Skip to main content

Privacy Policy

Preamble

With the following privacy policy, we would like to inform you about the types of your personal data (hereinafter also referred to shortly as “data”) we process, for what purposes, and to what extent. The privacy policy applies to all processing of personal data carried out by us, both in the provision of our services and especially on our websites, mobile applications, and external online presences, such as our social media profiles (hereinafter collectively referred to as the “online offering”).

The terms used are not gender-specific.

Date: February 6, 2024

Table of Contents

Controller

Astrid Scharlau
P.B. 81
84300 Naxos
Greece

E-mail Address: info@azalas.de
Imprint: https://azalas.de/impressum/

Overview of Processing

The following overview summarizes the types of processed data and the purposes of their processing and refers to the data subjects involved.

Types of Processed Data

  • Inventory data.
  • Contact data.
  • Content data.
  • Usage data.
  • Meta, communication, and process data.

Categories of Data Subjects

  • Communication partners.
  • Users.

Purposes of Processing

  • Provision of contractual services and fulfillment of contractual obligations.
  • Contact inquiries and communication.
  • Security measures.
  • Direct marketing.
  • Management and response to inquiries.
  • Feedback.
  • Provision of our online offering and user-friendliness.
  • Information technology infrastructure.

Relevant Legal Bases

Relevant legal bases according to the GDPR: Below you will find an overview of the legal bases of the GDPR on which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or domicile. Furthermore, if more specific legal bases are applicable in individual cases, we will inform you of these in the privacy policy.

  • Consent (Art. 6(1)(a) GDPR) – The data subject has given consent to the processing of their personal data for one or more specific purposes.
  • Performance of a contract and pre-contractual inquiries (Art. 6(1)(b) GDPR) – Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
  • Legitimate interests (Art. 6(1)(f) GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

National data protection regulations in Germany: In addition to the data protection regulations of the GDPR, national regulations on data protection apply in Germany. This includes in particular the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). The BDSG contains in particular special provisions on the right to access, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes, and transmission as well as automated decision-making in individual cases including profiling. Furthermore, data protection laws of the individual German states may apply.

Security Measures

We implement appropriate technical and organizational measures in accordance with legal requirements, taking into account the state of the art, implementation costs, the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, to ensure a level of security appropriate to the risk.

These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data, as well as the access, input, disclosure, availability, and separation of data. Furthermore, we have established procedures to ensure the exercise of data subject rights, the deletion of data, and responses to data threats. We also consider data protection during the development or selection of hardware, software, and procedures, in accordance with the principle of data protection by design and by default.

TLS/SSL Encryption (https): To protect user data transmitted through our online services, we use TLS/SSL encryption. Secure Sockets Layer (SSL) is the standard technology for securing internet connections by encrypting data transmitted between a website or app and a browser (or between two servers). Transport Layer Security (TLS) is an updated and more secure version of SSL. Hyper Text Transfer Protocol Secure (HTTPS) is displayed in the URL when a website is secured by an SSL/TLS certificate.

Transmission of Personal Data

In the course of our processing of personal data, it may happen that the data is transferred to other entities, companies, legally independent organizational units, or individuals or disclosed to them. Recipients of this data may include, for example, service providers or providers of services and content entrusted with IT tasks or integrated into a website. In such cases, we comply with legal requirements and in particular conclude appropriate contracts or agreements with the recipients of your data, which serve to protect your data.

Deletion of Data

The data processed by us will be deleted or restricted in processing in accordance with legal requirements as soon as consent to process them is revoked or other permissions are no longer applicable (e.g., if the purpose of processing this data has ceased to apply or they are not necessary for the purpose). If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted to these purposes. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons or whose storage is necessary for the assertion, exercise, or defense of legal claims or to protect the rights of another natural or legal person. Our privacy policy may also contain further information on storage and deletion of data that applies primarily to the respective processing.

Rights of Data Subjects

Rights of data subjects under the GDPR: As data subjects, you have various rights under the GDPR, particularly arising from Articles 15 to 21 of the GDPR:

  • Right to Object: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions. Where personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
  • Right to Withdraw Consent: You have the right to withdraw consent given at any time.
  • Right of Access: You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and further information and a copy of the data in accordance with legal requirements.
  • Right to Rectification: You have the right to obtain, in accordance with legal requirements, the rectification of inaccurate personal data concerning you or the completion of incomplete personal data.
  • Right to Erasure and Restriction of Processing: You have the right, in accordance with legal requirements, to obtain from the controller the erasure of personal data concerning you without undue delay or alternatively to demand restriction of processing of the data.
  • Right to Data Portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller in accordance with legal requirements.
  • Right to Lodge a Complaint with a Supervisory Authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

Use of Cookies

Cookies are small text files or other storage technologies that store information on devices and retrieve information from devices. For example, to store login status in a user account, shopping cart contents in an e-shop, accessed content, or used functions of an online offering. Cookies can also be used for various purposes, such as functionality, security, and convenience of online offerings, as well as for analyzing visitor traffic.

Consent Information: We use cookies in accordance with legal requirements. Therefore, we obtain prior consent from users, unless it is not legally required. Consent is particularly not necessary if storing and retrieving information, including cookies, is absolutely necessary to provide users with a telemedia service (i.e., our online offering) expressly requested by them. Cookies that are absolutely necessary usually include cookies with functions related to displaying and operating the online offering, load balancing, security, storing user preferences and choices, or similar purposes related to providing the main and ancillary functions of the online offering requested by users. Revocable consent is clearly communicated to users and includes information on the respective cookie usage.

Information on Data Protection Legal Basis: The legal basis on which we process users’ personal data using cookies depends on whether we ask users for consent. If users consent, the legal basis for processing their data is the declared consent. Otherwise, data processed using cookies are based on our legitimate interests (e.g., in the commercial operation of our online offering and improving its usability) or, if cookie usage is necessary to fulfill our contractual obligations, when the use of cookies is necessary to fulfill our contractual obligations. We will clarify the purposes for which cookies are processed as part of this privacy policy or as part of our consent and processing procedures.

Storage Duration: In terms of storage duration, the following types of cookies are distinguished:

  • Temporary Cookies (also: Session Cookies): Temporary cookies are deleted at the latest after a user leaves an online offering and closes their device (e.g., browser or mobile application).
  • Persistent Cookies: Persistent cookies remain stored even after the device is closed. For example, login status can be stored or preferred content can be displayed directly when a user revisits a website. Data collected using cookies can also be used for audience measurement. If we do not provide explicit information on the type and storage duration of cookies (e.g., as part of obtaining consent), users should assume that cookies are persistent and can be stored for up to two years.

General Information on Revocation and Objection (so-called “Opt-Out”): Users can revoke the consents they have given at any time and object to processing in accordance with legal requirements. For this purpose, users can, among other things, restrict the use of cookies in their browser settings (although this may also restrict the functionality of our online offering). Objection to the use of cookies for online marketing purposes can also be declared via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/.

  • Legal Basis: Legitimate Interests (Art. 6 para. 1 sentence 1 lit. f) GDPR). Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).

Additional Information on Processing Procedures, Processes, and Services:

  • Processing of Cookie Data Based on Consent: We implement a consent management process: a process for obtaining, logging, managing, and revoking consents, particularly for the use of cookies and similar technologies to store, retrieve, and process information on users’ devices and their processing, within which users’ consents to the processing mentioned in the consent management process: procedures for obtaining, logging, managing, and revoking consents, particularly for the use of cookies and similar technologies to store, retrieve, and process information on users’ devices and their processing, procedures and providers can be obtained, managed, and revoked by users. The consent declaration is stored to avoid having to repeat the query and to be able to provide evidence of consent in accordance with legal obligations. Storage can be server-side and/or in a cookie (so-called opt-in cookie or similar technologies) to be able to assign the consent to a user or their device. Subject to individual information about providers of cookie management services, the following information applies: The duration of the consent storage can be up to two years. A pseudonymous user identifier is generated and stored with the time of consent, information on the scope of consent (e.g., which categories of cookies and/or service providers), as well as the browser, system, and device used; Legal Basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).

Provision of Online Offerings and Web Hosting

We process user data to provide them with our online services. For this purpose, we process the user’s IP address, which is necessary to transmit the contents and functions of our online services to the user’s browser or device.

  • Processed Data Types: Usage data (e.g., visited websites, interest in content, access times); Meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status); Content data (e.g., inputs in online forms).
  • Affected Individuals: Users (e.g., website visitors, users of online services).
  • Purposes of Processing: Provision of our online offerings and user-friendliness; Information technology infrastructure (operation and provision of information systems and technical devices (computers, servers, etc.)); Security measures.
  • Legal Basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Further information on processing procedures, methods, and services:

  • Provision of online offerings on rented storage space: For providing our online offerings, we utilize storage space, computing capacity, and software obtained from a respective server provider (also known as “web hoster”); Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
  • Collection of access data and log files: Access to our online offering is logged in the form of so-called “server log files.” Server log files may include the address and name of accessed web pages and files, date and time of access, transmitted data volumes, indication of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), and, typically, IP addresses and the requesting provider. Server log files can be used for security purposes, such as avoiding server overload (especially in the case of abusive attacks, so-called DDoS attacks), and ensuring server utilization and stability; Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR). Data deletion: Log file information is stored for a maximum of 30 days and then deleted or anonymized. Data whose further storage is necessary for evidentiary purposes is exempt from deletion until the respective incident is finally clarified.
  • Email transmission and hosting: The web hosting services we use also include the transmission, receipt, and storage of emails. For these purposes, the email addresses of the recipients and senders, as well as further information regarding email transmission (e.g., the involved providers) and the contents of the respective emails, are processed. The aforementioned data may also be processed for spam detection purposes. Please note that emails are generally not sent encrypted over the Internet. While emails are usually encrypted during transit, they are not encrypted on the servers from which they are sent and received, unless an end-to-end encryption method is used. Therefore, we cannot assume responsibility for the transmission path of emails between the sender and receiver on our server; Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
  • WordPress.com: Hosting and software for the creation, provision, and operation of websites, blogs, and other online offerings; Service provider: Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland; Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website: https://wordpress.com; Privacy policy: https://automattic.com/de/privacy/; Data processing agreement: https://wordpress.com/support/data-processing-agreements/. Basis for third-country transfers: EU-US Data Privacy Framework (DPF).

Registration, Login, and User Account

Users can create a user account. As part of the registration process, users are provided with the necessary mandatory information and processed for the purpose of providing the user account based on contractual fulfillment. The processed data includes, in particular, the login information (username, password, and email address).

As part of using our registration and login functions as well as the user account, we store the IP address and the timestamp of the respective user action. The storage is based on our legitimate interests as well as those of the users in protection against misuse and other unauthorized use. Generally, this data is not disclosed to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so.

Users can be informed via email about activities relevant to their user account, such as technical changes.

  • Processed Data Types: Inventory data (e.g., names, addresses); Contact details (e.g., email, phone numbers); Content data (e.g., entries in online forms); Meta, communication, and process data (e.g., IP addresses, timestamps, identification numbers, consent status).
  • Concerned Individuals: Users (e.g., website visitors, users of online services).
  • Purposes of Processing: Provision of contractual services and fulfillment of contractual obligations; Security measures; Management and response to inquiries. Provision of our online offer and user-friendliness.
  • Legal Basis: Contract performance and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR). Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Further Notes on Processing Procedures, Processes, and Services:

  • Registration with Pseudonyms: Users may use pseudonyms instead of real names as usernames; Legal Basis: Contract performance and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR).
  • User Profiles Are Not Public: User profiles are not publicly visible or accessible.
  • Data Deletion after Termination: If users terminate their user account, their data related to the user account will be deleted, subject to a legal permit, obligation, or user consent; Legal Basis: Contract performance and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR).
  • No Obligation to Retain Data: It is the users’ responsibility to secure their data upon termination before the end of the contract. We are entitled to irrevocably delete all user data stored during the contract period; Legal Basis: Contract performance and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR).

Blogs and Publication Media

We use blogs or similar means of online communication and publication (hereinafter referred to as “publication medium”). The data of the readers are only processed for the purposes of the publication medium to the extent necessary for its presentation and communication between authors and readers or for security reasons. Otherwise, we refer to the information on the processing of visitors to our publication medium within the scope of this privacy policy.

  • Processed Data Types: Inventory data (e.g., names, addresses); Contact details (e.g., email, phone numbers); Content data (e.g., entries in online forms); Usage data (e.g., visited websites, interest in content, access times); Meta, communication, and process data (e.g., IP addresses, timestamps, identification numbers, consent status).
  • Concerned Individuals: Users (e.g., website visitors, users of online services).
  • Purposes of Processing: Provision of contractual services and fulfillment of contractual obligations; Feedback (e.g., collecting feedback via online form); Provision of our online offer and user-friendliness; Security measures. Management and response to inquiries.
  • Legal Basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Further Notes on Processing Procedures, Processes, and Services:

  • Comments and Contributions: When users leave comments or other contributions, their IP addresses may be stored on the basis of our legitimate interests. This is done for our security in case someone leaves unlawful content in comments and contributions (insults, prohibited political propaganda, etc.). In this case, we may be held liable for the comment or contribution and therefore have an interest in the identity of the author.

    Furthermore, we reserve the right to process users’ information for the purpose of spam detection based on our legitimate interests.

    On the same legal basis, we reserve the right to store users’ IP addresses for the duration of surveys and to use cookies to prevent multiple votes.

    The information provided by users in comments and contributions, such as contact and website information, as well as the content-related information, will be stored by us indefinitely until users object; Legal Basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

  • Akismet Anti-Spam Check: Akismet Anti-Spam Check – Based on our legitimate interests, we use the service “Akismet.” Akismet distinguishes comments from real people from spam comments. For this purpose, all comment details are sent to a server in the USA, where they are analyzed and stored for comparison purposes for four days. If a comment is classified as spam, the data will be stored beyond this period. This information includes the entered name, email address, IP address, comment content, referrer, information about the browser used, computer system, and time of entry.

    Users are welcome to use pseudonyms or refrain from entering their name or email address. They can completely prevent the transmission of data by not using our comment system. That would be a shame, but unfortunately, we do not see any alternatives that work as effectively;Service Providers: Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland; Legal Basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website: https://automattic.com; Privacy Policy: https://automattic.com/privacy/. Basis for Third Country Transfer: EU-US Data Privacy Framework (DPF).

  • UpdraftPlus: Backup software and backup storage; Service Provider: Simba Hosting Ltd., 11 Barringer Way, St. Neots, Cambs., PE19 1LW, UK; Legal Basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website: https://updraftplus.com/. Privacy Policy: https://updraftplus.com/data-protection-and-privacy-centre/.

Contact and Inquiry Management

When contacting us (e.g., by mail, contact form, email, telephone, or via social media) as well as within existing user and business relationships, the information of the inquiring individuals is processed as far as necessary to answer the contact inquiries and any requested measures.

  • Processed Data Types: Contact data (e.g., email, phone numbers); Content data (e.g., entries in online forms); Usage data (e.g., visited websites, interest in content, access times); Meta, communication, and process data (e.g., IP addresses, time stamps, identification numbers, consent status).
  • Affected Persons: Communication partners.
  • Purposes of Processing: Contact inquiries and communication; Management and response to inquiries; Feedback (e.g., collecting feedback via online form). Provision of our online offer and user-friendliness.
  • Legal Basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR). Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR).

Further Information on Processing Procedures, Procedures, and Services:

  • Contact Form: When users contact us via our contact form, email, or other communication channels, we process the data provided to us in this context to handle the reported issue; Legal Basis: Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Newsletter and Electronic Notifications

We only send newsletters, emails, and other electronic notifications (hereinafter “newsletter”) with the consent of the recipients or a legal permission. If the content of a newsletter is specifically described as part of the newsletter registration, it is decisive for the consent of the users. In all other respects, our newsletters contain information about our services and us.

To subscribe to our newsletters, it is generally sufficient to provide your email address. However, we may ask you to provide a name for personalized addressing in the newsletter or further information if it is necessary for the purposes of the newsletter.

Double-Opt-In Procedure: Newsletter registration generally takes place using a double opt-in procedure. This means that after registration, you will receive an email asking you to confirm your registration. This confirmation is necessary to prevent anyone from registering with someone else’s email address. Newsletter registrations are logged to be able to provide evidence of the registration process in accordance with legal requirements. This includes storing the registration and confirmation times as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

Deletion and Restriction of Processing: We may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them to be able to prove a previously given consent. The processing of this data is limited to the purpose of potentially defending against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed. In the case of obligations to permanently observe objections, we reserve the right to store the email address solely for this purpose in a blocking list.

The logging of the registration process is based on our legitimate interests for the purpose of proving its proper execution. If we commission a service provider to send emails, this is based on our legitimate interests in an efficient and secure delivery system.

Content:

Information about us, our services, promotions, and offers.

  • Processed Data Types: Inventory data (e.g., names, addresses); Contact details (e.g., email, phone numbers); Meta, communication, and process data (e.g., IP addresses, timestamps, identification numbers, consent status).
  • Affected Persons: Communication partners.
  • Purposes of Processing: Direct marketing (e.g., via email or postal).
  • Legal Basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).
  • Opt-Out Option: You can cancel the receipt of our newsletter at any time, i.e., revoke your consent or object to further receipt. You can find a link to unsubscribe from the newsletter either at the end of each newsletter or you can use one of the contact options provided above, preferably email, for this purpose.

Advertising Communication via Email, Mail, Fax, or Telephone

We process personal data for the purpose of advertising communication, which can be carried out via various channels such as email, telephone, mail, or fax, in accordance with legal requirements.

Recipients have the right to revoke granted consent at any time or to object to advertising communication at any time.

After revocation or objection, we store the data required to prove the previous authorization for contact or sending for up to three years after the end of the year of revocation or objection on the basis of our legitimate interests. The processing of this data is limited to the purpose of potential defense against claims. Based on the legitimate interest in permanently observing the revocation or objection of users, we also store the data required to avoid further contact (e.g., depending on the communication channel, email address, phone number, name).

  • Processed Data Types: Inventory data (e.g., names, addresses); Contact details (e.g., email, phone numbers).
  • Affected Persons: Communication partners.
  • Purposes of Processing: Direct marketing (e.g., via email or postal).
  • Legal Basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR). Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Plugins and Embedded Functions and Content

We embed functional and content elements into our online offering that are provided by the servers of their respective providers (hereinafter referred to as “third-party providers”). These may include, for example, graphics, videos, or maps (hereinafter collectively referred to as “content”).

The integration always requires that the third-party providers of this content process the IP address of the users, since they could not send the content to their browser without the IP address. The IP address is therefore necessary for the display of this content or functions. We endeavor to only use content from providers who use the IP address solely for the purpose of delivering the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information, such as visitor traffic to the pages of this website. The pseudonymous information may also be stored in cookies on the users’ device and may include technical information about the browser and operating system, referring websites, visit time, as well as other information about the use of our online offering, and may be linked with such information from other sources.

  • Processed Data Types: Usage Data (e.g., visited websites, interest in content, access times); Meta, Communication, and Process Data (e.g., IP addresses, time stamps, identification numbers, consent status).
  • Affected Persons: Users (e.g., website visitors, users of online services).
  • Purposes of Processing: Provision of our online offering and user-friendliness.
  • Legal Basis: Legitimate Interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Further Information on Processing Procedures, Procedures, and Services:

  • Integration of Third-Party Software, Scripts, or Frameworks (e.g., jQuery): We integrate software into our online offering that we retrieve from servers of other providers (e.g., function libraries that we use for the presentation or user-friendliness of our online offering). The respective providers collect the IP addresses of the users and may process them for the purpose of transmitting the software to the users’ browsers, as well as for security purposes, evaluation, and optimization of their offering. – We integrate software into our online offering that we retrieve from servers of other providers (e.g., function libraries that we use for the presentation or user-friendliness of our online offering). The respective providers collect the IP addresses of the users and may process them for the purpose of transmitting the software to the users’ browsers, as well as for security purposes, evaluation, and optimization of their offering; Legal Basis: Legitimate Interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
  • Google Fonts (Self-Hosted): Provision of font files for user-friendly display of our online offering; Service Provider: Google Fonts are hosted on our server, no data is transmitted to Google; Legal Basis: Legitimate Interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
  • OpenStreetMap: We integrate the maps of the “OpenStreetMap” service, which are offered by the OpenStreetMap Foundation (OSMF) based on the Open Data Commons Open Database License (ODbL). OpenStreetMap uses user data exclusively for the purpose of displaying map functions and caching the selected settings. This data may include IP addresses and user location data, which, however, are not collected without their consent (usually as part of the settings of their end devices or browsers); Service Provider: OpenStreetMap Foundation (OSMF); Legal Basis: Legitimate Interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website: https://www.openstreetmap.de. Privacy Policy: https://osmfoundation.org/wiki/Privacy_Policy.

Changes and Updates to the Privacy Policy

We kindly ask you to regularly inform yourself about the content of our privacy policy. We adjust the privacy policy as soon as changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require your cooperation action (e.g., consent) or any other individual notification.

If we provide addresses and contact information of companies and organizations in this privacy policy, please note that the addresses may change over time and we ask you to verify the information before contacting them.

Definitions of Terms

In this section, you will find an overview of the terms used in this privacy policy. Where the terms are legally defined, their legal definitions apply. The following explanations are primarily intended to aid understanding.

  • Personal Data: “Personal data” refers to all information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie), or one or more specific factors expressing the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
  • Controller: The “controller” is the natural or legal person, authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.
  • Processing: “Processing” refers to any operation or set of operations performed on personal data, whether or not by automated means. The term is broad and encompasses virtually any handling of data, including collection, analysis, storage, transmission, or deletion.

Created with the free Privacy Policy Generator by Dr. Thomas Schwenke