Privacy Policy

This privacy policy explains the nature, scope, and purpose of the processing of personal data (hereinafter referred to as "data") within our online offering and the associated websites, functions, and content, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as "online offering"). With regard to the terms used, such as "processing" or "controller," we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

edeltravel Luxusreisen GmbH
Till Brunecker
Mühle 64
40724 Hilden
Germany
office@edeltravel.com

Vertretungsberechtiger Geschäftsführer: Till Brunecker

Visitors and users of the online offering (hereinafter, we also refer to the persons concerned collectively as "users").

„Personenbezogene Daten“ sind alle Informationen, die sich auf eine identifizierte oder identifizierbare natürliche Person (im Folgenden „betroffene Person“) beziehen; als identifizierbar wird eine natürliche Person angesehen, die direkt oder indirekt, insbesondere mittels Zuordnung zu einer Kennung wie einem Namen, zu einer Kennnummer, zu Standortdaten, zu einer Online-Kennung (z.B. Cookie) oder zu einem oder mehreren besonderen Merkmalen identifiziert werden kann, die Ausdruck der physischen, physiologischen, genetischen, psychischen, wirtschaftlichen, kulturellen oder sozialen Identität dieser natürlichen Person sind.

"Processing" means any operation or set of operations which is performed on personal data, whether or not by automated means. The term is broad and covers virtually any handling of data.

"Pseudonymization" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

"Profiling" means any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

The "controller" is the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.

"Processor" means a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.

Nach Maßgabe des Art. 13 DSGVO teilen wir Ihnen die Rechtsgrundlagen unserer Datenverarbeitungen mit. Sofern die Rechtsgrundlage in der Datenschutzerklärung nicht genannt wird, gilt Folgendes: Die Rechtsgrundlage für die Einholung von Einwilligungen ist Art. 6 Abs. 1 lit. a und Art. 7 DSGVO, die Rechtsgrundlage für die Verarbeitung zur Erfüllung unserer Leistungen und Durchführung vertraglicher Maßnahmen sowie Beantwortung von Anfragen ist Art. 6 Abs. 1 lit. b DSGVO, die Rechtsgrundlage für die Verarbeitung zur Erfüllung unserer rechtlichen Verpflichtungen ist Art. 6 Abs. 1 lit. c DSGVO, und die Rechtsgrundlage für die Verarbeitung zur Wahrung unserer berechtigten Interessen ist Art. 6 Abs. 1 lit. f DSGVO. Für den Fall, dass lebenswichtige Interessen der betroffenen Person oder einer anderen natürlichen Person eine Verarbeitung personenbezogener Daten erforderlich machen, dient Art. 6 Abs. 1 lit. d DSGVO als Rechtsgrundlage.

In accordance with Art. 32 GDPR, we take appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons.

The measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical access to the data, as well as access, input, transfer, availability, and separation. Furthermore, we have established procedures that ensure the exercise of data subject rights, the deletion of data, and the response to data threats. Furthermore, we take the protection of personal data into account during the development or selection of hardware, software, and procedures, in accordance with the principle of data protection through technology design and data protection-friendly default settings (Art. 25 GDPR).

If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transfer it to them, or otherwise grant them access to the data, this will only be done on the basis of a legal permission (e.g., if the transfer of data to third parties, such as payment service providers, is necessary for the performance of a contract pursuant to Art. 6 para. 1 lit. b GDPR), you have given your consent, a legal obligation requires it, or it is based on our legitimate interests (e.g., when using agents, web hosts, etc.).

If we commission third parties to process data on the basis of a so-called "data processing agreement," this is done on the basis of Art. 28 GDPR.

If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of using third-party services or disclosing or transferring data to third parties, this will only take place if it is necessary to fulfill our (pre)contractual obligations, on the basis of your consent, due to a legal obligation, or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or have the data processed in a third country if the special requirements of Art. 44 ff. GDPR are met. This means that processing is carried out, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection equivalent to that of the EU (e.g., for the USA through the "Privacy Shield") or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").

You have the right to request confirmation as to whether the data in question is being processed and to obtain information about this data, as well as further information and a copy of the data in accordance with Art. 15 GDPR.

In accordance with Art. 16 GDPR, you have the right to request the completion of data concerning you or the correction of inaccurate data concerning you.

In accordance with Art. 17 GDPR, you have the right to request that the data in question be deleted immediately or, alternatively, in accordance with Art. 18 GDPR, to request that the processing of the data be restricted.

You have the right to request that the data concerning you that you have provided to us be received in accordance with Art. 20 GDPR and to request that it be transferred to other controllers.

You also have the right to lodge a complaint with the competent supervisory authority in accordance with Article 77 of the GDPR.

You have the right to withdraw your consent in accordance with Art. 7 (3) GDPR with effect for the future.

You may object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR. In particular, you may object to processing for direct marketing purposes.

Cookies are small files that are stored on users' computers. Various types of information can be stored in cookies. The primary purpose of a cookie is to store information about a user (or the device on which the cookie is stored) during or after their visit to an online offering. Temporary cookies, or "session cookies" or "transient cookies," are cookies that are deleted after a user leaves an online service and closes their browser. Such a cookie can store, for example, the contents of a shopping cart in an online shop or a login status. Cookies that remain stored even after the browser is closed are referred to as "permanent" or "persistent." For example, the login status can be stored if users visit the site after several days. Such cookies can also store the interests of users, which are used for reach measurement or marketing purposes. Cookies that are offered by providers other than the controller operating the online offering are referred to as "third-party cookies" (otherwise, if they are only the controller's cookies, they are referred to as "first-party cookies").

We may use temporary and permanent cookies and provide information about this in our privacy policy.

If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in their browser's system settings. Stored cookies can be deleted in the browser's system settings. Excluding cookies may lead to functional restrictions of this online offer.

A general objection to the use of cookies for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US websitehttp://www.aboutads.info/choices/oderand the EU websitehttp://www.youronlinechoices.com/. Furthermore, the storage of cookies can be prevented by disabling them in your browser settings. Please note that in this case, not all functions of this online offer may be available.

The data we process will be deleted or restricted in its processing in accordance with Articles 17 and 18 of the GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no legal retention obligations preventing its deletion. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.

In accordance with legal requirements in Germany, records must be retained for 10 years in particular, in accordance with Sections 147 (1) AO, 257 (1) No. 1 and 4, (4) HGB (books, records, management reports, accounting documents, trading books, documents relevant for taxation, etc.) and 6 years in accordance with § 257 (1) No. 2 and 3, (4) HGB (commercial correspondence).

According to legal requirements in Austria, records must be retained for 7 years in particular in accordance with Section 132 (1) BAO (accounting documents, receipts/invoices, accounts, vouchers, business papers, statements of income and expenditure, etc.), for 22 years in connection with real estate, and for 10 years for documents in connection with electronically provided services, telecommunications, radio, and television services provided to non-businesses in EU member states and for which the Mini One Stop Shop (MOSS) is used.

In addition, we process

from our customers, prospective customers, and business partners for the purpose of providing contractual services, customer care, marketing, advertising, and market research.

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" address line in your browser and the lock symbol in the browser line.

The website provider automatically collects and stores information in server log files that your browser automatically transmits to us. This includes:

This data is not merged with other data sources. The basis for data processing is Art. 6 (1) (b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

We process applicant data solely for the purpose of and within the scope of the application process in accordance with legal requirements. The processing of applicant data is carried out to fulfill our (pre)contractual obligations within the framework of the application process within the meaning of Art. 6 (1) lit. b. GDPR Art. 6 (1) lit. f. GDPR if data processing becomes necessary for us, e.g., in the context of legal proceedings (in Germany, § 26 BDSG also applies).

The application process requires applicants to provide us with their application data. The necessary application data is marked if we offer an online form, otherwise it is derived from the job descriptions and generally includes personal details, postal and contact addresses, and the documents associated with the application, such as cover letters, resumes, and references. In addition, applicants can voluntarily provide us with additional information.

By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the manner and scope set out in this privacy policy.

If special categories of personal data within the meaning of Art. 9 (1) GDPR are voluntarily provided during the application process, their processing is additionally carried out in accordance with Art. 9 (2) lit. b GDPR (e.g., health data, such as severely disabled status or ethnic origin). If special categories of personal data within the meaning of Art. 9 (1) GDPR are requested from applicants as part of the application process, their processing shall also be carried out in accordance with Art. 9 (2) (a) GDPR (e.g., health data if this is necessary for the performance of the job).

If available, applicants can submit their applications to us using an online form on our website. The data is transmitted to us in encrypted form using state-of-the-art technology.
Applicants can also send us their applications by email. However, please note that emails are not encrypted and applicants must ensure that they are encrypted themselves. We therefore cannot accept any responsibility for the transmission of the application between the sender and the receipt on our server and therefore recommend using an online form or postal mail. Instead of applying via the online form and email, applicants still have the option of sending us their application by post.

The data provided by applicants may be further processed by us for the purposes of the employment relationship in the event of a successful application. Otherwise, if the application for a job vacancy is unsuccessful, the applicant's data will be deleted. Applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time.

Subject to a justified revocation by the applicant, the data will be deleted after a period of six months so that we can answer any follow-up questions regarding the application and fulfill our obligations to provide evidence under the Equal Treatment Act. Invoices for any travel expense reimbursements will be archived in accordance with tax regulations.

When contacting us (e.g. via contact form, email, telephone or social media), the user's details will be processed for the purpose of handling the contact request and its processing in accordance with Art. 6 (1) (b) (within the framework of contractual/pre-contractual relationships) and Art. 6 (1) (f) (other requests) of the GDPR.The user's information may be stored in a customer relationship management system ("CRM system") or comparable inquiry organization system.

We delete requests if they are no longer required. We review the necessity every two years; furthermore, the statutory archiving obligations apply.

The following information provides details about the content of our newsletter, the registration and delivery process, statistical analysis procedures, and your rights to object. By subscribing to our newsletter, you agree to receive it and accept the procedures described.

Newsletter content: We send newsletters, emails, and other electronic notifications containing promotional information (hereinafter referred to as "newsletters") only with the consent of the recipients or with legal permission. If the content of the newsletter is specifically described during the registration process, this description is decisive for the consent of the users. Otherwise, our newsletters contain information about our services and about us.

Double opt-in and logging: Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registering, you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register with someone else's email address. Newsletter registrations are logged in order to be able to verify the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation, as well as the IP address. Changes to your data stored by the mailing service provider are also logged.

Registration data: To register for the newsletter, simply enter your email address. Optionally, we ask you to enter a name so that we can address you personally in the newsletter.

The newsletter is sent and its success measured on the basis of the recipient's consent in accordance with Art. 6 (1) (a) Art. 7 GDPR in conjunction with Section 7 (2) No. 3 UWG (German Unfair Competition Act) or, if consent is not required, on the basis of our legitimate interests in direct marketing pursuant to Art. 6 (1) lit. f GDPR in conjunction with Section 7 (3) UWG.

The logging of the registration process is based on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR. Our interest is in using a user-friendly and secure newsletter system that serves our business interests, meets user expectations, and allows us to prove consent.

Cancellation/revocation – You can cancel your subscription to our newsletter at any time, i.e., revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. We may store the unsubscribed email addresses for up to three years based on our legitimate interests before deleting them in order to be able to prove that consent was previously given. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time.

The newsletter is sent via the mailing service provider "Klaviyo," a newsletter mailing platform operated by the US company Klaviyo, 125 Summer St, Boston, MA 02110, USA. You can view the mailing service provider's privacy policy here:https://klaviyo.com/legal/dpa/. Klaviyo is certified under the Privacy Shield Agreement and thus offers a guarantee that it complies with European data protection standards (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The shipping service provider is used on the basis of our legitimate interests pursuant to Art. 6 (1) lit. f. GDPR and a data processing agreement pursuant to Art. 28 (3) sentence 1 GDPR.

The mailing service provider may use the recipient data in pseudonymous form, i.e., without assigning it to a specific user, to optimize or improve its own services, e.g., for technical optimization of the mailing and presentation of the newsletter or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

The newsletters contain a so-called "web beacon," i.e., a pixel-sized file that is retrieved from our server or, if we use a mailing service provider, from their server when the newsletter is opened. As part of this retrieval, technical information such as information about your browser and your system, as well as your IP address and the time of retrieval, is collected first.

This information is used to improve the services based on technical data or target groups and their reading behavior based on their access locations (which can be determined using the IP address) or access times. Statistical surveys also include determining whether the newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, that of the mailing service provider to monitor individual users. Rather, the evaluations serve to identify the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

Unfortunately, it is not possible to separately revoke the performance measurement; in this case, the entire newsletter subscription must be canceled.

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, email delivery, security services, and technical maintenance services, which we use for the purpose of operating this online offering.

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties, and visitors to this online offering on the basis of our legitimate interests in the efficient and secure provision of this online offering in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).

Based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f. GDPR), we use Google Analytics, a web analytics service provided by Google LLC ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offering by users is usually transmitted to a Google server in the USA and stored there.

Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on the activities within this online offering, and to provide us with further services associated with the use of this online offering and the Internet. In doing so, pseudonymous user profiles of users can be created from the processed data.

We only use Google Analytics with IP anonymization enabled. This means that the IP address of users is truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.

The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by adjusting their browser software settings accordingly; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online service, as well as Google from processing this data, by downloading and installing the browser plugin available at the following link:http://tools.google.com/dlpage/gaoptout?hl=de.

For more information about Google's use of data, settings, and options for opting out, please refer to Google's privacy policy (https://policies.google.com/technologies/ads) and the settings for displaying ads by Google(https://adssettings.google.com/authenticated).

Users' personal data will be deleted or anonymized after 14 months.

We use the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") on the basis of our legitimate interests (i.e. interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f. GDPR).

Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

We use the online marketing method Google "AdWords" to place ads in the Google advertising network (e.g., in search results, in videos, on websites, etc.) so that they are displayed to users who are likely to be interested in the ads. This allows us to display ads for and within our online offering in a more targeted manner, so that users are only shown ads that potentially match their interests. If, for example, a user is shown ads for products that they have shown interest in on other online offerings, this is referred to as "remarketing." For these purposes, when our and other websites on which the Google advertising network is active are accessed, a code from Google is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also known as "web beacons") are integrated into the website. With their help, an individual cookie, i.e., a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). This file records which websites the user has visited, what content they are interested in, and which offers the user has clicked on, as well as technical information about the browser and operating system, referring websites, visit time, and other information about the use of the online offering.

We also receive an individual "conversion cookie." Google uses the information collected with the help of the cookie to compile conversion statistics for us. However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.

User data is processed pseudonymously within the Google advertising network. This means that Google does not store and process the name or email address of users, for example, but processes the relevant data in relation to cookies within pseudonymous user profiles. This means that, from Google's perspective, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who that cookie owner is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected about users is transmitted to Google and stored on Google's servers in the USA.

For more information about Google's use of data, settings, and options for opting out, please refer to Google's privacy policy (https://policies.google.com/technologies/ads) and the settings for displaying ads by Google(https://adssettings.google.com/authenticated).

We maintain online presences within social networks and platforms in order to communicate with customers, interested parties, and users who are active there and to inform them about our services.

We would like to point out that user data may be processed outside the European Union. This may pose risks for users, as it could make it more difficult to enforce their rights, for example. With regard to US providers certified under the Privacy Shield, we would like to point out that they are committed to complying with EU data protection standards.

Furthermore, user data is generally processed for market research and advertising purposes. For example, usage profiles can be created based on user behavior and the resulting interests. These usage profiles can then be used, for example, to place advertisements within and outside the platforms that are likely to correspond to the interests of the users. For these purposes, cookies are usually stored on users' computers, in which the usage behavior and interests of users are stored. Furthermore, data can also be stored in the usage profiles independently of the devices used by users (especially if users are members of the respective platforms and are logged in to them).

The processing of users' personal data is based on our legitimate interests in effectively informing users and communicating with them in accordance with Art. 6 (1) (f) GDPR. If users are asked by the respective providers to consent to data processing (i.e., to declare their consent, e.g., by ticking a checkbox or confirming a button), the legal basis for the processing is Art. 6 para. 1 lit. a, Art. 7 GDPR.

For a detailed description of the respective processing and the options for objection (opt-out), we refer you to the information provided by the providers linked below.

In the case of requests for information and the assertion of user rights, we would like to point out that these can be most effectively asserted with the providers. Only the providers have access to user data and can take appropriate measures and provide information directly. However, if you require assistance, you can contact us.

– Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) – Privacy policy:https://www.facebook.com/about/privacy/, Opt-out:https://www.facebook.com/settings?tab=adsandhttp://www.youronlinechoices.com, Privacy Shield:https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

– Google/YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy policy:https://policies.google.com/privacy, Opt-out:https://adssettings.google.com/authenticated, Privacy Shield:https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

– Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Privacy Policy/Opt-Out:http://instagram.com/about/legal/privacy/.

– Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) – Privacy policy:https://twitter.com/de/privacy, opt-out:https://twitter.com/personalization, Privacy Shield:https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.

– Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – Privacy policy/opt-out:https://about.pinterest.com/de/privacy-policy.

– LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) – Privacy Policyhttps://www.linkedin.com/legal/privacy-policy, Opt-Out:https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.

Within our online offering, we use third-party content or service offerings on the basis of our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f. GDPR) We use content or service offerings from third-party providers to integrate their content and services, such as videos or fonts (hereinafter collectively referred to as "content").

This always requires that the third-party providers of this content recognize the IP address of the users, as they would not be able to send the content to their browsers without the IP address. The IP address is therefore necessary for the display of this content. We endeavor to use only content whose respective providers use the IP address solely for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. Pixel tags can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, visit time, and other information about the use of our online offering, and may also be linked to such information from other sources.

Based on our legitimate interests (i.e. interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f. GDPR), we use social plugins ("plugins") from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
This may include, for example, content such as images, videos, or text and buttons that allow users to share content from this online offering within Facebook. The list and appearance of Facebook social plugins can be viewed here:https://developers.facebook.com/docs/plugins/.

Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee that it complies with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

When a user accesses a feature of this online offering that contains such a plugin, their device establishes a direct connection to Facebook's servers. The content of the plugin is transmitted directly from Facebook to the user's device and integrated into the online offering. The processed data can be used to create user profiles. We therefore have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore inform users according to our state of knowledge.

By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged into Facebook, Facebook can assign the visit to their Facebook account. When users interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transmitted directly from your device to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to find out and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and setting options for protecting the privacy of users, can be found in Facebook's privacy policy:https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect data about them via this online offering and link it to their member data stored on Facebook, they must log out of Facebook and delete their cookies before using our online offering. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings:https://www.facebook.com/settings?tab=adsor via the US pagehttp://www.aboutads.info/choices/or the EU pagehttp://www.youronlinechoices.com/. The settings are platform-independent, i.e., they are applied to all devices, such as desktop computers or mobile devices.

Functions and content from the Instagram service, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, may be integrated into our online offering. This may include content such as images, videos, or text and buttons that allow users to share content from this online offering within Instagram. If users are members of the Instagram platform, Instagram can assign the access to the above-mentioned content and functions to the users' profiles there. Instagram's privacy policy:http://instagram.com/about/legal/privacy/.

Functions and content from the Xing service, offered by XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany, may be integrated into our online offering. This may include content such as images, videos, or text and buttons that allow users to share content from this online offering within Xing. If users are members of the Xing platform, Xing can assign the access to the above-mentioned content and functions to the users' profiles there. Xing's privacy policy:https://privacy.xing.com/de/datenschutzerklaerung.

Functions and content from the LinkedIn service, offered by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, may be integrated into our online offering. This may include content such as images, videos, or text and buttons that allow users to share content from this online offering within LinkedIn. If users are members of the LinkedIn platform, LinkedIn can assign the access to the above-mentioned content and functions to the users' profiles there. LinkedIn's privacy policy:https://www.linkedin.com/legal/privacy-policy. LinkedIn is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active). Privacy policy:https://www.linkedin.com/legal/privacy-policy, opt-out:https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Our website uses the web analytics service Hotjar from Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, Tel.: +1 (855) 464-6788).

This tool can be used to track movements on websites where Hotjar is used (so-called heat maps). For example, it shows how far users scroll and which buttons they click on and how often. The tool also makes it possible to obtain feedback directly from website users. Above all, Hotjar's services can improve the functionality of Hotjar-based websites by making them more user-friendly, valuable, and easier for end users to operate.

When using this tool, we pay particular attention to the protection of your personal data. This means that we can only track which buttons are clicked, the mouse movement, how far the page is scrolled, the screen size of the device, device type and browser information, geographical location (country only), and the preferred language for displaying our website. Areas of the websites where personal data from you or third parties is displayed are automatically hidden by Hotjar and are therefore not traceable at any time. To exclude direct personal references, IP addresses are only stored and processed in anonymized form. However, Hotjar uses various third-party services such as Google Analytics and Optimizely. It may therefore be the case that these services collect data that is transmitted by your browser in the context of web page requests. This could be cookies or your IP address, for example. In these exceptional cases, this processing is carried out in accordance with Art. 6 (1) (a) GDPR on the basis of the consent you have given for the purpose of statistical analysis of user behavior for optimization and marketing purposes.

Hotjar offers every user the option of using a "Do Not Track header" to prevent the use of the Hotjar tool, so that no data about the visit to the respective website is recorded. This is a setting that all current versions of standard browsers support. To do this, your browser sends a request to Hotjar, indicating that tracking of the respective user should be deactivated. If you use our websites with different browsers/computers, you must set up the "Do Not Track header" separately for each of these browsers/computers.

When visiting a Hotjar-based website, you can prevent Hotjar from collecting your data at any time by going to our opt-out page https://www.hotjar.com/legal/compliance/opt-out/ and clicking on "Deactivate Hotjar."

Further information about Hotjar Ltd. and the Hotjar tool can be found at: https://www.hotjar.com The privacy policy of Hotjar Ltd. can be found at: https://www.hotjar.com/privacy/