Privacy policy

We use the web analytics service AB Tasty from the company AB TASTY SAS, 17 – 19 Rue Michel-le-Comte 75003, Paris (“AB Tasty”) to perform A/B or multivariate tests on websites on the intranet, mobile devices and apps to continuously improve our online offering. With AB Tasty, we have the opportunity to collect statistical information about visitor access to our online support. This information is then transmitted back to us in processed and anonymized form via a web interface. With the help of this collected information we can improve the usability of our website, the product range or the offer of its services.

During the visit to our website, AB Tasty collects statistical information about visitor traffic. This information is usage data, for example, regarding the browsers used, the number of pages viewed, the number of visits, the order of the visit, the duration of the visit to a web page, the filling of a shopping cart or its deletion, etc.

In the process, AB Tasty does not collect any data that allows a direct personal reference (e.g. name, phone number, address), except for the IP address (see below).

AB Tasty sets cookies, which serve the functionality and reliability of the software and the tests performed. The cookies make it possible to recognize visitors (although the identity of the visitor is not recognized). These cookies do not directly store any personal data of website visitors.

All test results are compiled and completely anonymized.

They contain information about:

• the navigation of the visitor on the website
• the behavior of visitors to the website
• the number of visitors
• the visits
• pages viewed
• and other necessary information to measure the effectiveness of a page during a test. This allows to improve the usability and content of the visited web pages. We change the setting of cookies. In addition, it should be noted that the life of cookies does not exceed 13 months.
• IP and geolocation. While collecting and processing the information, AB Tasty uses the IP address of the Internet user, for the purpose of geolocation (regional details, in some countries potentially the city) of his connecting device. The IP address is deleted immediately after geolocation.

AB Tasty acts as a processor with regard to the above-mentioned data processing on the basis of a processing contract. The subject of the commissioned processing is the performance of the AB Tasty services.

The Data will be stored on AB Tasty servers located in the European Economic Area (“EEA”). We are not aware of any disclosure to third parties located outside the EEA. 

The storage and reading of information on your end device by cookies or similar technologies (e.g. object storage, pixels, web beacons), which are not required to provide a telemedia service explicitly requested by you, is based on your consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program). 

The further processing of your personal data after storage or readout is also based on your explicit consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. 

You can declare your consent according to § 25 para. 1 TTDSG and Art. 6 para. 1 p. 1 lit. a GDPR with a single click on the corresponding button (“Accept all”). 

You can withdraw your consent by e-mail to info.muc@macromedia.de or in the cookie settings.

A later withdrawal has no effect on the permissibility of data processing until that time. 

Click here to read the privacy policy of the data processor:
https://support.abtasty.com/hc/en-us/articles/219239327-AB-Tasty-and-data-protectio

Click here to read the cookie policy of the data processor:
https://support.abtasty.com/hc/en-us/articles/218855298-What-are-the-cookies-that-AB-Tasty-places-

On our website we use Acuity (Squarespace) Sheduling of the company Squarespace, Inc. 225 Varick Street, 12th Floor New York, NY 10014 USA. Squarespace Ireland Limited, Ship Street Great Dublin 8, Ireland, is responsible for Europe. Squarespace Scheduling (hereinafter: “Squarespace”) is a cloud-based software that allows you to book appointments with us online. As a website visitor, you can see in real time which date and time is available for an appointment. You can pay for the appointment directly via Stripe, Square or PayPal for a coaching or sports class, for example.

When you book an appointment via this service, the following data is processed, which is sometimes personal:

• Browser type
• Browser version
• Unique device identifiers (e.g. device ID)
• Publication information
• IP address
• Account activity information
• Disclosed personal information
• Time and date of visit
• Usage data
• Pages visited
• Time spent on the site
• Payment information
• Registration information
• Zoom integration data
• Statistical information
• Marketing information

If you have booked an appointment on our website via Squarespace, we can analyze the above-mentioned data by reading the cookies stored on your terminal device and thus obtain a picture of how you use the website – in particular with regard to booking appointments and the corresponding range of services.

The purpose of the data processing is to facilitate your appointment booking and to distribute our services. The tool also serves to analyze the collected data in order to optimize our offered services and to design them according to your interests.

As Squarespace is a cloud-based service, the data collected is transferred to and stored on servers managed by Squarespace. This is done on the basis of an International Data Transfer Agreement that we have concluded with the service provider. The agreement is to be considered as a contract processing agreement and refers to the standard contractual clauses issued by the EU Commission. In addition, we also share your data with other service providers, such as payment service providers (PayPal).

Squarespace, Inc. is a US company with a subsidiary in the EU. It cannot be ruled out that personal data will be transferred to the USA. 

Please refer to the note above in Requirements for the transfer of personal data to third countries of this data privacy policy.

The storage and reading of information on your end device by cookies or similar technologies (e.g. object storage, pixels, web beacons), which are not required to provide a telemedia service explicitly requested by you, is based on your consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program). 

The further processing of your personal data after storage or readout is also based on your explicit consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. 

You can declare your consent according to § 25 para. 1 TTDSG and Art. 6 para. 1 p. 1 lit. a GDPR with a single click on the corresponding button (“Accept all”). 

You can withdraw your consent by e-mail to info.muc@macromedia.de or in the cookie settings. 

A later withdrawal has no effect on the permissibility of data processing until that time. 

According to Squarespace, the data will be stored until the original purposes of the data collection have ceased to apply and the deletion does not conflict with any legal obligations.  

For more information, click on this link:
https://support.squarespace.com/hc/en-us/articles/360028867231.

More information about cookies and activity log:
https://support.squarespace.com/hc/de/articles/360000851908
https://support.squarespace.com/hc/articles/217549458#toc-disable-activity-log

Our website uses the AdRoll tool from NextRoll, Inc., 2300 Harrison Street, San Francisco, California, 94110 USA. The company’s European headquarters are located at Level 6, 1 Burlington Plaza, Burlington Road, Dublin 4, D04 RH96, Ireland. AdRoll is a digital marketing and retargeting tool that processes our customer data, so-called CRM data (consumer relationship management data). When you use our websites, AdRoll uses cookies as well as similar technologies such as tracking pixels that processes the following data:

• IP address
• Date and time of visit
• Downloads
• Activity on the advertiser’s website
• Customer ID
• On which page an ad was placed
• Device type
• Third-party information
• Data from advertising partners
• Hash version of email address
• Browsing activity
• Web page activity
• Unique identifier of the mobile device
• How many times an ad was displayed
• Views of the page
• Time spent on a page
• Pseudonymous ad identifiers
• Cookie ID
• Items that were added to the shopping cart
• Views and interactions with content and ads

The processing of this data serves, among other things, the purpose of sending users target group-oriented e-mails. Furthermore, AdRoll can display interest-based advertising to the user by tracking usage behavior and other data listed above as well as by matching personal user data with that of advertising partners. By creating connected, personalized customer journeys, AdRoll provides us with opportunities to target existing and potential new customers through digital advertising, email marketing and website content. To do this, AdRoll uses the functionality of the cookie to remember, among other things, that you have accessed one of our websites with your device.  In addition, we can use AdRoll to measure the success of email and online advertising campaigns. For this reason, for example, performance reports are created, the analysis of which allows us to optimize our advertising offer. This is made possible by using AdRoll to record our users’ devices via a cookie ID and track which ads they view, what they click on the page and whether they have purchased anything, if applicable. It is also possible for us to identify from which location you are visiting our website and what your browsing behavior is.

AdRoll may share your personal information with other advertising partners (e.g., cookie ID), service providers, affiliates and distributors. Aggregated and anonymized data is used for machine learning.

NextRoll is a U. S. company. Your personal data may be transferred to third countries such as the USA, even if the storage initially takes place in the EU or the EEA. Please refer to the note above in A., (8).

The storage and reading of information on your end device by cookies or similar technologies (e.g., object storage, pixels, web beacons), which are not required to provide a telemedia service explicitly requested by you, is based on your consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program).

The further processing of your personal data after storage or readout is also based on your explicit consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR.

You can declare your consent according to § 25 para. 1 TTDSG with a single click on the corresponding button (“Accept all”).

You can withdraw your consent by e-mail to info.muc@macromedia.de or in the cookie settings.

A later withdrawal has no effect on the permissibility of data processing until that time.

NextRoll will delete your personal data after 90 days at the earliest and 13 months at the latest.

For more information, please visit:

https://www.nextroll.com/de-DE/terms/data-protection  

https://www.adrollgroup.com/privacy

Click here to object on all domains of the processing company:

http://info.evidon.com/pub_info/573?v=1&nt=1&nw=false

AWIN

We use the service of the company AWIN AG (Eichhornstraße 3, 10785 Berlin, Germany) on our website. AWIN is a German affiliate network and serves as an interface between advertising merchants or service providers (advertisers) and sales partners (publishers or affiliates).

Affiliate marketing is a form of online sales that enables website operators to display advertisements for their own products or services on third-party websites (publishers or affiliates), which are usually remunerated via click or sale commissions. The website operator provides an advertising medium via the affiliate network, i.e. an advertising banner or other suitable means of Internet advertising, which is subsequently integrated by a publisher on its own websites or advertised via other channels, such as keyword advertising or e-mail marketing. AWIN needs the user data to be able to trace the path from the publisher to the advertiser. When you click on the publisher’s website and thus reach the advertiser’s website, this is documented through the use of the cookies and assigned to an anonymized user profile created by AWIN. 

For this purpose, AWIN uses tracking domain cookies, journey tags and device fingerprinting, which are stored via the browser on the end device (computer, smartphone or tablet) of the website visitor when you click on one of our advertisements. The journey tags are embedded as JavaScript code in the advertiser’s website so that AWIN receives the transaction data. Fingerprinting also allows AWIN to uniquely identify an end device through browser and device information. The cookies can store, among other things, when which advertising material was clicked on at what time on which website. According to AWIN, the tracking cookie does not store any personal data. Only the identification number of the third party (affiliate) and the order number of the visitor to a website and the clicked advertising material are stored. The purpose of storing this data is, among other things, the processing of commission payments between a website operator and the publisher (affiliate), which are processed via the AWIN affiliate network.  

The following data is processed: 

• Advertisements viewed
• Browser information
• Ads clicked on
• Device information
• Device operating system
• Referrer URL
• Time at which the advertisement was clicked on
• Time at which the advertisement was viewed
• Touchpoint to the advertisement
• Usage data
• User agent
• Business transaction
• Information about orders
• Leads
• Newsletter information
• Referrer success

• Order number of a visitor mediated by an advertising partner (affiliate)
• Clicked advertising medium

The purpose of the data processing is to offer you interest-based advertising that matches our products. Furthermore, the data is used to track the marketing efforts and sales of a publisher. We are also provided with an analysis report from the collected data, from which it is not possible for us to draw any conclusions about your person. The data is pseudonymized by AWIN and qualifies as personal data. 

AWIN transfers pseudonymized data to the targeting360 service for the purpose of billing successful advertising measures (see reference to text module for t360). If a user is redirected to our website via an advertising link and subsequently books or orders a product or service of an advertiser, the data necessary for billing a successful advertising measure is transmitted to targeting360 in pseudonymized form. 

The storage and reading of information on your end device by cookies or similar technologies (e.g., object storage, pixels, web beacons), which are not required to provide a telemedia service explicitly requested by you, is based on your consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program). 

The transmission of personal data to t360 after the storage or readout of the above information is based on Art. 6 (1) sentence 1 lit. b DSGVO and serves the fulfillment of the contracts concluded with our partner websites. In addition, the transmission serves our legitimate interest in the proper accounting of successful advertising measures in the area of affiliate marketing in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO. We have sufficiently taken into account possible conflicting interests of the users when exercising our interest. Due to the pseudonymization of the data and the purpose of the transfer, which hardly conflicts with the interests and fundamental rights of the users, we are of the opinion that no interests and fundamental rights of the user’s conflict with the exercise of our legitimate interest.

You can declare your consent according to § 25 para. 1 TTDSG with a single click on the corresponding button (“Accept all”). 

You can withdraw your consent by e-mail to info.muc@macromedia.de or in the cookie settings. 

A later withdrawal has no effect on the permissibility of data processing until that time.

According to AWIN, the data is stored on European servers. We are currently not aware that the data is passed on to third parties, nor that a third country transfer takes place.  

According to AWIN, the data will be stored until the original purposes for collecting the data no longer apply and there is no accounting, reporting or tax obligations to the contrary. Cookies are stored for one year.

AWIN’s applicable privacy policy can be found at:
https://www.awin.com/de/rechtliches/privacy-policy.

We use bookingkit, an online booking system of the company bookingkit GmbH (Sonnenallee 23, 12059 Berlin, Germany), which acts as a processor for us. The use of this application enables the online booking as well as payment of services (e.g. workshops) via our website. This enables us to offer and distribute our services. They are also necessary to be able to conclude the contract with you and process the payment. In addition, the data is used for authentication and optimization of the bookingkit application.

This is an application that collects the following personal data:  

• Name
• Address
• Date of birth
• E-mail address
• Phone Number
• Payment information (e.g. IBAN, credit card numbers)
• IP address
• Timestamp
• Cookie ID
• Login information

Bookingkit also makes use of various service partners who require the transmission of personal data for order processing. Therefore, personal data is transmitted beyond bookingkit GmbH to the following third parties:

• Amazon Web Services, Inc
• Calendly LLC:
• Hotjar Ltd.
• MANGOPAY: Upon completion of the payment process, personal data is collected and processed by MANGOPAY for the purpose of carrying out the payment process and fraud prevention. This includes last name, first name, address, date and place of birth, information about your credit and debit card and/ or your banking information, your IP address, browser information and access times. To ensure a sufficient level of security when processing payment data, this data is encrypted and transmitted securely in accordance with the PCI-DSS standard to ensure confidentiality. The PCI-DSS standard serves as a reference for the technical and operational requirements for protecting cardholder data. More detailed information can be found in the privacy policy, which you can view here.

Your personal data will be processed in the European Union and the European Economic Area (“EU”). Nevertheless, this service may transfer the collected data to another- outside the EU- country that does not provide an adequate level of data protection. 

Please refer to the note above in Requirements for the transfer of personal data to third countries of this data privacy policy.

The storage and reading of information on your end device by cookies or similar technologies (e.g. object storage, pixels, web beacons), which are not required to provide a telemedia service explicitly requested by you, is based on your consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program). 

The further processing of your personal data after storage or readout is also based on Art. 6 para. 1 p. 1 lit. b GDPR. 

You can declare your consent according to § 25 para. 1 TTDSG with a single click on the corresponding button (“Accept all”). 

You can withdraw your consent by e-mail to info.muc@macromedia.de or in the cookie settings. 

A later withdrawal has no effect on the permissibility of data processing until that time.

The retention period is the period during which the collected data is stored for processing. The data will be deleted as soon as the specified processing purpose ceases to apply. 

Below you will find the address and e-mail address of the data protection officer of the processing company.

External data protection officer

ePrivacy GmbH
represented by Prof. Dr. Christoph Bauer
Große Bleichen 21
20354 Hamburg
E-mail: dataprotection@bookingkit.de

Click here to read the data processor’s privacy policy:
https://bookingkit.net/privacy-statement/

Our website also uses technologies from the company Criteo SA, 32 Rue Blanche, 75009 Paris, France (“Criteo”). This is done by setting cookie text files (“cookies”), which collect, store and analyze information about the surfing behavior of website users in pseudonymous form in order to show you targeted product recommendations or advertising on other websites (“publishers”) using an algorithm. Website users can be personally identified on the basis of the data collected.   

The following personal data is collected by Criteo:

• Browser information
• Click path
• Date and time of visit
• Device information
• Files viewed
• Location information
• IP address
• Mobile advertising IDs
• Number of page views
• Products viewed
• Referrer URL
• Search terms
• Technical IDs
• Usage data
• Number of ads served

Criteo shares the data with subsidiaries and affiliated companies. In addition, Criteo shares personal data with the following categories of recipients:

• Advertising Marketplaces and/or Ad Exchanges (“Real-Time Bidding”) with which Criteo exchanges mobile advertising IDs.
• Data Platforms with which Criteo mobile advertising IDs are exchanged for the purpose of recognizing your browser or device. However, no personal identification is possible in this process.
• Partners with whom Criteo exchanges identifiers from cookies set in the web browser.
• Partners to whom the IP address is transmitted in order to display advertisements for location-available products.
• Criteo also shares data with our partners such as Google Analytics.
• Recipients who must comply with legal, regulatory, judicial, or administrative obligations, such as regulatory and law enforcement agencies.

Your personal data is processed in the European Union and the European Economic Area (commonly “EU”). However, this service may transfer the collected data to another country outside the EU that does not provide an adequate level of data protection.

Please refer to the note above in Requirements for the transfer of personal data to third countries of this data privacy policy.

The storage and reading of information on your end device by cookies or similar technologies (e.g., object storage, pixels, web beacons), which are not required to provide a telemedia service explicitly requested by you, is based on your consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program).

The further processing of your personal data after storage or readout is also based on Art. 6 para. 1 p. 1 lit. b GDPR.

You can declare your consent according to § 25 para. 1 TTDSG with a single click on the corresponding button (“Accept all”).

You can withdraw your consent by e-mail to info.muc@macromedia.de or in the cookie settings.

A later withdrawal has no effect on the permissibility of data processing until that time.

Criteo stores personal data for a maximum of 13 months from the date of collection. The same duration applies to cookies placed by Criteo in your web browsers.

Criteo Privacy Officer:

32 Rue Blanche, 75009 Paris, FRANCE
Email: dpo@criteo.com  

Click here to read the privacy policy of the data processor:
https://www.criteo.com/privacy/

Click here to read the cookie policy of the data processor:
https://www.criteo.com/privacy/corporate-privacy-policy/

Click here to object on all domains of the processing company:
https://www.criteo.com/privacy/#user-choices

On our website, we use the Facebook pixel from Facebook (from Meta Platforms Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, with another branch: Meta Platforms Ireland Limited 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland). For this purpose, we have inserted a code on our website. This is a JavaScript code (pixel) that enables certain functions on the page. If you have come to our website via Facebook ads, Facebook can track your usage actions via the Facebook pixel. For example, if you purchase a product on a website, the Facebook pixel is triggered and stores your actions on the website in one or more cookies.

The following data is collected in the process:

• Viewed advertisements
• Viewed content
• Device information
• Geographic location
• HTTP headers
• Interactions with advertisements, services and products
• IP address
• Clicked items
• Marketing information
• Non-confidential custom data
• Pages visited
• Pixel ID
• Referrer URL
• Marketing campaign success
• Usage data
• User behavior
• Facebook cookie information
• Facebook user ID
• Usage/click behavior
• Browser information

If you have a Facebook account, it is possible for Facebook to match the data with your Facebook account data. This data collected via Facebook pixel is anonymous for us and only becomes usable for us when we want to place advertisements. If you are logged in as a Facebook user when you call up our website, your visit to our website will be assigned to your Facebook account.

The purpose of using the Facebook pixel is to better tailor our advertising measures to your wishes and interests. This enables us to show you personalized advertising. Facebook collects your data for the purpose of data analysis and tracking as well as to implement its own advertising measures.  

The data processed via the Facebook pixel is partly stored on servers in the European Economic Area (“EEA”). However, the data also reaches servers managed by Meta Platforms in the USA

Please refer to the note above in Requirements for the transfer of personal data to third countries of this data privacy policy.

The storage and reading of information on your end device by cookies or similar technologies (e.g. object storage, pixels, web beacons), which are not required to provide a telemedia service explicitly requested by you, is based on your consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program). 

The further processing of your personal data after storage or readout is also based on your explicit consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. 

You can declare your consent according to § 25 para. 1 TTDSG and Art. 6 para. 1 p. 1 lit. a GDPR with a single click on the corresponding button (“Accept all”). 

You can withdraw your consent by e-mail to info.muc@macromedia.de or in the cookie settings.

A later withdrawal has no effect on the permissibility of data processing until that time. 

Meta Platforms will delete your personal data after 720 days at the latest.

You can get more information about the processing here:
https://www.facebook.com/legal/terms/dataprocessing   

General information about Facebook’s privacy policy can be obtained here:
https://www.facebook.com/policy.php

We use the Google Ads service of Google Ireland Limited [Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland; Tel: +353 1 543 1000, Fax: +353 1 686 5660, E-Mail: support-deutschland@google.com (“Google”)] to draw attention to our offers with the help of advertisements. If you access our website via a Google ad, Google Ads will store a cookie in your terminal device.

The advertising material is delivered by Google via so-called “ad servers”. For this purpose, we and other websites use so-called ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. Through the Google Ads cookies stored on our website, we can obtain information about the success of our advertising campaigns. These cookies are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that a user no longer wishes to be addressed) are usually stored as analysis values.

The cookies set by Google enable Google to recognize your internet browser. If a user visits certain pages of the website of an Ads customer and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer, so the cookies cannot be tracked across the websites of other Ads customers. Through the integration of Google Ads, Google receives the information that you have called up the relevant part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We ourselves do not independently collect personal data in the aforementioned advertising measures but provide Google alone with the opportunity to collect the data. We only receive statistical evaluations from Google, which provide information about which ads were clicked on how often and at what prices. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.

We also process data obtained from Salesforce applications, such as Salesforce CRM, Salesforce Marketing Cloud and Salesforce Pardot, as part of the offline conversion in Google Ads. This is essentially data such as Google Click Identifier, Status, Sales Force Client ID and Sales Force User ID, which we evaluate using the Google applications for analysis and marketing purposes.

For more information on the transfer or processing of Salesforce data by Google applications, please click here.

The data transmitted to Google is stored on servers managed by Google in the USA. 

Please refer to the note above in Requirements for the transfer of personal data to third countries of this data privacy policy.

The storage and reading of information on your end device by cookies or similar technologies (e.g. object storage, pixels, web beacons), which are not required to provide a telemedia service explicitly requested by you, is based on your consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program). 

The further processing of your personal data after storage or readout is also based on your explicit consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. 

You can declare your consent according to § 25 para. 1 TTDSG and Art. 6 para. 1 p. 1 lit. a GDPR with a single click on the corresponding button (“Accept all”). 

You can withdraw your consent by e-mail to info.muc@macromedia.de or in the cookie settings. 

A later withdrawal has no effect on the permissibility of data processing until that time. 

Click here to read Google’s privacy policy:
https://policies.google.com/privacy?hl=de

Click here to read Google’s cookie policy:
https://policies.google.com/technologies/cookies?hl=de

Click here to object on all domains of Google:
https://safety.google/privacy/privacy-controls/

We use Google Ads with the additional application “Google Remarketing” of the company Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).

With this procedure, we can create advertisements based on existing information about you and address you again during your further internet use. This is done by means of cookies set when you visit our offers (usually by cookies), via which your usage behavior when visiting various websites is recorded by Google and evaluated pseudonymously. According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data, which may be stored by Google.

The following data is collected:

• Duration of visit
• IP address
• Pages visited
• Content in which the user is interested
• Web page usage   

The data transmitted via to Google LLC is predominantly stored on servers managed by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) in the European Economic Area (EEA). 

Please refer to the note above in Requirements for the transfer of personal data to third countries of this data privacy policy.

The storage and reading of information on your end device by cookies or similar technologies (e.g. object storage, pixels, web beacons), which are not required to provide a telemedia service explicitly requested by you, is based on your consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program). 

The further processing of your personal data after storage or readout is also based on your explicit consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. 

You can declare your consent according to § 25 para. 1 TTDSG and Art. 6 para. 1 p. 1 lit. a GDPR with a single click on the corresponding button (“Accept all”). 

You can withdraw your consent by e-mail to info.muc@macromedia.de or in the cookie settings. 

A later withdrawal has no effect on the permissibility of data processing until that time.

Google deletes your personal data as soon as they are no longer needed for the processing purpose. Cookie information is deleted after one year at the latest. 

Click here to read Google’s privacy policy:
https://policies.google.com/privacy?hl=de

Click here to read Google’s Cookie Policy:
https://policies.google.com/technologies/cookies?hl=de

Click here to opt-out on all Google domains:
https://safety.google/privacy/privacy-controls/

We use Google Analytics 4 to analyze and improve the use of our website.

Google Analytics 4 is a web analytics and tracking service provided by Google LLC (“Google”). Google Analytics 4 may use so-called “cookies” if we activate the cookie function. In addition, Google Analytics 4 uses a standard anonymized user and client ID generated by our website or app as well as Google signals to identify users.

The anonymized user ID is assigned to a logged-in user after the user has been uniquely identified beforehand. With the help of the user ID, users can be identified regardless of the device they are using. For example, if users access the website or app via both smartphones and tablets, we can analyze the user paths using the user ID in a holistic overview of the data.

The client ID is a unique, randomly generated string that acts as a pseudo-anonymized identifier and anonymously identifies a browser instance. It is stored in the browser cookies so that subsequent calls to the same website can be assigned to the same user.

Google signals are session data from websites and apps that Google links to users who are logged into their Google account and have activated personalized advertising. Linking data to these logged-in users enables cross-device reporting, cross-device remarketing, and the export of cross-device usage results (known as “conversions”) to Google Ads.

The data processed by Google Analytics 4 is personal data within the meaning of Art. 4 (1) GDPR. Google Analytics 4 collects personal data in the form of user characteristics and event data, among other things. The latter are automatically recorded events (user activities, number of sessions, clicks on ads, which ads are viewed, removal or deletion of credentials, crashes of websites or apps, completion or cancellation of subscriptions, clicks on links, scrolling behavior, ends of videos viewed, etc.), events optimized for analytics (number of sessions, clicks on ads, which ads are viewed, removal or deletion of credentials, crashes of websites or apps, completion or cancellation of subscriptions, clicks on links, scrolling behavior, ends of videos viewed, etc.), events optimized for analytics (page views, scrolls, actuation of external links, website searches, playing videos, file downloads, etc.), recommended (purchase process on the website, travel offers, games), and custom events (events that are neither automatically captured nor recommended). Session data is also collected, such as multiple page views, events (see above), social interactions, and e-commerce transactions.

In addition, we also process data that we obtain from Salesforce applications, such as Salesforce CRM, Salesforce Marketing Cloud and Salesforce Pardot, in Google Analytics 4. This is essentially data, such as Google Click Identifier, Status, Sales Force Client ID and Sales Force User ID, which we evaluate using Google Analytics 4 for analysis and marketing purposes.

You can find more information about the transfer or processing of Salesforce data by Google applications here.

User properties are attributes of the users who interact with your app or website. They are used to describe user segments such as language preference or geographic location. Some user properties are automatically logged in Google Analytics 4.

The information generated by the cookie, the user ID and Google signals about your use of this website is usually transmitted to a Google server in the USA and stored there. In case of activation of IP anonymization, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google uses this information to evaluate your use of the website, to compile reports on website activity, to make a forecast regarding your future web behavior and to provide other services to the website operator related to website and Internet use. User ID data collected in one website or app cannot be shared or combined with data from another website or app. Data about devices and activities from different sessions on a website or app, on the other hand, can be merged and combined using the User ID or Google signals. Collecting and combining the data is likely to create usage profiles about you.

Please refer to the note above in Requirements for the transfer of personal data to third countries of this data privacy policy.

The storage and reading of information on your end device by cookies or similar technologies (e.g. object storage, pixels, web beacons), which are not required to provide a telemedia service explicitly requested by you, is based on your consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program).

The further processing of your personal data after storage or readout is also based on your explicit consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR.

You can declare your consent according to § 25 para. 1 TTDSG and Art. 6 para. 1 p. 1 lit. a GDPR with a single click on the corresponding button (“Accept all”).

You can withdraw your consent by e-mail to info.muc@macromedia.de or in the cookie settings.

A later withdrawal has no effect on the permissibility of data processing until that time.

You can revoke your consent to the processing of your personal data through the use of Google Analytics 4 at any time by changing your cookie settings accordingly. In addition, you can also notify us of your revocation by post, by telephone at +49 40 288 01-3290, by e-mail to datenschutz@gge-germany.de or by fax (+49 40 288 01-3497).

You may also refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout   

We use Google Analytics with the extension “_anonymizeIp()”. This shortens the IP addresses (so-called IP masking).

We also use Google Consent Mode. This is an application that can be implemented in other Google products, such as Google Ads, Universalt Analytics and Google Analytics 4 (Universal and Google Analytics 4 hereinafter: “Google Analytics”). Google Consent Mode allows us to consider the refusal or granting of your consent regarding the use of Google Ads and Google Analytics across websites and devices, so that you do not have to make your decision again for each of the websites we operate, regardless of the end device. Google Consent Mode does not replace a consent manager or layer, so you can consent or object to the use of cookies unchanged via our cookie banner. The application transmits your decision to Google.

If you do not consent to the use of Google Ads and Google Analytics, Google will nevertheless receive the analysis and advertising data related to the function of the aforementioned applications and will only share them in aggregated form.

Information about Google:
Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

More information on Google’s terms of use:
www.google.com/analytics/terms/de.html   

More information about Google’s privacy policy:
www.google.com/intl/de/analytics/privacyoverview.html

This website uses Google Ads. Ads is an online advertising programme of Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 IE (‘Google’). As part of Google Ads, we use so-called extended conversion tracking. This requires consent, which you can object to.

Extended conversions are a function that supplements existing conversion tags. This allows conversion data collected on the website itself to be sent to Google in encrypted form.

When a conversion is carried out on a website, user data such as a name, an email address or a postal address is collected in most cases. This can be recorded and hashed in your conversion tracking tags. The data is encrypted with a one-way hash algorithm SHA256 for this purpose. The hash values of your user data are then transferred to Google and used to improve your conversion measurement.

If consent mode accepts the cookie banner, the tracking tags work as usual and record the assigned conversions and click information. In the case of cookie refusal, the consent mode only sends ping information. The so-called pings work without cookies. They may contain information such as the timestamp and the referral URL. No personally identifiable information is stored. In addition, Consent Mode can use the pings to compare the opt-in and opt-out rates. This information is then used to model conversions of users who have declined the cookie banner.

This means that if you click on an advert placed by Google, a cookie is set for extended conversion tracking. Cookies are small text files that the internet browser stores on the user’s computer. These cookies lose their validity after 30 days and are not used to personally identify the user.

Each Google Ads customer receives a different cookie. The cookies cannot be tracked via the websites of Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. For example, customers learn the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie via your Internet browser under user settings. You will then not be included in the conversion tracking statistics.

You can find more information about Google Ads and Google Enhanced Conversion Tracking in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

On our website we use the Google Tag Manager of the company Google Inc. if you have consented accordingly in the Consent Manager. Google Inc. has its European headquarters in: Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland. Google Tag Manager is used by us to provide you with a good user experience on our website and to be able to customize our offer. We do this by embedding sections of code (tags) into the source code of our website. The tags are managed via the Tag Manager. This allows us to track user behavior via various functions on our website and thus to customize our offer. According to its own statements, Google does not combine the data collected within the framework of the Tag Manager with your personal data, which may be stored by Google. Google acts as a processor for us with regard to the Tag Manager tool and has contractually guaranteed compliance with data protection in accordance with European standards.

In any case, your IP address is collected via a separate cookie set by Google Tag Manager. Information is also collected about the hardware and software you use, such as which operating system and which browser you use and its version. Furthermore, data is collected about your website visits, the language set on your system and the type of screen and its resolution. Finally, the support of scripting languages and the fonts of installed browser plug-ins. Depending on which other tracking services are used by us and managed via the Tag Manager (e.g. Google Analytics or Facebook Pixel), your IP address will be transmitted to servers managed by Google or Facebook, most of which are located in the USA, in addition to other data. 

Please refer to the note above in Requirements for the transfer of personal data to third countries of this data privacy policy.

The storage and reading of information on your end device by cookies or similar technologies (e.g. object storage, pixels, web beacons), which are not required to provide a telemedia service explicitly requested by you, is based on your consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program). 

The further processing of your personal data after storage or readout is also based on your explicit consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. 

You can declare your consent according to § 25 para. 1 TTDSG and Art. 6 para. 1 p. 1 lit. a GDPR with a single click on the corresponding button (“Accept all”). 

You can withdraw your consent by e-mail to info.muc@macromedia.de or in the cookie settings. 

A later withdrawal has no effect on the permissibility of data processing until that time. 

a) By setting your browser software accordingly, third-party cookies are suppressed. The suppression of third-party cookies will result in you not receiving third-party ads.

b) By setting your browser to block cookies from the domain “www.googleadservices.com”, www.google.de/settings/ads, deleting this setting when you delete your cookies;

c) by disabling interest-based ads from the vendors that are part of the “About Ads” self-regulatory campaign at the link www.aboutads.info/choices, deleting this setting when you delete your cookies;

d) by permanently disabling them in your Firefox, Internetexplorer or Google Chrome browsers at the link www.google.com/settings/ads/plugin.

We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.

For more information about Google’s privacy practices, please visit:
www.google.com/intl/de/policies/privacy
services.google.com/sitestats/en.html

Description of Service
This service allows to locate website visitors.

Processing company
apilayer GmbH
Elisabethstrasse 15/5, 1010 Vienna, Austria

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
support@ipstack.com

Data Purposes
This list represents the purposes of the data collection and processing.

• Optimization
• Marketing

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

• API

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

• IP address
• Usage data
• Date and time of visit
• Access status
• Browser information
• Device operating system
• Browser language
• Geographic location

Legal Basis
In the following the required legal basis for the processing of data is listed.

• Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

• European Union

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.

Data Recipients
In the following the recipients of the data collected are listed.

• apilayer GmbH

Click here to read the privacy policy of the data processor
https://ipstack.com/privacy

Click here to read the cookie policy of the data processor
https://ipstack.com/cookies

Our website uses the service of MaTelSo GmbH, Heilbronner Str. 150, 70191 Stuttgart.  MaTelSo is a phone tracking service and embeds phone numbers on our website.

Incoming calls are forwarded to an assigned destination number. When calling such a call tracking number, information about time, date, duration of the call and the destination number is collected. However, the content of the call is not recorded. When you call a number switched for us by Matelso, information about the call is transferred to a web analytics service we use (e.g. Google Analytics). Matelso also reads cookies set by our analytics service or other parameters of the website you visit. Here, browser information, document path, date and time of the website visit, referrer URL and the remote user agent are processed. 

According to its own information, the data is stored from servers in the EU. However, it should be noted that Google’s integrated analysis service (Google Analytics) is provided by a US company. 

Please refer to the note above in Requirements for the transfer of personal data to third countries of this data privacy policy.The storage and reading of information on your end device by cookies or similar technologies (e.g. object storage, pixels, web beacons), which are not required to provide a telemedia service explicitly requested by you, is based on your consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program). 

The further processing of your personal data after storage or readout is also based on your explicit consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. 

You can declare your consent according to § 25 para. 1 TTDSG and Art. 6 para. 1 p. 1 lit. a GDPR with a single click on the corresponding button (“Accept all”). 

You can withdraw your consent by e-mail to info.muc@macromedia.de or in the cookie settings. 

A later withdrawal has no effect on the permissibility of data processing until that time.

You can also prevent call tracking and the associated collection of the above-mentioned data by calling the phone number stored in the imprint: +49 0 40 413 583 100 or by sending an appropriate e-mail to scheffel@userconsult.de. You can also prevent the collection of your telephone number by calling anonymously with a “suppressed number”.

According to MaTelSo, the data will be stored until the original purposes for collecting the data no longer apply and no accounting, reporting or tax obligations prevent deletion. 

More information on the handling of user data and data protection at Matelso can be found in Matelso’s privacy policy:
https://www.matelso.com/datenschutz/

and at:
https://www.matelso.de/privacy/.

The Meta Pixel of Meta Platforms Ireland Ltd. is used in particular to present interest-based adverts to users of this website when they visit the social networks Facebook and Instagram in these networks and in the connected advertising network (Audience Network), i.e. also on other websites. The impact of these ads on conversions is also measured and optimised. We also use Meta’s website-based Custom Audience function to share target groups with interested partners. Only the names and sizes of target groups are shared in order to enable interest-based display of adverts. No personal and/or statistical data is exchanged with the partners.
The corresponding tag from Meta has been implemented for this purpose. This tag is used to establish a direct connection to the Meta servers when the respective website is visited. The Meta server is informed that you have visited this website and what you have done on the website. Meta assigns this information to your personal Facebook and/or Instagram user account. If you visit the social networks Facebook, Instagram or the site of a Meta Audience Network partner, you may be shown personalised, interest-based ads.

Meta Platforms Ireland Ltd. and we are joint controllers with regard to the processing of personal event data for the creation of responsive audiences, delivery of commercial and transactional messages and personalisation of features and content, as well as to improve and secure the Meta Products. The agreement concluded between us and Meta Platforms Ireland Ltd. in this context to determine the mutual responsibilities for compliance with the GDPR can be found here. As part of the joint processing of your personal data, we have agreed with Meta that Meta is primarily responsible for providing you with information about the data processing and enabling you to exercise your rights as a data subject under the GDPR. You can also find more information about the processing of personal data at Meta here – including the legal basis for data processing and how you can assert your data subject rights against Meta.

We have also set up a Meta Conversion API to Meta. We use this to transfer your hashed email address to Meta if you enter it on our websites as part of a guest order or if you are logged in. The email address is hashed in your browser and then transferred to the providers and matched there, so there is no direct transfer of the email address (in plain text) to the providers. Unrecognised hashed email addresses are immediately discarded by Meta. This serves to improve data quality as part of the tracking process described above.

Our websites use the Microsoft Advertising service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”). This service allows us to create advertisements based on existing information about you and to target you again when you continue to use the Internet. For this purpose, cookies and web beacons (conversion tracking tool) from Microsoft are used on our website, which also store data from you. The tool is an advertising program from Microsoft that is based on a pay-per-click system. This means that advertisers can place ads via the Bing and Yahoo! search engines and only pay when a website visitor clicks on the ad.

The service processes the following data:   

• Browser language
• Clicked ads
• Digital signature
• GUID generated by the UET tag
• IP address
• Microsoft click ID
• Microsoft cookie
• Page title
• Referrer URL
• Screen color depth
• Screen resolution
• UET ID tag
• Page load time
• Publisher/URL access

According to Microsoft Advertising, the data processed by Microsoft Advertising is stored on servers in the European Economic Area (“EEA”). According to Microsoft, there is no transfer of personal data to a third country, such as the USA. 

Please refer to the note above in Requirements for the transfer of personal data to third countries of this data privacy policy.

The storage and reading of information on your end device by cookies or similar technologies (e.g. object storage, pixels, web beacons), which are not required to provide a telemedia service explicitly requested by you, is based on your consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program). 

The further processing of your personal data after storage or readout is also based on your explicit consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. 

You can declare your consent according to § 25 para. 1 TTDSG and Art. 6 para. 1 p. 1 lit. a GDPR with a single click on the corresponding button (“Accept all”). 

You can withdraw your consent by e-mail to info.muc@macromedia.de or in the cookie settings. 

A later withdrawal has no effect on the permissibility of data processing until that time. 

Microsoft will delete your data as soon as it is no longer needed for the processing purpose, but no later than after one year and 25 days. 

Click here to read Microsoft’s privacy policy:
https://privacy.microsoft.com/de-de/privacystatement

Click here to read Microsoft’s Cookie Policy:
https://privacy.microsoft.com/de-de/privacystatement

Click here to opt-out on all Microsoft domains:
https://account.microsoft.com/privacy/ad-settings/signedout?ru=https:%2F%2Faccount.microsoft.com%2Fprivacy%2Fad-settings

Our website uses the Mouseflow service provided by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark. This is an analysis tool that allows us to create the visitor’s use of our website based on the movements and clicks of the computer mouse controlled by you.

The following data is collected in this process:

• Click Path
• Viewed content
• Geographical location
• Location information
• IP address (anonymized only)
• Mouse movements
• Operating system information
• Visited pages including page content
• Usage data
• Time spent on a page
• Scrolling activity
• Browser information
• Referrer URL
• Visitor type (first-time visitor/return visitor)
• Screen resolution
• Language

For this purpose, the service uses cookies, JavaScript codes or tracking pixels that are stored on your browser and thus on your end device (computer, smartphone or tablet). On this basis, the movements and clicks of the computer mouse you use on our website are tracked, in particular through session replays/records, heat maps, funnel and form analyses, and feedback campaigns. The “Session Replay” is the first stage of the analysis. Here, the entire visit can be replayed, filtered and segmented to highlight any problems that may occur. The second stage is the heat map. Similar to a thermal imaging camera, heavily trafficked areas are highlighted in color. Funnel analysis, on the other hand, shows the percentage of users who decide to proceed to the next step and ultimately conversion. In addition to this, form data can be analyzed. This works in a similar way to heat maps.

We can see which windows or buttons you have clicked on and how far you have scrolled on the website. In addition, the above-mentioned technical data is also collected. For this purpose, pseudonymous usage profiles are temporarily created. The movements of your computer mouse are summarized in a log. 

The evaluation of the data serves us to improve our web offer and the user-friendliness of our website. We would also like to optimize the surfing experience on our website for you.

The storage and reading of information on your end device by cookies or similar technologies (e.g. object storage, pixels, web beacons), which are not required to provide a telemedia service explicitly requested by you, is based on your consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program). 

The further processing of your personal data after storage or readout is also based on your explicit consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. 

You can declare your consent according to § 25 para. 1 TTDSG and Art. 6 para. 1 p. 1 lit. a GDPR with a single click on the corresponding button (“Accept all”). 

You can withdraw your consent by e-mail to info.muc@macromedia.de or in the cookie settings. 

A later withdrawal has no effect on the permissibility of data processing until that time. 

Mouseflow acts as a processor for us with regard to data processing on a corresponding contractual basis. 

According to Mousflow’s own statements, the data collected in the European Economic Area (“EEA”), including personal data, is stored exclusively on servers in the EU and is not transferred to a country outside the EEA. Accordingly, a transfer of the data to third parties only takes place within the EEA. To whom the data is specifically passed on is not apparent to us, as Mouseflow does not provide any precise information in this regard. 

If the data is not already deleted when the purpose for which it was collected ceases to apply, it will be deleted after 1-12 months, depending on the type of contract we have concluded with Mouseflow. 

Click here to read the privacy policy of the data processor:
https://mouseflow.com/privacy/

Click here to read the cookie policy of the data processor:
https://support.mouseflow.com/support/solutions/articles/44001550895-what-is-your-cookie-policy-

Click here to object on all domains of the processing company:
https://mouseflow.com/opt-out/

Description of Service
Service for making appointments

Processing company
Salesforce.com, Inc., Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, United States of America

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.

• https://www.salesforce.com/form/other/privacy-request/

Legal Basis
In the following the required legal basis for the processing of data is listed.

• Art. 6 paragraph 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

• European Union

Transfer to Third Countries

This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

• United States of America

Click here to read the privacy policy of the data processor
https://www.salesforce.com/company/privacy/

The retargeting and display campaign tool “targeting360” of the company targeting360 GmbH, Gärdinger Straße 28, 90453 Nürnberg (hereinafter: “t360”) is used on our websites. T360 uses the ad serving technology of the company NEORY GmbH, Dortmund. This service enables us to display personalized and interest-based advertising to our website visitors on partner websites of an advertising network. When you visit our website, a cookie is stored on your end device. This is provided with an identifier (ID). If you access a partner website of the advertising network, this cookie including the ID is read, which allows us to recognize your end device. We are thus able to show you interest-based advertising on said partner website, which is based on the content you viewed on our website. For this purpose, we analyze the data collected in a usage profile.

The following data is collected and processed: 

• IP address (shortened resp. anonymized) 
• User ID (pseudonymized)
• URLs of the websites visited
• Time of the visit to these websites
• Views, clicks and interactions on or with the advertising material of advertisers
• Visits to websites of advertisers including, if applicable, the transfer of product IDs
• Online transactions with advertisers
• Website type
• Product ID
• Category ID
• Country/region/state/city of origin
• Internet access provider 
• Access speed (grouped into four groups: Cable/DSL, Dialup, Cellular, Corporate)
• Browser type (Firefox, Chrome, etc.) incl. version 
• Operating system (e.g.: Windows 10, Windows 7, iOS, Android 6.0, Linux, etc.) 
• Device (Desktop, Android Phone, iPhone, Android Tablet, iPad, Symbian, Blackberry, Windows Phone
• Language settings 
• HTTP referrer
• Screen resolution
• Size of the browser window 
• Position of the ad within the displayed web pages
• ID of the mediating partner (so-called affiliate) as well as order number of the mediated visitor
• Clicked advertising material

In addition to its own cookies, T360 also uses cookies from other services or service providers such as doubleclick from Google, Trade Desk, Adform, MediaMath, Usemax/Emego and Adtion technologies. With the help of the cookies of the services just mentioned, it is possible to recognize web browser profiles over a longer period of time and across several website visits based on the assignment of a user ID. 

For more information, please see here:

https://ad.ad-srv.net/privacy/kdb0xdq3ls8m/?reference=&language=en

https://policies.google.com/privacy

https://site.adform.com/privacy-center/platform-privacy/

https://www.adition.com/en/privacy/

https://www.usemax.de/?l=privacy

https://www.mediamath.com/privacy-policy/

In addition, we receive pseudonymized personal data of users via the AWIN service for billing purposes of successful advertising measures. If a user is redirected back to our website via an advertising link, then the data required for billing a successful advertising measure is transmitted in pseudonymized form from AWIN to t360. The legal basis for this transmission is, on the one hand, the fulfillment of the contract with the partner website in question and t360 pursuant to Art. 6 para. p. 1 lit. b GDPR and, on the other hand, our legitimate interest in the proper billing of successful advertising measures in the area of affiliate marketing pursuant to Art. 6 para. 1 p. 1 lit. f GDPR. We have sufficiently taken into account possible conflicting interests of the users when exercising our interest. Due to the pseudonymization of the data and the purpose of the transfer, which hardly conflicts with the interests and fundamental rights of the users, we are of the opinion that no interests and fundamental rights of the users conflict with the exercise of our legitimate interest. 

T360 acts for us as a processor on a contractual basis and has contractually committed itself to compliance with data protection, which includes securing your data through appropriate technical and organizational measures. The same applies to the subcontractors working for us, such as the service provider NEORY, the service provider Hetzner Online GmbH, which provides the technical infrastructure of the data centers used by targeting 360 on our behalf. The services or service providers doubleclick by Google, Trade Desk, Adform, MediaMath, Usemax/Emego and Adtion technologies are also subcontractors used by t360 under the data processing agreement with us.

According to its own information, the data that targeting360 collects through its own cookies is stored exclusively on servers in the EU or the European Economic Area (“EEA”). The data processed by Google (doubleclick), Trade Desk and MediaMath, on the other hand, is partly stored on servers outside the EU/EEA or disclosed in third countries, e.g. the USA. The data is transferred on the basis of the standard data protection clauses of the EU Commission pursuant to Art. 46 (2) (c) GDPR, which were concluded between t360 and the relevant service providers. Please note that if personal data is transferred to the USA, even on the basis of standard data protection clauses, it cannot be ruled out that the US authorities, which have extensive powers, may gain access to this data. There are no effective legal remedies available to you against this.  

The storage of any information that is not technically absolutely necessary in an end device objectively used by you and the reading of this information takes place regardless of the technology used for this purpose (cookies, object storage, pixels, web beacons, etc.) on the basis of your express consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program). Your declared consent, you can at any time in the same way as the declaration about the cookie settings withdraw. A later withdrawal has no effect on the permissibility of data processing until the time of withdrawal.

The further processing of your personal data after storage or readout is also based on your express consent pursuant to Art. 6 (1) p. 1 lit. a GDPR. You can also withdraw this at any time by calling up the cookie settings.

You can declare your consent pursuant to Section 25 (1) TTDSG and Art. 6 (1) p. 1 lit. a GDPR with a single click on the corresponding button.  

The data will be stored for a maximum period of 90 days from the time of collection. Irrespective of this, targeting360 stores anonymous data for a longer period of time (statistics, number of sales, etc.). 

Further information on data protection can be found here: https://targeting360.de/datenschutz/ 

We use the CMP of the company Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany (contact@usercentrics.com) on our websites. The CMP is used by us to document and manage your consent, declared by an opt-in, to the processing of your personal data by technically non-essential services. As a controller, we are required by law to account for the granting of consents as well. We must therefore be able to prove your consent, which constitutes its own personal data. Consent data includes the date and time of your visit or your consent or withdrawal, as well as device information. We obtain this information by retrieving it from the local storage provided in your browser for this purpose.

Usercentrics acts as a processor for us on a contractual basis. The contractual agreement provides, among other things, that Usercentrics undertakes to comply with data protection, which includes securing your personal data (consent data) through appropriate technical and organizational measures – in particular by means of encryption technologies.

The legal basis for storing your consent is Art. 6 para. 1 lit. c GDPR in conjunction with Art. 5 para. 1 lit. a, para. 2, Art. 7 para. 1 GDPR and Art. 6 para. 1 lit. f GDPR, whereby compelling reasons can be raised against an objection (Art. 21 GDPR) on your part. Such a compelling reason arises, for example, from the above-mentioned accountability obligation to which we are subject by law. Consent pursuant to Section 25 (1) of the German Teleservices Data Protection Act (“TTDSG”) is not required, as the exception of Section 25 (2) No. 2 of the TTDSG applies in this respect.

Your consent data is stored on Google cloud servers located in the EU/EEA and stored for a period of 3 years for regulatory auditing purposes. Although the transfer of personal data to Google is based on standard contractual clauses, this does not exclude the possibility that the US authorities, which are equipped with extensive powers, can access your personal data at any time and without any reason. This applies even if the servers are located in Europe. As a U.S. company, Google may also be required to transfer personal data of EU citizens to the U.S. authorities that is located on servers in the EU or the EEA. There are no effective legal remedies available to you against this.

Further information on the subject of data protection can be found here:
https://usercentrics.com/privacy-policy/

Description of Service
A web application connecting prospects to current university students over an online chat/direct messaging system.

Processing company
Unibuddy Limited
5 New Street Square, London, United Kingdom, EC4A 3TW, & Corporation Trust Center, 1209 Orange Street, in the City of Wilmington, County of New Castle, Delaware 19801

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
legal.team@unibuddy.com

Data Purposes
This list represents the purposes of the data collection and processing.

• Interacting with students and staff

Technologies Used
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

• Cookies
• Scripts

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

• IP address
• first and last name
• photo; phone number, email address, encrypted password; country/city/location, country flag; languages spoken; academic history (and previous high school; degree/university degree; degree level (undergraduate/postgraduate
• current area of study
• university year (1st, 2nd etc.)
• occupation
• hobbies, interests and societies; and an ‘about me’ free text selection

Legal Basis
In the following the required legal basis for the processing of data is listed.

• Art. 6 paragraph 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

• USA, Europe, UK, Israel

Data Recipients
In the following the recipients of the data collected are listed.

• Unibuddy Limited

Click here to read the privacy policy of the data processor
https://unibuddy.com/privacy-policy/

Click here to read the cookie policy of the data processor
https://unibuddy.com/cookie-policy/

The live chat plug-in for WordPress Userlike is used on our websites. Userlike is offered by Userlike UG (haftungsbeschränkt), Probsteigasse 44-46 in 50670 Cologne, Germany, which acts as a processor for us on a contractual basis. We can use this service to organize and conduct communication with our customers – regardless of which communication channel is used by the customer (e.g. Facebook Messenger, WhatsApp, Telegram, etc.). You can use the live chat like a contact form to chat with our employees in near real time.

When starting the chat, the following personal data is collected:

• Amount of data transferred
• Browser type
• Browser version
• Chat history
• Device information
• E-mail address
• First name
• IP address
• Last name
• Number of page views
• Information about the operating system
• Referrer URL
• Time zone
• URL
• Date and time of the request
• Status information

Depending on the course of the conversation with our employees, further personal data may arise in the chat, which is entered by you. The nature of this data depends largely on your request or the problem you describe to us.

By accessing our website [corresponding website where Userlike is deployed], the chat widget is loaded in the form of a JavaScript file from AWS Cloudfront. The chat widget is effectively the source code that runs on your computer and enables the chat. It is a cookie generated via the JavaScript mentioned above. 

In addition, Userlike stores the history of live chats on servers managed by Userlike in Germany. This serves the purpose of sparing you extensive explanations about the history of your request as well as for constant quality control of our live chat service.  If you do not wish to do so, please feel free to inform us using the contact details listed below. Stored live chats will then be deleted by us immediately. The legal basis for the use of Userlike is your consent according to Art. 6 para. 1 lit. a GDPR.

If you contact us via the WhatsApp messenger service of WhatsApp LLC. 1601 Willow Road Menlo Park, California 94025. United States of America; responsible for Europe: Ireland Limited, 4 Grand Canal Square – Grand Canal Harbour, Dublin 2, Ireland, we use your phone number to communicate with you via WhatsApp. In addition, we process other personal data recorded with WhatsApp, in particular your first and last name, your terminal device, profile picture and messages and files that you send to us via the app.

We process your mobile number to identify you. Your nickname and profile picture provided via WhatsApp are used for display purposes. Your communication with us is stored as a conversation transcript. This serves the purpose of using previous communication with you as context for future conversations. The transcript also contains receipt and read confirmations. These are used to ensure smooth reception and to clean up inactive contacts.

WhatsApp is owned by Meta Platforms Inc., Menlo Park, California and collects data independently. This is done for analysis purposes and to display personalized advertising, among other things. WhatsApp can record all call histories and stores this and other data on servers managed by WhatsApp. For more details on the purpose and scope of data collection by WhatsApp, the further processing of your data by WhatsApp, and your rights and settings options to protect your privacy, please refer to WhatsApp’s privacy policy. You can find this here or directly in the WhatsApp app.

The responsible party for the WhatsApp messenger service within the meaning of the GDPR is WhatsApp Ireland, and the competent supervisory authority under the GDPR is the Irish data protection supervisory authority. The personal data collected from you is transmitted to servers managed by WhatsApp, most of which are located in the USA.

Please refer to the note above in Requirements for the transfer of personal data to third countries of this data privacy policy.

Your data will be used by us exclusively for the purpose of communication and will be deleted upon request. Furthermore, you have the option of contacting the operator directly and requesting the deletion of your data.

The storage and reading of information on your end device by cookies or similar technologies (e.g. object storage, pixels, web beacons), which are not required to provide a telemedia service explicitly requested by you, is based on your consent pursuant to Section 25 (1) TTDSG. You can declare this by opting in via our CMP (Consent Management Program).

The further processing of your personal data after storage or readout is also based on your explicit consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR.

You can declare your consent according to § 25 para. 1 TTDSG and Art. 6 para. 1 p. 1 lit. a GDPR with a single click on the corresponding button (“Accept all”).

You can withdraw your consent by e-mail to info.muc@macromedia.de or in the cookie settings.

A later withdrawal has no effect on the permissibility of data processing until that time.

In the regular provision of our services, WhatsApp does not store messages after they have been transmitted, nor does it store transaction logs of these transmitted messages. Undelivered messages are deleted from our servers after 30 days.

We have embedded YouTube videos of the company Google LLC (Mountain View, California, USA) in our online offer, which are stored on www.YouTube.com and can be played directly from our website. By simply visiting our website – before you click on an embedded video – YouTube processes personal data by setting cookies. Thus, the information is transmitted that you have called up a corresponding sub-page of our website. Please refer to the section on Social media plugins and other services. In addition, log files are transmitted. The following data are to be mentioned: 

The following data are to be mentioned:

• Device information
• IP address
• Referrer URL
• Videos viewed

This is done regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of personalized advertising, market research and/or needs-based design of its own website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

The data transmitted to Google LLC via the YouTube video is predominantly stored on servers managed by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) in the European Economic Area (EEA). 

For more information on the purpose and scope of data collection and processing by YouTube, please refer to Google’s privacy policy. There you will also find further information about your rights and settings options to protect your privacy:
https://www.google.de/intl/de/policies/privacy.