Privacy Policy

1. Privacy at a Glance

General Information
The following provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any data that can be used to identify you personally. Detailed information on data protection can be found in our privacy policy below.

Data Collection on This Website
Who is responsible for the data collection on this website?
Data processing on this website is carried out by the website operator. Their contact information can be found in the website’s imprint.

How do we collect your data?
Your data is collected when you provide it to us, for example, by filling out a contact form. Other data is automatically collected by our IT systems upon your consent when you visit the website. This includes technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you visit the website.

What do we use your data for?
Some data is collected to ensure the proper functioning of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right to receive information about the origin, recipients, and purpose of your stored personal data at any time, free of charge. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time with effect for the future. Additionally, you have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to file a complaint with the competent supervisory authority.

For further questions regarding data protection, you can contact us at any time using the address provided in the imprint.

Analysis Tools and Third-Party Tools
When visiting this website, your browsing behavior may be statistically analyzed, mainly using analysis programs. Detailed information on these analysis programs can be found in the following privacy policy.

2. Hosting and Content Delivery Networks (CDN)

External Hosting
This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host’s servers. This may include IP addresses, contact inquiries, meta and communication data, contract data, contact details, names, website accesses, and other data generated through a website.

The use of the host is for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 (1) lit. f GDPR).

Our host will process your data only to the extent necessary to fulfill its performance obligations and to follow our instructions regarding this data.

Conclusion of a Data Processing Agreement
To ensure data protection-compliant processing, we have concluded a data processing agreement with our host.

ALL INKL (Neue Medien Münnich)
We use the service „All Inkl.“ The provider is ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, D-02742 Friedersdorf (hereinafter referred to as „All Inkl“).

All Inkl provides web hosting services, domain registration, and server solutions. Technically, the transfer of information between your browser and our website is conducted through the servers of All Inkl. This enables All Inkl to analyze data traffic between your browser and our website and act as a filter between our servers and potentially malicious traffic from the internet. All Inkl may use cookies or other technologies to recognize internet users; however, these are used solely for the purposes described here.

All Inkl is a certified participant of the „EU-US Privacy Shield Framework.“ All Inkl has committed to handling all personal data received from EU member states in compliance with the „Privacy Shield Framework.“

The use of All Inkl is based on our legitimate interest in the most error-free and secure provision of our web offering (Art. 6 (1) lit. f GDPR).

Further information on security and data protection at All Inkl can be found here: https://all-inkl.com/datenschutz.

Conclusion of a Data Processing Agreement
To ensure data protection-compliant processing, we have concluded a data processing agreement with All Inkl.

3. General Information and Mandatory Notices

Data Protection
The operators of these pages take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data refers to data that can personally identify you. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this happens.

Please note that data transmission over the internet (e.g., when communicating via email) can have security vulnerabilities. Complete protection of data from access by third parties is not possible.

Notice Regarding the Responsible Party
The responsible party for data processing on this website is:

Name: Michael Lopes
Address: Illumina Residences Manilla
Phone: +63 927 619 5269
Email: contact@invasup.com

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of data processing carried out before the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING AT ANY TIME; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of a violation of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, their place of work, or the place of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to Data Portability
You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract in a common, machine-readable format either to yourself or to a third party. If you request the direct transfer of the data to another responsible party, this will only be done to the extent technically feasible.

SSL or TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. An encrypted connection can be recognized by the browser’s address bar changing from „http://“ to „https://“ and the lock icon appearing in your browser bar.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, Deletion, and Correction
Within the scope of applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient, and the purpose of data processing and, if applicable, a right to correction or deletion of this data at any time. For further questions on personal data, you can contact us at any time using the address provided in the imprint.

Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time using the address provided in the imprint for this purpose. The right to restriction of processing exists in the following cases:

• If you contest the accuracy of your personal data stored by us, we generally need time to verify this. During the verification period, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need it to establish, exercise, or defend legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
• If you have lodged an objection pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it is not clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may only be processed—apart from being stored—with your consent or for the establishment, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.

Objection to Promotional Emails
We hereby object to the use of contact data published within the framework of the legal notice obligation to send unsolicited advertising and informational materials. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam emails.

4. Data Collection on This Website

Cookies
Our websites use „cookies.“ Cookies are small text files that do not harm your device. They are either temporarily stored for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit. Persistent cookies remain on your device until you delete them or your web browser deletes them automatically.

Some cookies may also be stored by third-party companies when you visit our website (third-party cookies). These allow us or you to use certain services provided by the third party (e.g., cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary as certain website functions would not work without them (e.g., the shopping cart function or video display). Other cookies are used to analyze user behavior or display advertising.

Cookies required to carry out the electronic communication process (necessary cookies), provide certain functions you desire (functional cookies, e.g., for the shopping cart function), or optimize the website (e.g., cookies to measure the web audience) are stored based on Art. 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of its services. If consent to store cookies has been requested, the respective cookies are stored exclusively based on this consent (Art. 6(1)(a) GDPR); consent can be revoked at any time.

You can set your browser to inform you about the setting of cookies, to allow cookies only in individual cases, to exclude cookies for specific cases or in general, and to activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

If cookies from third-party companies or for analysis purposes are used, we will inform you separately within the framework of this privacy policy and, if necessary, request your consent.

Cookie Consent with Complianz
Our website uses the „Complianz GDPR/CCPA Cookie Consent“ technology to obtain your consent to store certain cookies in your browser and to document this in compliance with data protection regulations. The provider of this technology is Complianz B.V., Atoomweg 6b, 9743 AK Groningen, Netherlands (hereinafter Complianz).

When you enter our website, a Complianz cookie is stored in your browser, in which the consents you have given or the revocation of these consents are stored.

The collected data will be stored until you request us to delete it, delete the Complianz cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected. For details on Complianz data processing, please visit https://complianz.io/privacy-statement.

The use of Complianz cookie consent technology is to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.

Further Information
For additional details, please refer to our cookie policy: https://invasup.org/cookie-policy-eu/.

5. Analytics Tools and Advertising

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, time spent on the site, operating systems used, and the user’s origin. Google may compile this data into a profile associated with the respective user or their device.

Google Analytics uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to and stored on a Google server in the USA.

The use of this analytics tool is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both their web offering and advertising. If a corresponding consent has been requested (e.g., consent to store cookies), the processing takes place exclusively on the basis of Art. 6 (1) lit. a GDPR; the consent can be revoked at any time.

IP Anonymization

We have activated the IP anonymization feature on this website. As a result, your IP address will be truncated by Google within the member states of the European Union or other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services relating to website and internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data.

Browser Plugin

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en

More information on how Google Analytics handles user data can be found in Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=en

Data Processing Agreement

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Retention Period

Data stored by Google on user and event level, which are linked to cookies, user IDs (e.g., User ID), or advertising IDs (e.g., DoubleClick cookies, Android advertising ID), are anonymized or deleted after 14 months. Details can be found here:
https://support.google.com/analytics/answer/7667196?hl=en

Google Ads

The website operator uses Google Ads, an online advertising program provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display advertisements on the Google search engine or on third-party websites when users enter specific search terms on Google (keyword targeting). Additionally, targeted ads can be displayed based on user data held by Google (e.g., location data and interests) (audience targeting). As website operators, we can evaluate this data quantitatively, for example, by analyzing which search terms led to the display of our advertisements and how many advertisements resulted in corresponding clicks.

The use of Google Ads is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the most effective marketing of its services or products.

Google Remarketing

This website uses the features of Google Analytics Remarketing. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Remarketing analyzes your behavior on our website (e.g., clicks on specific products) to categorize you into advertising target groups and then display appropriate advertising messages to you when you visit other online offerings (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Remarketing can be linked to Google’s cross-device capabilities. This allows for interest-based, personalized advertising messages based on your previous usage and browsing behavior on one device (e.g., mobile phone) to also appear on another device (e.g., tablet or PC).

If you have a Google account, you can opt-out of personalized advertising at the following link:
https://www.google.com/settings/ads/onweb/

The use of Google Remarketing is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the most effective marketing of its products. If consent has been requested, processing is based exclusively on Art. 6 (1) lit. a GDPR; consent can be revoked at any time.

Further information and the privacy policies of Google can be found at:
https://policies.google.com/technologies/ads

Audience Building with Customer Match

We use Customer Match from Google Remarketing for audience building. In this process, specific customer data (e.g., email addresses) from our customer lists are shared with Google. If the relevant customers are Google users and logged into their Google account, they will see suitable advertising messages within the Google network (e.g., on YouTube, Gmail, or in the search engine).

Google Conversion Tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Conversion Tracking, Google and we can determine whether a user has performed specific actions. For example, we can evaluate which buttons on our website are clicked how often and which products are viewed or purchased most frequently. This information is used to compile conversion statistics. We learn the total number of users who clicked on our advertisements and what actions they performed. We do not receive any information that can identify the user personally. Google uses cookies or similar recognition technologies for identification.

The use of Google Conversion Tracking is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and advertising. If consent has been requested, processing is based exclusively on Art. 6 (1) lit. a GDPR; consent can be revoked at any time.

Further information on Google Conversion Tracking can be found in Google’s privacy policy:
https://policies.google.com/privacy

Google DoubleClick

This website uses features of Google DoubleClick, provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland (hereafter “DoubleClick”).

DoubleClick is used to display interest-based advertisements throughout the Google advertising network. The advertisements can be tailored to the interests of the respective viewer using DoubleClick. For example, our advertisements can be displayed in Google search results or in banners associated with DoubleClick.

To display interest-relevant advertising, DoubleClick must recognize the respective viewer and associate them with their visited websites, clicks, and other information about user behavior. For this purpose, DoubleClick uses cookies or similar recognition technologies (e.g., device fingerprinting). The information collected is compiled into a pseudonymous user profile to display interest-related advertisements to the relevant user.

The use of Google DoubleClick is in the interest of targeted advertising measures. This constitutes a legitimate interest under Art. 6 (1) lit. f GDPR. If consent has been requested, processing is based exclusively on Art. 6 (1) lit. a GDPR; consent can be revoked at any time.

Further information on objection options against the advertisements displayed by Google can be found in the following links:
https://policies.google.com/technologies/ads
https://adssettings.google.com/authenticated

Facebook Pixel

This website uses the Facebook visitor action pixel for conversion measurement. The provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the collected data is also transferred to the USA and other third countries.

This allows the behavior of website visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook advertisement. This enables the effectiveness of Facebook advertisements for statistical and market research purposes to be evaluated and future advertising measures to be optimized.

The data collected is anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, Facebook stores and processes the data so that a connection to the respective user profile is possible and Facebook can use the data for its advertising purposes, in accordance with the Facebook Data Use Policy. This allows Facebook to display advertisements on Facebook pages as well as outside of Facebook. We, as the website operator, have no influence on this use of the data.

The use of Facebook Pixel is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in effective advertising measures, including social media. If consent has been requested, processing is based exclusively on Art. 6 (1) lit. a GDPR; consent can be revoked at any time.

Further information on protecting your privacy can be found in Facebook’s privacy policy:
https://facebook.com/about/privacy/

You can also deactivate the “Custom Audiences” remarketing function in the ad settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged into Facebook to do this.

If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance:
http://www.youronlinechoices.com

6. Newsletter

Newsletter Data

If you wish to subscribe to the newsletter offered on this website, we require your email address and information that allows us to verify that you are the owner of the provided email address and consent to receiving the newsletter. Further data is not collected or is only collected on a voluntary basis. We only use this data to send the requested information and do not share it with third parties.

The processing of the data entered into the newsletter signup form occurs exclusively on the basis of your consent (Art. 6 (1) lit. a GDPR). You can revoke your consent to the storage of data, the email address, and its use for sending the newsletter at any time, for example, through the „Unsubscribe“ link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe. Data stored for other purposes remains unaffected.

After you unsubscribe from the newsletter distribution list, your email address may be stored in a blacklist with us or the newsletter service provider to prevent future mailings. The data from the blacklist is only used for this purpose and is not merged with other data. This serves both your interest and our interest in complying with legal requirements for sending newsletters (legitimate interest under Art. 6 (1) lit. f GDPR). The storage in the blacklist is indefinite. You can object to the storage if your interests outweigh our legitimate interest.

ActiveCampaign

This website uses ActiveCampaign for sending newsletters. The provider is ActiveCampaign, Inc., 1 N Dearborn, 5th Floor, Chicago, Illinois 60602, USA.

ActiveCampaign is a service that helps organize and analyze newsletter distribution. The data you provide to subscribe to the newsletter is stored on ActiveCampaign servers in the USA.

If you do not want ActiveCampaign to analyze your data, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Additionally, you can unsubscribe directly on the website.

Data Analysis by ActiveCampaign

With the help of ActiveCampaign, it is possible for us to analyze our newsletter campaigns. For example, we can see whether a newsletter message was opened and which links were clicked, if any. This allows us to determine, among other things, which links were clicked the most.

Additionally, we can see whether certain pre-defined actions were performed after opening/clicking (conversion rate). For example, we can see whether you made a purchase after clicking on the newsletter.

ActiveCampaign also allows us to divide newsletter recipients into different categories (e.g., clustering). For example, newsletter recipients can be categorized by age, gender, or location. This allows us to tailor newsletters to the respective target groups better.

Detailed information about the features of ActiveCampaign can be found at:
https://www.activecampaign.com/email-marketing

The ActiveCampaign privacy policy can be found at:
https://www.activecampaign.com/privacy-policy

Privacy Shield Certification

ActiveCampaign is certified under the “EU-US Privacy Shield.” The Privacy Shield is an agreement between the European Union and the USA to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the Privacy Shield is committed to complying with these data protection standards. More details can be found at:
https://www.activecampaign.com/gdpr-updates/

Legal Basis

Data processing occurs based on your consent (Art. 6 (1) lit. a GDPR). You can revoke this consent at any time. The legality of the data processing already performed remains unaffected by the revocation.

Retention Period

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after unsubscribing. Data stored for other purposes remains unaffected.

After you unsubscribe from the newsletter distribution list, your email address may be stored in a blacklist with us or the newsletter service provider to prevent future mailings. The data from the blacklist is only used for this purpose and is not merged with other data. This serves both your interest and our interest in complying with legal requirements for sending newsletters (legitimate interest under Art. 6 (1) lit. f GDPR). The storage in the blacklist is indefinite. You can object to the storage if your interests outweigh our legitimate interest.

Data Processing Agreement

We have entered into a data processing agreement with ActiveCampaign and fully implement the strict requirements of the German data protection authorities when using ActiveCampaign.

7. Plugins and Tools

Vimeo without Tracking (Do-Not-Track)

This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages featuring Vimeo videos, a connection to the Vimeo servers is established. Here, the Vimeo server is informed about which of our pages you have visited. Additionally, Vimeo obtains your IP address. We have set Vimeo to not track your user activities and not set cookies.

The use of Vimeo is in the interest of presenting our online content in an appealing manner. This constitutes a legitimate interest pursuant to Art. 6 (1) lit. f GDPR. If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 (1) lit. a GDPR; the consent can be revoked at any time.

Vimeo is certified under the EU-US Privacy Shield, which ensures processing of personal data in the USA according to EU standards.
More information on how Vimeo handles user data can be found in Vimeo’s privacy policy: https://vimeo.com/privacy.

Google Web Fonts

This page uses so-called web fonts provided by Google for the uniform representation of fonts. When you call up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.

To do this, your browser must connect to Google’s servers. As a result, Google learns that this website was accessed via your IP address. The use of Google Web Fonts is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 (1) lit. a GDPR; the consent can be revoked at any time.

If your browser does not support web fonts, a standard font from your computer will be used.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=en.

Google reCAPTCHA

We use „Google reCAPTCHA“ (hereinafter „reCAPTCHA“) on this website. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to determine whether data entered on this website (e.g., in a contact form) is provided by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various data (e.g., IP address, time spent on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses take place completely in the background. Website visitors are not informed that such an analysis is taking place.

The data processing is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and spam. If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 (1) lit. a GDPR; the consent can be revoked at any time.

Further information about Google reCAPTCHA can be found in Google’s privacy policy and terms of use at the following links:
https://policies.google.com/privacy?hl=en
https://policies.google.com/terms?hl=en.

8. eCommerce and Payment Providers

Processing of Data (Customer and Contract Data)

We collect, process, and use personal data only insofar as it is necessary for establishing, content-related structuring, or modifying the legal relationship (inventory data). This is done based on Art. 6 (1) lit. b GDPR, which permits the processing of data to fulfill a contract or pre-contractual measures. Personal data concerning the use of this website (usage data) is collected, processed, and used only to the extent necessary to enable the user to use the service or to bill them.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data Transfer upon Contract Conclusion for Online Stores, Retailers, and Goods Shipping

We transfer personal data to third parties only if this is necessary within the framework of contract processing, for example, to the company entrusted with the delivery of goods or the financial institution commissioned with the payment processing.

Further transmission of the data will not take place or will only take place if you have expressly agreed to the transmission. Your data will not be passed on to third parties without your explicit consent, for example, for advertising purposes.

The basis for data processing is Art. 6 (1) lit. b GDPR, which permits the processing of data to fulfill a contract or pre-contractual measures.

9. Audio and Video Conferences

Data Processing

We use online conference tools for communication with our customers. The tools we use are listed below. When you communicate with us via video or audio conferencing over the internet, your personal data will be collected and processed by us and the respective tool provider.

The conference tools collect all the data you provide/use to utilize the tools (e.g., email address and/or phone number). The conference tools also process the duration of the conference, start and end times, the number of participants, and other „context information“ related to the communication process (metadata).

Additionally, the tool provider processes all the technical data required for online communication. This includes, but is not limited to, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speakers, and the type of connection.

If content is exchanged, uploaded, or otherwise provided within the tool, this content will also be stored on the tool provider’s servers. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during the use of the service.

Please note that we have no full influence on the data processing procedures of the tools used. Our options are significantly determined by the corporate policy of the respective provider. For further details on the data processing performed by the conference tools, please refer to the privacy policies of the tools used, which we have listed below.

Purpose and Legal Basis

The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 (1) sentence 1 lit. b GDPR). Furthermore, the use of these tools generally facilitates and speeds up communication with us or our company (legitimate interest as per Art. 6 (1) lit. f GDPR). Insofar as consent has been requested, the tools in question are used based on this consent; the consent can be revoked at any time with effect for the future.

Retention Period

The data directly collected by us via video and conference tools will be deleted from our systems as soon as you request us to delete it, revoke your consent to storage, or the purpose for data storage ceases to apply. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no control over the retention period of your data that is stored by the operators of the conference tools for their own purposes. For details, please refer to the privacy policies of the respective conference tools providers.

Conference Tools Used

Zoom
We use Zoom. The provider is Zoom Communications Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA.
Zoom is certified under the EU-US Privacy Shield. Details on data processing can be found in Zoom’s privacy policy: https://zoom.us/de-de/privacy.html.

Agreement on Data Processing
We have entered into a data processing agreement with Zoom and fully implement the strict requirements of the German data protection authorities when using Zoom.

Google Meet
We use Google Meet. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google is certified under the EU-US Privacy Shield. Details on data processing can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en.

Agreement on Data Processing

We have entered into a data processing agreement with Google Meet and fully implement the strict requirements of the German data protection authorities when using Google Meet.