Privacy Policy

Privacy Policy

 

1. Data Protection at a Glance

 

General Information

 

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.

 

Data Collection on This Website

 

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. Their contact details can be found in the section “Note on the Responsible Party” in this privacy policy.

 

How do we collect your data?

Some of your data is collected when you provide it to us. This may include data that you enter in a contact form.

Other data is collected automatically or after your consent when you visit the website by our IT systems. This is mainly technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

 

What do we use your data for?

Some of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or other inquiries.

 

What rights do you have regarding your data?

You have the right at any time to obtain information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time regarding this or any other questions on the subject of data protection.

 

Analysis Tools and Third-Party Tools

When visiting this website, your browsing behavior may be statistically evaluated. This happens primarily with so-called analysis programs.

Detailed information on these analysis programs can be found in the following privacy policy.

 

2. Hosting

 

We host the content of our website with the following provider:

 

WIX

The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter referred to as “WIX”).

 

WIX is a tool for creating and hosting websites. When you visit our website, WIX analyzes user behavior, visitor sources, visitor region, and visitor numbers. WIX stores cookies in your browser that are necessary for the presentation of the website and for security purposes (essential cookies).

 

The data collected via WIX may be stored on various servers worldwide. WIX servers are located, among other places, in the USA.

 

For details, see WIX’s privacy policy:

https://de.wix.com/about/privacy

 

According to WIX, data transfers to the USA and other third countries are based on the EU Commission’s Standard Contractual Clauses or comparable guarantees pursuant to Art. 46 GDPR. Details can be found here:

https://de.wix.com/about/privacy-dpa-users

 

The use of WIX is based on Art. 6(1)(f) GDPR. We have a legitimate interest in a reliable presentation of our website. If consent has been requested, processing is carried out solely based on Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

 

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the USA. Each company certified under the DPF commits to adhering to these data protection standards. Further information is available here:

https://www.dataprivacyframework.gov/participant/5626.

​

3. General Information and Mandatory Information

 

Data Protection

 

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations as well as this privacy policy.

 

When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

 

We point out that data transmission on the Internet (e.g., when communicating by email) may have security vulnerabilities. A complete protection of the data from access by third parties is not possible.

 

Note on the Responsible Party

 

The party responsible for data processing on this website is:

 

Lisa Theisen

c/o P21 Media GmbH

Ehrenfeldgürtel 96

50823 Köln, Germany

 

Phone: +49 221 292 11 99 0

Email: hi@lisatheisen.de

 

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

 

Storage Period

 

Unless a more specific storage period has been specified within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, the deletion will take place after these reasons cease to apply.

 

General Information on the Legal Basis for Data Processing on This Website

 

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data are processed according to Art. 9(1) GDPR. In the case of explicit consent to the transfer of personal data to third countries, data processing also takes place on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your end device (e.g., via device fingerprinting), processing is additionally based on § 25(1) TDDDG. Consent can be revoked at any time.

 

If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data based on Art. 6(1)(b) GDPR. Furthermore, we process your data if it is necessary to fulfill a legal obligation based on Art. 6(1)(c) GDPR.

 

Data processing may also be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. The relevant legal basis in each case is explained in the following paragraphs of this privacy policy.

​

Note on Data Transfer to the USA and Other Third Countries

 

We use tools from companies based in the USA or other non-secure third countries in terms of data protection. When these tools are active, your personal data may be transferred to and processed in these countries. We would like to point out that these countries may not guarantee a level of data protection comparable to that in the EU. For example, U.S. companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. Therefore, it cannot be ruled out that U.S. authorities (e.g., intelligence services) may process, evaluate, and permanently store your data located on U.S. servers for monitoring purposes. We have no influence on these processing activities.

 

Revocation of Your Consent to Data Processing

 

Many data processing operations are only possible with your express consent. You can revoke a previously given consent at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

 

Right to Object to the Collection of Data in Special Cases and to Direct Marketing (Art. 21 GDPR)

 

If data processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR, you have the right at any time, for reasons arising from your particular situation, to object to the processing of your personal data; this also applies to profiling based on these provisions. You can find the respective legal basis on which processing is based in this privacy policy.

 

If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims (objection under Art. 21(1) GDPR).

 

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Art. 21(2) GDPR).

​

​

Your Rights as a Data Subject

 

Under the applicable data protection laws, you have the following rights with regard to your personal data:

 

• Right of access (Art. 15 GDPR): You have the right to obtain information about your personal data processed by us, the purposes of the processing, the categories of data, recipients, the envisaged storage period, the existence of automated decision-making including profiling, and, where applicable, meaningful information about the logic involved.

• Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate or incomplete personal data stored by us without undue delay.

• Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

• Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your personal data where you contest the accuracy of the data, the processing is unlawful but you oppose the erasure, we no longer need the data but you require it for the establishment, exercise or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR.

• Right to data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format or to request that it be transmitted to another controller.

• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR.

Retention Period

 

We store your personal data only for as long as it is necessary for the purposes stated in this privacy policy or as required by legal retention obligations. Once the respective purpose no longer applies or a legally prescribed retention period expires, the personal data will be routinely deleted.

​

Contact

 

If you contact us (e.g., via contact form, email, telephone, or social media), your details will be processed for the purpose of handling the contact request and its processing pursuant to Art. 6(1)(b) GDPR (within the scope of contractual/pre-contractual relationships) and/or pursuant to Art. 6(1)(f) GDPR (other inquiries). We delete the inquiries if they are no longer necessary. We review the necessity every two years; furthermore, the statutory archiving obligations apply.

​

Hosting and E-mail Delivery

 

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space, and database services, e-mail delivery, security services, as well as technical maintenance services that we use for the purpose of operating this online offering.

 

In doing so, we or our hosting provider process personal data of users of this website based on our legitimate interests in the efficient and secure provision of this online offer pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).

 

Collection of Access Data and Log Files

 

We, or rather our hosting provider, collect data on every access to the server on which this service is located (so-called server log files). The access data include: name of the accessed website, file, date and time of access, data volume transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address, and the requesting provider.

 

Log file information is stored for security reasons (e.g., to investigate misuse or fraud) for a maximum of 7 days and then deleted. Data whose further retention is required for evidentiary purposes are exempt from deletion until the respective incident has been finally clarified.

 

Rights of Data Subjects

 

You have the right to request confirmation as to whether data concerning you are being processed, and to information about such data as well as further information and a copy of the data in accordance with Art. 15 GDPR.

 

In accordance with Art. 16 GDPR, you have the right to request the completion of the data concerning you or the correction of inaccurate data concerning you.

 

Pursuant to Art. 17 GDPR, you have the right to demand that data concerning you be deleted immediately, or alternatively, pursuant to Art. 18 GDPR, to demand restriction of the processing of the data.

 

You have the right to request to receive the data concerning you, which you have provided to us, in accordance with Art. 20 GDPR, and to request their transmission to other controllers.

 

Furthermore, according to Art. 77 GDPR, you have the right to lodge a complaint with the competent supervisory authority.

 

Right of Withdrawal

 

You have the right to revoke any consent granted pursuant to Art. 7(3) GDPR with effect for the future.

 

Right to Object

 

You can object to the future processing of your personal data at any time in accordance with Art. 21 GDPR. The objection can particularly be made against processing for purposes of direct advertising.

 

Deletion of Data

 

The data processed by us will be deleted or restricted in processing in accordance with Articles 17 and 18 GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.