Data Protection

Please note: This English version of the Privacy Policy is provided for convenience and information purposes only. In the event of any discrepancy between the English and German versions, the German version shall prevail.

1. Privacy at a Glance

General Information

The following information provides an overview of what happens to your personal data when you visit this website. Personal data refers to any information that can be used to identify you personally. For detailed information on data protection, please refer to the Privacy Policy set out below.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Contact details can be found under “Information on the Data Controller” in this Privacy Policy.

How do we collect your data?
Some data is collected when you provide it to us directly, for example by entering information into a contact form.
Other data is collected automatically, or with your consent, by our IT systems when you visit the website. This primarily includes technical data such as your internet browser, operating system, or the time of access. This data is collected automatically as soon as you enter the website.

What do we use your data for?
Some data is collected to ensure the proper functioning and provision of the website.
Other data may be used to analyse user behaviour. If contracts can be concluded or initiated through this website, the data transmitted may also be processed for quotations, orders, or other business enquiries.

What rights do you have regarding your data?
You have the right at any time to obtain information free of charge about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of your personal data. If you have given consent to data processing, you may withdraw that consent at any time with future effect. Furthermore, under certain circumstances, you have the right to request restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority. If you have any questions regarding data protection or your personal data, you may contact us at any time.

Analytics and Third-Party Tools

When visiting this website, your browsing behaviour may be statistically analysed. This is primarily done using analytics tools. Detailed information on these analytics tools can be found in the sections below.

2. Hosting

We host the content of our website with the following providers:

All-Inkl

The provider is:
ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

Further information can be found in All-Inkl’s Privacy Policy: https://all-inkl.com/datenschutzinformationen/

The use of All-Inkl is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the reliable presentation of our website. Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent includes the storage of cookies or access to information on the user’s device (e.g. device fingerprinting). Consent may be withdrawn at any time.

Webflow

The provider is:
Webflow, Inc.
398 11th Street, 2nd Floor
San Francisco, CA 94103
USA

When you visit our website, Webflow collects various log files, including your IP address. Webflow is a tool used for creating and hosting websites. Webflow stores cookies and similar technologies that are necessary for displaying the website, providing certain website functions, and ensuring security.

For further information, please refer to Webflow’s Privacy Policy: https://webflow.com/legal/eu-privacy-policy

The use of Webflow is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the reliable presentation of our website. Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time. Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses (SCCs). Webflow is certified under the EU–US Data Privacy Framework (DPF). Further information can be found at: https://www.dataprivacyframework.gov/participant/6365

3. General Information and Mandatory Disclosures

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy. When you use this website, various types of personal data may be collected. Personal data is any information that can be used to identify you personally. This Privacy Policy explains what data we collect, how we use it, and for what purpose. Please note that data transmission over the Internet (for example, when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties cannot be guaranteed.

Information on the Data Controller

The controller responsible for data processing on this website is:
Christina Blake
Hansegartenstraße 23
78464 Konstanz
Germany
Phone: +49 174 3241480
Email: kontakt@christinablake.de

The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

Data Retention

Unless a more specific retention period is stated in this Privacy Policy, your personal data will remain with us until the purpose for processing no longer applies. If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we are legally required or otherwise permitted to retain it (for example due to tax or commercial retention obligations). In such cases, deletion will take place once those obligations no longer apply.

Legal Bases for Data Processing

Where you have provided consent, your personal data is processed on the basis of Article 6(1)(a) GDPR and, where special categories of personal data are concerned, Article 9(2)(a) GDPR. Where you have explicitly consented to the transfer of personal data to third countries, processing is additionally based on Article 49(1)(a) GDPR. Where consent covers the storage of cookies or access to information on your device, processing is also based on Section 25(1) TDDDG. Consent may be withdrawn at any time. Where processing is necessary for the performance of a contract or pre-contractual measures, processing is based on Article 6(1)(b) GDPR. Where processing is required to comply with a legal obligation, it is based on Article 6(1)(c) GDPR. Processing may also be based on our legitimate interests pursuant to Article 6(1)(f) GDPR. The specific legal basis applicable in each case is explained in the relevant sections of this Privacy Policy.

Recipients of Personal Data

As part of our business activities, we cooperate with various external service providers and partners. In some cases, it is necessary to transfer personal data to these external parties. We disclose personal data only where this is necessary for the performance of a contract, where we are legally obliged to do so (for example, disclosure to tax authorities), where we have a legitimate interest in the disclosure pursuant to Article 6(1)(f) GDPR, or where another legal basis permits such disclosure. Where we engage data processors, personal data is transferred only on the basis of a valid Data Processing Agreement (DPA). In cases of joint processing, a Joint Controller Agreement is concluded.

Withdrawal of Your Consent to Data Processing

Many data processing activities are carried out solely on the basis of your explicit consent. You may withdraw any consent you have previously given at any time with future effect. The lawfulness of any data processing carried out prior to the withdrawal of consent shall remain unaffected.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Article 21 GDPR)

Where personal data is processed on the basis of Article 6(1)(e) or (f) GDPR, you have the right, at any time, to object to the processing of your personal data on grounds relating to your particular situation. This also applies to profiling based on those provisions. The relevant legal basis for processing can be found in this Privacy Policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where processing serves the establishment, exercise, or defence of legal claims (objection pursuant to Article 21(1) GDPR).

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data relating to you for such marketing purposes. This also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Article 21(2) GDPR).

Right to Lodge a Complaint with a Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedies.

Right to Data Portability

You have the right to receive personal data that we process automatically on the basis of your consent or in fulfilment of a contract in a commonly used, machine-readable format. You also have the right to request that such data be transmitted directly to another controller, where technically feasible.

Right of Access, Rectification and Erasure

Within the framework of the applicable legal provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin, recipients, and the purpose of processing. You also have the right to request the correction or deletion of such data. For this purpose, or if you have any further questions regarding personal data, you may contact us at any time.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time to exercise this right. The right to restriction of processing applies in the following circumstances:

• If you contest the accuracy of your personal data stored by us, we generally require time to verify the accuracy of the data. During the verification period, you have the right to request restriction of processing.
• If the processing of your personal data is or has been unlawful, you may request restriction of processing instead of erasure.
• If we no longer require your personal data, but you require it for the establishment, exercise, or defence of legal claims, you have the right to request restriction of processing instead of erasure.
• If you have objected to processing pursuant to Article 21(1) GDPR, a balancing of interests must be carried out. Until it has been determined whose interests prevail, you have the right to request restriction of processing.

Where processing of your personal data has been restricted, such data may only be processed — apart from storage — with your consent, for the establishment, exercise, or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL and TLS Encryption

For security reasons and to protect the transmission of confidential content, such as enquiries or requests that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the change in the browser’s address line from “http://” to “https://” and by the lock symbol displayed in your browser. When SSL or TLS encryption is activated, any data transmitted to us cannot be read by third parties.

Objection to Promotional Emails

The use of contact details published within the scope of our legal notice obligations for the purpose of sending unsolicited advertising and informational material is hereby expressly prohibited. The operators of this website reserve the right to take legal action in the event of the unsolicited sending of advertising information, including spam emails.

4. Data Collection on This Website

Cookies

Our website uses so-called “cookies”. Cookies are small data files that do not cause any damage to your device. They may be stored temporarily for the duration of a session (“session cookies”) or permanently on your device (“persistent cookies”). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

Cookies may originate from us (first-party cookies) or from third-party providers (third-party cookies). Third-party cookies enable the integration of certain third-party services within websites (e.g. payment processing services).

Cookies serve different purposes. Many cookies are technically necessary because certain website functions would not work without them (e.g. shopping cart functions or the display of videos). Other cookies may be used to analyse user behaviour or for marketing purposes.

Cookies that are necessary to carry out electronic communications, provide functions requested by the user, or optimise the website (“necessary cookies”) are stored on the basis of Article 6(1)(f) GDPR, unless another legal basis applies. The website operator has a legitimate interest in the technically error-free and optimised provision of its services.

Where consent has been requested for the storage of cookies or similar technologies, processing is carried out exclusively on the basis of that consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG). Consent may be withdrawn at any time.

You can configure your browser to inform you about the use of cookies, allow cookies only in individual cases, exclude cookies in certain cases or generally, and activate automatic deletion of cookies when the browser is closed. Please note that disabling cookies may limit the functionality of this website. Where additional cookies or services are used on this website, details can be found in the relevant sections of this Privacy Policy.

5. Social Media

LinkedIn

This website uses elements of the LinkedIn network. The provider is: LinkedIn Ireland Unlimited Company, Wilton Plaza (Wilton Place), Dublin 2, Ireland.

Whenever you access a page on this website containing LinkedIn elements, a connection to LinkedIn’s servers is established. LinkedIn is informed that you have visited this website using your IP address. If you click the LinkedIn “Recommend” button while logged into your LinkedIn account, LinkedIn may associate your visit to this website with your user account. Please note that, as the provider of this website, we have no knowledge of the content of the data transmitted to LinkedIn or how LinkedIn uses such data.

The use of this service is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time. Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses (SCCs). Further information is available here: https://www.linkedin.com/help/linkedin/answer/a1343190

For more information about LinkedIn’s privacy practices, please refer to LinkedIn’s Privacy Policy: https://www.linkedin.com/legal/privacy-policy

LinkedIn is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when personal data is processed in the United States. Further information is available at: https://www.dataprivacyframework.gov/participant/5448

6. Analytics Tools and Advertising

Google Tag Manager

We use Google Tag Manager. The provider is: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking, analytics, and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It merely facilitates the management and deployment of tools integrated through it. However, Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.

The use of Google Tag Manager is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the efficient integration and management of various tools on the website. Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time. Google is certified under the EU–US Data Privacy Framework (DPF). Further information is available at: https://www.dataprivacyframework.gov/participant/5780

Google Analytics

This website uses Google Analytics, a web analytics service provided by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to analyse the behaviour of visitors to our website. The website operator receives various usage data, including: page views, time spent on pages, operating systems used, user origin and referral sources. This information is associated with the user’s device. No assignment to a user ID is made. Google Analytics may also record mouse movements, scrolling activity, and clicks. In addition, Google uses modelling techniques and machine-learning technologies to supplement and analyse collected data.

Google Analytics uses technologies that enable user recognition for the purpose of analysing user behaviour, including cookies and device fingerprinting. Information collected by Google regarding the use of this website is generally transmitted to and stored on servers in the United States.

The use of Google Analytics is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time. Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses (SCCs). Further information is available at: https://business.safety.google/adscontrollerterms/sccs/. Google is certified under the EU–US Data Privacy Framework (DPF).

IP Anonymisation
IP anonymisation is enabled on this website. As a result, your IP address is shortened by Google within Member States of the European Union or other states party to the Agreement on the European Economic Area before being transferred to the United States. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there. On behalf of the website operator, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide further services related to website and internet usage. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.

Browser Plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout
Further information about how Google Analytics handles user data can be found in Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245

Google Ads

This website uses Google Ads, an online advertising programme provided by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display advertisements in Google’s search engine results and on third-party websites when users search for specific keywords. Advertisements may also be displayed based on user data available to Google, such as location and interests (audience targeting). As website operators, we can evaluate these data statistically, for example by analysing which search terms triggered our advertisements and how many clicks were generated.

The use of this service is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time. Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses (SCCs). Further information is available at: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/

Google is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when personal data is processed in the United States. Any company certified under the DPF commits to complying with these data protection standards. Further information is available from the provider at: https://www.dataprivacyframework.gov/participant/5780

7. Newsletter

Newsletter Data

If you would like to receive the newsletter offered on this website, we require your email address as well as information that enables us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. No further data are collected unless provided voluntarily. We use this information exclusively for sending the requested newsletter and do not share it with third parties.

The processing of data entered into the newsletter subscription form is carried out solely on the basis of your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent to the storage of your data, your email address, and its use for newsletter distribution at any time, for example by using the unsubscribe link included in each newsletter. The lawfulness of processing carried out prior to withdrawal remains unaffected.

Data provided for the purpose of receiving the newsletter will be stored until you unsubscribe and will be deleted from the mailing list after cancellation or when the purpose for storage no longer applies. We reserve the right to remove or block email addresses from our mailing list at our own discretion within the scope of our legitimate interest pursuant to Article 6(1)(f) GDPR. Data stored for other purposes remain unaffected.

Following your removal from the mailing list, your email address may be stored on a blacklist where necessary to prevent future mailings. Blacklist data are used exclusively for this purpose and are not combined with other data. This serves both your interests and our legitimate interest in complying with legal requirements regarding newsletter distribution. Storage on the blacklist is not subject to a specific retention period. You may object to such storage if your interests outweigh our legitimate interest.

Newsletter Distribution to Existing Customers

If you purchase services from us and provide your email address in this context, we may subsequently use your email address to send newsletters relating to our own similar services, provided that you have been informed of this in advance. In such cases, the newsletter will contain only direct advertising for our own similar services. You may unsubscribe from these newsletters at any time by using the unsubscribe link included in every newsletter.

The legal basis for sending newsletters to existing customers is Article 6(1)(f) GDPR in conjunction with Section 7(3) of the German Act Against Unfair Competition (UWG). Following your unsubscribe request, your email address may be stored on a blacklist in order to prevent future mailings. Blacklist data are used exclusively for this purpose and are not combined with other data. This serves both your interests and our legitimate interest in complying with legal requirements relating to newsletter distribution. Storage on the blacklist is not subject to a specific retention period. You may object to such storage if your interests outweigh our legitimate interest.

8. Plugins and Tools

YouTube

This website embeds videos from YouTube. The provider is: Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit a page on our website that contains an embedded YouTube video, a connection to YouTube’s servers is established. In the process, YouTube is informed which of our pages you have visited. YouTube may also store cookies on your device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube may obtain information about visitors to this website. Among other things, this information is used to compile video statistics, improve user experience, and prevent fraudulent activity.

If you are logged into your YouTube account, you enable YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. The use of YouTube is in the interest of presenting our online content in an appealing manner. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Further information about YouTube’s handling of personal data can be found in Google’s Privacy Policy: https://policies.google.com/privacy. Google is certified under the EU–US Data Privacy Framework (DPF). Further information is available at: https://www.dataprivacyframework.gov/participant/5780

Google Maps

This website uses Google Maps. The provider is: Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Maps enables us to embed map content directly on our website. To use the functions of Google Maps, your IP address must be stored. This information is generally transmitted to and stored on a Google server in the United States. The operator of this website has no influence over this data transfer. When Google Maps is activated, Google may use Google Fonts to ensure the consistent display of fonts. When accessing Google Maps, your browser loads the required web fonts into its browser cache in order to display text and fonts correctly.

The use of Google Maps serves the purpose of presenting our online offerings attractively and making the locations specified on our website easy to find. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time. Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses (SCCs). Further information is available at: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/

For more information on Google’s handling of personal data, please refer to Google’s Privacy Policy: https://policies.google.com/privacy. Google is certified under the EU–US Data Privacy Framework (DPF). Further information is available at: https://www.dataprivacyframework.gov/participant/5780

9. eCommerce and Payment Service Providers

Processing of Customer and Contract Data

We collect, process, and use personal customer and contract data for the purpose of establishing, managing, and modifying contractual relationships. Personal data relating to the use of this website (usage data) are collected, processed, and used only to the extent necessary to enable users to access and use the website or to bill for services. The legal basis for this processing is Article 6(1)(b) GDPR. Customer data collected in this context will be deleted after completion of the assignment or termination of the business relationship and after expiry of any applicable statutory retention periods. Statutory retention obligations remain unaffected.

Data Transfers in Connection with Contracts for Services and Digital Content

We transfer personal data to third parties only where this is necessary for the performance of a contract, for example to the financial institution responsible for processing payments. No further transfer of personal data takes place unless you have expressly consented to such transfer. Your personal data will not be disclosed to third parties for advertising purposes without your explicit consent. The legal basis for this processing is Article 6(1)(b) GDPR, which permits the processing of personal data where necessary for the performance of a contract or for pre-contractual measures.