- General Information
- Website hosting
- Cookies, pixel tags and mobile identifiers
- Establishing contact
- Other third-party services
- Profiles in social networks
- Rights of the data subject
The controller for processing of data is
Niederscheyerer Str. 18
Provision of data
Data transfer to third countries
Processing for other purposes
Data is generally only processed for the purposes for which it was collected. If, in exceptional cases, data is intended to be further processed for other purposes, we will inform you of these other purposes prior to such further processing and provide all other relevant information (Art. 13 (3) GDPR).
Every time our website is called up, the user’s browser transmits various data. For the duration of the visit on the website, the following data is processed and stored in log files even after the connection has ended:
- Browser type and version used
- Operating system
- Pages and files accessed
- Amount of data transmitted
- Date and time of retrieval
- User’s provider
- IP address in anonymous form
- Referrer URL
The processing of this data is necessary in order to deliver the website to the user and to optimise it for the user’s end device. Storage in log files serves to improve the security of our website (e.g. protection against DDOS attacks). IP addresses are rendered anonymous before being stored in log files.
The legal basis for the processing is Art. 6 (1) f) GDPR. Our legitimate interest is to provide the website and to improve website security. Log files are automatically deleted after 30 days.
Cookies, pixel tags and mobile identifiers
On our website, we use technologies to recognise the used end device. These can be cookies, pixel tags and/or mobile identifiers.
For a better understanding, we will explain below how cookies, pixel tags and mobile identifiers work in general:
- Cookies are small text files that contain certain information and are stored on the user’s end device. In most cases, the information consists of an identification number that is assigned to an end device (cookie ID).
- A pixel tag is a transparent graphic file that is integrated into a page and enables a log file analysis.
- A mobile identifier is a unique number (mobile ID) stored on a mobile device which can be read out by a website.
In the event contact is established, we process the user’s details, date and time for the purpose of processing the enquiry, including any queries.
The legal basis for the data processing is Art. 6 (1) f) GDPR. Our legitimate interest is to answer our user’s enquiries. Additional legal basis is provided by Art. 6(1) b) GDPR, if processing is necessary for the performance of a contract or for the implementation of pre-contractual measures.
The data will be deleted as soon as the enquiry, including any queries, has been answered. We will check at regular intervals, but at least every two years, whether any data accumulated in connection with contacts must be deleted.
Other third-party services
We use Sentry.io to analyse technical errors on our website. Provider: Functional Software, Inc., 132 Hawthorne Street, San Francisco, CA 94107, USA.
Program errors are recorded by Sentry.io and reported to us. In this context, user data is also processed if it is related to a program error. Data on the end device used, the software installed on it and the settings is also processed. In addition, browser type and operating system used, data on the network used, the URL of the page on which an error occurred, the URL of the previously visited page and the IP address are also processed.
The legal basis for the use of Sentry.io is Art. 6 (1) f) GDPR. Our legitimate interest is secure and error-free website operation.
Personal data will be deleted after 24 months at the latest.
We embed videos from YouTube. Provider: Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. We utilise advanced privacy mode so YouTube does not track user behaviour unless the user is watching the video. To be able to provide videos, it is necessary for reasons of technology to transmit the user’s IP address to YouTube.
The legal basis for using YouTube is Art. 6 (1) f) GDPR. Our legitimate interest is to improve the user experience on our website and to display content that is of interest to our users.
You can object to personalised advertising by Google at any time by exercising the following opt-out.
We integrate audio content via Spotify. Provider: Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden.
The Spotify Connect Player and audio content such as music or podcasts are loaded via Spotify’s servers. In the process, the user’s IP address is transmitted to Spotify. The company can recognise registered users and then display personalised content as the case may be.
To provide the player and for analysis purposes, users can be attached to a mobile device via a unique cookie identification number (cookie ID) or an identification number generated by the operating system of a mobile device (mobile identifier). In addition, other user data relevant to advertising, such as browser information, device information, approximate location data and Internet service provider are processed.
Insofar as we obtain user consent, data processing is carried out on the legal basis of Art. 6 (1) a) GDPR. Otherwise, the legal basis for the data processing is Art. 6 (1) f) GDPR. Our legitimate interest lies in the provision of audio content and in an attractive offer for users.
To be able to display geographical maps, we use Google Maps. Provider: Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This necessitates transmitting the user’s IP address to Google for reasons of technology. In addition, the company places various cookies to identify the user and to display personalised advertising.
Insofar as we obtain user consent, data processing is carried out on the legal basis of Art. 6 (1) a) GDPR. Otherwise, the legal basis for the data processing is Art. 6 (1) f) GDPR. Our legitimate interest is to make our website user-friendly.
We have concluded an agreement on shared responsibility with Google.
On our website we use fonts from Google Fonts. Provider: Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Fonts are loaded from the Google server. In order to establish a connection, it is technically necessary to transmit the user’s IP address.
The legal basis for the processing is Art. 6 (1) f) GDPR. Our legitimate interest is to make our website user-friendly and to improve its speed and availability.
Profiles in social networks
We are present in one or more social networks. In detail, these are: Facebook, Instagram or Twitter. When contacting us, we process personal data as described above under “Establishing contact”.
Social network providers process data according to their data protection regulations, which can be accessed here:
If a user is logged in with an account, the activities on our profile in the respective social network may be attached to said user. This can take place across devices and without login as the case may be, for example when using cookies or mobile identifiers. Social network providers use the data collected to create pseudonymised user profiles, which they can use in particular to display personalised advertising.
Rights of the data subject
Where personal data relating to a user is being processed, the user has the following rights:
Right of access: The user has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and a copy of the personal data undergoing processing.
Right to rectification: The user has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her.
Right to erasure: The user has the right in accordance with the law to obtain from the controller the erasure of personal data concerning him or her without undue delay.
Right to restriction of processing: The user has the right in accordance with the law to obtain from the controller restriction of processing.
Right to data portability: The user has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and has the right in accordance with the law to transmit those data to another controller.
Right to object: The user has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6 (1) GDPR, including profiling based on those provisions. Where personal data are processed for direct marketing purposes, the user has the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Right to withdrawal: The user has the right to withdraw his or her consent at any time.
Right to lodge a complaint: The user has the right to lodge a complaint with a supervisory authority.
Last Updated: 25/04/2021