Privacy policy

 Privacy Policy

1 Information on the collection of personal data

(1) 

In the following we inform about the collection of personal data when using our website. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.

(2) 

The person responsible in accordance with Art. 4 Para. 7 EU Data Protection Basic Regulation (DSGVO) is

Matthias Ruckdeschel

Schlierseestr. 3

95445 Bayreuth

info@heimdall.vision

(3) 

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. We delete the data arising in this connection after storage is no longer necessary or restrict processing if there are legal storage obligations. The legal basis for the processing of data transmitted in the course of sending an e-mail or contacting us via a contact form is Art. 6 Par. 1 lit. f DSGVO. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b DSGVO.

(4) 

If we use contracted service providers for individual functions of our offer or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also state the specified criteria for the storage period.

2 Your Rights

(1) 

You have the following rights against us with regard to the personal data concerning you:

– Right to information,

– Right to corretion or deletion,

– Right to limit processing,

– Right to object to the processing,

– Right to data transferability.

(2) 

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

3 Collection of personal data when visiting our website

(1)

If you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser sends to our server. If you would like to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure its stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO)

– IP adress

– Date and time of the request

– Time zone difference to Greenwich Mean Time (GMT)

– Content of the request (concrete page)

– Access Status/HTTP Status Code

– Amount of data transferred in each case

– Website from which the request comes

– Browser

– Operating system and its interface

– Language and version of the browser software.

(2) 

In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in accordance with the browser you are using and through which certain information is transmitted to the site that sets the cookie (in this case, by us). Cookies cannot execute programs or transfer viruses to your computer. They are used to make the Internet offer as a whole more user-friendly and effective.

(3) 

Use of cookies:

a) This website uses the following types of cookies, the scope and function of which are explained below:

– Transient cookies (in addition b)

– Persistent cookies (see c).

b) Transient cookies are automatically deleted when you close the browser. This includes in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the shared session. This enables your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the features of this website.

e) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise you would have to log in again for each visit.

f) The Flash cookies used are not registered by your browser, but by your Flash plug-in. We also use HTML5 storage objects, which are stored on your end device.

These objects store the required data regardless of the browser you use and do not have an automatic expiration date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, e.g. "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by setting your browser to private mode. We also recommend that you regularly delete your cookies and browser history manually.

4 Other functions and offers of our website

(1) 

In addition to the purely informative use of our website, we offer various services which you can use if you are interested. For this purpose, you will generally have to provide additional personal data which we use to provide the respective service and to which the aforementioned data processing principles apply.

(2) 

In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.

(3) 

Furthermore, we may pass on your personal data to third parties if we offer campaigns, competitions, contract conclusions or similar services together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer below.

(4) 

Insofar as our service providers or partners have their headquarters in a state outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

5 Objection or revocation against the processing of your data

(1) 

If you have given your consent to process your data, you can revoke it at any time. Such revocation will affect the permissibility of processing your personal data after you have given it to us.

(2) 

Insofar as we base the processing of your personal data on the weighing of interests, you can object to the processing. This is the case if the processing is in particular not necessary for the fulfillment of a contract with you, which is described by us in the following description of the functions. In the event of such an objection, please explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the facts of the case and will either stop or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(3)

Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us about your objection to the processing of your personal data at the following contact details:

info@heimdall.vision

Matthias Ruckdeschel

Schlierseestr. 3

95445 Bayreuth

6 Newsletters

(1) 

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

(2) 

For the registration to our newsletter we use the so-called double-opt-in procedure. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP address and the time of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

(3)

Your e-mail address is the only mandatory information for sending the newsletter. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation we will save your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO.

(4) 

You can revoke your consent to receive the newsletter at any time and unsubscribe. You can revoke your consent by clicking on the link provided in each newsletter e-mail, by sending an e-mail to info@heimdall.vision or by sending a message to the contact data provided in the imprint.

(5)

We would like to expressly point out that we evaluate your user behavior when sending our newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which represent single-pixel image files that are stored on our website. For the evaluations, we link the data communicated to us under 3 and the web beacons with your e-mail address and an individual ID. Links received in the newsletter also contain this ID.

The data is only collected in pseudonymized form, i.e. the IDs are not linked to your other personal data, and direct personal reference is excluded.

You can object to this tracking at any time by clicking on the separate link that each newsletter contains or by informing us via another contact channel. The information is stored for as long as you have subscribed to the newsletter. After you unsubscribe, we save the data purely statistically and anonymously.

We would like to point out that such tracking is not possible if you have deactivated the display of images by default in your e-mail program. In this case, the newsletter will not be displayed in full and you may not be able to use all functions. If you display the images manually, the aforementioned tracking will be carried out.

(7)

In some cases, we use external service providers based in the European Economic Area to process your data.

These service providers have been carefully selected by us, commissioned in writing and are bound by our instructions. We check them regularly. The service providers will not pass this data on to third parties, but delete them after the contract has been fulfilled and statutory storage periods have been concluded, unless you have consented to further storage.

(8)

You have the right to request information from us at any time about the personal data we have stored about you (Article 15 GDPR). This concerns the purpose of the storage and also the recipients or categories of recipients to whom this data is passed on. In addition, you have the right, under the conditions of Article 16 GDPR, to request the correction and / or, under the conditions of Article 17 GDPR, the deletion and / or, under the conditions of Article 18 GDPR, the restriction of processing. Furthermore, under the conditions of Article 20 GDPR, you can request data transfer at any time, provided that the data is still stored by us.

Under the conditions of Article 21 Paragraph 1 GDPR, data processing can be objected to for reasons arising from the particular situation of the person concerned.

 (9) 

Please send all information requests, requests for information, revocations or objections to data processing by email to datenschutz@heimdall.vision or by letter to the address given under 1. For more information, we refer to the full text of the GDPR, which is available on the Internet at:

https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679&from=DE  

is available and our data protection declaration, which can be viewed on the Internet at https://www.heimdall.vision.

You also have the opportunity to complain to the responsible supervisory authority about data protection issues.

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

7 Use of the comment functions

You can make public comments on certain offers on our website. Your comment will be published with your given username at the posting. We recommend using a pseudonym instead of your real name. You are required to provide your user name and e-mail address, all other information is voluntary. If you make a comment, we will continue to store your IP address, which we will delete after one week. The storage is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content. We need your e-mail address in order to contact you in case a third party objects to your comment as unlawful. The legal basis is Art. 6 para. 1 p. 1 lit. b and f DSGVO. The comments will not be checked before publication. We reserve the right to delete comments if they are objected to as illegal by third parties.

8 Use of Google Analytics

(1)  

This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before this happens. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage.

(2)  

The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google.

(3)  

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout. As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to prevent Google Analytics from collecting data within this website in the future. An opt-out cookie will be placed on your device. If you delete your cookies, you must click this link again:

 tools.google.com/dlpage/gaoptout.

 (4)

This website uses Google Analytics with the extension "_anonymizeIp()". This allows IP addresses to be processed in a shortened form, thus excluding the possibility of personal references. If the data collected about you contains a personal reference, this is immediately excluded and the personal data is immediately deleted.

(5)

We use Google Analytics to analyze the use of our website and to improve it regularly. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield,  www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f DSGVO.

(6)

Third Party Information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. terms of use:

www.google.com/analytics/terms/de.html, Privacy Overview

www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy:

www.google.de/intl/de/policies/privacy.

(7)

This website also uses Google Analytics for a cross-device analysis of visitor flows, which is performed via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "personal data".

9 Use of social media plug-ins

(1)  

We currently use the following social media plug-ins: Facebook, Instagram, Google+, Twitter. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the initial letter or logo of the provider on the box. We give you the opportunity to communicate directly with the provider of the plug-in by clicking the button. Only if you click on the marked box and thereby activate it, the plug-in provider will receive the information that you have accessed the corresponding website of our online offer. In addition, the data mentioned under § 3 of this declaration will be transmitted. In the case of Facebook, according to the respective providers in Germany, the IP address is anonymized immediately after it is collected. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (in the case of US providers in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the grayed-out box.

(2)

We have no influence on the collected data and data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also have no information about the deletion of the collected data by the plug-in provider.

(3)

The plug-in provider stores the data collected about you as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the purpose of presenting need-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f DSGVO.

  (4)  

The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data we collect from you will be directly assigned to your existing account with the plug-in provider. If you click on the activated button and, for example, link the page, the plug-in provider will also save this information in your user account and publicly share it with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as you can then avoid being assigned to your profile with the plug-in provider.

(5) 

Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the data protection declarations of these providers, which are provided below. There you will also receive further information about your rights and settings options to protect your privacy.

(6)  

Addresses of the respective plug-in providers and URLs with their privacy policies:

[Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; further information on data collection: www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications, and http://www.facebook.com/about/privacy/your-info#everyoneinfo. 

Facebook has submitted to the EU-US Privacy Shield, 

www.privacyshield.gov/EU-US-Framework.

Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; www.google.com/policies/privacy/partners/;

Google has submitted to the EU-US-Privacy-Shield, www.privacyshield.gov/EU-US-Framework.

Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. 

Twitter has submitted to the EU-US-Privacy-Shield, www.privacyshield.gov/EU-US-Framework.

10 Integration of YouTube-Videos

(1) 

We have integrated YouTube videos into our online offering, which are stored at www.YouTube.com and can be played directly from our website. These are all integrated in the "extended data protection mode", i. H. that no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer.

(2) 

When you visit the site, YouTube receives information that you have visited the appropriate subpage of our site. In addition, the data mentioned under § 3 of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not want the assignment with your profile on YouTube, you have to log out before activating the button. YouTube stores your data as user profiles and uses them for the purpose of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the purpose of providing need-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

(3) 

For more information on the purpose and scope of data collection and processing by YouTube, please see the Privacy Policy. There you will also find further information about your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

11 Integration of Google Maps

(1)

On this website we use the offer of Google Maps. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.

(2)

By visiting the website, Google receives the information that you have called up the corresponding subpage of our website. In addition, the data mentioned under § 3 of this declaration is transmitted. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not want the assignment with your profile at Google, you have to log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide need-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

  (3)

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information about your rights and settings to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

12 Use of Google Adwords Conversion

(1) 

We use the offer of Google Adwords to draw attention to our attractive offers by means of advertising material (so-called Google Adwords) on external websites. We can determine in relation to the data of the advertising campaigns, how successful the individual advertising measures are. In this way, we pursue the interest to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

(2) 

These advertising media are delivered by Google via so-called "Ad Servers". For this purpose, we use ad server cookies, through which certain parameters can be measured to measure success, such as the display of ads or clicks by users. If you reach our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies usually expire after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be contacted) are usually stored as analysis values for this cookie.

(3) 

These cookies enable Google to recognize your internet browser. If a user visits certain pages of an AdWords client's website and the cookie stored on their computer has not expired, Google and the client can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Adwords client. Cookies cannot be tracked through the websites of Adwords clients. We ourselves do not collect and process any personal data in the advertising measures mentioned above. We only receive statistical evaluations from Google. By means of these evaluations we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, in particular we cannot identify the users on the basis of this information.

(4) 

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and save your IP address.

(5) 

You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, in particular by suppressing third-party cookies, which means that you will not receive third-party ads; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", www.google.de/settings/ads, whereby this setting will be deleted if you delete your cookies; c) by disabling interest-based ads from providers that are part of the self-regulatory campaign "About Ads" via the link www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d) by permanently disabling them in your Firefox, Internet Explorer or Google Chrome browsers via the link  www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.

(6) 

The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f DSGVO.

Further information on data protection at Google can be found here:www.google.com/intl/de/policies/privacy and services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

13 Remarketing

Besides Adwords Conversion we use the application Google Remarketing. This is a procedure with which we would like to address you again. This application allows us to show you our advertisements after your visit to our website during your further internet use. This is done by means of cookies stored in your browser, which are used by Google to record and evaluate your usage behavior when you visit various websites. In this way Google can determine your previous visit to our website. A combination of the data collected within the scope of remarketing with your personal data, which may be stored by Google, does not take place by Google according to its own statements. According to Google, pseudonymisation is used in remarketing.

14 Facebook Custom Audiences

(1) 

The website also uses the remarketing function "Custom Audiences" of Facebook Inc. ("Facebook"). This enables users of the website to be presented with interest-related advertisements ("Facebook Ads") when they visit the social network Facebook or other websites that also use the process. In this way, we pursue the interest in displaying ads that are of interest to you in order to make our website more interesting for you.

(2) 

Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Facebook Custom Audiences, Facebook receives the information that you have called up the corresponding website of our Internet presence or clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and store your IP address and other identifying features.

(3) 

The deactivation of the function "Facebook Custom Audiences" is for logged-in users at www.facebook.com/settings/.

(4) 

The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f DSGVO.

15 Our social media appearences

We maintain publicly accessible profiles on social networks. The individual social networks we use can be found below.

Social networks such as Facebook, Twitter etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presence triggers numerous data protection-related processing operations. In detail:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data can also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is recorded, for example, using cookies that are stored on your device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we cannot retrace all processing processes on the social media portals. Depending on the provider, further processing operations can therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

Legal basis

Our social media appearances are intended to ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 Para. 1 lit.f GDPR. The analysis processes initiated by the social networks may be based on different legal bases that must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 Para. 1 lit. a GDPR).

Responsible and assertion of rights

If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can exercise your rights (information, correction, deletion, restriction of processing, data portability and complaint) against us as well as claim against the operator of the respective social media portal (e.g. against Facebook).

Please note that, despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely based on the company policy of the respective provider.

Storage period

The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for their storage no longer applies, you ask us to delete them, revoke your consent to storage or the purpose for data storage no longer applies. Saved cookies remain on your device until you delete them. Mandatory legal provisions - especially retention periods - remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Facebook

We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. According to Facebook, the data collected will also be transferred to the USA and other third countries.

We have concluded an agreement on joint processing (Controller Addendum) with Facebook. This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook page. You can view this agreement under the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can adjust your advertising settings yourself in your user account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Details can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/.

Instagram

We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.

Details on how they handle your personal data can be found in Instagram's privacy policy: https://help.instagram.com/519522125107875.

16. Note on data transfer to the USA

Tools from companies based in the USA are integrated on our website. When these tools are active, your personal data can be passed on to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to disclose personal data to security authorities without you as the person concerned being able to take legal action against this. It cannot therefore be ruled out that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities.