Privacy Policy
1. Information on the Collection of Personal Data and Contact Details of the Responsible Party
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified. 1.2 The responsible party for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Sebastian Hertlein, Max-Zimmermann-Str. 5, 82319 Starnberg, Germany, E-mail: [entfernte E-Mail-Adresse]. The responsible party for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data. 1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.
2. Data Collection When Visiting Our Website
When using our website for purely informational purposes, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not shared or used in any other way. However, we reserve the right to retrospectively check the server log files if there are concrete indications of unlawful use.
3. Cookies
To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser the next time you visit (persistent cookies). If cookies are set, they collect and process certain user information, such as browser and location data as well as IP address values, to an individual extent. Persistent cookies are automatically deleted after a predefined period, which may vary depending on the cookie. If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either for the performance of the contract or in accordance with Art. 6 (1) (f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the website visit. We may work with advertising partners who help us to make our internet offer more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we cooperate with aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following paragraphs. Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
- Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/temporäres-zulassen-von-cookies-und-website-daten-in-microsoft-edge-597f04f2-c0ce-f08c-7c2b-541086362bd2
- Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
- Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
- Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
- Opera: http://help.opera.com/Windows/10.20/de/cookies.html
Please note that the functionality of our website may be limited if you do not accept cookies.
4. Contact
When contacting us (e.g., via contact form or e-mail), personal data is collected. The data collected in the case of using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your inquiry or for contacting you and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in answering your inquiry in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, then Art. 6 (1) (b) GDPR is an additional legal basis for the processing. Your data will be deleted after your inquiry has been processed. This is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and if there are no legal storage obligations to the contrary.
5. Data Processing for the Handling of Donations
For the processing of donations that you may send us, we usually process the following personal data: first and last name, address, e-mail address. Your data, together with the information on the amount of the donation, the donation frequency and the purpose of the donation, is stored by us and kept for ten years. Depending on the payment method selected, the above-mentioned data may also be forwarded to the payment service provider you have selected for the donation and processed there exclusively and only to the extent necessary to process your donation. The aforementioned processing is carried out on the basis of Art. 6 (1) (b) GDPR and serves exclusively to carry out your donation payment properly and to record it for accounting purposes. The storage for a period of 10 years is based on Art. 6 (1) (c) GDPR in conjunction with § 147 AO, according to which we are subject to a corresponding storage obligation for the business transaction.
6. Comment Function
Within the framework of the comment function on this website, in addition to your comment, information on the time of creation of the comment and the commentator name you have chosen is stored and published on this website. Furthermore, your IP address is logged and stored. This IP address is stored for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content by means of a comment submitted. We need your e-mail address to contact you in case a third party should object to your published content as being unlawful. The legal basis for the storage of your data is Art. 6 (1) (b) and (f) GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful. Subsequent comments can be subscribed to by you as a user. You will receive a confirmation e-mail to ensure that you are the owner of the specified e-mail address (double opt-in procedure). The legal basis for data processing in the case of subscribing to comments is Art. 6 (1) (a) GDPR. You can unsubscribe from ongoing comment subscriptions at any time with effect for the future; for more information on how to unsubscribe, please refer to the confirmation e-mail.
7. Web Analytics Services
Google Analytics 4 This website uses Google Analytics 4, a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which can be used to analyze the use of websites. When using Google Analytics 4, so-called “cookies” are used by default. Cookies are text files that are stored on your end device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your end device, shortened to the last digits, see below) is usually transmitted to a Google server and stored and processed there. This may also involve the transmission of information to the servers of Google LLC, headquartered in the USA, and further processing of the information there. When using Google Analytics 4, the IP address transmitted by your end device when using the website is always collected and processed only in anonymized form by default and automatically, so that a direct personal reference of the information collected is excluded. This automatic anonymization is carried out by Google shortening the IP address transmitted by your end device within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA) by the last digits. On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports (reports) on your website activities or your usage behavior, and to provide us with further services associated with your website use and internet use. The IP address transmitted by your end device and shortened within the framework of Google Analytics 4 is not merged with other data from Google. The data collected within the framework of the use of Google Analytics 4 is stored for 2 months and then deleted. Google Analytics 4 enables the creation of statistics with statements about the age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the inclusion of third-party information, using a special function called “demographic characteristics”. This makes it possible to determine and distinguish user groups of the website for the purpose of target group-optimized alignment of marketing measures. However, data collected via “demographic characteristics” cannot be assigned to any specific person and therefore also not to you personally. Data collected via the “demographic characteristics” function is stored for two months and then deleted. All of the above-described processing, in particular the setting of Google Analytics cookies for the storage and reading of information on the end device you use to use the website, only takes place if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without your consent, Google Analytics 4 will not be used during your use of the website. You can revoke your once given consent at any time with future effect. To exercise your revocation, please deactivate this service via the “Cookie-Consent-Tool” provided on the website. In connection with this website, the “UserIDs” function is also used as an extension of Google Analytics 4. By assigning individual UserIDs, we can have Google create cross-device reports (so-called “Cross Device Tracking”). This means that your usage behavior can also be analyzed cross-device if you have set up a personal account on this website by registering and are logged in to your personal account on different end devices with your corresponding login data, provided you have given your consent to the use of Google Analytics 4 in accordance with Art. 6 (1) (a) GDPR. The data collected in this way shows, among other things, on which end device you clicked on an ad for the first time and on which end device the corresponding conversion took place. In connection with this website, the Google Signals service is also used as an extension of Google Analytics 4. With Google Signals, we can have Google create cross-device reports (so-called “Cross Device Tracking”). If you have activated “personalized ads” in your Google Account settings and have linked your internet-enabled devices to your Google Account, Google can analyze your usage behavior cross-device and create database models based on it, provided you have given your consent to the use of Google Analytics 4 in accordance with Art. 6 (1) (a) GDPR. This takes into account the logins and device types of all website users who were logged in to a Google Account and performed a conversion. The data shows, among other things, on which end device you clicked on an ad for the first time and on which end device the corresponding conversion took place. We do not receive any personal data from Google, but only statistics created on the basis of Google Signals. You have the option of deactivating the “personalized ads” function in the settings of your Google Account and thus stopping the cross-device analysis in connection with Google Signals. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=en Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=en We have concluded a so-called order processing agreement with Google for our use of Google Analytics 4, which obliges Google to protect the data of our website users and not to pass it on to third parties. To ensure compliance with the European data protection level, even in the event of a possible transfer of data from the EU or the EEA to the USA and possible further processing there, Google relies on the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google. Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at the following link: https://policies.google.com/privacy?hl=de&gl=de Details on the processing initiated by Google Analytics 4 and on Google’s handling of website data can be found here: https://policies.google.com/technologies/partner-sites
8. Page Functionalities
8.1 Facebook Plugins with Shariff Solution This website uses so-called social plugins (“plugins”) of the social network Facebook, which is operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). To increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins, but only by using an HTML link in the page. This type of integration ensures that when you access a page on our website that contains such buttons, no connection is yet made to Facebook’s servers. If you click on the button, a new browser window opens and calls up the Facebook page where you can interact with the plugins there (if necessary after entering your login data). For the purpose and scope of data collection and the further processing and use of the data by Facebook as well as your rights and setting options for the protection of your privacy, please refer to the Facebook data protection information: https://www.facebook.com/policy.php
8.2 Instagram Plugin as Shariff Solution This website uses so-called social plugins (“plugins”) of the online service Instagram, which is operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (“Facebook”). To increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins, but only by using an HTML link in the page. This type of integration ensures that when you access a page on our website that contains such buttons, no connection is yet made to Instagram’s servers. If you click on the button, a new browser window opens and calls up the Instagram page where you can interact with the plugins there (if necessary after entering your login data). For the purpose and scope of data collection and the further processing and use of the data by Instagram as well as your rights and setting options for the protection of your privacy, please refer to the Instagram data protection information: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect
8.3 Use of YouTube Videos This website uses the YouTube embedding function to display and play videos from the provider “YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). The extended data protection mode is used here, which, according to the provider, only starts to store user information when the video(s) are played. When the playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behavior. According to information from “YouTube”, these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive behavior. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not wish to be associated with your YouTube profile, you must log out before activating the button. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. Within the framework of using YouTube, personal data may also be transmitted to the servers of Google LLC. in the USA. Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which may trigger further data processing processes without our influence. All of the above-described processing, in particular the reading of information on the end device used via the tracking pixel, is only carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without this consent, YouTube videos will not be used during your visit to the site. You can revoke your given consent at any time with future effect. To exercise your revocation, please deactivate this service in the “Cookie-Consent-Tool” provided on the website via alternative options communicated to you on the website. Further information on data protection at “YouTube” can be found in the YouTube Terms of Service at https://www.youtube.com/static?template=terms and in Google’s Privacy Policy at https://www.google.de/intl/de/policies/privacy
8.4 Spotify
This website includes plugins from the music service Spotify, offered by Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden (“Spotify”), for playing music tracks. You can recognize the Spotify plugins by the green logo on our site. An overview of the Spotify plugins can be found at: https://developer.spotify.com. When you visit this page, the plugin can establish a direct connection between your browser and Spotify’s servers, even if you do not have a Spotify account or are not logged into one. Spotify thereby receives the information that you have visited our page. The information collected in this way (including your IP address) is transmitted directly from your browser to a Spotify server and stored there. However, the information is not used to identify you personally and is not passed on to third parties. If you click the Spotify button while you are logged into your Spotify account, Spotify can assign the visit to our page to your user account. The data processing described above takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in the appealing acoustic design of visits to our website. If you do not want Spotify to be able to assign the visit to our page to your Spotify user account, please log out of your Spotify user account. You can also object to the loading of the Spotify plugin and thus the data processing operations described above for the future with add-ons for your browser, e.g. with the script blocker “NoScript” (http://noscript.net/). Further information on this can be found in Spotify’s privacy policy at https://www.spotify.com/de/legal/privacy-policy/. 8.5 Google reCAPTCHA On this website we also use the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is primarily used to distinguish whether an entry is made by a natural person or abusively by machine and automated processing. The service includes the transmission of the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google and takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in determining individual responsibility on the Internet and avoiding misuse and spam. As part of the use of Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC. in the USA. You can find further information on Google reCAPTCHA and Google’s privacy policy at: https://www.google.com/intl/de/policies/privacy/ If legally required, we have obtained your consent to the aforementioned processing of your data in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your granted consent at any time with effect for the future. To exercise your revocation, please follow the aforementioned option for making an objection.
9) Tools and Other
Cookie Consent Tool This website uses a so-called “cookie consent tool” to obtain effective user consents for cookies subject to consent and cookie-based applications. The “cookie consent tool” is displayed to users when they access the page in the form of an interactive user interface, on which consents for certain cookies and/or cookie-based applications can be given by setting check marks. Through the use of the tool, all cookies/services subject to consent are only loaded when the respective user gives corresponding consents by setting check marks. This ensures that such cookies are only set on the respective user’s end device in the event of consent being given. The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this process. If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website. A further legal basis for processing is also Art. 6 Para. 1 lit. c GDPR. As the responsible party, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user’s consent. Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.
10) Rights of the data subject
10.1 The applicable data protection law grants you the following rights of the data subject (rights to information and intervention) vis-à-vis the responsible party with regard to the processing of your personal data, whereby reference is made to the legal basis cited for the respective exercise requirements: Right to information in accordance with Art. 15 GDPR; Right to rectification in accordance with Art. 16 GDPR; Right to erasure in accordance with Art. 17 GDPR; Right to restriction of processing in accordance with Art. 18 GDPR; Right to notification in accordance with Art. 19 GDPR; Right to data portability in accordance with Art. 20 GDPR; Right to revoke granted consents in accordance with Art. 7 Para. 3 GDPR; Right to lodge a complaint in accordance with Art. 77 GDPR. 10.2 RIGHT TO OBJECT IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE. IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL TERMINATE THE PROCESSING OF THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS. IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE. IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL TERMINATE THE PROCESSING OF THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.