Privacy Policy

Information in accordance with Art. 13 of the German General Data Protection Regulation (Datenschutzgesetzverordnung - DSGVO):

Name and contact details of the controller:
DC Aviation GmbH
Flughafen Stuttgart 1
70629 Stuttgart

www.dc-aviation.com
privacy @dc-aviation.com

Represented by: Marc Ambrosius (Managing Director) and Svenja Wortmann (Managing Director)

Contact details of the data protection officer:
dsg Datenschutz GmbH
Tobias Marx
Bahnhofstraße 30
86150 Augsburg
www.dsg-ulm.de
Contact form
 

Contact Form

Data Collection and Processing When Using the Contact Form

The utilisation of the contact form entails the collection of personal data by the institution, encompassing the name, email address and the content of the message. This collection is undertaken solely to the extent and within the limits of the personal data provided by the individual. The objective of data processing is to establish contact. By submitting a message, the user consents to the processing of the data provided. The processing of personal data is based on consent, as outlined in Article 6(1)(a) of the General Data Protection Regulation (GDPR). Consent may be revoked at any time by notifying the relevant parties; this does not affect the lawfulness of processing carried out on the basis of consent prior to revocation. The email address provided will be used exclusively for the purpose of processing the inquiry. In the absence of consent for further processing and use, the data will be deleted.

 

Links to Other Websites

From our website, you can access other websites that collaborate with DC Aviation. Despite careful review of the content, we assume no liability for the content of external links. The operators of the linked sites are solely responsible for their content.

 

Privacy Notice for the Application Process

We process applicant data solely for the purpose of and within the scope of the application process in accordance with legal requirements. The processing of applicant data is carried out to fulfill our (pre)contractual obligations within the scope of the application process pursuant to Article 6(1)(b) of the GDPR and Article 6(1)(f) of the GDPR, provided that data processing becomes necessary for us, for example, in the context of legal proceedings (in Germany, § 26 of the Federal Data Protection Act [BDSG] also applies).

The application process requires that applicants provide us with their application data. The necessary applicant data is indicated, if we provide an online form; otherwise, it is specified in the job descriptions and generally includes personal information, mailing and contact addresses and the documents accompanying the application, such as a cover letter, resume and certificates. In addition, applicants may voluntarily provide us with additional information. 

By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the manner and scope set forth in this Privacy Policy. 

To the extent that special categories of personal data within the meaning of Article 9(1) of the GDPR are voluntarily provided as part of the application process, their processing is additionally carried out in accordance with Article 9(2)(b) of the GDPR (e.g., health data, such as severe disability status or ethnic origin). To the extent that special categories of personal data as defined in Article 9(1) of the GDPR are requested from applicants as part of the application process, their processing is additionally carried out in accordance with Article 9(2)(a) of the GDPR (e.g., health data, if such data is necessary for the performance of the job).

If available, applicants may submit their applications to us via an online form on our website. The data is transmitted to us in encrypted form using state-of-the-art technology. Applicants may also submit their applications to us via email. However, please note that emails are generally not sent in encrypted form and applicants must ensure encryption themselves. We therefore cannot assume any responsibility for the transmission of the application between the sender and our server and therefore recommend using an online form or sending the application by mail. Instead of applying via the online form or email, applicants still have the option of sending their application to us by mail.

The data provided by applicants may be further processed by us for the purposes of the employment relationship in the event of a successful application. Otherwise, if the application for a job opening is unsuccessful, the applicants’ data will be deleted. Applicants’ data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. 

Subject to a valid revocation by the applicant, the data will be deleted after a period of six months has elapsed, so that we can respond to any follow-up inquiries regarding the application and fulfill our obligations to provide evidence under the Equal Treatment Act.

 

Information Obligation Pursuant to Article 13 of the GDPR

In accordance with Article 13 of the GDPR, we hereby inform you of the legal bases for our data processing.

The following categories of data are processed:

a) Customer data for the purpose of customer management

b) Supplier data for the purpose of supplier management

c) Personnel data for the purpose of employee management

d) Job applicants for the purpose of employee recruitment

e) Other data for the purpose of maintaining business operations

The legal basis for the necessary processing to perform a task carried out in the public interest or in the exercise of official authority vested in the controller is described in Article 6(1)(e) of the GDPR.

The legal basis for processing to fulfill our services, carry out contractual measures and respond to inquiries is Article 6(1)(b) of the GDPR;

The legal basis for obtaining consent is Article 6(1)(a) and Article 7 of the GDPR;

The legal basis for processing to fulfill our legal obligations is set forth in Article 6(1)(c) of the GDPR;

In cases where the vital interests of the data subjects or of another natural person require the processing of personal data, Article 6(1)(f) of the GDPR applies.

The processing of data for purposes other than those for which it was collected is governed by the provisions of Article 6(4) of the GDPR.

 

Your Rights

(1) You have the following rights vis-à-vis a controller with regard to your personal data:

  • Right of access:
    In particular, you have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned retention period or the criteria for determining the retention period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the source of your data if it was not collected by us from you, the existence of automated decision-making, including profiling and, where applicable, meaningful information about the logic involved, the significance of such processing for you and the intended effects of such processing, as well as your right to be informed of the safeguards in place pursuant to Article 46 of the GDPR when your data is transferred to third countries; 
  • Right to rectification or erasure:
    You have the right to have inaccurate personal data concerning you rectified without delay and/or to have incomplete personal data stored by us completed; you have the right to request the erasure of your personal data if the conditions set forth in Article 17(1) of the GDPR are met. However, this right does not apply, in particular, if the processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims;
  • Right to restriction of processing:
    You have the right to request the restriction of the processing of your personal data while the accuracy of your data, which you have contested, is being verified; if you object to the erasure of your data due to unlawful processing and instead request the restriction of the processing of your data; if you need your data to assert, exercise, or defend legal claims, after we no longer need this data once the purpose has been fulfilled, or if you have objected on grounds related to your particular situation, as long as it has not yet been determined whether our legitimate grounds override yours;
  • Right to withdraw consent:
    If you have given consent to the processing of your data, you may withdraw it at any time. Such a withdrawal affects the lawfulness of the processing of your personal data after you have notified us of it. The lawfulness of the processing of your data up to the time of your withdrawal remains unaffected.
  • Right to data portability:
    You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another data controller, to the extent that this is technically feasible;

(2) You also have the right to lodge a complaint with the competent data protection supervisory authority regarding our processing of your personal data.

 

Objection to the Processing of Your Data

(1) To the extent that we base the processing of your personal data on a balancing of interests, you may object to such processing. This is the case, in particular, when the processing is not necessary for the performance of a contract with you, as we will explain in the following description of each function. If you exercise such an objection, we ask that you explain the reasons why we should not process your personal data in the manner we have been doing. In the event of your objection, we will review the situation and either cease or adjust the data processing, or explain to you our compelling legitimate grounds on the basis of which we will continue the processing.

(2) Of course, you may object at any time to the processing of your personal data for the purposes of advertising and data analysis. The best way to exercise your right to object to advertising is by contacting us using the contact information provided above.

 

Processing of Personal Data When Visiting Our Website

When you use the website for informational purposes—that is, simply browsing without registering or otherwise providing us with information—we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure its stability and security and must therefore be processed by us. The legal basis is Article 6(1)(f) of the GDPR, namely our legitimate interest in the secure and proper provision of our website:

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (page visited)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Previously visited page
  • Browser
  • Operating system and device type
  • Language and version of the browser software

The data is generally deleted as soon as the need for processing no longer exists. IP addresses in the logs are anonymized. The data is typically deleted within 7 days, but no later than 2 months. 

 

Additional Features and Services on Our Website

(1) In addition to the purely informational use of our website, we offer various services that you may use if interested, which are described in more detail below. To do so, you generally must provide additional personal data, or we process such additional data that we use to perform the respective services. The aforementioned principles regarding data processing apply to all data processing purposes described here.

(2) In some cases, we use external service providers to process your data. These providers are carefully selected by us, are bound by our instructions and are regularly monitored.

(3) Your personal data will not be disclosed to third parties—beyond the service providers and partners we use and have named.

In certain circumstances, we may also process your personal data to assert and enforce our rights or claims, or to defend ourselves against legal claims brought against us. The same applies if the disclosure is necessary and required by law to prevent or prosecute criminal offenses.

The legal basis for this processing is Article 17(3)(e) of the GDPR and Article 6(1), first sentence, (f) of the GDPR. Our overriding legitimate interest lies in the enforcement and defense of our legal rights.

(4) Below, we list the categories of recipients of your data, provided that such data may be disclosed in accordance with the aforementioned provisions. These include, in particular:

  • IT service providers who assist us in providing our services and in the administration and maintenance of our IT systems
  • Payment service providers/banks
  • Debt collection agencies and legal advisors in the event of asserting or defending against claims
  • Public authorities and institutions, to the extent that we are legally obligated to do so or you have instructed us to do so.

 

(5) If personal data is sent to external servers in a third country, we have concluded agreements on order processing with the respective processor, which offer guarantees that the requirements of data protection law are complied with.

Processing of your data in a third country will therefore only take place if the requirements of Articles 44 et seq. of the GDPR are met. In the event of explicit consent to the transfer of personal data to third countries, the data processing is based on Article 49(1)(a) of the GDPR. Alternatively, the processing of your data may be based on specific safeguards or an EU adequacy decision, such as the Data Privacy Framework (DPF), or—if no adequacy decision exists for the third country—through the adoption of EU Standard Data Protection Clauses, possibly in conjunction with additional safeguards to ensure compliance with the European Union’s level of data protection.


Processing of Data from Your Devices (“Cookie Policy”)

(1) In addition to the data mentioned above, when you use our website, we employ technical tools for various functions, in particular cookies, which may be stored on your device. When you visit our website and at any time thereafter, you have the option to either generally allow cookies or to select which specific additional functions you wish to enable. You can make changes to your browser settings. Below, we first describe cookies from a technical perspective (2) before discussing the technically necessary cookies we use (3). 

(2) Cookies are text files or information stored in a database on your hard drive and associated with the browser you are using, allowing the entity that sets the cookie to receive certain information. Cookies cannot run programs or transmit viruses to your computer; rather, they primarily serve to make the website faster and more user-friendly. This website uses the following types of cookies, the functionality and legal basis of which we will explain below:

  • Transient cookies: These, particularly session cookies, are automatically deleted when you close your browser or log out. They contain a so-called session ID. This allows various requests from your browser to be associated with the same session and your computer can be recognized when you return to our website. 
  • Persistent cookies: These are automatically deleted after a specified period, which varies depending on the cookie. You can view the cookies that have been set and their expiration dates at any time in your browser settings and delete the cookies manually. 

(3) Essential functions technically necessary for displaying the website: The technical structure of the website requires us to use certain technologies, in particular cookies. Without these technologies, our website cannot be displayed (correctly) or the support functions may not be available. These are generally transient cookies that are deleted at the end of your visit to the website, or at the latest when you close your browser. You cannot opt out of these cookies if you wish to use our website. The legal basis for this processing is Article 6(1)(f) of the GDPR.

You can find a detailed list of the cookies used, their purpose and retention period, as well as your options, in our consent tool: www.cookiebot.com/us

 

Consent Management with Cookiebot

We use the consent management tool “Cookiebot” on our website. The provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).

Cookiebot enables us to obtain, manage and document valid consent from website visitors under data protection law for specific data processing activities—in particular, the use of cookies and similar technologies. In this way, we comply with our legal obligations under Section 25 of the TDDDG (formerly TTDSG) and the GDPR to obtain consent before using technologies that are not strictly necessary.

For this purpose, when you visit our website, a cookie (“CookieConsent”) is stored in your browser, which records the consents you have granted or any revocations thereof. The collected data is stored until you request that we delete it, delete the CookieConsent cookie yourself, or the purpose for storing the data no longer applies. Mandatory legal retention requirements remain unaffected by this. The CookieConsent cookie remains on your device for a period of twelve months.

To verify consent, Cookiebot processes the following data in particular:

  • Your IP address in anonymized form
  • Date and time of consent
  • Information about your browser (user agent)
  • The URL from which consent was submitted
  • An anonymous, random and encrypted key value
  • The status of your consent (proof of consent)

The legal basis for the use of Cookiebot is Article 6(1)(c) of the GDPR, as we are legally required to be able to demonstrate that consent has been given (duty to provide evidence pursuant to Article 7(1) of the GDPR). In addition, there is a legitimate interest pursuant to Article 6(1)(f) of the GDPR in ensuring that consent management is legally compliant and verifiable. The storage of the CookieConsent cookie is strictly necessary pursuant to Section 25(2)(2) of the TDDDG to provide the service you have expressly requested (management of your consents). To the extent that consent for further processing is obtained via Cookiebot, this is done exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG; consent may be revoked at any time with future effect.

We have entered into a data processing agreement with the provider in accordance with Article 28 of the GDPR. This agreement, which is required under data protection law, ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Usercentrics A/S is headquartered in Denmark and is therefore located within the European Union. According to the provider, data is generally not transferred to a third country.

You can revoke or modify your consent at any time with future effect. To do so, open the cookie settings via the Cookiebot icon at the edge of the screen / click here: Cookie Settings. Alternatively, you can delete the CookieConsent cookie from your browser.

For more information on Cookiebot’s privacy policy, visit: https://www.cookiebot.com/de/privacy-policy/

 

Profiling/Automated Decision-Making

We do not create a profile of you. No purely automated decision-making process within the meaning of Art. 22 of the GDPR takes place as part of our data processing activities.

 

External Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider(s). This may primarily include IP addresses, contact requests, metadata and communication data, contractual data, contact information, names, website visits and other data generated through a website.

External hosting is carried out in our legitimate interest in ensuring the secure, fast and efficient provision of our online services by a professional provider (Article 6(1)(f) of the GDPR). If consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, to the extent that the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

Our hosting provider(s) will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

iWelt GmbH + Co. KG
Mainparkring 4
97246 Eibelstadt
Germany

We have entered into a Data Processing Agreement (DPA) for the use of the aforementioned service. This is a contract required under data protection law that ensures the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

 

Google Tag Manager

(1) We use the Google Tag Manager service provided by Google. “Google” is a group of companies consisting of Google Ireland Ltd. (the service provider), Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; and other affiliates of Google LLC. Google Tag Manager is a support service and processes personal data itself only for technically necessary purposes. Google Tag Manager ensures that other components are loaded, which may in turn collect data. Google Tag Manager does not access this data. For more information about Google Tag Manager, please see Google’s Privacy Policy at https://www.google.com/intl/de/policies/privacy/.

(2) The purpose of the processing is to trigger, control and manage additional services on our website. The legal basis for the processing is our overriding legitimate interest, namely Article 6(1)(f) of the GDPR. Our legitimate interest lies in the uniform and proper integration of cookies and similar technologies, as well as in legally compliant consent management. In the course of use, it cannot be ruled out that data may be transferred to a country outside the European Union (specifically the United States). The transfer of data to the United States is based on Article 45 of the GDPR in conjunction with the European Commission’s Adequacy Decision C(2023) 4745, as the data recipient has committed to complying with the data processing principles of the Data Privacy Framework (DPF) and is also certified in accordance with the DPF. We have entered into a data processing agreement with the provider.

 

Google reCAPTCHA

We use the Google reCAPTCHA service on our website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to protect our online forms (e.g., charter request and registration forms) from misuse by automated programs (bots). In particular, IP addresses, session duration and keyboard interactions, any existing reCAPTCHA cookies, as well as and browser information are collected and analyzed for the purpose of and abuse detection. 

We remain the data controller for this processing within the meaning of the GDPR; Google processes the personal data generated in this context as a data processor exclusively in accordance with our documented instructions and on the basis of the Data Processing Addendum concluded with Google pursuant to Article 28 of the GDPR. The legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest lies in protecting our systems and services from spam, misuse and other automated attacks, as well as in ensuring the availability and integrity of our online services. 

The data is processed by Google as part of the reCAPTCHA service and may also be processed on servers in third countries, particularly in the United States. According to Google’s own statements, the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses of the European Commission are used as appropriate safeguards for such transfers. For more information on data processing in connection with reCAPTCHA and the safeguards implemented by Google, please refer to the current Service-Specific Terms and Google’s Cloud Data Processing Addendum.

 

Privacy Policy Regarding the Use of Google Analytics (with Anonymization Function)

We, the website operator, have integrated Google Analytics (with anonymization feature) into our website. Google Analytics is a web analytics service. Web analytics refers to the collection, gathering and evaluation of data regarding the behavior of website visitors. Among other things, a web analytics service collects data on which website a data subject came from to access a website (known as a “referrer”), which subpages of the website were accessed and how often and for how long a subpage was viewed. Web analytics is primarily used to optimize a website and to conduct a cost-benefit analysis of online advertising. 

The operator of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The IP address of the data subject’s Internet connection is truncated and anonymized by Google if access to our website occurs from a member state of the European Union or from another signatory state to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze visitor traffic on our website. Google uses the data and information collected, among other things, to evaluate the use of our website, to compile online reports for us that illustrate activity on our website and to provide other services related to the use of our website.

Google Analytics places a cookie on the data subject’s computer system. The placement of this cookie enables Google to analyze the use of our website. Each time a user accesses one of the individual pages of this website—which is operated by the data controller and on which a Google Analytics component has been integrated—the web browser on the data subject’s computer is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains personal data, such as the data subject’s IP address, which Google uses, among other things, to track the origin of visitors and clicks and, consequently, to facilitate commission settlements.

Cookies are used to store personal information, such as the time of access, the location from which access originated and the frequency of the data subject’s visits to our website. Each time you visit our website, this personal data—including the IP address of the internet connection used by the data subject—is transmitted to Google in Ireland. This personal data is stored by Google Ireland. Google may, under certain circumstances, disclose this personal data collected through the technical process to third parties.

The legal basis for the processing is Article 6(1)(a) of the GDPR, namely your explicit consent. 

The data subject may prevent the setting of cookies by our website at any time by adjusting the settings of the web browser being used, thereby permanently objecting to the setting of cookies. Such a setting in the web browser would also prevent Google from setting a cookie on the data subject’s computer system. In addition, a cookie already set by Google Analytics can be deleted at any time via the web browser or other software programs.

Furthermore, the data subject has the option to object to and prevent the collection by Google Analytics of data generated in connection with the use of this website, as well as the processing of such data by Google. To do so, the data subject must download and install a browser add-on from the link tools.google.com/dlpage/gaoptout. This browser add-on uses JavaScript to instruct Google Analytics that no data or information regarding visits to websites may be transmitted to Google Analytics. Google considers the installation of the browser add-on to be an objection. If the data subject’s computer system is subsequently deleted, formatted, or reinstalled, the data subject must reinstall the browser add-on to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person within their control, it is possible to reinstall or reactivate the browser add-on.

Further information and Google’s applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at this link:www.google.com/intl/de_de/analytics .

 

Google Ads

(1) We also use the Google Ads service provided by Google to draw attention to our offerings through advertisements. If you access our website via a Google ad, Google Ads will store a cookie on your device. The legal basis for the processing of your data is Article 6(1)(a) of the GDPR; therefore, this integration takes place only with your explicit consent.

(2) The advertisements are delivered by Google via so-called “ad servers.” To this end, we and other websites use so-called ad server cookies, which allow us to measure certain performance metrics, such as the number of times ads are displayed or the number of clicks by users. Through the Google Ads cookies stored on our website, we can obtain information about the success of our advertising campaigns. These cookies are not intended to identify you personally. The following metrics are typically stored for this cookie: the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (an indicator that a user no longer wishes to be targeted).

(3) The cookies set by Google enable Google to recognize your web browser. If a user visits certain pages on an Ads customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can determine that the user clicked on the ad and was redirected to that page. Each Ads customer is assigned a different cookie, so the cookies cannot be tracked across the websites of other Ads customers. By integrating Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or are not logged in, it is possible that Google may determine and store your IP address.

(4) Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s server. We ourselves do not independently collect personal data in connection with the aforementioned advertising measures, but merely provide Google with the means to collect such data. We only receive statistical reports from Google that show us which ads were clicked, how often and at what prices. We do not receive any further data resulting from the use of these advertising tools; in particular, we cannot identify users based on this information.

(5) You may revoke your consent at any time without affecting the lawfulness of the processing that took place prior to the revocation. The easiest way to withdraw your consent is via our Consent Manager or using the following options: a) by adjusting your browser settings accordingly; in particular, blocking third-party cookies will prevent you from receiving ads from third-party providers; b) by configuring your browser to block cookies from the domain “http://www.googleadservices.com,” https://www.google.de/settings/ads, although this setting will be deleted when you clear your cookies; c) by disabling interest-based ads from providers participating in the “About Ads” self-regulatory campaign via the link https://www.aboutads.info/choices, although this setting will be deleted when you clear your cookies; d) by permanently disabling this feature in your Firefox, Internet Explorer, or Google Chrome browsers via the link https://www.google.com/settings/ads/plugin.

(6) For more information on data protection at Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, please visit: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html.

 

Google Conversion Tracking

(1) We use Google Ads with the additional “Google Conversion Tracking” feature. This is a method that allows us to evaluate and measure the success of our advertising campaigns. To do this, the ads are tagged with a technical identifier, such as an ID, which allows us to determine how a user interacts after clicking on the ads and whether one of our services is actually used. This provides us with statistical information about the total number of viewers of our ads, which ads are particularly popular and, where applicable, further information about the results of the ad.

(2) The legal basis for the processing of your data in this regard is also Article 6(1)(a) of the GDPR; the integration takes place only with your express consent. You can disable the conversion tracking feature or stop using it in the same way as described above for Google Ads.

 

Google Remarketing

(1) We use Google Ads with the additional feature “Google Remarketing.” This feature allows us to create ads based on existing information about you and to target you again as you continue to browse the internet. This is done using cookies set when you visit our websites, through which Google tracks your browsing behavior across various websites and analyzes it in a pseudonymized manner. According to Google, the data collected as part of remarketing is not combined with your personal data that may be stored by Google.

(2) The legal basis for the processing of your data is Art. 6(1)(a) of the GDPR; this feature is enabled only with your express consent. You can disable the remarketing feature or stop using it in the same way as described above for Google Ads.

 

Microsoft Advertising

We use the “Microsoft Advertising” service on our website, provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter referred to as “Microsoft”).

The legal basis for the use of this service is Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, i.e., your explicit consent. 

The Microsoft Advertising service collects and stores data and uses it to create pseudonymous user profiles. With the help of the Bing Ads service—which is part of Microsoft Advertising—we are able to track whether a user visits our website by clicking on a Bing Ads ad. If you arrive at our website via such an ad, a cookie is set on your device. If you arrived at our website by clicking on a BingAds ad, a corresponding cookie is set on your device. 

The so-called Microsoft Advertising UET tag is also implemented on our website. The Microsoft Advertising UET tag is a piece of code integrated into our website that, in conjunction with the cookie set when you access our site via a Bing Ads ad, stores additional non-personally identifiable data about the use of our website. Among other things, this makes it possible to measure the length of time spent on our website as well as the sections visited.  Furthermore, this allows us to identify which Bing Ads ad directed users to our website. Your IP address is collected in encrypted form. The cookie also collects a so-called Global UID (Globally Unique Identifier), which is assigned to your browser. Alternatively, or in addition, the cookie collects a user ID that can be linked to your Microsoft account, if you use one.

The information collected as described above is transmitted to Microsoft servers, which may be located in the United States, among other places. It is stored there for a maximum of 180 days. By disabling cookies through the appropriate settings in your web browser, you can prevent the cookie from being set and data from being collected. If you disable cookies in your web browser altogether, you may not be able to use our website to its full extent.

In addition, Microsoft can use cross-device tracking to track your usage behavior across multiple devices you use. This allows Microsoft to display personalized ads on or within Microsoft websites and/or apps. You can disable cross-device tracking for Microsoft at http://choice.microsoft.com/de-de/opt-out.

You can revoke your consent at any time for the future using our consent tool. 

For more information on data processing by Microsoft and the provider’s privacy policy, please visit: https://www.microsoft.com/de-de/privacy/privacystatement 

 

YouTube with Enhanced Privacy

(1) We have embedded YouTube videos in our online offering that are stored on YouTube.com—the operator of the site is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland—and can be played directly from our website. The videos are embedded in “enhanced privacy mode,” which means that no data about you as a user is transmitted to YouTube unless you play the videos. Embedding in this so-called enhanced privacy mode is done via the domain “youtube-nocookie.com.” At the location of the video, you will see only a placeholder provided by us. Only when you explicitly play the video will your browser establish a connection to YouTube’s servers and load the video.

Due to technical requirements, this authorization results in your IP address being transmitted to YouTube, as this is the only way the server can determine the address and format in which the content should be delivered. In addition, information about your browser and your device, the page you have visited and details regarding the video playback may be transmitted and, in enhanced privacy mode, stored on your device in the form of non-personalized identifiers. If you are signed in to a Google account at the same time, YouTube can associate the playback with your account; you can prevent this by signing out of your Google account before playing the video.

(2) When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the basic data mentioned above, such as your IP address and timestamp, are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish for this data to be associated with your YouTube profile, you must log out before clicking the button. YouTube processes your data (even for users who are not logged in) as usage profiles and uses it for market research, targeted advertising, the design of its website and/or to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube.

(3) The purpose of this integration is to display video content on our pages in an appealing and bandwidth-efficient manner without having to host the video files ourselves. The legal basis for the processing of personal data associated with video playback is exclusively your consent pursuant to Article 6(1)(a) of the GDPR. For the storage of information on your end device and access to information already stored there, we rely on your consent pursuant to Section 25(1) of the German Telemedia Act (TDDDG), which is granted on the basis of clear and comprehensive information. You grant your consent either directly by playing the video or via our consent management tool.

 The information collected is processed on Google’s servers, including those in the United States. In such cases, the provider has submitted to the EU-U.S. Privacy Framework.

(4) For more information on the purpose and scope of data collection and its processing by YouTube, please refer to the privacy policy. There you will also find further information about your rights and settings options for protecting your privacy: www.google.de/intl/de/policies/privacy . This link also provides information on additional tools loaded by YouTube itself, such as gstatic, YouTube Image CDN, Google APIs and Google Web Fonts.

(5) You may withdraw the consent you have provided at any time without affecting the lawfulness of the processing carried out prior to the withdrawal; withdrawing consent is just as easy as giving it (Art. 7(3) GDPR). After withdrawal, the videos will once again be displayed only as placeholders.

 

Our Social Media Presence

(1) We maintain accounts on various social media platforms. We operate these accounts with the following providers; you can view their respective privacy policies via the corresponding links: 

(2) We rely on the technical platform and services of the providers for these information services. Please note that you use our social media profiles and their features at your own risk. This applies in particular to the use of interactive features (e.g., commenting, sharing, rating). When you visit our social media pages, the providers of the social media platforms collect, among other things, your IP address and other information stored on your device in the form of cookies. This information is used to provide us, as the account operators, with statistical information about interactions with us.

(3) The data processed about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the United States. The information collected is stored on the providers’ servers, including those outside Europe. In such cases, the provider has submitted to the EU-U.S. Privacy Framework. If the provider is not certified, we have agreed to so-called standard data protection clauses, the purpose of which is to ensure an adequate level of data protection in the third country. We do not know how the social media platforms use the data from your visit to our account and your interaction with our posts for their own purposes, how long this data is stored, or whether data is shared with third parties. Data processing may vary depending on whether you are registered and logged in to the social network or are visiting the site as an unregistered and/or logged-out user. When you access a post or the account, the IP address assigned to your device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your device can be used to track your activity on the network. Through buttons embedded in websites, the platforms can track your visits to these websites and associate them with your respective profile. Based on this data, content or advertising can be tailored to you. If you wish to avoid this, you should log out or disable the “stay logged in” feature, delete the cookies stored on your device and restart your browser.

(4) As the provider of this information service, we also process only those data resulting from your use of our service that you provide to us and that require interaction. For example, if you ask a question that we can only answer via email, we will store your information in accordance with the general principles of our data processing, as described in this Privacy Policy. The legal basis for processing your data on the social media platform is Article 6(1)(f) of the GDPR.

(5) To exercise your rights as a data subject, you may contact either us or the provider of the social media platform. If one party is not responsible for responding or must obtain the information from the other party, we or the provider will forward your request to the respective partner. Please contact the operator of the social media platform directly with any questions regarding profiling or the processing of your data when using the website. If you have questions regarding the processing of your interactions with us on our site, please write to us using the contact information provided above.

(6) The providers describe in their privacy policies (see the link in the table above) what information the social media platform receives and how it is used. There you will also find information on how to contact them and on settings for advertisements. You can also find more information about social networks and how to protect your data at www.youngdata.de.

 

Cookies