Privacy Policy
1) Introduction and Contact Details of the Data Controller
2) Data Collection When Visiting Our Website
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you reached the page
- Browser used
- Operating system used
- IP address used (possibly in anonymized form)
3) Hosting & Content Delivery Network
We use a content delivery network from the following provider: BUNNYWAY d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia
We use a content delivery network from the following provider: 1&1 IONOS Internet SE, Elgendorfer Str. 57, 56410 Montabaur, Germany
4) Cookies
5) Contact
5.1 Calendly
To provide an online appointment booking function, we use the services of: Calendly, LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA.
For the purpose of scheduling appointments, your first and last name and email address (and, if a phone appointment is desired, your phone number) are collected pursuant to Art. 6(1)(b) GDPR and, based on our legitimate interest in effective customer management and efficient scheduling pursuant to Art. 6(1)(f) GDPR, transmitted to the provider and stored there for appointment organization.
After the appointment has taken place or the agreed appointment period has expired, your data will be deleted by the provider.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European level of data protection.
5.2 Google Calendar
To provide an online appointment booking function, we use the services of: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transferred to Google LLC, USA.
For the purpose of scheduling appointments, your first and last name and email address (and, if a phone appointment is desired, your phone number) are collected pursuant to Art. 6(1)(b) GDPR and, based on our legitimate interest in effective customer management and efficient scheduling pursuant to Art. 6(1)(f) GDPR, transmitted to the provider and stored there for appointment organization.
After the appointment has taken place or the agreed appointment period has expired, your data will be deleted by the provider.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European level of data protection.
5.3 HubSpot
To provide an online appointment booking function, we use the services of: HubSpot Ireland Ltd., 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.
For the purpose of scheduling appointments, your first and last name and email address (and, if a phone appointment is desired, your phone number) are collected pursuant to Art. 6(1)(b) GDPR and, based on our legitimate interest in effective customer management and efficient scheduling pursuant to Art. 6(1)(f) GDPR, transmitted to the provider and stored there for appointment organization.
After the appointment has taken place or the agreed appointment period has expired, your data will be deleted by the provider.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
5.4 WhatsApp Business
You have the option to contact us via WhatsApp, provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the “Business” version of WhatsApp.
If you contact us via WhatsApp in the context of a specific business transaction (e.g., an order), we store and use the mobile number you use on WhatsApp and—if provided—your first and last name, pursuant to Art. 6(1)(b) GDPR, to process and respond to your request. On the same legal basis, we may ask for additional data (order number, customer number, address, or email) to assign your request to a specific transaction.
If you use our WhatsApp contact for general inquiries (e.g., about services, availability, or our website), we store and use your WhatsApp mobile number and—if provided—your name pursuant to Art. 6(1)(f) GDPR, based on our legitimate interest in efficiently providing the requested information.
Your data is always used only to respond to your WhatsApp inquiry. Data is not shared with third parties.
Please note: WhatsApp Business accesses the address book of our mobile device and automatically transmits stored phone numbers to servers of Meta Platforms Inc. in the USA. We use a mobile device whose address book contains only WhatsApp contact data of users who have contacted us via WhatsApp.
This ensures that each person whose WhatsApp contact data is stored has consented to the transmission of their WhatsApp phone number from their contacts’ address books by accepting WhatsApp’s terms of use when first using the app, per Art. 6(1)(a) GDPR.
For details on WhatsApp’s data processing, please see: https://www.whatsapp.com/legal/?eea=1#privacy-policy
We have concluded a data processing agreement with the provider, which protects our website visitors’ data and prohibits disclosure to third parties.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, ensuring compliance with the European level of data protection.
5.5 Contact Form and Email
When you contact us (e.g., via contact form or email), personal data is collected. The data collected via the contact form is visible in the respective form. This data is used exclusively for the purpose of responding to your inquiry or for technical administration.
The legal basis for processing is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your inquiry aims to conclude a contract, the additional legal basis is Art. 6(1)(b) GDPR. Your data will be deleted after your inquiry has been fully processed, provided there are no statutory retention obligations.
6) Use of Customer Data for Direct Marketing
6.1 Newsletter Subscription
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only required information is your email address. Any other data is voluntary and used to address you personally. We use the double opt-in process, meaning we will only send you a newsletter if you have expressly confirmed your consent. You will receive a confirmation email with a link to activate your subscription.
By clicking the confirmation link, you consent to the use of your personal data pursuant to Art. 6(1)(a) GDPR. When subscribing, we store your IP address and the date and time of registration to trace potential misuse. Data collected during newsletter registration is used exclusively for newsletter communications. You can unsubscribe at any time via the link in the newsletter or by contacting us. After unsubscribing, your email address will be deleted from the newsletter distribution list unless you have expressly consented to further use or we are permitted by law to use your data otherwise, as explained in this policy.
6.2 Newsletter to Existing Customers
If you have provided your email address when purchasing goods or services, we may use it to send you offers for similar goods or services from our range by email. This is based on our legitimate interest in personalized direct marketing pursuant to Art. 6(1)(f) GDPR and does not require separate consent under § 7(3) UWG. If you initially objected to this use, we will not send such emails.
You may object to the use of your email address for advertising purposes at any time with future effect by notifying us. After your objection, your email address will no longer be used for advertising purposes.
6.3 MailChimp
We use the following provider to send our email newsletters: The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
Based on our legitimate interest in effective and user-friendly newsletter marketing, your data provided during newsletter registration is transmitted to this provider pursuant to Art. 6(1)(f) GDPR so they can send newsletters on our behalf.
With your express consent under Art. 6(1)(a) GDPR, the provider also performs statistical success analysis of newsletter campaigns using web beacons or tracking pixels in the emails to measure open rates and user interactions. Device information (e.g., access time, IP address, browser type, and operating system) is collected and analyzed but not merged with other data.
You may withdraw your consent to newsletter tracking at any time with future effect.
We have concluded a data processing agreement with the provider, which protects our website visitors’ data and prohibits disclosure to third parties.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, ensuring compliance with the European level of data protection.
7) Online Marketing
7.1 Google AdSense
This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses cookies, which are text files placed on your computer, to analyze how you use the website. In addition, Google AdSense uses so-called “web beacons” (small invisible graphics) to collect information and evaluate visitor traffic on the website. The information generated by cookies and/or web beacons (including your IP address) about your use of this website is usually transmitted to and stored by Google on servers. Data may also be transferred to Google LLC in the USA.
Google uses this information to evaluate your use of the website with regard to the AdSense advertisements. The IP address transmitted by your browser as part of Google AdSense will not be merged with other data from Google. The information collected by Google may be transferred to third parties if required by law or if third parties process this data on behalf of Google.
All processing described above, especially the reading of information on the device via cookies and/or web beacons, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without this consent, Google AdSense will not be used during your website visit.
You can revoke your consent at any time with future effect by deactivating this service in the “cookie consent tool” provided on the website.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, ensuring compliance with the European level of data protection.
Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/en/privacy/ and https://www.google.com/policies/privacy/
7.2 HubSpot
This website uses the software-based marketing service of the following provider for customer management: HubSpot Ireland Ltd., 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.
The service allows automated processing of feed activities, management of advertising in marketing channels, success analysis of marketing measures, as well as centralized email marketing and contact management.
Cookies are used to fulfill these functions, i.e., small text files stored locally in your browser’s cache on your device, enabling us to analyze your use of the website. These cookies collect certain information, such as IP address, location, and time of page access.
All processing described above, especially the setting of cookies for reading information on the device, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the “cookie consent tool” provided on the website.
Further legal bases for specific functions (such as the need for express consent under Art. 6(1)(a) GDPR for newsletters) remain unaffected.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
8) Web Analytics Services
8.1 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.
By default, Google Analytics 4 does not use cookies when you visit the website unless you expressly consent to cookies. Instead, information about your usage behavior is collected and processed via so-called pings (small data packets sent to the host of a device). This information includes your IP address, which is, however, truncated by Google to exclude direct personal reference.
The information is transmitted to and processed on Google servers. Transfers to Google LLC in the USA are also possible.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage. The IP address transmitted by your browser and truncated by Google Analytics will not be merged with other Google data. Data collected by Google Analytics 4 will be stored for two months and then deleted.
All processing described above, including data transmission via “pings” and possible setting of Google Analytics cookies, will only occur if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without your consent, Google Analytics 4 will not be used during your website visit. You can revoke your consent at any time with future effect by deactivating this service in the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with Google, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
Further legal information about Google Analytics 4 can be found at https://business.safety.google/intl/en/privacy/, https://policies.google.com/privacy?hl=en&gl=en and https://policies.google.com/technologies/partner-sites
Demographic Features
Google Analytics 4 uses the special “demographic features” function and can create statistics about the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups for marketing activities to be identified. The collected data cannot be assigned to a specific person and is deleted after two months.
Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics under Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate “Personalized Advertising” in your Google account settings. Instructions: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=en Further information on Google Signals can be found here: https://support.google.com/analytics/answer/7532985?hl=en
UserIDs
As an extension to Google Analytics 4, the “UserIDs” function may be used on this website. If you have consented to the use of Google Analytics 4 under Art. 6(1)(a) GDPR, created an account on this website, and logged in on different devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, ensuring compliance with the European level of data protection.
8.2 Google Tag Manager
This website uses the “Google Tag Manager” service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and calibrating, controlling, and linking them via a unified user interface. The Google Tag Manager itself does not store or read information on user devices and does not perform independent data analysis. However, when the page is accessed, your IP address is transmitted to Google and may be stored there. Transfers to Google LLC in the USA are also possible.
This processing only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without this consent, Google Tag Manager will not be used during your website visit. You can revoke your consent at any time with future effect by deactivating this service in the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, ensuring compliance with the European level of data protection.
Further legal information about Google Tag Manager can be found at https://business.safety.google/intl/en/privacy/ and https://policies.google.com/privacy?hl=en&gl=en
8.3 Microsoft Clarity
This website uses the web analytics service of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA.
With the help of cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used such as IP address and browser information, to statistically analyze usage behavior on our website and create pseudonymized usage profiles. Among other things, this enables the evaluation of movement patterns (so-called heatmaps), the duration of visits, and interactions with page content (e.g., text input, scrolling, clicks, and mouse-overs). Pseudonymization generally excludes direct personal reference. There is no merging with other clear data collected about you.
All processing described above, especially reading or storing information on the device, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, ensuring compliance with the European level of data protection.
9) Website Features
9.1 Vimeo
9.2 YouTube
9.3 Google Maps
9.4 Adobe Fonts (Typekit)
9.5 Google Web Fonts
9.6 Google reCAPTCHA
10) Tools and Miscellaneous
10.1 Cookie Consent Tool
10.2 Lexware Office
10.3 Adobe Acrobat Sign
11) Rights of the Data Subject
- Right of access (Art. 15 GDPR): You have the right to obtain information about your personal data processed by us.
- Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate or incomplete personal data.
- Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data, subject to legal retention obligations.
- Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing under certain conditions.
- Right to notification (Art. 19 GDPR): If you have asserted your right to rectification, erasure, or restriction, we will notify all recipients to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort.
- Right to data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format or to request its transmission to another controller.
- Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw your consent at any time with effect for the future.
- Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes applicable law.
12) Duration of Storage of Personal Data
- If processing is based on your explicit consent (Art. 6(1)(a) GDPR), data will be stored until you withdraw your consent.
- If statutory retention periods apply to data processed for contractual or similar obligations (Art. 6(1)(b) GDPR), such data will be routinely deleted after the retention periods expire, unless it is still required for contract fulfillment or initiation, or unless we have a continuing legitimate interest in its retention.
- If processing is based on legitimate interests (Art. 6(1)(f) GDPR), data will be stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing or the processing serves the establishment, exercise, or defense of legal claims.
- If data is processed for direct marketing purposes based on legitimate interests (Art. 6(1)(f) GDPR), it will be stored until you exercise your right to object under Art. 21(2) GDPR.
