Collection of data
We collect, process and use personal data such as names, addresses, means of communication, web addresses, bank details, contact persons with means of communication only insofar as they are necessary for the establishment, content or amendment of the legal relationship (inventory data). In addition to this, we prepare call logs and evaluate usage statistics and request credit checks on existing and potential customers via Creditreform from time to time. We collect, process and use personal data on the use of our Internet pages (usage data) only insofar as this is necessary to enable the user to use the service or to bill him/her.

Transfer of data
We only transmit personal data to third parties if this is necessary in the context of contract processing. Further transmission of data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

Calling up our offer
If you call up our website, which is hosted on the webflow platform (webflow.com), information is automatically sent to our server by the page and the browser used on your end device and temporarily stored in a so-called log file. The following information is collected without your intervention and stored in the log file until automatic or manual deletion:
the IP address of the device used
the date and time of access,
the name and URL of the file accessed, the website/app from which the access was made (referrer URL),
the unique identifier of the browser you are using
Operating system and its interface
Language and version of the browser software
if applicable, the name of your internet provider.
The processing of the above data is based on Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest follows from the purposes of data collection listed below. At this point, we would like to point out that we are not able to draw any conclusions about your identity from the collected data and that we will not do so. The IP address of your end device and the other data listed above are used by us for the following purposes:
Ensuring a smooth connection setup,
Ensuring a comfortable use of our offer,
evaluating system security and stability, and
other administrative purposes.
The data is stored in accordance with the legal retention periods and then automatically deleted. Furthermore, we use so-called cookies, tracking tools, targeting procedures and interfaces to other services, e.g. to social media platforms, payment services or CRM systems. The exact procedures involved and how your data is used for this purpose are explained in more detail below under point 4.
In short, when you visit our website, we automatically collect the necessary data from you. However, this data will be deleted after a certain period of time.

Data processing for payment
If you have decided to conclude a contract with us, we will, for the purpose of fulfilling the contract and, above all, for the purpose of processing the payment, process the transaction data such as, for example, name, address, telephone number and e-mail address on the basis of Article 6 Paragraph 1 lit. b) DSGVO.
name,
address,
e-mail address,
account number,
bank sort code,
credit card number,
invoice amount,
currency and
Transaction number
to the payment service provider you have chosen (Paypal or Stripe). The transmission is necessary because otherwise we cannot execute the contract. The data is used exclusively for the execution and realisation of the payment processing and is transmitted securely via the "SSL" encryption procedure. The service providers we offer are certified according to PCI DSS. They may transfer, process and store personal data outside the EU. For more information, please check the privacy policy of your service provider.
In short, in order to process contracts, we sometimes have to pass on your data to payment service providers.

They are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the offers, to compile reports on the activities and to provide other services associated with the use of the offer for the purposes of market research and demand-oriented design. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that an allocation is not possible (so-called IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, or you may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of data generated by the cookie and related to your use of our offers (including your IP address) as well as the processing of this data by Google by downloading and installing this browser add-on. On mobile devices, we recommend using the private mode. For more information on data protection in connection with Google Analytics, please visit the Google Analytics website.
In short, we also use google analytics to provide us and you with a better website experience.


Right of objection
You may object to data processing for the above-mentioned purposes at any time, free of charge, separately for the respective communication channel and with effect for the future. For this purpose, it is sufficient to send an e-mail or a postal letter to the contact data mentioned under 1. If you lodge an objection, we will block the contact address concerned from further data processing for advertising purposes. We will process your objection as quickly as possible and implement the corresponding blocking measures immediately after checking. We would like to point out that, in exceptional cases, we may still send out corresponding information or product recommendations after receiving your objection. This is then exclusively for technical reasons and does not mean that we will not implement your objection. Thank you for your understanding.
In short, you can object to the forwarding of data by us at any time. Data processing for the provision of our offer In the following, we would like to inform you about the data processing required for the provision of our offer: Website optimisation.
We will not sell or rent your data to third parties for their marketing purposes without your express consent. Only in order to provide our visitors with the best possible customer experience, to improve the quality of our offering from time to time and to protect the interests of our customers, will we share certain data with third parties in certain circumstances; however, such sharing will always be subject to strict limitations, which are described in more detail below: In short, we collect information about you so that we can make our website more appealing to you.

Cookies - General information
We use so-called cookies on our website on the basis of Art. 6 para. 1 lit. f) DSGVO. Our interest in optimising our offers is to be regarded as legitimate in the sense of the aforementioned provision. Cookies are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone or similar) when you use our offers. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. Information is stored in the cookie that is related to the specific end device used. However, this does not mean that we gain direct knowledge of your identity. The use of cookies serves, on the one hand, to make the use of our offer more pleasant for you. For example, we use so-called cookies to recognise that you have already visited individual pages of our website or that you have already logged in with your customer account. If you use our offer again at a later time, the cookie automatically recognises that you have already been to our website and which entries and settings you have made so that you do not have to enter them again. Furthermore, we also use cookies for the purpose of user-friendliness, which are stored on your end device for a certain fixed period of time. These are automatically deleted after you leave our website.

If you already have a customer account and are logged in, the information stored in the cookies will be assigned to your customer account.

A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US American site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that in this case not all functions of this online offer can be used.

On the other hand, we use cookies to statistically record the use of our offers and to evaluate them for the purpose of optimising them for you, as well as to display information tailored specifically to you. These cookies enable us to automatically recognise that you have already been to our site when you visit it again. These cookies are automatically deleted after a defined period of time. Most browsers accept cookies automatically. However, you can configure your browser in such a way that no cookies are stored on your computer or a message always appears before a new cookie is created. You can also use the Network Advertising Initiative's collected opt-out option for this purpose. However, the complete deactivation of cookies may mean that not all functions of our offers are available to you. The storage period of cookies depends on their purpose and is not the same for everyone.

In short, we also use cookies to make the use of the site better for you and for us.

Google Analytics
For the purpose of demand-oriented design and continuous optimisation of our offer, we use the analysis service Google Analytics of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") on the basis of Art. 6 para. 1 lit. f) DSGVO. Google creates pseudonymised usage profiles using cookies. The information generated by the cookie about your use of our website such as

Browser type/version,
operating system used,
Referrer URL (the previously visited page),
host name of the accessing computer (IP address),
time of the server request,

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the offers, to compile reports on the activities and to provide other services associated with the use of the offer for the purposes of market research and demand-oriented design. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that an allocation is not possible (so-called IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, or you may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of data generated by the cookie and related to your use of our offers (including your IP address) as well as the processing of this data by Google by downloading and installing this browser add-on. On mobile devices, we recommend using the private mode. For more information on data protection in connection with Google Analytics, please visit the Google Analytics website.

In short, we also use google analytics to provide us and you with a better website experience.

Google Ads
We use "Google Ads" (formerly Google AdWords) on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Ads enables us to draw attention to our attractive offers with the help of advertising media on external websites. This enables us to determine how successful individual advertising measures are. These advertisements are delivered by Google via so-called "AdServers".
We use so-called AdServer cookies for this purpose, through which certain parameters for measuring success, such as display of the ads or clicks by the users, can be measured. If you access our website via a Google ad, Google Ads will store a cookie on your PC. These cookies usually lose their validity after 30 days. They are not intended to identify you personally. The following information is usually stored as analysis values for this cookie: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user no longer wishes to be addressed). These cookies enable Google to recognise your web browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer will be able to recognise that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked via the websites of Ads customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. These evaluations enable us to recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising tools; in particular, we cannot identify users on the basis of this information. Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of Google Ads. To the best of our knowledge, Google receives the information that you have called up the relevant part of our website or clicked on one of our ads. If you have a user account with Google and are registered, Google can assign the visit to your user account. Even if you are not registered with Google or have not logged in, it is possible that Google will obtain and store your IP address.

We use Google Ads for marketing and optimisation purposes, in particular to serve relevant and interesting ads to you, to improve campaign performance reports and to achieve a fair calculation of advertising costs. This is also our legitimate interest in the processing of the above data by the third-party provider. The legal basis is Art. 6 para. 1 p. 1 lit. f) DSGVO.

You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. We would like to point out that in this case you may not be able to use all the functions of our website to their full extent. It is also possible to prevent the storage of cookies by setting your web browser to block cookies from the domain "www.googleadservices.com" (https://www.google.de/settings/ads). We would like to point out that this setting will be deleted when you delete your cookies. In addition, you can deactivate interest-based ads via the link http://optout.aboutads.info. Please note that this setting will also be deleted when you delete your cookies.

Information of the third party provider: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.

Further information on data use by Google, on setting and objection options and on data protection can be found on the following Google web pages:
Privacy policy: https://policies.google.com/privacy?hl=de&gl=deGoogle
Website statistics: https://services.google.com/sitestats/de.html

GOOGLE TAG MANAGER
Our website uses the Google Tag Manager for the purpose of personalised, interest and location-based online advertising. The option to anonymise IP addresses is controlled by Google Tag Manager via an internal setting that is not visible in the source of this page. This internal setting is set in such a way that the required anonymisation of IP addresses is achieved.

Link to the opt. out: https://adssettings.google.com/authenticated

Further information on Google's regulations can be found at https://policies.google.com/privacy?hl=de.

Facebook Pixel, Facebook Custom Audiences and Facebook Conversion
Within our online offer, the so-called "Facebook Pixel" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are a resident of the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), is used.
‍
With the help of the Facebook pixel, it is possible for Facebook, on the one hand, to determine you as a visitor to our online offer as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of the users and do not have a harassing effect. With the help of the Facebook Pixel, we can further track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

Privacy policy of Facebook
The processing of data by Facebook takes place within the framework of Facebook's data usage policy. Accordingly, general information on the display of Facebook ads, in the data use policy of Facebook. Specific information and details on the Facebook pixel and how it works can be found in Facebook's help section.

Basis
The use of the Facebook Pixel and the storage of "conversion cookies" is based on Art. 6 para. 1 lit. a DSGVO.

Data processing contract
For the processing of data for which Facebook acts as a commissioned data processor, we have concluded a commissioned data processing contract with Facebook in which we oblige Facebook to protect our customers' data and not to pass it on to third parties.

Objection
You can object to the collection by the Facebook pixel and use of your data to display Facebook ads. To adjust which types of ads are displayed to you within Facebook, you can go to the page set up by Facebook and follow the instructions there on the settings for usage-based advertising.  The settings are platform-independent, meaning that they are applied to all devices, such as desktop computers or mobile devices. You can also opt out of the use of cookies for reach measurement and advertising purposes via the Network Advertising Initiative opt-out page and additionally via the US website aboutads.info or the European website youronlinechoices.com.

You can find another opt-out option in our Cookie Statement.

In short, we also use Facebook pixel for the same purpose.

Contact
‍You have the opportunity to contact us via a web form. To use our contact form we need your name and your e-mail address. You may or may not provide further information. By submitting your message to us, you agree that we may process your personal data to process your request. Your request will be sent encrypted via https.
The legal basis of the processing is Art. 6 para. 1 lit. b) GDPR. Your data will only be processed to answer your request and then deleted. A passing on to third does not take place.

‍Online applications
‍We process your personal data in accordance with the applicable data protection regulations on the basis of § 26 Federal Data Protection Act (BDSG). We process the data you provide to us as part of your online application for the sole purpose of selecting applicants. Data processing for other purposes does not take place.
You yourself determine the scope of the data that you would like to submit to us as part of your online application. Online applications are electronically transferred to our personnel department and processed there as quickly as possible. The transmission is encrypted. As a rule, applications are forwarded to the heads of the responsible specialist departments in our company. In addition, there is no disclosure of your data. Your information will be treated confidentially in our house. In case of an unsuccessful application, your documents will be deleted after expiration of [6 months].
‍
In the event that we may also consider your application in other or future job advertisements, we ask for a note on the application. We then process your data on the basis of Art. 6 para. 1 lit. a GDPR.
‍
Information according to Art. 13 General Data Protection Ordinance for ApplicantsThe compliance with data protection regulations has a high priority for our company. We would like to inform you about the collection of your personal data with us below:

Responsible body:
Data collection and processing is the responsibility of the company you applied to.

Data we need:
When applying, we process data from you that we need in the context of the application. This can be contact details, all data related to the application (CV, certificates, qualifications, answers to questions, etc.) as well as bank account details (to reimburse travel costs). The legal basis for this arises from § 26 Federal Data Protection Act (BDGS).

Data deletion:
If no statutory retention period exists, the data will be deleted as soon as storage is no longer required or the legitimate interest in storage has expired. If not hired, this will be the case at least six months after completing the application process.
In individual cases, it may lead to a longer storage of individual data (e.g. travel expenses). The duration of storage then depends on the statutory storage obligations, for example, from the Tax Code (6 years) or the Commercial Code (10 years).
If there has not been a recruitment, but your application continues to be interesting for us, we ask you, if we may keep your application for future appointments.

Confidential treatment of your data:
Of course, we treat your data confidentially and do not transmit it to third parties.
If necessary, we use strictly instruction-bound service providers, who provide us with e.g., in the areas of IT or the archiving and destruction of documents and with which separate contracts for order processing have been concluded.

Your privacy rights:
As the data subject, you have the right to obtain information about personal data concerning you, as well as the correction of incorrect data or cancellation, provided that one of the reasons stated in Art. 17 GDPR exists, e.g. if the data is no longer needed for the purposes pursued. There is also the right to restrict processing if one of the conditions set out in Art. 18 GDPR exists and, in the case of Art. 20 GDPR, the right to data portability.
Each data subject has the right to complain to a supervisory authority if it considers that the processing of the data concerning them is contrary to data protection provisions. In particular, the right of appeal may be invoked by a supervisory authority in the Member State of the residence or the workplace of the person concerned or the place of the alleged infringement.

Newsletter
If you subscribe to the newsletter of this site, the data in the respective input mask will be transmitted to the data controller. The registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other people's e-mail addresses. When registering for the newsletter, the user's IP address and the date and time of registration are stored. This serves to prevent misuse of the services or the e-mail address of the person concerned. The data is not passed on to third parties. An exception exists if there is a legal obligation to pass on the data. The data is used exclusively for sending the newsletter. The subscription to the newsletter can be cancelled by the data subject at any time. Likewise, consent to the storage of personal data can be revoked at any time. For this purpose, a corresponding link can be found in each newsletter. The legal basis for the processing of the data after the user has registered for the newsletter is Art. 6 para. 1 lit. a) DSGVO if the user has given his consent. The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) UWG.

CloudFlare
Our pages use functions of CloudFlare. The provider is CloudFlare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA. CloudFlare offers a worldwide distributed content delivery network with DNS. Technically, the transfer of information between your browser and our website is routed through CloudFlare's network. CloudFlare is thus able to analyse the data traffic between users and our websites, for example, in order to detect and ward off attacks on our services. In addition, CloudFlare may store cookies on your computer for optimisation and analysis. This serves to protect our legitimate interests in an optimal marketing of our offer, which outweigh our interests in the context of a balancing of interests according to Art. 6 para. 1 p. 1 lit. b DSGVO.
We have concluded a corresponding order processing agreement with Cloudflare on the basis of the DSGVO. Cloudflare is a certified participant of the EU-US Privacy Shield Framework. Cloudflare has committed to handle all personal data contained by member states of the European Union (EU) under the Privacy Shield Framework in accordance with its applicable principles. For more information about the Privacy Shield Framework, please visit the U.S. Department of Commerce's Privacy Shield List at https://www.privacyshield.gov. Cloudflare collects statistical data about visits to this website. The access data includes: Name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. Cloudflare uses the log data for statistical evaluations for the purpose of the operation, security and optimisation of the offer.
Here you can find information about the data collected there and about security & data protection at CloudFlare.

Zapier
We also use Zapier to connect Webflow forms to Hubspot. A link to their privacy policy can be found here: https://zapier.com/privacy

Hubspot
On this website, we use the service HubSpot for various purposes. HubSpot is a software company from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Telephone: +353 1 5187500.

Hubspot is an integrated software solution that we use to cover various aspects of our online marketing. These include:
Email Marketing, Social Media Publishing & Reporting, Reporting, Contact Management (e.g. user segmentation & CRM), Landing Pages and Contact Forms.

Our sign-up service allows visitors to our website to learn more about our business, download content and provide their contact information and other demographic information. This information, as well as our website content, is stored on servers operated by our software partner HubSpot. It may be used by us to contact visitors to our website and to determine which of our company's services are of interest to them. All information we collect is subject to this privacy policy. We use all information collected solely to optimise our marketing activities.

More information about HubSpot's privacy policy:
https://legal.hubspot.com/de/privacy-policy
‍
More information from HubSpot regarding EU data protection regulations:
https://www.hubspot.com/data-privacy/privacy-shield
‍
More information about the cookies used by HubSpot can be found here:
https://legal.hubspot.com/de/cookie-policy

As part of the optimisation of our marketing measures, the following data may be collected and processed via Hubspot:
- Geographical position
- Browser type
- Navigation information
- Referral URL
- Performance data
- Information on how often the application is used
- Mobile apps data
- Login information for the HubSpot subscription service
- Files viewed on site
- Domain names
- Pages viewed
- Aggregated usage
- Operating system version
- Internet service provider
- IP address
- Device identifier
- Duration of visit
- Where the application was downloaded from
- Operating system
- Events that occur within the application
- Access times
- Clickstream data
- Device model and version

In addition, we also use Hubspot to provide contact forms. You can find further information in this regard in subsection 7 of this privacy policy.

The legal basis for the processing is your consent in accordance with Art. 6 (1) lit. a DSGVO. If you do not wish the aforementioned data to be collected and processed via Hubspot, you can refuse your consent or revoke it at any time with effect for the future.

The personal data will be kept for as long as it is necessary to fulfil the purpose of the processing. The data will be deleted as soon as they are no longer required to achieve the purpose.

Within the scope of processing via HubSpot, data may be transferred to the USA. The security of the transfer is ensured via so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, your consent pursuant to Art. 49 (1) a of the GDPR may serve as the legal basis for the transfer to third countries. Please refer to the subsection "7. Forms".

Instagram
We also use Instagram. You can find information about which data is processed by Instagram and for which purposes in the Instagram privacy policy: https://help.instagram.com/155833707900388/  

As part of Facebook Ireland Ltd, Instagram has committed to the principles of the EU-US Privacy Shield. You can find more details about this at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC  

We have no influence on the data processed by Instagram, the way it is processed and used, or the transfer of this data to third parties. Nor does it have any effective means of control in this respect.
‍
By using Instagram, your personal data is collected, transferred, stored, disclosed and used by Facebook Ireland Ltd. and thereby transferred to and stored and used in the United States, Ireland and any other country in which Facebook Ireland Ltd. does business, regardless of your residence.
‍
Instagram processes your voluntarily entered data such as name and user name, email address, telephone number or the contacts in your address book when you upload or synchronise it.

On the other hand, Instagram also evaluates the content you share to determine what topics you are interested in, stores and processes confidential messages that you send directly to other users and can determine your location using GPS data, information on wireless networks or your IP address in order to send you advertising or other content.

For evaluation, Instagram may use analytics tools such as Instagram Insights or Google Analytics. The University of Tübingen has no influence on the use of such tools by Instagram and has not been informed about such potential use. If tools of this kind are used by Instagram for the University of Tübingen's Instagram profile, the University of Tübingen has neither commissioned nor approved this nor supported it in any other way. The personal data obtained during the analysis is also not used by the University for the 4176) determined the adequacy of the level of data protection in accordance with Art. 45 DSGVO. The use of these certified service providers thus meets the European standards for legally compliant data processing. In addition, we have obtained suitable contractual guarantees from all service providers based in other EU countries, which ensure compliance with these EU standards and the enforcement of data subject rights, for example on the basis of so-called standard contractual clauses of the EU Commission.

Your rights
You not only have a right to physical integrity, but also such rights to protect your personality:

Overview
In addition to the right to object to the consent you have given us, you have the following further rights if the respective legal requirements are met:

Right to information about your personal data stored by us in accordance with Art. 15 DSGVO,
in cases of transfers pursuant to Art. 46, 47 or 49 Para.1 No.2 DSGVO, the right to information or reference to the appropriate or adequate safeguards and how to obtain a copy of them or where they are available,
Your personal data stored by us in accordance with Art. 15 DSGVO,
Right to have inaccurate data corrected or to have accurate data completed in accordance with Art. 16 GDPR,
the right to have your personal data stored by us deleted in accordance with Art. 17 DSGVO,
Right to restrict the processing of your data according to Art. 18 DSGVO,
right to data portability according to Art. 20 DSGVO.

Right of objection
Under the conditions of Art. 21 (1) DSGVO, the processing of data may be objected to on grounds relating to the particular situation of the data subject.

The above general right of objection applies to all processing purposes described in these data protection provisions that are processed on the basis of Art. 6 (1) (f) DSGVO. Unlike the specific right of objection directed at data processing for advertising purposes, we are only obliged under the GDPR to implement such a general objection if you provide us with reasons of overriding importance for doing so (e.g. a possible risk to life or health). Furthermore, you have the option of contacting the supervisory authority responsible for us, the Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstraße 219, 10969 Berlin.

Data security
We use the highest standards of information security for our infrastructure and the processing of your data. For example, we use computer protection mechanisms such as firewalls and data encryption. Physical access controls apply to our buildings and data. Access to our customers' personal information is restricted to those employees who need it to do their jobs.

Also, all information you personally submit, including your payment information, is transmitted using the commonly used and secure standard SSL (Secure Socket Layer). SSL is a secure and proven standard that is also used, for example, in online banking. You can recognise a secure SSL connection by the s appended to the http (i.e. https://...) in the address bar of your browser or by the lock symbol in the lower area of the browser.

We also use appropriate technical and organisational security measures to protect your personal data stored with us against manipulation, partial or complete loss and against unauthorised access by third parties. Our security measures are continuously monitored in accordance with technological developments, regularly adapted to the respective risk and improved if necessary.

Right to information, deletion, blocking
You have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of data processing as well as the right to correct, block or delete this data. You can contact us at any time at the following address with regard to this and other questions on the subject of personal data:
‍
Keller Creatives GmbH
Kalvarienbergstraße 76
87509 Immenstadt, DE

More information from HubSpot regarding EU data protection regulations "
More information about the cookies used by HubSpot can be found here:
https://legal.hubspot.com/de/cookie-policy

As part of the optimisation of our marketing measures, the following data may be collected and processed via Hubspot:
- Geographical position
- Browser type
- Navigation information
- Referral URL
- Performance data
- Information on how often the application is used
- Mobile apps data
- Login information for the HubSpot subscription service
- Files viewed on site
- Domain names
- Pages viewed
- Aggregated usage
- Operating system version
- Internet service provider
- IP address
- Device identifier
- Duration of visit
- Where the application was downloaded from
- Operating system
- Events that occur within the application
- Access times
- Clickstream data
- Device model and version

In addition, we also use Hubspot to provide contact forms. You can find further information in this regard in subsection 7 of this privacy policy.

The legal basis for the processing is your consent in accordance with Art. 6 (1) lit. a DSGVO. If you do not wish the aforementioned data to be collected and processed via Hubspot, you can refuse your consent or revoke it at any time with effect for the future.

The personal data will be kept for as long as it is necessary to fulfil the purpose of the processing. The data will be deleted as soon as they are no longer required to achieve the purpose.

Within the scope of processing via HubSpot, data may be transferred to the USA. The security of the transfer is ensured via so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, your consent pursuant to Art. 49 (1) a of the GDPR may serve as the legal basis for the transfer to third countries. Please refer to the subsection "7. Forms".

Instagram
We also use Instagram. You can find information about which data is processed by Instagram and for which purposes in the Instagram privacy policy: https://help.instagram.com/155833707900388/  

As part of Facebook Ireland Ltd, Instagram has committed to the principles of the EU-US Privacy Shield. You can find more details about this at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC  

We have no influence on the data processed by Instagram, the way it is processed and used, or the transfer of this data to third parties. Nor does it have any effective means of control in this respect.
‍
By using Instagram, your personal data is collected, transferred, stored, disclosed and used by Facebook Ireland Ltd. and thereby transferred to and stored and used in the United States, Ireland and any other country in which Facebook Ireland Ltd. does business, regardless of your residence.
‍
Instagram processes your voluntarily entered data such as name and user name, email address, telephone number or the contacts in your address book when you upload or synchronise it.

On the other hand, Instagram also evaluates the content you share to determine what topics you are interested in, stores and processes confidential messages that you send directly to other users and can determine your location using GPS data, information on wireless networks or your IP address in order to send you advertising or other content.

For evaluation, Instagram may use analytics tools such as Instagram Insights or Google Analytics. The University of Tübingen has no influence on the use of such tools by Instagram and has not been informed about such potential use. If tools of this kind are used by Instagram for the University of Tübingen's Instagram profile, the University of Tübingen has neither commissioned nor approved this nor supported it in any other way. The personal data obtained during the analysis is also not used by the University for the 4176) determined the adequacy of the level of data protection in accordance with Art. 45 DSGVO. The use of these certified service providers thus meets the European standards for legally compliant data processing. In addition, we have obtained suitable contractual guarantees from all service providers based in other EU countries, which ensure compliance with these EU standards and the enforcement of data subject rights, for example on the basis of so-called standard contractual clauses of the EU Commission.

Your rights
You not only have a right to physical integrity, but also such rights to protect your personality:

Overview
In addition to the right to object to the consent you have given us, you have the following further rights if the respective legal requirements are met:

Right to information about your personal data stored by us in accordance with Art. 15 DSGVO,
in cases of transfers pursuant to Art. 46, 47 or 49 Para.1 No.2 DSGVO, the right to information or reference to the appropriate or adequate safeguards and how to obtain a copy of them or where they are available,
Your personal data stored by us in accordance with Art. 15 DSGVO,
Right to have inaccurate data corrected or to have accurate data completed in accordance with Art. 16 GDPR,
the right to have your personal data stored by us deleted in accordance with Art. 17 DSGVO,
Right to restrict the processing of your data according to Art. 18 DSGVO,
right to data portability according to Art. 20 DSGVO.

Right of objection
Under the conditions of Art. 21 (1) DSGVO, the processing of data may be objected to on grounds relating to the particular situation of the data subject.

The above general right of objection applies to all processing purposes described in these data protection provisions that are processed on the basis of Art. 6 (1) (f) DSGVO. Unlike the specific right of objection directed at data processing for advertising purposes, we are only obliged under the GDPR to implement such a general objection if you provide us with reasons of overriding importance for doing so (e.g. a possible risk to life or health). Furthermore, you have the option of contacting the supervisory authority responsible for us, the Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstraße 219, 10969 Berlin.

Data security
We use the highest standards of information security for our infrastructure and the processing of your data. For example, we use computer protection mechanisms such as firewalls and data encryption. Physical access controls apply to our buildings and data. Access to our customers' personal information is restricted to those employees who need it to do their jobs.

Also, all information you personally submit, including your payment information, is transmitted using the commonly used and secure standard SSL (Secure Socket Layer). SSL is a secure and proven standard that is also used, for example, in online banking. You can recognise a secure SSL connection by the s appended to the http (i.e. https://...) in the address bar of your browser or by the lock symbol in the lower area of the browser.

We also use appropriate technical and organisational security measures to protect your personal data stored with us against manipulation, partial or complete loss and against unauthorised access by third parties. Our security measures are continuously monitored in accordance with technological developments, regularly adapted to the respective risk and improved if necessary.

Right to information, deletion, blocking
You have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of data processing as well as the right to correct, block or delete this data. You can contact us at any time at the following address with regard to this and other questions on the subject of personal data:
‍
Keller Creatives GmbH
Kalvarienbergstraße 76
87509 Immenstadt, DE