (i.e. our online offering). Strictly necessary cookies generally include cookies with functions serving the display and operability of the online offering, load balancing, security, storage of user preferences and choices, or similar purposes related to providing the main and ancillary functions of the online offering requested by users. Revocable consent is clearly communicated to users and includes information about the respective use of cookies.<\/p>\n\n Information on data-protection legal bases: <\/strong>The legal basis under data protection law on which we process users\u2019 personal data with the help of cookies depends on whether we ask users for consent. If users consent, the legal basis for processing their data is the consent given. Otherwise, data processed with the help of cookies is processed on the basis of our legitimate interests (e.g. in the commercially viable operation of our online offering and improvement of its usability) or, where this takes place in the context of fulfilling our contractual obligations, if the use of cookies is necessary to fulfill those obligations. We explain the purposes for which we process cookies in the course of this privacy policy or as part of our consent and processing procedures.<\/p>\n\n Storage period: <\/strong>With regard to the storage period, the following types of cookies are distinguished:<\/p>\n\n General information on withdrawal and objection (so-called \u201copt-out\u201d): <\/strong>Users can withdraw consent they have given at any time and object to processing in accordance with legal requirements. Among other things, users can restrict the use of cookies in their browser settings (although this may also restrict the functionality of our online offering). An objection to the use of cookies for online marketing purposes can also be declared via the websites https:\/\/optout.aboutads.info<\/a> and https:\/\/www.youronlinechoices.com\/<\/a>.<\/p>\n\n We process users\u2019 data in order to provide them with our online services. For this purpose, we process the user\u2019s IP address, which is necessary to transmit the content and functions of our online services to the user\u2019s browser or end device.<\/p>\n\n Further information on processing operations, procedures and services:<\/strong><\/p>\n\n We use blogs or comparable means of online communication and publication (hereinafter \u201cpublication medium\u201d). Readers\u2019 data is processed for the purposes of the publication medium only to the extent necessary for its presentation and communication between authors and readers or for security reasons. Otherwise, we refer to the information on processing visitors to our publication medium contained in this privacy notice.<\/p>\n\n Further information on processing operations, procedures and services:<\/strong><\/p>\n\n When contacting us (e.g. by post, contact form, email, telephone or via social media) and in the context of existing user and business relationships, the information provided by the inquiring persons is processed insofar as this is necessary to answer the contact inquiries and any requested measures.<\/p>\n\n Further information on processing operations, procedures and services:<\/strong><\/p>\n\n Web analysis (also referred to as \u201creach measurement\u201d) is used to evaluate visitor flows to our online offering and may include behavior, interests or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach analysis, we can, for example, identify when our online offering or its functions or content are used most frequently or encourage repeat use. We can also understand which areas require optimization.<\/p>\n\n In addition to web analysis, we may also use testing procedures, for example to test and optimize different versions of our online offering or its components.<\/p>\n\n Unless otherwise stated below, profiles, i.e. data summarized for a usage process, may be created for these purposes and information may be stored in and read from a browser or end device. The information collected includes in particular websites visited and elements used there, as well as technical information such as the browser used, the computer system used and information on usage times. If users have consented to the collection of their location data by us or by providers of the services we use, location data may also be processed.<\/p>\n\n Users\u2019 IP addresses are also stored. However, we use an IP masking procedure (i.e. pseudonymization by shortening the IP address) to protect users. In general, no directly identifying user data (such as email addresses or names) is stored in the context of web analysis, A\/B testing and optimization, but rather pseudonyms. This means that neither we nor the providers of the software used know the users\u2019 actual identity, only the information stored in their profiles for the purposes of the respective procedures.<\/p>\n\n Further information on processing operations, procedures and services:<\/strong><\/p>\n\n We maintain online presences within social networks and process user data in this context in order to communicate with users active there or to provide information about us.<\/p>\n\n Please note that user data may be processed outside the European Union. This may result in risks for users because, for example, enforcement of users\u2019 rights could be made more difficult.<\/p>\n\n Furthermore, user data within social networks is generally processed for market research and advertising purposes. For example, usage profiles can be created based on usage behavior and the resulting interests of users. These usage profiles can in turn be used, for example, to display advertisements within and outside the networks that are presumed to correspond to users\u2019 interests. For these purposes, cookies are generally stored on users\u2019 computers in which usage behavior and interests are stored. In addition, data may be stored in usage profiles independently of the devices used by users, particularly if users are members of the respective platforms and are logged in to them.<\/p>\n\n For a detailed description of the respective forms of processing and the options for objection (opt-out), we refer to the privacy policies and information provided by the operators of the respective networks.<\/p>\n\n In the case of requests for information and the exercise of data subject rights, we also point out that these can be asserted most effectively with the providers. Only the providers have access to users\u2019 data and can directly take appropriate measures and provide information. If you nevertheless require assistance, you can contact us.<\/p>\n\n Further information on processing operations, procedures and services:<\/strong><\/p>\n\n We integrate functional and content elements into our online offering that are obtained from the servers of their respective providers (hereinafter referred to as \u201cthird-party providers\u201d). These may include, for example, graphics, videos or city maps (hereinafter collectively referred to as \u201ccontent\u201d).<\/p>\n\n Integration always requires that the third-party providers of this content process users\u2019 IP addresses, since without the IP address they could not send the content to users\u2019 browsers. The IP address is therefore required to display this content or these functions. We endeavor to use only content whose respective providers use the IP address solely to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as \u201cweb beacons\u201d) for statistical or marketing purposes. Pixel tags can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on users\u2019 devices and may contain, among other things, technical information about the browser and operating system, referring websites, visit times and other information about the use of our online offering, and may also be linked with such information from other sources.<\/p>\n\n Further information on processing operations, procedures and services:<\/strong><\/p>\n\n\n
Security Measures<\/h2>\n\n
International Data Transfers<\/h2>\n\n
Rights of Data Subjects<\/h2>\n\n
\n
Use of Cookies<\/h2>\n\n
\n
\n
Provision of the Online Offering and Web Hosting<\/h2>\n\n
\n
\n
Blogs and Publication Media<\/h2>\n\n
\n
\n
Contact and Inquiry Management<\/h2>\n\n
\n
\n
Web Analysis, Monitoring and Optimization<\/h2>\n\n
\n
\n
Presence in Social Networks (Social Media)<\/h2>\n\n
\n
\n
Plugins and Embedded Functions and Content<\/h2>\n\n
\n
\n