Privacy and Collection of Personal Data
We are pleased that you are visiting our website. We take the protection of your personal data seriously and comply with all legal requirements, in particular data protection laws and this Privacy Policy.
As a general rule, you can use this website without providing any personal information. To the extent that personal information (such as your name, address, or email address) is collected on this website, this is always done on a voluntary basis whenever possible. This information will not be disclosed to third parties without your express consent.
Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.
This Privacy Policy explains the nature, scope, and purpose of the processing of personal data (hereinafter referred to as “Data”) within our online service and the associated websites, features, and content, as well as external online presences, such as our social media profiles. (hereinafter collectively referred to as the “online service”). With regard to terms used, such as “processing” or “controller,” we hereby refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Person in Charge
Darav Taha
Gartenstr 101
10115 Berlin
Types of Data Processed
- Master data (e.g., names, addresses).
- Contact information (e.g., email, phone numbers).
- Content data (e.g., text entries, photographs, videos).
- Usage data (e.g., websites visited, interests in content, access times).
- Meta/communication data (e.g., device information, IP addresses).
Purpose of Processing
- Provision of the online service, its features, and content.
- Responding to contact requests and communicating with users.
- Safety measures.
- Audience Measurement/Marketing
Terminology Used
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”); a natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier (e.g., a cookie) or one or more specific characteristics that reflect the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
“Processing” means any operation or set of operations performed on personal data, whether or not by automated means. The term is broad and encompasses virtually any handling of data.
The term “controller” refers to the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.
Relevant Legal Bases
In accordance with Article 13 of the GDPR, we are providing you with the legal bases for our data processing activities. If the legal basis is not specified in the Privacy Policy, the following applies: The legal basis for obtaining consent is Article 6(1)(a) and Article 7 of the GDPR; the legal basis for processing to fulfill our services, carry out contractual obligations, and respond to inquiries is Article 6(1)(b) of the GDPR; the legal basis for processing to fulfill our legal obligations is Article 6(1)(c) of the GDPR, and the legal basis for processing to protect our legitimate interests is Article 6(1)(f) of the GDPR. In cases where the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis.
Safety Measures
We ask that you review the content of our Privacy Policy on a regular basis. We will update the Privacy Policy as soon as changes to our data processing practices make this necessary. We will notify you as soon as the changes require action on your part (e.g., consent) or any other individual notification.
Cooperation with Data Processors and Third Parties
If, in the course of our data processing, we disclose data to other individuals or companies (processors or third parties), transfer it to them, or otherwise grant them access to the data, this is done only on the basis of legal authorization (e.g., if the transfer of data to third parties, such as payment service providers, is necessary for the performance of a contract pursuant to Article 6(1)(b) of the GDPR), you have given your consent, a legal obligation requires it, or based on our legitimate interests (e.g., when using agents, web hosts, etc.).
If we engage third parties to process data on the basis of a so-called “data processing agreement,” this is done in accordance with Article 28 of the GDPR.
Transfers to Third Countries
If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or if this occurs in connection with the use of third-party services or the disclosure or transfer of data to third parties, this occurs only if it is necessary to fulfill our (pre)contractual obligations, based on your consent, due to a legal obligation, or based on our legitimate interests. Subject to statutory or contractual permissions, we process data in a third country—or have it processed there—only if the specific requirements of Articles 44 et seq. of the GDPR are met. This means that processing takes place, for example, on the basis of specific safeguards, such as an officially recognized determination that a country provides a level of data protection equivalent to that of the EU (e.g., for the U.S., through the “Privacy Shield”) or compliance with officially recognized specific contractual obligations (so-called “Standard Contractual Clauses”).
Rights of Data Subjects
You have the right to request confirmation as to whether the relevant data is being processed, as well as access to that data, further information, and a copy of the data in accordance with Article 15 of the GDPR.
Pursuant to Article 16 of the GDPR, you have the right to request that the data concerning you be completed or that any inaccurate data concerning you be corrected.
Pursuant to Article 17 of the GDPR, you have the right to request that the relevant data be erased without delay; alternatively, pursuant to Article 18 of the GDPR, you have the right to request that the processing of the data be restricted.
You have the right to request that we provide you with the personal data concerning you that you have provided to us, in accordance with Article 20 of the GDPR, and to request that we transfer that data to other data controllers.
Furthermore, pursuant to Article 77 of the GDPR, you have the right to file a complaint with the competent supervisory authority.
Right of Withdrawal
You have the right to withdraw any consent you have given in accordance with Article 7(3) of the GDPR, effective for the future.
Right to Object
You may object at any time to the future processing of your personal data in accordance with Article 21 of the GDPR. In particular, you may object to processing for direct marketing purposes.
Cookies
“Cookies” are small files that are stored on users’ computers. Various types of information can be stored in cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after their visit to a website. Temporary cookies—also known as “session cookies” or “transient cookies”—are cookies that are deleted after a user leaves an online service and closes their browser. Such a cookie can, for example, store the contents of a shopping cart in an online store or a user’s login status. Cookies that remain stored even after the browser is closed are referred to as “permanent” or “persistent.” For example, a user’s login status can be stored so that it remains active when the user returns to the site several days later. Such cookies may also store users’ interests, which are used for audience measurement or marketing purposes. “Third-party cookies” are cookies provided by parties other than the controller operating the online service (in contrast, when only the controller’s own cookies are used, they are referred to as “first-party cookies”).
We may use temporary and permanent cookies, and we provide information about this in our Privacy Policy.
If users do not want cookies to be stored on their computer, they are asked to disable the corresponding option in their browser’s settings. Stored cookies can be deleted in the browser’s settings. Disabling cookies may result in limited functionality of this website.
A general objection to the use of cookies for online marketing purposes can be submitted for a wide range of services—especially in the case of tracking—via the U.S. website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/ explained. Furthermore, you can prevent cookies from being stored by disabling them in your browser settings. Please note that, in that case, you may not be able to use all the features of this website.
Deletion of Data
The data we process will be deleted or its processing restricted in accordance with Articles 17 and 18 of the GDPR. Unless expressly stated in this Privacy Policy, the data we store will be deleted as soon as it is no longer necessary for its intended purpose and no legal retention obligations prevent its deletion. If the data is not deleted because it is required for other, legally permissible purposes, its processing will be restricted. This means the data will be blocked and not processed for any other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
In accordance with German legal requirements, records must be retained for a period of 10 years, in particular, pursuant to Sections 147(1) of the German Fiscal Code (AO), Section 257(1)(1) and (4), (4) of the German Commercial Code (HGB) (books, records, management reports, accounting documents, trading ledgers, documents relevant for tax purposes, etc.) and 6 years in accordance with Section 257(1)(2) and (3), (4) of the German Commercial Code (HGB) (business correspondence).
In accordance with Austrian law, records must be retained for 7 years pursuant to § 132(1) of the Federal Tax Code (BAO) (accounting records, receipts/invoices, accounts, supporting documents, business papers, statements of income and expenses, etc.), for 22 years for documents related to real estate, and for 10 years for documents related to services provided electronically, telecommunications, radio, and television services provided to non-business customers in EU member states for which the Mini One-Stop Shop (MOSS) is utilized.
Hosting
The hosting services we use are intended to provide the following: infrastructure and platform services, computing capacity, storage space, and database services, as well as security and technical maintenance services, which we utilize for the purpose of operating this online offering.
In this context, we—or our hosting provider—process inventory data, contact data, content data, contract data, usage data, meta and communication data from customers, prospective customers, and visitors to this online service based on our legitimate interests in providing this online service efficiently and securely in accordance with Article 6(1)(f) of the GDPR in conjunction with Article 28 of the GDPR (conclusion of a data processing agreement).
Collection of Access Data and Log Files
We—or rather, our hosting provider—collect data regarding every access to the server on which this service is located (so-called server log files) based on our legitimate interests within the meaning of Article 6(1)(f) of the GDPR. The access data includes the name of the webpage accessed, the file, the date and time of access, the amount of data transferred, a notification of successful access, the browser type and version, the user’s operating system, the referrer URL (the previously visited page), IP address, and the requesting provider.
For security reasons (e.g., to investigate cases of misuse or fraud), log file information is stored for a maximum of 7 days and then deleted. Data that must be retained for evidentiary purposes is exempt from deletion until the respective incident has been fully resolved.
Coaching
We process the data of our clients, prospective clients, and other clients or contractual partners (collectively referred to as “clients”) in accordance with Article 6(1)(b) of the GDPR in order to provide our contractual or pre-contractual services to them. The data processed in this context—as well as the nature, scope, purpose, and necessity of its processing—are determined by the underlying contractual relationship. The data processed generally includes clients’ profile and master data (e.g., name, address, etc.), as well as contact information (e.g., email address, phone number, etc.), contract details (e.g., services utilized, fees, names of contact persons, etc.), and payment information (e.g., bank account information, payment history, etc.).
As part of our services, we may also process special categories of data pursuant to Article 9(1) of the GDPR, in particular information regarding clients’ health, which may relate to their sex life or sexual orientation, ethnic origin, or religious or philosophical beliefs. To this end, we obtain, where necessary, the clients’ explicit consent in accordance with Article 6(1)(a), Article 7, Article 9(2)(a) of the GDPR, and otherwise process these special categories of data for the purposes of preventive healthcare on the basis of Article 9(2)(h) GDPR, Section 22(1)(1)(b) of the BDSG.
To the extent necessary for the performance of the contract or required by law, we disclose or transfer client data in the course of communication with other professionals and third parties who are necessary or typically involved in the performance of the contract, such as billing agencies or similar service providers, provided that this serves the provision of our services pursuant to Art. 6(1)(b) of the GDPR, is required by law pursuant to Art. 6(1)(c) GDPR, serves our interests or those of the clients in efficient and cost-effective health care as a legitimate interest pursuant to Art. 6(1)(f) GDPR, or is necessary pursuant to Art. 6(1)(d) GDPR to protect the vital interests of clients or another natural person, or within the scope of consent pursuant to Article 6(1)(a) and Article 7 of the GDPR.
The data will be deleted when it is no longer necessary for the fulfillment of contractual or statutory duties of care, as well as for handling any warranty or similar obligations; the necessity of retaining the data is reviewed every three years; In all other respects, the statutory retention requirements apply.
Contact Us
When you contact us (e.g., via the contact form, email, phone, or social media), your information is processed in order to handle your inquiry and follow up on it in accordance with Article 6(1)(b) of the GDPR. User information may be stored in a customer relationship management system (“CRM system”) or a comparable system for organizing inquiries.
We delete the requests once they are no longer necessary. We review their necessity every two years; in addition, statutory retention requirements apply.
Social Media Presence
We maintain an online presence on social media networks and platforms to communicate with customers, prospects, and users who are active there and to inform them about our services. When accessing these networks and platforms, the terms and conditions and data processing policies of their respective operators apply.
Unless otherwise specified in our Privacy Policy, we process users’ data when they communicate with us on social networks and platforms—for example, when they post on our online presence or send us messages.
Integration of Third-Party Services and Content
Within our online offering, we rely on our legitimate interests (i.e., an interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6(1)(f) of the GDPR) to incorporate content or services from third-party providers in order to display their content and services, such as videos or fonts (hereinafter collectively referred to as “Content”).
This always requires that the third-party providers of this content collect users’ IP addresses, since they would not be able to send the content to users’ browsers without the IP address. The IP address is therefore necessary for displaying this content. We make every effort to use only content whose respective providers use the IP address solely for the purpose of delivering the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. These “pixel tags” allow information—such as visitor traffic on the pages of this website—to be analyzed. This pseudonymous information may also be stored in cookies on the user’s device and may include, among other things, technical information about the browser and operating system, referring websites, visit duration, and other details regarding the use of our online service; it may also be linked to such information from other sources.
Google reCAPTCHA
We integrate the bot detection feature, e.g., for entries in online forms (“reCAPTCHA”), provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy:
https://www.google.com/policies/privacy/,
Opt-out:
https://adssettings.google.com/authenticated.
Google Maps
We integrate maps from the “Google Maps” service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data processed may include, in particular, users’ IP addresses and location data; however, this data is not collected without the users’ consent (which is typically provided through the settings on their mobile devices). The data may be processed in the United States. Privacy Policy:
https://www.google.com/policies/privacy/,
Opt-out:
[https://adssettings.google.com/authenticated.](https://adssettings.google.com/authenticated.)
Additional Questions
Did our privacy policy fail to answer one of your questions? Would you like more information on a specific point? If so, please let us know. We’re always happy to provide further information. For all inquiries regarding data protection, please contact us at the following email address: mackert(at)tiefenblau.net
Created using Datenschutz-Generator.de by Attorney Dr. Thomas Schwenke
Additional Information Regarding Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller for this website is located outside the European Economic Area or Switzerland, data processing for Google Analytics is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as “Google.”
Google Analytics uses so-called “cookies,” which are text files stored on the website visitor’s computer that enable an analysis of the visitor’s use of the website. The information generated by the cookie regarding the visitor’s use of this website (including the truncated IP address) is generally transmitted to a Google server and stored there.
Google Analytics is used on this website exclusively with the “_anonymizeIp()” extension. This extension ensures that IP addresses are anonymized by truncation, thereby preventing direct identification of individuals. Through this extension, Google truncates the IP address beforehand within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. The IP address transmitted by the relevant browser as part of Google Analytics is not combined with other data held by Google.
On behalf of the website operator, Google will use the information collected to evaluate the use of the website, to compile reports on website activity, and to provide the website operator with other services related to website and Internet usage (Art. 6(1)(f) GDPR). The legitimate interest in data processing lies in optimizing this website, analyzing website usage, and tailoring its content. Users’ interests are sufficiently safeguarded through pseudonymization.
Google LLC is certified under the so-called Privacy Shield (listing here ) and, on this basis, ensures an appropriate level of data protection. Data that is transmitted and linked to cookies, user identifiers (e.g., user ID), or advertising IDs is automatically deleted after 50 months. Data that has reached the end of its retention period is automatically deleted once a month.
Tracking by Google Analytics can be prevented by adjusting the cookie settings for this website. You can also object at any time to the collection and storage of your IP address and the data generated by cookies, effective for the future. The corresponding browser plugin can be downloaded and installed from the following link: https://tools.google.com/dlpage/gaoptout
The website visitor can prevent tracking by Google Analytics on this website by clicking on the following [link]( http://javascript :%20gaoptout([“ua-24230794-48”]);/)
Click here. An opt-out cookie will be set to prevent the future collection of data when you visit this website. For more information about Google’s use of data, as well as options for adjusting settings and opting out, please see Google’s Privacy Policy (
https://policies.google.com/privacy) as well as in the settings for the display of ads by Google (https://adssettings.google.com/authenticated).
Additional Information Regarding Google reCAPTCHA
To protect your inquiries submitted via the online form, we use the reCAPTCHA service provided by Google LLC (Google). This check is used to determine whether the input is being made by a human or, in an abusive manner, by automated, machine-based processing. The check involves sending your IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and processed there. However, Google will first truncate your IP address within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA is not combined with other data held by Google. The separate privacy policy of Google applies to this data. For more information on Google’s privacy policy, please visit: https://policies.google.com/privacy?hl=de
Leadrebel
We use an external service provider to analyze visitor data on our website. To this end, we transmit the data obtained from IP analysis to Pulserio AG, Schellenrainstrasse 13, 6210 Sursee, Switzerland.
The data subjects include visitors to our website. The purpose of this data processing is to analyze the data obtained through IP tracking to generate leads. If visitors to our site are asked for consent, the data is processed in accordance with Article 6(1)(a) of the GDPR on the basis of this consent. Otherwise, the processing is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR, which consists of generating leads by analyzing IP research data.
On the page https://leadrebel.io/optout, you have the option to opt out of tracking. If you opt out, LeadRebel will no longer collect your data.
You can find Leadrebel’s complete privacy policy at: https://leadrebel.io/de/privacy
You can also prevent Leadrebel from collecting your data by opting out in the privacy settings for usage analytics. An opt-out cookie will then be set to prevent the future collection of your data when you visit this website. To do this, click the cookie settings icon in the left corner and select “Withdraw Consent.”