Data protection

We, “urbnups UG (haftungsbeschränkt)” take the protection of your personal data seriously and would like to inform you about data protection in our company.

We believe that you should always be aware of what data we collect from you and how we use it. Also, we think you should always have effective control over it. We want to empower you to make the best possible decisions about the information you share with us – that is the fundamental purpose of this privacy policy.

As part of our data protection responsibility, additional obligations have been imposed on us by the entry into force of the EU General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter: “DS-GVO” ) in order to protect personal data of the person affected by processing ( we address you as the data subject in the following also as “user” ).

Insofar as we decide on the purposes and means of data processing either alone or together with others, this primarily includes the obligation to inform you transparently about the type, scope, purpose, duration and legal basis of the processing (cf. Art. 13 and 14 DS- GMO). With this declaration (hereinafter: ” Privacy Policy “) we inform you how your personal data is processed by us.

Our privacy policy is modular. They consist of a general part for any processing of personal data and processing situations that come into play every time a website is called up (A. General) and a special part, the content of which relates only to the processing situation specified there with the designation of the respective offer or product refers, in particular to visits to websites (B. Visiting websites) and mobile apps (C. Data protection declaration for mobile apps) described in more detail here, as well as information about the web analytics measures used here (D. Web tracking using Google Analytics).

(1) Definitions

Based on the model of Art. 4 DS-GVO, this data protection notice is based on the following definitions:

– “Personal data” (Art. 4 No. 1 DS-GVO) is all information relating to an identified or identifiable natural person (“user”). A person can be identified if you can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, an online identifier, location data or using information about your physical, physiological, genetic, psychological, economic, cultural or social identity characteristics can be identified. The identifiability can also be provided by linking such information or other additional knowledge. It is irrelevant how the information came about, its form or its embodiment (photos, video or sound recordings can also contain personal data).

– “Processing” (Art. 4 No. 2 DS-GVO) is any process in which personal data is handled, whether with or without the help of automated (i.e. technology-supported) processes. This includes, in particular, collecting (ie acquiring), recording, organizing, arranging, storing, adapting or changing, reading out, querying, using, disclosing through transmission, distribution or other provision, comparison , the linking, the restriction, the deletion or the destruction of personal data as well as the change of an objective or purpose on which data processing was originally based.

– “Responsible person” (Art. 4 No. 7 DS-GVO) is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data.

– “Third party” (Art. 4 No. 10 DS-GVO) is any natural or legal person, public authority, agency or other body other than the user, the person responsible, the processor and the persons who are under the direct responsibility of the person responsible or processor are authorized to process the personal data; this also includes other corporate legal entities.

– “Processor” (Art. 4 No. 8 DS-GVO) is a natural or legal person, authority, institution or other body that processes personal data on behalf of the person responsible, in particular in accordance with his instructions (e.g. IT Service provider). In terms of data protection law, a processor is in particular not a third party.

– “Consent” (Art. 4 No. 11 DS-GVO) of the data subject means any voluntary, informed and unequivocal expression of will in the specific case in the form of a declaration or other clear confirmatory action with which the data subject agrees indicates that she consents to the processing of her personal data.

(2) Name and address of the person responsible for processing

We are responsible for the processing of your personal data within the meaning of Art. 4 No. 7 DS-GVO:

urbnups UG (limited liability)

Osterstrasse 102, 20259 Hamburg

If you have any questions or suggestions about data protection, you are welcome to email our data protection officer [email protected] .

For more information about our company, please refer to the imprint information on our website: https://urbnups.com (link to imprint).

(3) Legal bases for data processing

In principle, any processing of personal data is prohibited by law and is only permitted if the data processing falls under one of the following justifications:

– Art. 6 para. 1 p. 1 lit. a DS-GVO (“consent”): If the user has voluntarily, in an informed manner and unequivocally indicated by a declaration or other clear confirmatory action that he/she consents to the processing of personal data concerning him/her for one or more specific purposes agrees;

– Art. 6 para. 1 p. 1 lit. b DS-GVO: If the processing is necessary to fulfill a contract to which the user is a party or to carry out pre-contractual measures that are carried out at the request of the user;

– Art. 6 para. 1 p. 1 lit. c DS-GVO: If the processing is necessary to fulfill a legal obligation to which the user is subject (e.g. a statutory retention obligation);

– Art. 6 para. 1 p. 1 lit. d DS-GVO: If the processing is necessary to protect the vital interests of the user or another natural person;

– Art. 6 para. 1 p. 1 lit. e DS-GVO: If the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been assigned to the user or

– Art. 6 para. 1 p. 1 lit. f DS-GVO (“legitimate interests”): If the processing is necessary to protect the legitimate (in particular legal or economic) interests of the user or a third party, provided that the conflicting interests or rights of the user do not prevail (especially if this is is a minor).

For the processing operations we carry out, we indicate the applicable legal basis in the following. Processing can also be based on several legal bases.

(4) Data Erasure and Retention Period

For the processing operations we carry out, we state below how long the data will be stored by us and when it will be deleted or blocked. Unless an express storage period is specified below, your personal data will be deleted or blocked as soon as the purpose or legal basis for storage no longer applies. In principle, your data will only be stored on our servers for as long as you have an account with us, subject to any transfer that may take place in accordance with the provisions in A.(7) and A.(8).

However, storage can take place beyond the specified time in the event of an (impending) legal dispute with you or other legal proceedings or if storage is provided for by statutory provisions to which we are subject as the person responsible (e.g. Section 257 HGB, Section 147 AO). . If the storage period prescribed by the statutory provisions expires, the personal data will be blocked or deleted, unless further storage by us is necessary and there is a legal basis for this.

(5) Data Security

We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties (e.g. TSL encryption for our website), taking into account the state of the art and the implementation costs and the nature, scope, context and purpose of the processing and the existing risks of a data breach (including its likelihood and impact) for the data subject. Our security measures are continuously improved in line with technological developments.

We will be happy to provide you with more information on this upon request. To do this, please contact our data protection officer (see under A.(2)).

(6) Cooperation with processors

As with any larger company, we also use external domestic and foreign service providers to handle our business transactions (e.g. for the areas of IT, logistics, telecommunications, sales and marketing). They only act according to our instructions and have been contractually obliged to comply with the data protection regulations in accordance with Art. 28 DS-GVO.

(7) Requirements for the transfer of personal data to third countries

As part of our business relationships, your personal information may be shared or disclosed with third party companies. These may also be located outside the European Economic Area (EEA), i.e. in third countries. Such processing is carried out solely to fulfill contractual and business obligations and to maintain your business relationship with us. We will inform you about the respective details of the transfer below at the relevant points.

The European Commission certifies some third countries through so-called adequacy decisions a data protection comparable to the EEA standard (a list of these countries and a copy of the adequacy decisions can be found here: http://ec.europa.eu/justice/data-protection/ international-transfers/adequacy/index_en.html). In other third countries, to which personal data may be transferred, there may not be a consistently high level of data protection due to a lack of legal provisions. If this is the case, we make sure that data protection is adequately guaranteed. This is possible via binding company regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct. Please contact our data protection officer (see under A.(3)) if you would like more information on this.

(8) No automated decision-making (including profiling)

We do not intend to use any personal information collected from you for any automated decision-making process (including profiling).

(9) No obligation to provide personal data

We do not make the conclusion of contracts with us conditional on you providing us with personal data beforehand. For you as a customer, there is basically no legal or contractual obligation to provide us with your personal data; however, it may be that we can only provide certain offers to a limited extent or not at all if you do not provide the necessary data. If this should exceptionally be the case with the products we offer presented below, you will be informed of this separately.

(10) Legal obligation to transmit certain data

Under certain circumstances, we may be subject to a special statutory or legal obligation to make lawfully processed personal data available to third parties, in particular public bodies (Art. 6 Para. 1 S. 1 lit. c DS-GVO).

(11) Your Rights

You can assert your rights as a user with regard to your processed personal data at any time using the contact details given under A. (2) above. As a user, you have the right:

– to request information about your data processed by us in accordance with Art. 15 DS-GVO. In particular, you can obtain information about the processing purposes, the category of data, the categories of recipients to whom your data was or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right of appeal , the origin of your data, if they were not collected from us, and the existence of automated decision-making including profiling and, if necessary, meaningful information about their details;

– in accordance with Art. 16 DS-GVO, to immediately request the correction of incorrect data or the completion of your data stored by us;

– according to Art. 17 DS-GVO to demand the deletion of your data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend required by legal claims;

– according to Art. 18 DS-GVO to demand the restriction of the processing of your data, insofar as the accuracy of the data is disputed by you or the processing is unlawful;

– to receive your data that you have provided to us in a structured, common and machine-readable format in accordance with Art. 20 DS-GVO or to request transmission to another person responsible (“data portability”);

– to object to the processing in accordance with Art. 21 DS-GVO, if the processing is based on Art. 6 para. 1 p. 1 lit. e or lit. f GDPR takes place. This is particularly the case if the processing is not necessary for the performance of a contract with you. Unless it is an objection to direct advertising, we ask that you explain the reasons why we should not process your data as we have done when exercising such an objection. In the event of your justified objection, we will examine the situation and will either discontinue or adjust the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing;

– according to Art. 7 para. 3 DS-GVO your once given consent (also before the validity of the DS-GVO, i.e. before May 25th, 2018) – i.e. your voluntary, informed manner and unequivocally made clear by a declaration or other clear confirmatory action that you agree to the processing of the personal data concerned for one or more specific purposes – to revoke this consent at any time, if you have given such permission. As a result, we are no longer allowed to continue the data processing based on this consent for the future and

– according to Art. 77 DS-GVO you have the right to contact a supervisory authority of your choice in the event of complaints.

(12) Changes to Privacy Policy

As part of the further development of data protection law and technological or organizational changes, our data protection information is regularly checked for any need for adjustment or supplementation. You will be informed of changes in particular on our website at https://urbnups.com. This data protection notice is dated March 2022.

(1) Explanation of the function

You can find information about our company and the services we offer in particular at https://urbnups.com and the associated subpages. When you visit our website, your personal data may be processed.

(2) Processed personal data

When using the website for informational purposes, we collect, store and process the following categories of personal data:

“Log data”: When you visit our website, a so-called log data record (so-called server log files) is stored temporarily and anonymously on our web server. This consists of:

– the page from which the page was requested (so-called referrer URL)

– the name and URL of the requested page

– the date and time of the call

– the description of the type, language and version of the web browser used

– the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established

– the amount of data transferred

– the operating system

– the message whether the call was successful (access status/Http status code)

– the GMT time zone difference

“Contact form data”: When using contact forms, the data transmitted thereby will be processed (e.g. gender, surname and first name, address, company, e-mail address and the time of transmission).

(3) Purpose and legal basis of data processing

We process the personal data specified above in accordance with the provisions of the GDPR, the other relevant data protection regulations and only to the extent necessary. Insofar as the processing of personal data is based on Art. 6 para. 1 p. 1 lit. f DS-GVO, the stated purposes also represent our legitimate interests.

The processing of the log data serves statistical purposes and to improve the quality of our website, in particular the stability and security of the connection (legal basis is Art. 6 Para. 1 S. 1 lit. f DS-GVO).

Contact form data is processed to process customer inquiries (legal basis is Art. 6 Para. 1 S. 1 lit. b or lit. f GDPR).

(4) Duration of data processing

Your data will only be processed for as long as is necessary to achieve the processing purposes mentioned above; the legal bases specified in the context of the processing purposes apply accordingly. With regard to the use and storage period of cookies, please note point A.(5).

Third parties used by us will store your data on their system for as long as is necessary in connection with the provision of services for us in accordance with the respective order.

You can find more information about the storage period and the cookie policy under A.(5).

(5) transfer of personal data to third parties; basis of justification

The following categories of recipients, which are usually processors (see A. (7)), may have access to your personal data:

– Service providers for the operation of our website and the processing of the data stored or transmitted by the systems (e.g. for data center services, payment processing, IT security). The legal basis for the transfer is then Art. 6 para. 1 p. 1 lit. b or lit. f DS-GVO, insofar as it is not a processor;

– State bodies/authorities, insofar as this is necessary to fulfill a legal obligation. The legal basis for the transfer is then Art. 6 para. 1 p. 1 lit. c GDPR;

– Persons used to conduct our business operations (e.g. auditors, banks, insurance companies, legal advisors, supervisory authorities, those involved in company acquisitions or the establishment of joint ventures). The legal basis for the transfer is then Art. 6 para. 1 p. 1 lit. b or lit. f GDPR.

For the guarantees of an appropriate level of data protection when the data is passed on to third countries, see A.(8).

In addition, we only pass on your personal data to third parties if, according to Art. 6 para. 1 p. 1 lit. a DS-GVO have given your express consent to this.

(6) Use of cookies, plugins and other services on our website

  1. a) Cookies

We use cookies on our websites. Cookies are small text files that are assigned and stored on your hard drive by the browser you are using with a characteristic character string and through which certain information flows to the place that sets the cookie. Cookies cannot run programs or transmit viruses to your computer or mobile device and therefore cannot cause any damage. They serve to make the Internet offer more user-friendly and effective overall, i.e. more pleasant for you.

Cookies can contain data that make it possible to recognize the device used. In some cases, however, cookies only contain information on certain settings that cannot be related to individuals. However, cookies cannot directly identify a user.

A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. With regard to their function, a distinction is made between cookies:

– Technical cookies: These are mandatory to move around the website, use basic functions and ensure the security of the website; they do not collect information about you for marketing purposes, nor do they remember which websites you have visited;

– Performance cookies: These collect information about how you use our website, which pages you visit and e.g. B. whether errors occur when using the website; they do not collect any information that could identify you – all information collected is anonymous and is only used to improve our website and find out what interests our users;

– Advertising cookies, targeting cookies: These serve to offer the website user needs-based advertising on the website or offers from third parties and to measure the effectiveness of these offers; Advertising and targeting cookies are stored for a maximum of 13 months;

– Sharing cookies: These are used to improve the interactivity of our website with other services (e.g. social networks); Sharing cookies are stored for a maximum of 13 months.

Any use of cookies that is not absolutely technically necessary represents data processing that can only be carried out with your express and active consent in accordance with Art. Art. 6 para. 1 p. 1 lit. a GDPR is permitted. This applies in particular to the use of advertising, targeting or sharing cookies. In addition, we will only pass on personal data processed by cookies to third parties if, in accordance with Art. 6 Para. 1 p. 1 lit. a DS-GVO have given your express consent to this.

(7). Facebook fan page

You can also find us on Facebook at https://www.facebook.com/urbnups/

If you visit our Facebook fan page, we process certain data from you if you interact with our page, mark a post with “Like” or comment on it or provide other content. The relevant data processing takes place regularly on the basis of our legitimate interest in making the corresponding functions available on our Facebook fan page, as well as on your consent to Facebook (Art. 6 Para. 1 lit. a DSGVO) or your contractual relationship with Facebook (Art. 6 paragraph 1 lit. b GDPR). In addition, together with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, we are responsible for the processing of so-called insights data when you visit our Facebook fan page.

With the help of these insights data, Facebook analyzes the behavior on our Facebook fan page and makes this data available to us in an anonymous form. For this purpose we have worked with Facebook Ireland Ltd. concluded an agreement on joint responsibility for data processing, which you can view here. Facebook Ireland Ltd. undertakes therein, among other things, to assume primary responsibility in accordance with the GDPR for the processing of Insights data and to fulfill all obligations under the GDPR with regard to the processing of Insights data. The processing serves our legitimate economic interests in the optimization and needs-based design of our Facebook fan page, Art. 6 Para. 1 lit f. GDPR. We also draw your attention to the following:

If you visit or like our Facebook page as a registered Facebook user, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”) collects personal data from you. If you are not registered with Facebook and visit the Facebook page, Facebook can collect pseudonymous usage data from you.

In detail, the following information is collected by Facebook:

  • Going to a page, post or video from a page
  • Subscribe or unsubscribe to a page
  • Like or unlike a page or post
  • Recommend a Page in a post or comment
  • Comment, share, or react to a Page post (including how you react)
  • Hide a Page post or report it as spam
  • Clicking a link that leads to the page from another page on Facebook or from a website outside of Facebook
  • Hover over a Page’s name or profile picture to see a preview of the Page’s contents
  • Click the website, phone number, “Get Directions” button, or any other button on a page
  • The information whether you are logged in via a computer or mobile device while visiting a page or interacting with its content.

For more information, see Facebook’s privacy policy .

The processing also takes place through Facebook in the USA. There is no adequacy decision by the EU Commission for the USA. Therefore, we have agreed with Facebook the standard data protection clauses approved by the EU Commission in accordance with Art. 46 para. 2 lit. c GDPR completed.

You can learn more about how Facebook uses your information when you visit or like our Facebook page here .

(1) Information on the processing of personal data

(1) In addition to our online offer, we provide you with a mobile app that you can download onto your mobile device. In the following we inform you about the processing of personal data when using our mobile app. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, password, photo, user behavior.

In addition, you can provide further voluntary information during registration. For example, you can post a profile photo, tell others something about yourself, or enter your blog address. This information is voluntary and not necessary to register. Please note, however, that this information may be visible to other urbnups users depending on your settings. You can decide for yourself whether you want to be found by other users. We collect this data in order to be able to provide you with the corresponding functions of our app, Art. 6 para. 1 lit. b GDPR.

If you log in to urbnups, we also store your IP address for a short period of time in order to be able to detect and ward off possible attacks and mass abusive logins to urbnups (e.g. so-called brute force attacks) by accessing these Temporarily block IP address if necessary. The processing takes place in order to ensure the security of the processing according to Art. 32 DSGVO and due to our legitimate interest in protecting ourselves from improper use of our service (Art. 6 Para. 1 lit. f DSGVO). The storage only takes place as long as it is necessary for these purposes.

(2) Responsible acc. Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is “urbnups UG (limited liability)”, Osterstraße 102, (see our imprint). You can reach our data protection officer at [email protected] or our postal address with the addition “the data protection officer”.

(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your questions. If the request is assigned to a contract, we delete the data arising in this context after the deadlines for the contract period, otherwise after the storage is no longer necessary[in der Regel nach drei Jahren] , or restrict processing if there are statutory retention requirements.

(4) If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will always carefully select and monitor these service providers and inform you in detail about the respective processes below. We also state the specified criteria for the storage period.

(5) You can interact with other users on urbnups, for example by publishing personal moments. You can also follow other users if you want to be kept up to date with new posts from them.

The use of these functions is voluntary. If you use it, we collect the data you enter in order to make it accessible to other urbnups users according to your settings and the function you use.

If you want, we can also inform you by e-mail or push notification if there is any news about your published articles. You can determine which notifications you receive in your settings.

Your data is processed for these purposes in order to be able to provide you with the functions as part of your user contract (Article 6 (1) (b) GDPR).

(2) Your Rights

(1) You have the following rights vis-à-vis a person responsible with regard to the personal data concerning you:

– Right to information

– Right to rectification or erasure

– Right to restriction of processing

– Right to object to processing

– Right to data portability

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

(3) Processing of personal data when using our mobile app

(1) When downloading the mobile app, the required information is transmitted to the App Store, i.e. in particular user name, email address and customer number of your account, time of download, payment information and the individual device code. In addition, the app store independently collects various data and makes analysis results available to you. We have no influence on this data processing and are not responsible for it. We only process the data to the extent necessary to download the mobile app to your mobile device.

You can also download this mobile app directly to your mobile device free of charge from our website. When downloading, further user data is processed via the website, about which we can be found in the data protection declaration of our website[Link] inform.

(2) When using the mobile app, we process the personal data described below to enable convenient use of the functions. If you want to use our mobile app, we process the following data, which is technically necessary for us to offer you the functions of our mobile app and to ensure stability and security, so you have to be processed by us. The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR:

– IP address

– Date and time of the request

– Time zone difference to Greenwich Mean Time (GMT)

– Content of the request (visited page)

– Access Status/HTTP Status Code

– each transmitted amount of data

– previously visited page

– browsers

– Operating system

– Language and version of the browser software.

(3) In order to provide the services of the app, we also need [your device identifier, unique number of the end device (IMEI = International Mobile Equipment Identity), unique number of the network subscriber (IMSI = International Mobile Subscriber Identity), mobile phone number (MSISDN), MAC address for WLAN use, name of your mobile device, e-mail address].

(4) In addition to the aforementioned data, technical tools are used for various functions when you use our mobile app, in particular cookies that can be stored on your device. Cookies are text files or information in a database that are stored in the memory of your mobile device and assigned to the mobile app you are using. Cookies allow certain information to flow to the place that sets the cookie. Cookies cannot run programs or transmit viruses to your mobile device, but primarily serve to make the internet offer faster and more user-friendly. This app uses the following types of cookies, whose functionality and legal basis we will explain below.

– Transient cookies: Such cookies, in particular session cookies, are automatically deleted when the mobile app is closed or when you log out. You save a so-called session ID. In this way, various requests from your browser can be assigned to the joint session and your computer can be recognized when you return to our app.

– Persistent cookies: These are automatically deleted after a specified period, which varies depending on the cookie. You can view the cookies set and their duration at any time in your browser settings and delete the cookies manually.

– Other technologies: These functions are not based on cookies, but on similar technical mechanisms such as Flash cookies, HTML5 objects or an analysis of your browser settings. The result is also that we can use the techniques described below. Here, too, you can of course consent or object.

Mandatory functions that are technically necessary for the functioning of the mobile app: The technical structure of the mobile app requires us to use technologies, in particular cookies. Without these techniques, our app cannot be used (entirely correctly) or the support functions could not be enabled. These are basically transient cookies that are deleted after the end of the usage process, at the latest after 30 days. You cannot opt out of these cookies if you want to use our app. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f GDPR.

Optional cookies when you give your consent: We only set various cookies with your consent, which you can select via the consent manager when you visit our mobile app for the first time. The functions are only activated if you give your consent and can be used in particular to enable us to analyze and improve the use of our mobile app, to make it easier for you to use different browsers or devices, to recognize you during a visit or to place advertising (possibly also to switch to tailor ads to your interests, measure the effectiveness of ads, or show you interest-based ads). The legal basis for this processing is Art. 6 para. 1 p. 1 lit. a GDPR. The revocation of your consent is possible at any time without affecting the admissibility of the processing until the revocation.

(5) If you wish, you can share content from our mobile app on social networks via so-called social plugins. We have provided a two-click solution: If you want to share content via such a plugin, you must first click on an icon of the corresponding social network. This click then activates the plugin of the respective social network for the future.

Only then will various data be transmitted to the respective social network. This can include:

  • Date and time of visit to the website
  • URL of the website you are on
  • URL of the website you previously visited (“referrer”)
  • Browser used
  • Operating system used
  • your IP address

You can withdraw your consent by clicking on “Privacy Settings” at the bottom of the page.

If you are logged in to the respective social network while visiting our site, it cannot be ruled out that the provider will assign the visit to your account. If you use the plugin functions, this information is also transmitted directly from your browser to the respective social network and stored there if necessary. The purpose and scope of the data collection and the further processing and use of the data by the networks can be found in the data protection notices of the respective social network.

(1) This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The purpose of our use of the tool is to enable the analysis of your user interactions on websites and in apps and to use the statistics and reports obtained to improve our offer and make it more interesting for you as a user.

(2) We record the interactions between you as a user of the website and our website primarily using cookies, device/browser data, IP addresses and website or app activities. Your IP addresses are also recorded in Google Analytics in order to ensure the security of the service and to give us, as the website operator and app provider, information about the country, region or location of the respective user (so-called “IP – location determination”). For your protection, however, we naturally use the anonymization function (“IP masking”), which means that within the EU/EEA, Google shortens the IP addresses by the last octet.

(3) Google acts as a processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transmitted to a Google server in the USA and processed there. For these cases, Google has set itself a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in international data transfers. We have also agreed so-called standard contractual clauses with Google, the purpose of which is to maintain an appropriate level of data protection in the third country.

(4) The legal basis for the collection and further processing of the information (will be stored for as long as your account exists) is your consent (Art. 6 Para. 1 S. 1 lit. a DS-GVO). The revocation of your consent is possible at any time without affecting the admissibility of the processing until the revocation. In apps, you can reset the advertising ID under Android or iOS settings. The easiest way to withdraw your consent is to use our consent manager or install the Google browser add-on, which can be accessed via the following link: tools.google.com/dlpage/gaoptout?hl=de/.

(5) You can find more information about the scope of services provided by Google Analytics at marketingplatform.google.com/about/analytics/terms/de/. Google provides information on data processing when using Google Analytics under the following link: support.google.com/analytics/answer/6004245?hl=de/. General information on data processing, which according to Google should also apply to Google Analytics, can be found in Google’s data protection declaration at www.google.de/intl/de/policies/privacy/ .

(6) We use the user ID function. User ID allows us to assign a unique, persistent ID to one or more sessions (and the activities within those sessions) and analyze user behavior across devices. For more information, see the following link: support.google.com/analytics/answer/3123662/. You can withdraw your permission to use this function using the links described above or our Consent Manager.”

(7) We can also check the success of our marketing campaigns by Google linking the information to Google Ads and other products used. You can deactivate the function via the Ads Preferences Manager: www.google.com/settings/ads/onweb/?hl=de/. You can find more information about the link at support.google.com/analytics/answer/6004245?hl=de/.”

(8) We continue to use Google Signals. To do this, we collect additional information in Google Analytics about users who have activated personalized ads. This gives us advanced reports on demographics and interests, and ads can be delivered to you in cross-device remarketing campaigns. If you do not want your data to be processed in this way, you can object to the individual advertisements.”

(9) Finally, the special features Google mentions with regard to tracking in mobile apps are shown here. When a website or app uses the Google Analytics for Apps SDK or the Google Analytics for Firebase SDK, a specific App Instance ID is recorded in Google Analytics. This is a randomly generated number that identifies a single app install when a user installs the app for the first time (support.google.com/analytics/answer/6004245?hl=en). An objection or revocation against the processing is possible on mobile systems by restricting and resetting the advertising ID on Android or iOS. If the reset is done in the smartphone, the app instance ID is also reset.