PRIVACY POLICY

6) Web Analysis Services

Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses so-called “cookies,” which are text files that are stored on your device and allow an analysis of your use of the website. The information generated by the cookie about your use of this website (including the truncated IP address) is usually transmitted to a Google server and stored there, and may also be transferred to Google LLC’s servers in the USA.
This website uses Google (Universal) Analytics exclusively with the “_anonymizeIp()” extension, which ensures that the IP address is anonymized by truncation and excludes direct personal identification. The extension shortens your IP address within member states of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and truncated there. Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity, and provide additional services related to website usage and internet use. The IP address transmitted by your browser in the context of Google (Universal) Analytics will not be merged with other Google data.
Google Analytics also allows the creation of demographic statistics about the visitors’ age, gender, and interests based on an evaluation of interest-based advertising and third-party information. This enables the definition and differentiation of user groups for the purpose of target-group optimized marketing. However, the data collected through “demographic characteristics” cannot be attributed to any specific individual.
All of the above processing, particularly the setting of Google Analytics cookies for reading information on the device used, is only performed if you have expressly consented to this in accordance with Art. 6(1)(a) GDPR. Without this consent, Google Analytics will not be used during your visit to the website.
You can withdraw your consent at any time with effect for the future. To do so, please disable this service using the “Cookie Consent Tool” provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, obligating Google to protect the data of our site visitors and not share it with third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard contractual clauses issued by the European Commission, which are intended to ensure compliance with European data protection standards in the USA.
Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en&gl=en

7) Site Features

7.1 Embedding of Instagram Feed via Lightwidget
On our website, we use the services of Lightwidget, a widget from the provider Black Sail Division, Krystian Żwak, Molczyn 17, Leszna Gorna, 43-445 Dziegielow, Poland (www.lightwidget.com), to display preview images from our Instagram profile. Lightwidget uses cookies, which are small text files stored locally in your internet browser’s cache.
By using the widget, a connection is made to the servers of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Instagram”) when visitors visit our website. Instagram receives all the information that Instagram’s servers request from your browser.
This includes, in particular, the IP address, the browser and operating system used on your device, and other data typically stored in server log files. This information is transmitted directly from your browser to a server of Instagram and stored there. Instagram’s servers may, in individual cases, be located in the USA.
All the above-described processes, especially the setting of cookies for reading information on the device used, are only performed if you have expressly consented to this in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by disabling this service in the “Cookie Consent Tool” provided on the website.
Further information about privacy at Instagram can be found in the provider’s privacy policy at: https://help.instagram.com/519522125107875
Further information about privacy at Black Sail Division (Lightwidget) can be found in the provider’s privacy policy at: https://lightwidget.com/privacy

7.2 Embedding of Instagram Feed via SnapWidget
On our website, we use the services of SnapWidget, a widget from SnapWidget (Pty) Ltd., based in Johannesburg, South Africa (www.snapwidget.com), to display preview images from our Instagram profile. SnapWidget uses cookies, small text files stored locally in your internet browser’s cache.
By using the widget, a connection is made to the servers of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Instagram”) when visitors visit our website. Instagram receives all the information that Instagram’s servers request from your browser.
This includes, in particular, the IP address, browser, and operating system used on your device, as well as other data typically stored in server log files. This information is transmitted directly from your browser to a server of Instagram and stored there. Instagram’s servers may, in individual cases, be located in the USA.
All the above-described processes, especially the setting of cookies for reading information on the device used, are only performed if you have expressly consented to this in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by disabling this service in the “Cookie Consent Tool” provided on the website.
Further information about privacy at Instagram can be found in the provider’s privacy policy at: https://help.instagram.com/519522125107875
Further information about privacy for SnapWidget can be found at: https://snapwidget.com/privacy

8) Tools and Miscellaneous

8.1 Cookie Consent Tool
This website uses a so-called “Cookie Consent Tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users when they visit the site, in the form of an interactive user interface where consent can be given for specific cookies and/or cookie-based applications by checking boxes. By using the tool, only those cookies/services that require consent will be loaded when the user grants the appropriate consent by checking the box. This ensures that such cookies are only placed on the user’s device if consent is given.
The tool uses technically necessary cookies to store your cookie preferences. Personal data of users is not processed in this context.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie preferences, this occurs based on Art. 6(1)(f) GDPR, as part of our legitimate interest in legal, user-specific, and user-friendly consent management for cookies and thus ensuring a legally compliant website.
Further legal basis for processing is also Art. 6(1)(c) GDPR. As data controllers, we are legally obligated to make the use of technically unnecessary cookies contingent on user consent.
Further information about the operator and settings of the Cookie Consent Tool can be found directly in the relevant user interface on our website.

8.2 Google Maps
On our website, we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive (land) maps to visually present geographical information. The use of this service shows our location and facilitates directions.
When accessing subpages that embed Google Maps, information about your use of our website (e.g., your IP address) is transferred to Google servers and stored there, and may also be transferred to Google LLC servers in the USA. This happens regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data is directly linked to your account. If you do not wish your data to be linked to your Google profile, you must log out before activating the button. Google stores your data (even for non-logged-in users) as usage profiles and evaluates them. The collection, storage, and evaluation occur in accordance with Art. 6(1)(f) GDPR based on Google’s legitimate interest in displaying personalized ads, market research, and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, in which case you need to contact Google to exercise your right. If you do not agree with the future transmission of your data to Google in connection with the use of Google Maps, you can also disable the Google Maps web service by turning off JavaScript in your browser. Google Maps and the map display on this website will then not be available.
You can view the terms of use for Google here: https://www.google.de/intl/en/policies/terms/regional.html
Additional terms for Google Maps can be found here: https://www.google.com/intl/en_US/help/terms_maps.html
Detailed information on privacy in connection with the use of Google Maps can be found on Google’s privacy policy page: https://www.google.de/intl/en/policies/privacy/
If required, we have obtained your consent for the processing of your data as outlined above in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with future effect. To exercise your right to object, please follow the procedure described above.

8.3 Wordfence
For security purposes, this website uses the “Wordfence” plugin, a service from Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (“Wordfence”). The plugin protects the website and its IT infrastructure from unauthorized third-party access, cyberattacks, and viruses/malware. Wordfence collects the IP addresses of users and may also gather additional data about your behavior on our website (in particular, URLs visited and header information) to detect and defend against unauthorized access and threats. The collected IP address is compared with a list of known attackers. If the collected IP address is identified as a security risk, Wordfence may automatically block access to the site. The collected data is transferred to a Defiant Inc. server in the USA and stored there.
These data processing activities are carried out in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in protecting the website from harmful cyberattacks and ensuring the integrity and security of its structure and data.
Defiant Inc. relies on the standard contractual clauses pursuant to Art. 46(2)(c) GDPR as the legal basis for the transfer of data to the USA.
If website visitors have login rights, Wordfence also places cookies (small text files) on the device used. These cookies enable location and device information to be read to determine whether the login attempt is legitimate. They also evaluate access rights and release permissions according to the user’s status. Finally, the cookies register irregular access attempts from new devices or locations and notify other administrators.
These cookies are only placed if a user has login rights. Wordfence does not place cookies for visitors without login rights.
If personal data is processed via cookies, this occurs based on our legitimate interest in preventing unauthorized access to the site management and defending against unauthorized administrator logins under Art. 6(1)(f) GDPR.
We have concluded a data processing agreement with Defiant Inc., obligating the company to protect the data of our site visitors and not share it with third parties.
Further information on Defiant Inc.’s data usage for Wordfence can be found in the Wordfence privacy policy at: https://www.wordfence.com/privacy-policy/

9) Rights of the Data Subject

9.1
The applicable data protection law grants you the following rights regarding the processing of your personal data by the controller (access and intervention rights), and the requirements for exercising them are based on the referenced legal grounds:

• Right of access under Art. 15 GDPR
• Right to rectification under Art. 16 GDPR
• Right to erasure under Art. 17 GDPR
• Right to restriction of processing under Art. 18 GDPR
• Right to notification under Art. 19 GDPR
• Right to data portability under Art. 20 GDPR
• Right to withdraw consent under Art. 7(3) GDPR
• Right to lodge a complaint under Art. 77 GDPR

9.2 Right to Object
If we process your personal data based on a legitimate interest, you have the right to object to this processing at any time on grounds related to your particular situation, with effect for the future.
If you exercise your right to object, we will cease processing the affected data. However, further processing may be carried out if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your data for such marketing purposes. You can exercise this right without providing any particular reason. If you exercise your right to object, we will stop processing your data for direct marketing purposes.

10) Duration of the Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and, if applicable, the relevant statutory retention periods (e.g., retention periods under commercial and tax law).

When processing personal data based on explicit consent according to Art. 6 (1) (a) GDPR, this data will be stored until the data subject withdraws their consent.

If there are statutory retention periods for data processed as part of contractual or quasi-contractual obligations based on Art. 6 (1) (b) GDPR, this data will be routinely deleted after the retention periods have expired, unless it is still required for contract fulfillment or contract initiation and/or there is a legitimate interest on our part in continuing to store it.

When processing personal data based on Art. 6 (1) (f) GDPR, this data will be stored until the data subject exercises their right to object according to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.

When processing personal data for direct marketing purposes based on Art. 6 (1) (f) GDPR, this data will be stored until the data subject exercises their right to object according to Art. 21 (2) GDPR.

Unless stated otherwise in the other information in this declaration regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.