Gesellschaft f\u00fcr Datenschutz – Privacy<\/a><\/p>\nCollection of access data and log files<\/h4>\n
Every time our server is accessed, we collect access data, (log files) on the basis of our legitimate interests in acc. with Art. 6, sec.1 (f) GDPR. This includes the name of the website accessed, date and time of access, data file transferred and data volume, notification of success or failure of the data retrieval, browser type and browser version, operating system, referrer URL (previously visited site) and your IP address.<\/p>\n
Log files are collected for security reasons (e.g. investigation of criminal offences) and stored for a period of seven days, after which time they are deleted. Should any data be required for evidence after this time, it will be exempt from deletion until the relevant case has been clarified.<\/p>\n
To guarantee fast and stable connection, hosting has been outsourced to an external provider that processes the above-mentioned log files in accordance with our instructions. The legal basis for this is the pursuit of our legitimate interests in acc. with Art. 6, sec.1 (f) GDPR in conjunction with Art. 28 GDPR.<\/p>\n
Cookies and consent<\/h4>\n
Our website uses cookies and comparable technologies, such as local storage, session storage, or pixels. Cookies are small text files that may be stored on your device. Some cookies are technically necessary for the operation of the website. Others are used to improve usability, ensure security, conduct statistical analysis, or support marketing activities.<\/p>\n
Where the use of a technology is not technically necessary, or where accessing information stored on your device is not strictly necessary to provide a telemedia service expressly requested by you, we will only use it with your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw or amend your consent at any time with future effect via the settings in our cookie banner.<\/p>\n
We use technically necessary cookies and comparable technologies on the basis of Section 25(2) No. 2 TDDDG and, where personal data are processed, Article 6(1)(f) GDPR. Our legitimate interest is the secure, functional, and user-friendly provision of our website.<\/p>\n
Consent management with Borlabs<\/h4>\n
We use the consent management tool Borlabs Cookie<\/strong>, provided by Borlabs GmbH, R\u00fcbenkamp 32, 22305 Hamburg, Germany. Borlabs Cookie is used to obtain, manage, and document your consent to the use of cookies and comparable technologies.<\/p>\nFor this purpose, information about the selection you make in the cookie banner is stored. This processing is necessary to comply with legal documentation obligations and to technically implement the privacy settings you have chosen. The legal basis is Article 6(1)(c) GDPR and our legitimate interest in ensuring legally compliant website operation pursuant to Article 6(1)(f) GDPR. Your consent selection is stored for [storage period, e.g. 6 months] or deleted earlier if you change your settings or delete the relevant data in your browser.<\/p>\n
Functional website services<\/h4>\n
WPML<\/strong><\/p>\nWe use WPML<\/strong> to provide our website in multiple languages. In this context, a cookie may be stored to recognise your selected language and apply this preference during future visits.<\/p>\nThe processing is necessary to provide the language version selected by you. The legal basis is Section 25(2) No. 2 TDDDG and Article 6(1)(f) GDPR. Our legitimate interest is the user-friendly, multilingual presentation of our website. Where WPML is operated exclusively on our own systems, no data are transferred to the provider of WPML.<\/p>\n
Popup Maker<\/strong><\/p>\nWe use Popup Maker<\/strong> to display notices, dialogue windows, and other overlays on our website. Cookies or comparable storage technologies may be used to determine, for example, whether a notice has already been displayed to you or whether you have closed a pop-up.<\/p>\nThe processing serves the user-friendly management of website notices. Where necessary for technical operation or to prevent repeated display of the same notice, processing is carried out on the basis of Section 25(2) No. 2 TDDDG and Article 6(1)(f) GDPR. If additional personal data are processed or non-essential storage technologies are used, this will occur only with your consent.<\/p>\n
Security services<\/h4>\n
Wordfence<\/strong><\/p>\nWe use Wordfence<\/strong> to protect our WordPress website against attacks, malware, unauthorised access, and misuse. For this purpose, Wordfence may process, in particular, IP addresses, URLs accessed, timestamps, browser and request information, unsuccessful login attempts, and security-related events.<\/p>\nThe processing is carried out to ensure the integrity, confidentiality, and availability of our IT systems on the basis of Article 6(1)(f) GDPR. Our legitimate interest is the protection of our website, its users, and our systems against attacks and misuse. Where Wordfence stores or accesses information on your device that is technically necessary for this security function, this is carried out on the basis of Section 25(2) No. 2 TDDDG.<\/p>\n
Cloudflare Turnstile<\/strong><\/p>\nTo protect forms and other input options against automated access and spam, we use Cloudflare Turnstile<\/strong>. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.<\/p>\nTurnstile assesses technical information to determine whether an input is likely to originate from a natural person or an automated system. In this context, information such as your IP address, browser and device information, the page accessed, timestamps, and security-related signals may be processed. The processing serves to secure our website and prevent misuse of forms.<\/p>\n
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in protecting our website and communication channels against spam, automated attacks, and other misuse. Where access to information stored on your device is technically necessary for the security check, this is carried out on the basis of Section 25(2) No. 2 TDDDG.<\/p>\n
Personal data may be processed in the United States or other countries outside the European Economic Area. Any transfer is carried out in compliance with Articles 44 et seq. GDPR. Further information can be found in Cloudflare\u2019s privacy policy: https:\/\/www.cloudflare.com\/privacypolicy\/<\/p>\n
Google reCAPTCHA<\/strong><\/p>\nWe use Google reCAPTCHA<\/strong> to protect forms on our website against automated access, spam, and misuse. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.<\/p>\nreCAPTCHA analyses the behaviour of website visitors in order to determine whether an interaction is performed by a natural person or by an automated system. For this purpose, Google may process, in particular, your IP address, information about your browser and device, operating system, language settings, screen and window settings, mouse movements, keyboard interactions, time spent on the website, pages visited, referrer URL, cookies, and other security-related signals.<\/p>\n
The processing is carried out to protect our website and communication channels against spam, automated attacks, and other misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in ensuring the security and functionality of our website and its forms. Where the use of reCAPTCHA involves the storage of, or access to, information on your device that is not technically necessary, such processing takes place only with your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.<\/p>\n
Personal data may be processed in the United States or other countries outside the European Economic Area. Any transfer is carried out in accordance with the requirements of Articles 44 et seq. GDPR, including, where applicable, on the basis of an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses.<\/p>\n
Further information on Google\u2019s privacy practices and the terms of use for reCAPTCHA is available at:<\/p>\n
\n- https:\/\/policies.google.com\/privacy<\/li>\n
- https:\/\/policies.google.com\/terms<\/li>\n<\/ul>\n
Communication and chat<\/h4>\n
ChatBot4You<\/strong><\/p>\nA chatbot from the company ConRat WebSolutions GmbH<\/strong> Gartenstra\u00dfe 4, 37281 Wanfried (Germany), https:\/\/www.chatbot4you.io (hereinafter referred to as ConRat), is integrated on our website. The chatbot is an intelligent software solution that makes contact with website visitors and can independently request or provide certain information. The communication behaviour of the chatbot is programmed by the operator of this website. ConRat is not involved in the programming of the communication behaviour and merely provides the software for this purpose.<\/p>\nIf you (as a website visitor) contact the chatbot integrated on this page, it saves the communication content. The communication content can be deleted manually by each communication partner at any time; otherwise, the communication content is deleted after 30 days at the latest.<\/p>\n
ChatBot4You<\/strong> sets a technically necessary cookie to enable you to make contact via the chat window. An individually generated key is stored in the ChatBot4You cookie, which can be used for unique communication between you and us. It is a session cookie that is only valid during your browser session.<\/p>\nThe chatbot also stores a cookie in your browser in order to recognise you the next time you visit this website and to provide you with additional functions in the chat. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of the chat may be restricted. The cookies remain on your end device until you delete them, but are deactivated no later than 30 days after they are stored.<\/p>\n
All data processed via the chatbot is transmitted in encrypted form to a data centre in Germany provided by ConRat. However, the website operator is solely responsible for data processing. ConRat, on the other hand, is only a processor. The website operator has concluded a data processing agreement with ConRat. This contract is required by law and guarantees GDPR-compliant data processing by ConRat.<\/p>\n
The chatbot is used on the basis of our legitimate interest in communicating with our website visitors as easily and effectively as possible (Art. 6 para. 1 lit. f GDPR). Conflicting rights of website visitors are not apparent.<\/p>\n
Tawk.to<\/strong><\/p>\nWe may use a live chat function provided by Tawk.to inc.<\/strong>, 187 East Warm Springs Rd, SB298, Las Vegas, NV 89119, USA. If you activate the live chat after giving your consent, a connection to Tawk.to servers is established.<\/p>\nIn this context, Tawk.to may process, in particular, your IP address, the date and time of access, technical information about your browser and device, the page visited, and the content you provide in the chat. The legal basis is your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG, where information is stored on or accessed from your device.<\/p>\n
A transfer of personal data to the United States cannot be ruled out. Any such transfer takes place only subject to the requirements of Articles 44 et seq. GDPR, in particular on the basis of an adequacy decision, where applicable, or appropriate safeguards such as the EU Standard Contractual Clauses. Further information is available at: https:\/\/www.tawk.to\/privacy-policy\/<\/p>\n
Google reCAPTCHA<\/strong><\/p>\nWe use Google reCAPTCHA<\/strong> to protect forms on our website against automated access, spam, and misuse. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.<\/p>\nreCAPTCHA analyses the behaviour of website visitors in order to determine whether an interaction is performed by a natural person or by an automated system. For this purpose, Google may process, in particular, your IP address, information about your browser and device, operating system, language settings, screen and window settings, mouse movements, keyboard interactions, time spent on the website, pages visited, referrer URL, cookies, and other security-related signals.<\/p>\n
The processing is carried out to protect our website and communication channels against spam, automated attacks, and other misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in ensuring the security and functionality of our website and its forms. Where the use of reCAPTCHA involves the storage of, or access to, information on your device that is not technically necessary, such processing takes place only with your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.<\/p>\n
Personal data may be processed in the United States or other countries outside the European Economic Area. Any transfer is carried out in accordance with the requirements of Articles 44 et seq. GDPR, including, where applicable, on the basis of an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses.<\/p>\n
Further information on Google\u2019s privacy practices and the terms of use for reCAPTCHA is available at:<\/p>\n
\n- https:\/\/policies.google.com\/privacy<\/li>\n
- https:\/\/policies.google.com\/terms<\/li>\n<\/ul>\n
Statistics and marketing<\/h4>\n
Google Tag Manager<\/strong><\/p>\nWe use Google Tag Manager<\/strong>, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to centrally manage and deploy website tags, for example for analytics or marketing services.<\/p>\nGoogle Tag Manager does not generally process data for its own analytics purposes. However, accessing our website may establish a connection to Google servers, and Google Tag Manager may trigger additional services. Therefore, Google Tag Manager is loaded only with your consent, unless it is used exclusively to implement your privacy settings in a technically necessary manner.<\/p>\n
The legal basis is Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with future effect through the privacy settings. Personal data may be processed in the United States or other third countries. Further information can be found at: https:\/\/policies.google.com\/privacy<\/p>\n
Google Analytics<\/strong><\/p>\nWe use Google Analytics<\/strong>, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to analyse the use of our website and improve our services. Google Analytics may use cookies or comparable technologies and process, among other things, information on website usage, technical data about your browser and device, IP address, page views, time spent on pages, and interactions.<\/p>\nGoogle Analytics is activated only with your consent. The legal basis is Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with future effect through the privacy settings.<\/p>\n
Where possible, we use privacy-friendly settings, including shortened or anonymised processing of IP addresses, the deactivation of unnecessary Google Signals, and restricted data sharing. Personal data may nevertheless be processed in the United States or other third countries. Further information can be found at: https:\/\/policies.google.com\/privacy<\/p>\n
Google Ads<\/strong><\/p>\nWe use Google Ads<\/strong>, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads enables us to measure the success of advertising campaigns, particularly through conversion tracking, and, where applicable, to display or manage interest-based advertising.<\/p>\nIf you have given your consent, cookies, pixels, or comparable technologies may be used. In this context, information such as IP address, browser and device information, pages visited, interactions, advertising identifiers, and events such as the submission of a form may be processed. If remarketing is enabled, this information may be used to display interest-based advertisements to visitors to our website on other websites.<\/p>\n
The processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with future effect through the privacy settings. Personal data may be processed in the United States or other third countries. Further information can be found at: https:\/\/policies.google.com\/privacy<\/p>\n
External media and maps<\/h4>\n
Google Maps<\/strong><\/p>\nWe may embed maps provided by Google Maps<\/strong>, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Maps are loaded only after you have given your consent. When you activate the map function, a connection to Google servers is established.<\/p>\nIn this context, Google may process, in particular, your IP address, the page accessed, the date and time of access, and technical information about your browser and device. If you are logged in to a Google service, Google may be able to associate the processing with your user account.<\/p>\n
The legal basis is your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with future effect. Personal data may be processed in the United States or other third countries. Further information can be found at: https:\/\/policies.google.com\/privacy<\/p>\n
External scripts and CDNs<\/h4>\n
jqueryscript.net<\/strong><\/p>\nOur website may load JavaScript or CSS files through the external content delivery network jqueryscript.net<\/strong>. When such a file is accessed, your browser establishes a connection to the provider\u2019s servers. In this context, information such as your IP address, the time of access, browser type, operating system, requested file, and, where applicable, the previously visited website may be transmitted for technical reasons.
Where the integration is not technically necessary, it is carried out only with your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.<\/p>\nStorage Period<\/h4>\n
Unless a specific storage period is stated in this Privacy Policy, we retain personal data only for as long as necessary for the respective purpose. Cookies and comparable storage technologies are stored either for the duration of the session or for the period specified in the cookie banner, depending on their function. You can delete cookies at any time through your browser settings or restrict the storage of cookies.<\/p>\n
Updating privacy policy<\/h4>\n
From time to time, we update this privacy policy statement to keep it in line with new legal requirements, jurisdictions or with changing processing methods in our company. We therefore expressly reserve the right to make alterations to this policy.<\/p>\n
Information on data subject rights<\/h4>\n
Should we process any of your personal data, this makes you a data subject as defined by the GDPR and you have the following rights which the controller must facilitate.<\/p>\n
Right of access and data portability<\/h4>\n
You have the right to obtain information on any personal data which is stored about you.<\/p>\n
You have the right to receive the data requested in a commonly used electronic form.<\/p>\n
Right to rectification<\/h4>\n
You have the right to demand from the controller the rectification of any personal data concerning you which is inaccurate. Taking into account the purpose of the processing, you have the right to demand that any incomplete personal data be completed.<\/p>\n
Right to restriction<\/h4>\n
Under the following conditions, you have the right to demand that the processing of your personal data be restricted:<\/p>\n
\n- The accuracy of the personal data is contested by you, for a period enabling the controller to verify the accuracy of the personal data in question.<\/li>\n
- The processing is unlawful and you reject the deletion of the data, requesting instead the restriction of their use.<\/li>\n
- The controller no longer needs the personal data for the purposes of the processing but they are required by you for the establishment, exercise or defence of legal claims, or if<\/li>\n
- you, as the data subject, have lodged an objection to the processing of the data, pending verification of whether the legitimate interests of the controller override your own.<\/li>\n<\/ol>\n
If processing has been restricted, the personal data in question shall, with the exception of storage, only be processed with the data subject\u2019s (i.e. your) consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. We will inform you before the restriction is lifted.<\/p>\n
Right to deletion<\/h4>\n
Under the following conditions, you can demand the deletion of any personal data affecting you:<\/p>\n
\n- The personal data are no longer needed for the purpose for which they were originally collected or otherwise processed.<\/li>\n
- You have withdrawn your consent and there is no further legal basis for the processing.<\/li>\n
- You have lodged an objection to the processing and there are no overriding legitimate grounds for the processing.<\/li>\n
- The personal data have been unlawfully processed.<\/li>\n
- The personal data have to be erased to comply with a legal obligation in Union or Member State law to which the controller is subject.<\/li>\n
- The personal data were collected in relation to the use of web services.<\/li>\n<\/ol>\n
Right to revocation of consent<\/h4>\n
You have the right to withdraw your consent to the processing of your personal data. The withdrawal of consent does not affect the lawfulness of any processing which was based on previously given consent before its withdrawal.<\/p>\n
Right to information<\/h4>\n
If you have invoked your right to rectification, erasure or limitation of the processing, we are obliged to inform all those who have received this data of the rectification, erasure or limitation of the data in question, unless this involves a disproportionate effort or expenditure, or it is impossible.<\/p>\n
Right to object<\/h4>\n
As the data subject, you have the right to object to the processing of your personal data, which is based on the points (e) or (f) of Article 6 (1), at any time on grounds relating to your own particular situation; including profiling based on those points. The controller shall then no longer process your personal data unless compelling legitimate grounds for the processing can be proven, which override the interests, rights and freedom of you as the data subject, or which show the processing to be necessary for the establishment, exercise or defence of legal claims.<\/strong><\/p>\nWhere personal data are processed for direct marketing purposes, you, as the data subject, have the right to object at any time to the processing of your personal data for such marketing. This also includes profiling to the extent that it is related to such direct marketing.<\/strong><\/p>\nAutomated individual decision-making, including profiling<\/h4>\n
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significant affects. This does not apply if the decision<\/p>\n
\n- is necessary for entering into or fulfilling a contract between yourself and the controller,<\/li>\n
- is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights, freedoms and legitimate interests or<\/li>\n
- is based on your explicit consent.<\/li>\n<\/ol>\n
Decisions referred to in paragraph 2 must not be based on special categories of personal data referred to in Art. 9, sec.1 GDPR, unless points (a) or (g) of Art. 9, sec. 2 apply and suitable measures to safeguard your rights, freedoms and legitimate interests as the data subject are in place.<\/p>\n
In the cases referred to in points (1) and (3), the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.<\/p>\n
Right to complain with a supervisory authority<\/h4>\n
You have the right to complain to a supervisory authority, irrespective of any other administrative or judicial remedy, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data contravenes the GDPR.<\/p>\n
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy in acc. with Art. 78 GDPR.<\/p>\n
Non-provision of personal data<\/h4>\n
Should you not provide us with personal data which we require for contractual purposes, the general consequence of this will be that the contract cannot not be concluded. We can inform you of whether provision of personal data, in individual cases, is a statutory requirement or a contractual necessity and of the possible consequences of the failure to provide such data.<\/p>\n
[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"
Privacy policy Introduction With this policy…<\/p>\n","protected":false},"author":4,"featured_media":2606,"parent":0,"menu_order":640,"comment_status":"closed","ping_status":"closed","template":"template-fullcontent.php","meta":{"_acf_changed":false,"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"class_list":["post-4421","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.gifas.de\/en\/wp-json\/wp\/v2\/pages\/4421","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gifas.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.gifas.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.gifas.de\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gifas.de\/en\/wp-json\/wp\/v2\/comments?post=4421"}],"version-history":[{"count":9,"href":"https:\/\/www.gifas.de\/en\/wp-json\/wp\/v2\/pages\/4421\/revisions"}],"predecessor-version":[{"id":40642,"href":"https:\/\/www.gifas.de\/en\/wp-json\/wp\/v2\/pages\/4421\/revisions\/40642"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gifas.de\/en\/wp-json\/wp\/v2\/media\/2606"}],"wp:attachment":[{"href":"https:\/\/www.gifas.de\/en\/wp-json\/wp\/v2\/media?parent=4421"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}