Data protection

Privacy Policy

General

As the operator of this website and as a company, we come into contact with your personal data. This refers to all data that says something about you and with which you can be identified. In this privacy policy, we would like to explain to you in what manner, for what purpose, and on what legal basis we process your data.

Responsible for the data processing on this website and in our company:

LVLUP One UG (haftungsbeschränkt) Am Langenwall 1 18439 Stralsund Germany

Phone: +49 155 661 133 88 Email: info@lvlupfutures.com

General Information

SSL/TLS Encryption

When you enter your data on websites, place online orders, or send emails over the internet, you must always reckon with the possibility that unauthorized third parties might access your data. There is no complete protection against such access. However, we do everything we can to protect your data as well as possible and to close security gaps as far as we are able. An important protection mechanism is the SSL/TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognize the encryption by the lock icon in front of the internet address in your browser and by the fact that our internet address begins with “https://” rather than “http://”.

How Long Do We Store Your Data?

At various points in this privacy policy, we inform you about how long we, or the companies processing your data on our behalf, store your data. If no such specification is provided, we store your data until the purpose of the data processing no longer applies, you object to the data processing, or you withdraw your consent to the data processing. In the case of an objection or withdrawal, however, we may continue to process your data if at least one of the following conditions applies:

We have compelling legitimate grounds for continuing the data processing that override your interests, rights, and freedoms (only in the case of objection to data processing; if the objection is directed against direct marketing, we cannot invoke legitimate grounds).
The data processing is necessary to assert, exercise, or defend legal claims (does not apply if your objection is directed against direct marketing).
We are legally obligated to retain your data.

In this case, we will delete your data as soon as the condition(s) no longer applies.

Data Transfer to the USA

On our website we also use tools from companies that transmit your data to the USA and store and, if necessary, further process it there. The European Commission has adopted an adequacy decision for the EU-US Data Privacy Framework. This decision establishes that the USA ensures an adequate level of protection for personal data transferred from the EU to US companies. This decision is based on new safeguards and measures introduced by the USA to meet data protection requirements.

The adequacy decision includes, among other things, restrictions and safeguards regarding access by US intelligence services to the data. Binding safeguards have been introduced to limit access by US intelligence services to what is necessary and proportionate for the protection of national security. In addition, enhanced supervision of the activities of US intelligence services has been established to ensure that the restrictions on surveillance activities are observed. An independent redress mechanism has also been set up to handle and resolve complaints from European citizens regarding access to their data.

The EU-US Data Privacy Framework thus enables European companies to transfer data to certified US companies without having to introduce additional data protection guarantees. A list of all certified companies can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search

A change to the European Commission’s decision cannot be ruled out.

Your Rights

Objection to Data Processing

WHEN YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS FOR PROCESSING YOUR DATA AND THEREFORE BASE THIS ON ART. 6 PARA. 1 SENTENCE 1 LIT. F) GDPR, YOU HAVE THE RIGHT UNDER ART. 21 GDPR TO OBJECT TO THIS. THIS ALSO APPLIES TO PROFILING THAT IS CARRIED OUT ON THE BASIS OF THIS PROVISION. THE PREREQUISITE IS THAT YOU PROVIDE REASONS FOR THE OBJECTION ARISING FROM YOUR PARTICULAR SITUATION. JUSTIFICATION IS NOT REQUIRED IF THE OBJECTION IS DIRECTED AGAINST THE USE OF YOUR DATA FOR DIRECT MARKETING.

THE CONSEQUENCE OF THE OBJECTION IS THAT WE MAY NO LONGER PROCESS YOUR DATA. THIS DOES NOT APPLY IF ONE OF THE FOLLOWING CONDITIONS IS MET:

WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS.
THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.

THE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION IS DIRECTED AGAINST DIRECT MARKETING OR AGAINST PROFILING ASSOCIATED WITH IT.

Additional Rights

Withdrawal of Your Consent to Data Processing

Many data processing operations are carried out on the basis of your consent. You provide this, for example, by ticking a corresponding box on online forms before sending the form, or by allowing certain cookies when you visit our website. You can withdraw your consent at any time without giving reasons (Art. 7 Para. 3 GDPR). From the moment of withdrawal, we may no longer process your data. The only exception: We are legally obligated to retain the data for a certain period of time. Such retention periods exist in particular in tax and commercial law.

Right to Lodge a Complaint with the Competent Supervisory Authority

If you believe that we are violating the General Data Protection Regulation (GDPR), you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority. You can contact a supervisory authority in the Member State of your residence, your place of work, or the place of the alleged violation. The right to complain exists alongside administrative or judicial remedies.

Right to Data Portability

Data that we process automatically on the basis of your consent or in fulfillment of a contract must be handed over to you or a third party in a common machine-readable format if you request this. We can only transfer the data to another controller if this is technically feasible.

Right to Information, Deletion, and Correction of Data

Under Art. 15 GDPR, you have the right to receive information free of charge about which personal data we have stored about you, where the data comes from, to whom we transmit the data, and for what purpose it is stored. If the data is incorrect, you have the right to correction (Art. 16 GDPR). Under the conditions of Art. 17 GDPR, you may demand that we delete the data.

Right to Restriction of Processing

In certain situations, you may request under Art. 18 GDPR that we restrict the processing of your data. The data may then — apart from storage — only be processed as follows:

with your consent
to assert, exercise, or defend legal claims
to protect the rights of another natural or legal person
for reasons of important public interest of the European Union or a Member State

The right to restriction of processing exists in the following situations:

You have disputed the accuracy of your personal data stored with us and we need time to verify this. Here, the right exists for the duration of the verification.
The processing of your personal data is or was unlawful. Here, the right exists as an alternative to deletion of the data.
We no longer need your personal data, but you need it to exercise, defend, or assert legal claims. Here, the right exists as an alternative to deletion of the data.
You have lodged an objection under Art. 21 Para. 1 GDPR and now your and our interests must be weighed against each other. Here, the right exists until the result of the weighing is determined.

Hosting and Content Delivery Networks (CDN)

External Hosting

Our website is hosted on a server provided by the following internet service provider (hoster):

HOSTINGER operations, UAB Švitrigailos str. 34 Vilnius 03230 Lithuania

Has a data processing agreement been concluded with the hoster, or are Standard Contractual Clauses (SCC) being used? Yes.

How do we process your data? The hoster stores all data on our website. This also includes all personal data that is automatically captured or entered by you. This may include in particular: your IP address, accessed pages, names, contact information and requests, as well as meta and communication data. The hoster adheres to our instructions when processing data and only processes the data as far as is necessary to fulfill its performance obligations toward us.

On what legal basis do we process your data? Since we address potential customers through our website and maintain contact with existing customers, the data processing by our hoster serves contract initiation and fulfillment and is therefore based on Art. 6 Para. 1 lit. b) GDPR. Furthermore, it is our legitimate interest as a company to provide a professional online presence that meets the necessary requirements for security, speed, and efficiency. To this extent, we also process your data on the basis of Art. 6 Para. 1 lit. f) GDPR.

Data Collection on This Website

Use of Cookies

Our website places cookies on your device. These are small text files that serve various purposes. Some cookies are technically necessary for the website to function at all (necessary cookies). Others are needed to perform certain actions or functions on the site (functional cookies). For example, without cookies it would not be possible to use the benefits of a shopping cart in an online shop. Still other cookies serve to analyze user behavior or optimize advertising measures. If we use third-party services on our website, e.g., for processing payments, these companies may also place cookies on your device when you access the website (so-called third-party cookies).

How do we process your data? Session cookies are only stored on your device for the duration of a session. As soon as you close the browser, they disappear by themselves. Permanent cookies, on the other hand, remain on your device unless you delete them yourself. This can, for example, lead to your user behavior being permanently analyzed. You can influence how your browser handles cookies via its settings:

Do you want to be informed when cookies are set?
Do you want to exclude cookies generally or for specific cases?
Do you want cookies to be automatically deleted when the browser is closed?

If you deactivate or do not allow cookies, the functionality of the website may be limited. Where we use cookies from other companies or for analytical purposes, we will inform you about this within the framework of this privacy policy. We will also ask for your consent when you access our website.

On what legal basis do we process your data? We have a legitimate interest in ensuring that our online offerings can be used by visitors without technical problems and that all desired functions are available to them. The storage of necessary and functional cookies on your device is therefore based on Art. 6 Para. 1 lit. f) GDPR. We use all other cookies on the basis of Art. 6 Para. 1 lit. a) GDPR, provided that you give us appropriate consent. You can withdraw this consent at any time with effect for the future. If you have consented to the placement of necessary and functional cookies, the storage of these cookies is also based exclusively on your consent.

Cookie Consent with Complianz

What is Complianz? A Consent Management Provider (CMP) for obtaining, processing, and forwarding GDPR-compliant consents.

Who processes your data? Complianz is a locally integrated tool; the processing is carried out directly by the controller. The provider of Complianz is Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands.

How do we process your data? We use Complianz to obtain your consent for storing cookies on your device and to document this in a data protection-compliant manner. When you visit our website and close the Complianz cookie window with the consent request, the following data is stored:

Your IP address (from which your country is also determined)
The browser used
The language used
The accessed website

In addition, Complianz stores various cookies in your browser to be able to assign the granted consents or their withdrawal to your browser. All collected data is stored until the cookies are no longer needed, you delete the Complianz cookies, or you request us to delete the data. This does not apply if we are legally obligated to retain the data. No connection to third-party servers is established.

On what legal basis do we process your data? We are legally obligated to obtain the consent of our website visitors for the use of certain cookies. To fulfill this obligation, we use Complianz. The legal basis for data processing is therefore Art. 6 Para. 1 lit. c) GDPR.

Server Log Files

Server log files record all requests and accesses to our website and log error messages. They also include personal data, in particular your IP address. However, this is anonymized by the provider shortly afterwards, so that we cannot assign the data to your person. The data is automatically transmitted from your browser to our provider.

How do we process your data? Our provider stores the server log files in order to be able to track activities on our website and to identify errors. The files contain the following data:

Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address (anonymized where applicable)

We do not combine this data with other data, but only use it for statistical evaluation and to improve our website.

On what legal basis do we process your data? We have a legitimate interest in ensuring that our website runs error-free. It is also our legitimate interest to obtain an anonymized overview of accesses to our website. The data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR.

Contact Form

You can send us a message via the contact form on this website.

How do we process your data? We store your message and the information from the form in order to be able to process your inquiry including follow-up questions. This also applies to the contact data provided. Without your consent, we do not pass the data on to other persons.

How long do we store your data? We delete your data as soon as one of the following points occurs:

Your inquiry has been definitively processed.
You request us to delete the data.
You withdraw your consent to storage.

This does not apply if we are legally obligated to retain the data.

On what legal basis do we process your data? If your inquiry is related to our contractual relationship or serves the implementation of pre-contractual measures, we process your data on the basis of Art. 6 Para. 1 lit. b) GDPR. In all other cases, it is our legitimate interest to efficiently process inquiries addressed to us. The legal basis for data processing is therefore Art. 6 Para. 1 lit. f) GDPR. If you have consented to the storage of your data, Art. 6 Para. 1 lit. a) GDPR is the legal basis. In this case, you can withdraw your consent at any time with effect for the future.

Inquiry by Email, Telephone, or Fax

You can send us a message by email or fax or call us.

How do we process your data? We store your message and your self-provided contact information or transmitted telephone number in order to be able to process your inquiry including follow-up questions. Without your consent, we do not pass the data on to other persons.

How long do we store your data? We delete your data as soon as one of the following points occurs:

Your inquiry has been definitively processed.
You request us to delete the data.
You withdraw your consent to storage.

This does not apply if we are legally obligated to retain the data.

Communication via WhatsApp

What is WhatsApp? An instant messaging service.

Who processes your data? WhatsApp Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Has a data processing agreement been concluded with WhatsApp? Yes.

Where can you find more information about data protection at WhatsApp? https://www.whatsapp.com/legal/#privacy-policy

On what basis do we transfer your data to the USA? Based on the European Commission’s adequacy decision and the corresponding certification of the company.

How do we process your data? For communication with our customers and other persons outside our company, we use the instant messaging service WhatsApp in the “WhatsApp Business” variant. Communication takes place via end-to-end encryption (peer-to-peer). This prevents WhatsApp or other third parties from accessing the communication content. We have also set up our accounts so that no automatic synchronization with the address book on the smartphones used takes place. However, WhatsApp gains access to the metadata of the communication process (e.g., sender, recipient, and time of communication) and, according to its own statement, shares this data with Meta, its parent company based in the USA.

How long do we store your data? We delete your data as soon as one of the following points occurs:

The purpose of data processing no longer applies.
You request us to delete the data.
You withdraw your consent to storage.

This does not apply if we are legally obligated to retain the data.

On what legal basis do we process your data? If our exchange via WhatsApp is related to our contractual relationship or serves the implementation of pre-contractual measures, we process your data on the basis of Art. 6 Para. 1 lit. b) GDPR. In all other cases, it is our legitimate interest to efficiently process inquiries addressed to us and to maintain business contact with other persons. The legal basis for data processing is therefore Art. 6 Para. 1 lit. f) GDPR. If you have consented to the storage of your data, Art. 6 Para. 1 lit. a) GDPR is the legal basis. In this case, you can withdraw your consent at any time with effect for the future.

Facebook

What is Facebook? A social network.

Who processes your data? Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

Where can you find more information about data protection at Facebook? https://de-de.facebook.com/privacy/explanation

On what basis do we transfer your data to the USA? Based on the European Commission’s adequacy decision and the corresponding certification of the company.

Analysis Tools and Advertising

We use the following tools to analyze the behavior of our website visitors and to show you advertising.

Google Tag Manager

What is Google Tag Manager? A tag management system for integrating tracking codes and conversion pixels from Google Ireland Ltd.

Who processes your data? Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Where can you find more information about data protection at Google Tag Manager? https://policies.google.com/privacy

On what basis do we transfer your data to the USA? Based on the European Commission’s adequacy decision and the corresponding certification of the company.

How do we process your data? We use Google Tag Manager. The tool helps us integrate, manage, and serve tracking codes and conversion pixels on our website. Google Tag Manager itself does not create user profiles, place cookies on your device, or analyze your behavior as a user. However, it does capture your IP address and transmits it to Google servers in the USA.

On what legal basis do we process your data? We have a legitimate interest in the rapid and uncomplicated integration and management of various tools on our website. The use of Google Tag Manager is therefore lawful under Art. 6 Para. 1 lit. f) GDPR. If you have consented to the transmission of your IP address, we process your data exclusively on the basis of Art. 6 Para. 1 lit. a) GDPR. You can withdraw your consent at any time with effect for the future.

Google Analytics

What is Google Analytics? A tool for analyzing user behavior from Google Ireland Ltd.

Who processes your data? Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Has a data processing agreement been concluded with Google Analytics? Yes.

Where can you find more information about data protection at Google Analytics? https://support.google.com/analytics/answer/6004245?hl=en

On what basis do we transfer your data to the USA? Based on the European Commission’s adequacy decision and the corresponding certification of the company.

How can you prevent data collection? Among other things, with a browser plugin: https://tools.google.com/dlpage/gaoptout?hl=en

How do we process your data? We are always interested in optimizing our online presence for the visitors of our website and in placing advertising in the best possible way. Google Analytics helps us with this — a tool that analyzes user behavior and thus provides us with the necessary data basis for adjustments. Through the tool, we receive information about the origin of our visitors, their page views, and their time spent on the pages, as well as the operating system they use.

Standard Processing To collect the data, Google Analytics uses cookies, device fingerprinting, or other technologies to recognize users. The data is transmitted to Google servers in the USA and combined with the IP address, which is also captured, into a profile that can be assigned to you or your device. You can prevent Google from processing your data by installing a browser plugin provided by Google itself: https://tools.google.com/dlpage/gaoptout?hl=en

IP Anonymization We have activated the “IP anonymization” function within Google Analytics. For you, this means that Google shortens your IP address (from the EU or EEA) before transmission to the USA. Only in exceptional cases does Google transmit the full IP address to servers in the USA and shorten it there.

Demographic Characteristics We use the “demographic characteristics” function of Google Analytics to display matching ads to visitors of our website within the Google advertising network. As a result, reports can be created that contain statements about the age, gender, and interests of our site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third parties. It is not possible to assign the collected data to specific persons. You can deactivate the function in the settings of your Google account.

How long do we store your data? According to Google’s own information, data stored at user and event level that is linked to cookies, user identifiers (e.g., user IDs), or advertising IDs is deleted or anonymized by Google after 14 months (see https://support.google.com/analytics/answer/7667196?hl=en).

On what legal basis do we process your data? As a website operator, we have a legitimate interest in analyzing user behavior for the purpose of optimizing our online presence and the advertising placed there. The data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR. In the event that, for example, you have consented to the storage of cookies or have otherwise consented to data processing by Google Analytics, Art. 6 Para. 1 lit. a) GDPR is the sole legal basis. You can withdraw your consent at any time with effect for the future.

Plugins and Tools

Google Fonts (Local Hosting)

We use fonts from the US company Google on our website. We have installed the fonts locally so that no connection to Google servers takes place when you visit our website. For more information about Google Fonts, see https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=en

Google Maps

What is Google Maps? A map service from Google Ireland Ltd.

Who processes your data? Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Where can you find more information about data protection at Google? https://policies.google.com/privacy?hl=en

On what basis do we transfer your data to the USA? Based on the European Commission’s adequacy decision and the corresponding certification of the company.

How do we process your data? We use Google Maps on our website. So that you can use all functions of the map service, Google stores your IP address on one of its servers in the USA.

On what legal basis do we process your data? Google Maps maps ensure that the locations specified on our website are easier for visitors to find. As a company, we have a legitimate interest in this. The data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR. If you have consented to data processing, we process your data exclusively on the basis of Art. 6 Para. 1 lit. a) GDPR. You can withdraw your consent at any time. From the time of withdrawal, we may no longer process your data.

Google reCAPTCHA

What is Google reCAPTCHA? A test tool for distinguishing between humans and computers from Google Ireland Ltd.

Who processes your data? Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Where can you find more information about data protection at Google? https://policies.google.com/privacy?hl=en

On what basis do we transfer your data to the USA? Based on the European Commission’s adequacy decision and the corresponding certification of the company.

How do we process your data? With Google reCAPTCHA, we check whether data entered in forms on our website comes from a human or from a computer. For you, this means that the test tool analyzes your behavior as a visitor to our website based on various characteristics. The analysis does not begin only when you use the test tool, but already when you access our website. Various data is captured, e.g., the IP address, the time spent on our website, and mouse movements performed. The data is forwarded to Google.

On what legal basis do we process your data? As a company, we have a legitimate interest in protecting our online offerings from spam and abusive surveillance. The data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR. If you have consented to data processing, we process your data exclusively on the basis of Art. 6 Para. 1 lit. a) GDPR. You can withdraw your consent at any time. From the time of withdrawal, we may no longer process your data.

Elementor

What is Elementor? A plugin for creating websites.

Who processes your data? Elementor, 8 THE GRN STE A, Dover, DE 19901, USA.

Has a data processing agreement been concluded with Elementor? Yes.

Where can you find more information about data protection at Elementor? https://elementor.com/about/privacy/

On what basis do we transfer your data to the USA? Elementor adheres to the European Commission’s Standard Contractual Clauses (see https://elementor.com/about/privacy/).

How do we process your data? We use the “Elementor Website Builder for WordPress” plugin on our website. This plugin does not process personal data. However, the number of page views and active sessions of the user are stored with the help of cookies.

On what legal basis do we process your data? By integrating the Elementor plugin, we want to make our website and our services and offers more appealing. This is our legitimate interest as a company and therefore lawful under Art. 6 Para. 1 lit. f) GDPR.

eCommerce

Customer and Contract Data

How do we process your data? When we conclude a contract with you, we need certain personal data from you. We collect, process, and use this data only insofar as it is necessary to establish, structure in terms of content, or modify our legal relationship. If you can only use our services via our website or if the services are billed via the website, we also capture usage data, provided that this is necessary to enable you to use our offering or to bill the services used.

How long do we store your data? We store your data until our legal relationship ends, unless we are legally obligated to retain the data longer.

On what legal basis do we process your data? We store your data in order to fulfill the contract with you or to carry out pre-contractual measures. The basis for data processing is therefore Art. 6 Para. 1 lit. b) GDPR.

Data Transmission When Using Services and Digital Content

How do we process your data? To process the payment, we transmit your data to a payment service or the credit institution commissioned with the payment processing. We only pass on data that is absolutely necessary for the payment process. If we want to pass on data beyond this, we will obtain your consent.

On what legal basis do we process your data? We pass on your data in order to fulfill the contract we have concluded with you. The basis for data processing is therefore Art. 6 Para. 1 lit. b) GDPR. If you have consented to the transmission of your data, the data processing is based on Art. 6 Para. 1 lit. a) GDPR. You can withdraw your consent at any time with effect for the future.

Own Services / Other

Handling of Applicant Data

If you would like to work for us, we are happy to receive your application. We treat all transmitted personal data strictly confidentially. This also applies to data that we only collect later in the course of the application process.

How do we process your data? We store all data collected as part of the application process and use it insofar as this is necessary for deciding on the establishment of an employment relationship. In addition to contact and communication data as well as application documents, this also applies, for example, to notes that we make in the course of job interviews. Within our company, we only pass on your data to persons involved in processing your application. If your application is successful, we store the data that is necessary for carrying out the employment relationship in our data processing systems.

If we cannot currently offer you a suitable position, we will gladly include your data in our applicant pool with your consent. This makes it possible to contact you if a position that matches your profile becomes available.

How long do we store your data? If we cannot offer you a job, you reject a job offer, or you withdraw your application, we reserve the right to retain your documents and other application data for up to 6 months after the end of the application process. The reason is that we may need the data for evidence purposes in the event of a legal dispute. After the deadline, we delete the data and destroy the documents. If a legal dispute actually threatens or is already pending, we delete the data and documents when they are no longer needed for evidence purposes.

We delete data in the applicant pool no later than 2 years after consent has been given. If you withdraw your consent before this period expires, we will delete it earlier.

The deletion of your data always presupposes that we are not legally obligated to retain it longer.

On what legal basis do we process your data? We process your applicant data on the basis of Section 26 of the new German Federal Data Protection Act (BDSG-neu, initiation of an employment relationship) and Art. 6 Para. 1 lit. b) GDPR (general contract initiation). The same applies if your application is successful. If we cannot offer you a job, you reject a job offer, or you withdraw your application, we have a legitimate interest in using your data for evidence purposes in any legal dispute. The data processing is therefore based on Art. 6 Para. 1 lit. f) GDPR. If you have expressly consented to the storage of your data, we process your data on the basis of Art. 6 Para. 1 lit. a) GDPR. You can withdraw your consent at any time with effect for the future.

Data Processing on Social Media

What is social media? By social media we mean the social networks on which we have created publicly accessible profiles. Which specific social networks these are can be found below.

Who processes your data? The respective operating companies of the social networks. The individual operators can be found below at the respective networks.

How is your data processed? The operators of social networks are generally able to capture and evaluate comprehensive data about the behavior of visitors and users of the network. It is not possible for us to track all processing operations in the social networks we use, which is why further processing operations that are not listed here may be carried out by the operators of the social networks. You will find further information on this in the terms of use and privacy policies of the respective social networks.

The processing of your data can be triggered by you visiting the website of the social network or our profile page there. Even if you access a website that uses certain content of the network, e.g., like or share buttons, data can already be transmitted to the operators of the social network. If you are a user of the social network yourself and are logged into your user account, your visit to our profile page can be assigned to your account by the operator of the social network. Even if you have not registered a user account yourself or are not logged in, it may be that the operator of the network still captures your personal data, e.g., by capturing your IP address or setting cookies. With this data, the operators can create user profiles adapted to your behavior and interests and show you interest-based advertising within and outside the network. If you are a registered user of the network, the interest-based advertising can also be displayed on all devices on which you are or have been logged in.

On what legal basis is your data processed? Our profiles on social networks are intended to ensure the most comprehensive presence of our company on the internet. As a company, we have a legitimate interest in this. The data processing is therefore lawful under Art. 6 Para. 1 lit. f GDPR. The data processing operations and analyses carried out by the operators of the social networks themselves may be based on other legal bases. These must be specified by the operators of the social networks.

Who is responsible for processing your data and how can you exercise your rights? If you visit one of our profiles on social networks, we are jointly responsible with the operator of the respective network for the data processing operations triggered during this visit. You can generally exercise your rights both vis-à-vis us and vis-à-vis the operator of the respective network. Despite joint responsibility with the operators of the social networks, our influence on the data processing operations of the respective operator is limited and is primarily based on the operator’s specifications.

How long is your data stored? If we capture data via our profiles on social networks, it will be deleted from our systems as soon as the purpose for its storage no longer applies, you request us to delete it, or you withdraw your consent to storage. Stored cookies remain on your device until you delete them. Mandatory legal provisions — in particular retention periods — remain unaffected. We have no influence on how long the operators of the social networks store your data, which the operators collect for their own purposes. You can obtain information about this directly from the operator of the respective social network, e.g., in the respective privacy policy.

Which Social Media Do We Use?

Facebook

What is Facebook? A social network
Who processes your data? Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Is your data transferred to third countries? Yes, to the USA and also to other third countries
Where can you find more information about data protection at Facebook? https://www.facebook.com/about/privacy/
Where can you as a Facebook user adjust your advertising settings? As a registered Facebook user, you can adjust your advertising settings in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads

Instagram

What is Instagram? A social network specialized in photos and videos
Who processes your data? Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Is your data transferred to third countries? Yes
Where can you find more information about data protection at Instagram? https://help.instagram.com/519522125107875/?helpref=hc_fnav
Where can you as a user adjust your privacy settings? As a registered Instagram user, you can adjust your privacy settings in your user account. Click on the following link and log in: https://www.instagram.com/accounts/privacy_and_security/

YouTube

What is YouTube? A social network in the form of an online video portal
Who processes your data? Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Is your data transferred to third countries? Yes
Where can you find more information about data protection at YouTube? https://policies.google.com/privacy?hl=en
Where can you as a user adjust your data protection settings? https://policies.google.com/privacy?hl=en#infochoices

TikTok

What is TikTok? A social network specialized in photos and videos
Who processes your data? TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
Is your data transferred to third countries? Yes
Where can you find more information about data protection at TikTok? https://www.tiktok.com/legal/privacy-policy-eea?lang=en
Where can you as a user adjust your data protection settings? https://www.tiktok.com/legal/tiktok-website-cookies-policy?lang=en