Introduction

We take the security of your data very seriously. With the following privacy policy, we aim to inform you about the types of your personal data (hereinafter referred to as “data”) that we process, for which purposes, and to what extent. This privacy policy applies to all data processing operations carried out by us, whether in the context of providing our services or particularly on our websites, in mobile applications, as well as within external online presences, such as our social media profiles (collectively referred to as “online services”).

The terms used are gender-neutral.

Date: October 24, 2024

Table of Contents

• Introduction
• Controller
• Overview of Data Processing
• Relevant Legal Bases
• Security Measures
• Transfer of Personal Data
• Data Processing in Third Countries
• Deletion of Data
• Use of Cookies
• Business Services
• Use of Online Platforms for Marketing and Sales Purposes
• Service Providers Used in Business Operations
• Payment Methods
• Provision of Online Services and Web Hosting
• Registration, Login, and User Accounts
• Community Features
• Blogs and Publication Media
• Contact and Inquiry Management
• Communication via Messenger
• Video Conferences, Online Meetings, Webinars, and Screen Sharing
• Audio Content
• Cloud Services
• Newsletters and Electronic Notifications
• Surveys and Polls
• Web Analytics, Monitoring, and Optimization
• Online Marketing
• Customer Reviews and Rating Systems
• Social Media Presence
• Plugins and Embedded Functions and Content
• Management, Organization, and Auxiliary Tools
• Amendments and Updates to the Privacy Policy
• Rights of the Data Subjects
• Definitions of Terms

Controller

psySOULogy LLC 7901 4TH ST N STE 300 ST. PETERSBURG, FL US 33702

Authorized Representatives:

represented by Kristina Peters (Founder)

Email address:

evolve@psysoulogy.com

Imprint: Click here

Overview of Data Processing

The following overview summarizes the types of data processed and the purposes of their processing, while also referring to the data subjects concerned.

Types of Data Processed

• Inventory data.
• Payment data.
• Contact data.
• Content data.
• Contract data.
• Usage data.
• Meta/communication data.

Special Categories of Data

• Health data.
• Data concerning sexual life or orientation.
• Religious or philosophical beliefs.
• Data revealing racial or ethnic origin.

Categories of Data Subjects

• Customers.
• Employees.
• Interested parties.
• Communication partners.
• Users.
• Business and contractual partners.
• Participants.

Purposes of Processing

• Provision of contractual services and customer support.
• Handling contact inquiries and communication.
• Security measures.
• Direct marketing.
• Reach measurement.
• Tracking.
• Office and organizational procedures.
• Conversion tracking.
• Administration and response to inquiries.
• Feedback.
• Marketing.
• User profiles with information related to users.
• Providing our online services and user-friendliness.
• IT infrastructure.

Relevant Legal Bases

Below you will find an overview of the legal bases of the General Data Protection Regulation (GDPR) on which we base the processing of personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence. If more specific legal bases are relevant, we will inform you of them in the privacy policy.

Contract performance and pre-contractual inquiries (Art. 6(1) p. 1 lit. b. GDPR) – The processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract.

• Processing of Cookie Data Based on Consent: We utilize a cookie consent management system to collect, manage, and revoke user consent for the use of cookies or for the processing activities and providers specified within the cookie consent management framework. The consent declaration is stored to avoid repeated requests for consent and to comply with legal obligations to prove consent. Storage may occur server-side and/or in a cookie (known as an opt-in cookie or similar technology) to associate consent with a specific user or their device. Unless individual information about the providers of cookie management services is given, the following applies: The duration of consent storage can be up to two years. A pseudonymous user identifier is created and stored along with the time of consent, the scope of consent (e.g., which categories of cookies and/or service providers), and details of the browser, system, and device used.
• Pixelmate: Cookie consent management; Website: https://wp-dsgvo-plugin.com/; Additional Information: An individual user ID, language settings, types of consents, and the time of their submission are stored server-side and in a cookie on the user’s device.

Business Services

We process data from our contract and business partners, such as clients and prospects (collectively referred to as “contract partners”), within the scope of contractual and similar legal relationships, including related measures and communication with contract partners (or pre-contractual communication), e.g., to respond to inquiries.

We process this data to fulfill our contractual obligations. This includes, in particular, the obligation to deliver the agreed-upon services, fulfill any update obligations, and remedy warranty and other performance issues. We also process the data to protect our rights and to carry out administrative tasks and corporate organization related to these obligations. Furthermore, we process the data based on our legitimate interest in proper and cost-effective business operations, as well as in implementing security measures to protect our contract partners and our business operations from abuse, threats to their data, secrets, information, and rights (e.g., by involving telecommunication, transport, and other auxiliary services, subcontractors, banks, tax and legal advisors, payment service providers, or tax authorities). Within the limits of applicable law, we only share contract partners’ data with third parties as necessary for the aforementioned purposes or to fulfill legal obligations. Contract partners are informed of other forms of processing, e.g., for marketing purposes, in this Privacy Policy.

We inform contract partners before or during data collection of which data is required for the aforementioned purposes, e.g., in online forms, through special labels (e.g., colors) or symbols (e.g., asterisks, etc.), or in person.

We delete the data after the expiration of statutory warranty or similar obligations, generally after 4 years unless the data is stored in a customer account (e.g., as required for legal archiving). The statutory retention period for tax-related documents, such as accounting records, inventories, opening balance sheets, annual financial statements, and the instructions and organizational documents necessary to understand these records, as well as booking documents, is ten years. The retention period for received and sent commercial and business correspondence is six years. The period begins at the end of the calendar year in which the last entry was made in the record, the inventory, opening balance sheet, annual financial statement, or management report was prepared, the commercial or business letter was received or sent, or the booking document was created, or the record was made or other documents originated.

When we use third-party providers or platforms to provide our services, the terms of service and privacy policies of the respective third-party providers or platforms apply in the relationship between users and providers.

• Processed Data Types: Inventory data (e.g., names, addresses); payment data (e.g., bank details, invoices, payment history); contact data (e.g., email addresses, phone numbers); contract data (e.g., contract subject matter, term, client category); usage data (e.g., websites visited, interest in content, access times); meta/communication data (e.g., device information, IP addresses).
• Special Categories of Personal Data: Health data (Art. 9 para. 1 GDPR); data relating to sexual life or orientation (Art. 9 para. 1 GDPR); religious or philosophical beliefs (Art. 9 para. 1 GDPR); data revealing racial or ethnic origin (Art. 9 para. 1 GDPR).
• Affected Persons: Clients; interested parties; business and contract partners.
• Purposes of Processing: Provision of contractual services and customer support; security measures; responding to inquiries and communication; office and organizational procedures; administration and answering of inquiries.
• Legal Basis: Fulfillment of contracts and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR); legal obligation (Art. 6 para. 1 sentence 1 lit. c) GDPR); legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Additional Information on Processing, Procedures, and Services:

• Customer Account: Contract partners may create an account within our online offering (e.g., customer or user account, “customer account”). If the creation of a customer account is required, contract partners are informed about this, along with the required registration information. Customer accounts are not public and cannot be indexed by search engines. During registration and subsequent logins and use of the customer account, we store the IP addresses of customers along with the access times to provide evidence of registration and prevent misuse of the customer account. If customers terminate their customer account, the data related to the customer account is deleted, except where retention is required for legal reasons. It is the customers’ responsibility to back up their data upon termination of the customer account; Legal Basis: Fulfillment of contracts and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR).
• Shop and E-Commerce: We process the data of our customers to enable them to select, purchase, or order the selected products, goods, or related services, as well as to pay for and deliver or execute these. If required for the execution of an order, we use service providers, particularly postal, forwarding, and shipping companies, to carry out the delivery or execution on behalf of our customers. For processing payment transactions, we utilize the services of banks and payment providers. The necessary details are identified as such during the ordering or similar purchase process and include the information needed for delivery or provision and invoicing, as well as contact details for any necessary inquiries; Legal Basis: Fulfillment of contracts and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR).
• Coaching: We process the data of our clients, prospects, and other clients or contract partners (collectively referred to as “clients”) to provide them with our services. The type, scope, purpose, and necessity of processing are determined by the underlying contract and client relationship. In the course of our activities, we may also process special categories of data, specifically health information of the clients, potentially related to their sexual life or sexual orientation, as well as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership. If required, we obtain the express consent of the clients and otherwise process special categories of data only if it serves the health of the clients, the data is publicly available, or other legal permissions apply. If it is necessary for contract fulfillment, to protect vital interests, or legally required, or if client consent is provided, we disclose or transmit client data, adhering to professional confidentiality, to third parties or agents, such as authorities, billing centers, or in the fields of IT, office, or similar services; Legal Basis: Fulfillment of contracts and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR).
• Consulting: We process the data of our clients, prospects, and other clients or contract partners (collectively referred to as “clients”) to provide them with our consulting services. The type, scope, purpose, and necessity of processing are determined by the underlying contract and client relationship. If it is necessary for contract fulfillment, to protect vital interests, or legally required, or if client consent is provided, we disclose or transmit client data, adhering to professional confidentiality, to third parties or agents, such as authorities, subcontractors, or in the fields of IT, office, or similar services; Legal Basis: Fulfillment of contracts and pre-contractual inquiries (Art. 6 para. 1)
  
  • Klarna / Instant Transfer: Payment services (technical integration of online payment methods); Service Provider: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden; Legal Basis: Contract fulfillment and pre-contractual inquiries (Art. 6(1)(b) GDPR); Website: https://www.klarna.com/en; Privacy Policy: Click here
  • Mastercard: Payment services (technical integration of online payment methods); Service Provider: Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium; Legal Basis: Contract fulfillment and pre-contractual inquiries (Art. 6(1)(b) GDPR); Website: https://www.mastercard.com/en-us.html; Privacy Policy: https://www.mastercard.com/en-us/about-mastercard/privacy.html.
  • PayPal: Payment services (technical integration of online payment methods) (e.g., PayPal, PayPal Plus, Braintree); Service Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg; Legal Basis: Contract fulfillment and pre-contractual inquiries (Art. 6(1)(b) GDPR); Website: https://www.paypal.com; Privacy Policy: Click here
  • Stripe: Payment services (technical integration of online payment methods); Service Provider: Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA; Legal Basis: Contract fulfillment and pre-contractual inquiries (Art. 6(1)(b) GDPR); Website: https://stripe.com; Privacy Policy: https://stripe.com/privacy.
  • Visa: Payment services (technical integration of online payment methods); Service Provider: Visa Europe Services Inc., London Branch, 1 Sheldon Square, London W2 6TT, UK; Legal Basis: Contract fulfillment and pre-contractual inquiries (Art. 6(1)(b) GDPR); Website: https://www.visa.com; Privacy Policy: Click here

  Provision of the Online Offering and Web Hosting

  To provide our online services securely and efficiently, we utilize one or more web hosting providers from whose servers (or managed servers) the online services can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space, and database services, as well as security and technical maintenance services.

  Data processed in the context of providing hosting services may include all user-related information that arises during the use and communication. This regularly includes the IP address, which is necessary to deliver the content of online services to browsers, along with all entries made within our online offerings or on websites.

  • Processed Data Types: Content data (e.g., entries in online forms); Usage data (e.g., visited websites, interest in content, access times); Meta/communication data (e.g., device information, IP addresses).
  • Affected Individuals: Users (e.g., website visitors, users of online services).
  • Purposes of Processing: Provision of our online offering and user-friendliness; IT infrastructure (operation and provision of information systems and technical devices (computers, servers, etc.)).
  • Legal Basis: Legitimate interests (Art. 6(1)(f) GDPR).

  Additional Information on Processing Procedures, Methods, and Services:

  • Collection of Access Data and Log Files: We (or our web hosting provider) collect data on each access to the server (so-called server log files). Server log files may include the address and name of the retrieved web pages and files, date and time of retrieval, transmitted data volume, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), and generally IP addresses and the requesting provider. Server log files may be used for security purposes, e.g., to prevent server overload (particularly in cases of abusive attacks, known as DDoS attacks), and to ensure server load and stability; Legal Basis: Legitimate interests (Art. 6(1)(f) GDPR); Data Deletion: Log file information is stored for a maximum of 30 days and then deleted or anonymized. Data that is required for evidentiary purposes is exempt from deletion until the final clarification of the respective incident.
  • WordPress.com: Hosting and software for creating, providing, and operating websites, blogs, and other online services; Service Provider: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA; Legal Basis: Legitimate interests (Art. 6(1)(f) GDPR); Website: https://wordpress.com; Privacy Policy: Click here Data Processing Agreement: Click here
  • SwissNetWorX: Domain hosting and server services; Service Provider: SwissNetWorX, J. Kuder Bodenmattstrasse 23 CH-4153 Reinach BL; Website: https://www.swissnwx.ch/; Privacy Policy: Click here

  Registration, Sign-In, and User Account

  Users can create a user account. During registration, users are informed of the required mandatory information, which is processed for the purpose of providing the user account based on contractual obligations. The data processed includes particularly login information (username, password, and an email address).

  When utilizing our registration and sign-in functions, as well as using the user account, we store the IP address and the time of each user action. This storage is based on our legitimate interests as well as those of the users in protection against abuse and other unauthorized use. Data is not shared with third parties unless necessary for the enforcement of our claims or required by law.

  Users may be informed via email about processes relevant to their user account, such as technical changes.

  • • Processed Data Types: Inventory data (e.g., names, addresses, etc.).
      • Processed Data Types: Contact data (e.g., email, phone numbers); content data (e.g., entries in online forms); usage data (e.g., visited web pages, content interests, access times); meta/communication data (e.g., device information, IP addresses).
      • Data Subjects: Communication partners.
      • Purposes of Processing: Providing contractual services and customer support; handling contact inquiries and communication; managing and responding to inquiries; collecting feedback (e.g., via online forms); providing our online services and ensuring user-friendliness.
      • Legal Bases: Fulfillment of contracts and pre-contractual inquiries (Art. 6(1)(b) GDPR); legitimate interests (Art. 6(1)(f) GDPR).

   

  Additional Information on Processing Activities, Procedures, and Services:

  • • • Contact Form: When users contact us via our contact form, email, or other communication channels, we process the data provided for handling the communicated concern. For this purpose, we process personal data within the framework of pre-contractual and contractual business relationships, as necessary for their fulfillment, and otherwise based on our legitimate interests and the interests of communication partners in responding to concerns and our legal retention obligations; Legal Bases: Fulfillment of contracts and pre-contractual inquiries (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f) GDPR).

   

  Communication via Messenger

  We utilize messengers for communication purposes and therefore ask you to consider the following information regarding the functionality of the messengers, encryption, the use of communication metadata, and your options for objection.

  You may also contact us through alternative means, such as by phone or email. Please use the contact options provided to you or those indicated within our online services.

  In the case of end-to-end encryption of content (i.e., the content of your message and attachments), we note that the communication content (i.e., the content of the message and attached images) is encrypted from end to end. This means that the message content is not viewable, not even by the messenger providers themselves. You should always use the latest version of the messenger with encryption enabled to ensure the security of the message contents.

  We also inform our communication partners that while messenger providers cannot view the content, they can ascertain that and when communication partners are interacting with us, as well as process technical information about the devices used by the communication partners and, depending on their device settings, location information (so-called metadata).

  Notes on Legal Bases: If we request permission from communication partners before communicating via messenger, the legal basis for processing their data is their consent. Otherwise, if we do not request consent and they contact us on their own accord, we use messengers in relation to our contractual partners as a contractual measure, and for other interested parties and communication partners based on our legitimate interests in prompt and efficient communication and meeting the communication partners’ needs via messenger. Furthermore, we inform you that we do not transmit the contact details provided to us to the messengers without your consent.

  Revocation, Objection, and Deletion: You can revoke any granted consent at any time and object to communication with us via messenger at any time. In the case of communication via messenger, we will delete the messages in accordance with our general deletion policies (i.e., e.g., as described above, after the termination of contractual relationships, in the context of archiving requirements, etc.) and otherwise as soon as we can assume that any inquiries from communication partners have been answered, provided no reference to a previous conversation is expected and no legal retention obligations oppose the deletion.

  Reservation of Reference to Other Communication Channels: Finally, we wish to point out that we reserve the right, for your safety, not to respond to inquiries via messenger. This applies when, for example, contractual details require special confidentiality or a response via messenger does not meet formal requirements. In such cases, we will refer you to more appropriate communication channels.

  • • • Processed Data Types: Contact data (e.g., email, phone numbers); usage data (e.g., visited web pages, content interests, access times); meta/communication data (e.g., device information, IP addresses); content data (e.g., entries in online forms).
      • Data Subjects: Communication partners.
      • Purposes of Processing: Contact inquiries and communication; direct marketing (e.g., via email or postal mail).
      • Legal Bases: Consent (Art. 6(1)(a) GDPR); legitimate interests (Art. 6(1)(f) GDPR).

   

  Additional Information on Processing Activities, Procedures, and Services:

  • • • Instagram: Sending messages via the social network Instagram; Service Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal Bases: Legitimate interests (Art. 6(1)(f) GDPR); Website: https://www.instagram.com; Privacy Policy: Click here
      • Signal: Signal Messenger with end-to-end encryption; Service Provider: Privacy Signal Messenger, LLC, 650 Castro Street, Suite 120-223, Mountain View, CA 94041, USA; Legal Bases: Legitimate interests (Art. 6(1)(f) GDPR); Website: https://signal.org/de; Privacy Policy: https://signal.org/legal/.
      • Skype: Skype Messenger with end-to-end encryption – The end-to-end encryption of Skype requires activation (if it is not activated by default); Service Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; Legal Bases: Legitimate interests (Art. 6(1)(f) GDPR); Website: https://www.skype.com/de/; Privacy Policy: https://privacy.microsoft.com/de-de/privacystatement, Security Information: https://www.microsoft.com/de-de/trustcenter.
      • Telegram Broadcasts: Telegram Broadcasts – Messenger with end-to-end encryption; Service Provider: Telegram, Dubai; Legal Bases: Legitimate interests (Art. 6(1)(f) GDPR); Website: https://telegram.org/; Privacy Policy: https://telegram.org/privacy.
      • Threema: Threema Messenger with end-to-end encryption; Service Provider: Threema GmbH, Churerstrasse 82, 8808 Pfäffikon SZ, Switzerland; Legal Bases: Legitimate interests (Art. 6(1)(f) GDPR); Website: https://threema.ch/en; Privacy Policy: https://threema.ch/de/privacy.
    • • Google Cloud Storage: Cloud storage, cloud infrastructure services, and cloud-based application software; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent Company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal Basis: Legitimate interests (Article 6(1)(f) GDPR); Website: https://cloud.google.com/; Privacy Policy: Click here Data Processing Agreement: Click here Standard Contractual Clauses (Ensuring data protection level for processing in third countries): Click here Further Information: https://cloud.google.com/privacy.
      • Nextcloud: Cloud storage, cloud infrastructure services, and cloud-based application software; Service Provider: Nextcloud GmbH, Hauptmannsreute 44a, 70192 Stuttgart, Germany; Legal Basis: Legitimate interests (Article 6(1)(f) GDPR); Website: https://nextcloud.com/en/; Privacy Policy: Click here

   

  Newsletter and Electronic Notifications

  We send newsletters, emails, and other electronic notifications (hereinafter referred to as “Newsletters”) only with the consent of the recipients or based on legal permissions. If the contents of the newsletter are specifically described during the signup process, they will be decisive for the users’ consent. Otherwise, our newsletters contain information about our services and us.

  To subscribe to our newsletters, you generally only need to provide your email address. However, we may ask you for a name for personal addressing in the newsletter or other information if it is necessary for the purposes of the newsletter.

  Double-Opt-In Procedure: Subscription to our newsletter is generally conducted through a double-opt-in procedure. This means that after signing up, you will receive an email asking you to confirm your subscription. This confirmation is necessary to prevent unauthorized subscriptions using someone else’s email address. Subscriptions to the newsletter are logged to comply with legal requirements for documenting the registration process. This includes storing the time of registration and confirmation as well as the IP address. Changes to the data stored with the email service provider will also be logged.

  Deletion and Restriction of Processing: We may store unsubscribed email addresses for up to three years based on our legitimate interests before deletion to document a previously given consent. The processing of this data is limited to the purpose of potentially defending against claims. An individual deletion request is possible at any time, provided the existence of previous consent is confirmed. In case of obligations to permanently honor objections, we reserve the right to store the email address solely for this purpose in a suppression list (so-called “blocklist”).

  Logging the subscription process is based on our legitimate interests for the purpose of proving its proper execution. If we engage a service provider for email dispatch, this is done based on our legitimate interests in an efficient and secure dispatch system.

  Contents:

  Information about us, our services, promotions, and offers.

  • • • Processed Data Types: Master data (e.g., names, addresses); Contact data (e.g., email, phone numbers); Meta/communication data (e.g., device information, IP addresses); Usage data (e.g., visited websites, interest in content, access times).
      • Affected Individuals: Communication partners; Users (e.g., website visitors, online service users).
      • Purpose of Processing: Direct marketing (e.g., via email or postal mail); Providing contractual services and customer support.
      • Legal Basis: Consent (Article 6(1)(a) GDPR); Legitimate interests (Article 6(1)(f) GDPR).
      • Right to Object (Opt-Out): You can unsubscribe from our newsletter at any time, i.e., revoke your consent or object to further receipt. A link to unsubscribe from the newsletter can be found either at the end of each newsletter or you can use one of the contact options provided above, preferably by email, for this purpose.

   

  Additional Information on Processing Activities, Procedures, and Services:

  • • • Measurement of Open and Click Rates: The newsletters contain a “web beacon”, i.e., a pixel-sized file that is retrieved from our server, or, if we use a dispatch service provider, from its server when the newsletter is opened. During this retrieval, technical information, such as browser and system information, as well as your IP address and the time of retrieval, is collected. This information is used to technically improve our newsletters based on technical data or audience and their reading behavior according to their retrieval locations (which can be determined using the IP address) or access times. This analysis also includes determining whether the newsletters are opened, when they are opened, and which links are clicked. This information is assigned to individual newsletter recipients and stored in their profiles until deletion. The evaluations help us recognize the reading habits of our users and adjust our content accordingly or send different content based on our users’ interests. The measurement of open and click rates and the storage of measurement results in users’ profiles, as well as their further processing, is based on users’ consent. Unfortunately, a separate revocation of success measurement is not possible; in this case, the entire newsletter subscription must be canceled or opposed. In this case, stored profile information will be deleted; Legal Basis: Consent (Article 6(1)(a) GDPR).
      • Prerequisite for Using Free Services: Consent to the dispatch of mailings may be a prerequisite for accessing free services (e.g., access to specific content or participation in certain promotions). If users wish to utilize the free service without subscribing to the newsletter, we ask for contact.
      • Klick-Tipp: Service Provider: KLICK-TIPP Ltd., 15 Cambridge Court, 210 Shepherd’s Bush Road, London W6 7NJ, UK; Legal Basis: Legitimate interests (Article 6(1)(f) GDPR); Website: https://www.klick-tipp.com; Privacy Policy: Click here

   

  Surveys and Questionnaires

  We conduct surveys and questionnaires to collect information for the communicated purpose of the respective survey. The surveys and questionnaires we conduct (hereinafter referred to as “Surveys”) are evaluated anonymously. Processing of personal data occurs only to the extent necessary for the provision and technical execution of the surveys (e.g., processing of IP addresses to display the survey in the user’s browser or using cookies to allow the survey to be resumed).

  • • • Processed Data Types: Contact data (e.g., email, phone numbers); Content data (e.g., entries in online forms); Usage data (e.g., visited websites, interest in content, access times); Meta/communication data (e.g., device information, IP addresses).
      • Affected Individuals: Communication partners; Participants.
      • Purpose of Processing: Feedback (e.g., collecting feedback via online forms).
      • Legal Basis: Legitimate interests (Article 6(1)(f) GDPR); Consent (Article 6(1)(a) GDPR).

  Users can generally refuse to participate in surveys. The survey will provide information on how users can refuse participation and any consequences of non-participation. If personal data is processed, users will be informed of their right to object at the beginning of the survey.

  In some cases, participation in surveys may require prior registration for a specific service (e.g., for a user account or newsletter). Users who do not want to register for such a service may be informed about an alternative option to participate in the survey.

  • • • Processed Data Types: Usage data (e.g., visited websites, content interests, access times); Meta/communication data (e.g., device information, IP addresses).
      • Affected Individuals: Users (e.g., website visitors, online service users).
      • Processing Purposes: Reach measurement (e.g., access statistics, identifying returning visitors); Tracking (e.g., interest-/behavior-based profiling, use of cookies); Profiles with user-related information (creating user profiles); Providing our online offerings and user-friendliness; Marketing.
      • Security Measures: IP masking (pseudonymization of the IP address).
      • Legal Bases: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).
      • Right to Object (Opt-Out): We refer to the privacy notices of the respective providers and the objection options provided for them (so-called “Opt-Out”). If no explicit Opt-Out option is provided, you can disable cookies in your browser settings. However, this may limit functionalities of our online offerings. Therefore, we additionally recommend the following Opt-Out options, summarized for each area: a) Europe: Click here  b) Canada: Click here  c) USA: Click here  d) Cross-Border: Click here

   

  Additional Information on Processing Procedures, Methods, and Services:

  • • • Facebook Pixel and Audience Building (Custom Audiences): With the help of the Facebook Pixel (or comparable functions for transmitting event data or contact information via interfaces in apps), Facebook can determine the visitors of our online offerings as an audience for displaying ads (so-called “Facebook Ads”). Accordingly, we use the Facebook Pixel to show our Facebook Ads only to users on Facebook and within the services of partners cooperating with Facebook (so-called “Audience Network” (Click here) who have shown interest in our online offering or exhibit certain characteristics (e.g., interest in specific topics or products evident from visited websites) that we transmit to Facebook (so-called “Custom Audiences”). We aim to ensure that our Facebook Ads align with potential user interests and do not seem intrusive. The Facebook Pixel also allows us to track the effectiveness of Facebook advertisements for statistical and market research purposes by determining if users were redirected to our website after clicking on a Facebook advertisement (so-called “Conversion Measurement”); Service Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal Bases: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR); Website: https://www.facebook.com; Privacy Policy: Click here Standard Contractual Clauses (Ensuring Data Protection Level in Third Countries): The “Facebook-EU Data Transfer Addendum” (Click here) applies in case of processing event data of EU citizens in the USA and is included in the “Facebook Platform Terms of Use” (Click here) regarding the independent processing of event data by Facebook in the context of advertising placement; Further Information: The “Data Processing Terms” (Click here) apply regarding event data processed by Facebook on behalf of businesses to provide reports and analyses; Moreover, the “Controller Addendum” serves as an agreement on joint responsibility (Art. 26 para. 1 sentence 3 GDPR), which is significant in the case of independent processing of event data by Facebook for targeting and improving and securing Facebook products.

   

  Customer Reviews and Evaluation Procedures

  We participate in review and evaluation processes to assess, optimize, and promote our services. When users rate us through the participating review platforms or processes, the General Terms and Conditions and the privacy notices of the providers also apply. Usually, the evaluation also requires registration with the respective providers.

  To ensure that the reviewing individuals have actually utilized our services, we transmit the necessary data regarding the customer and the service provided to the respective review platform with the customer’s consent (including name, email address, and order number or article number). This data is used solely for verifying the authenticity of the user.

  • • • Processed Data Types: Contract data (e.g., contract subject, duration, customer category); Usage data (e.g., visited websites, content interests, access times); Meta/communication data (e.g., device information, IP addresses); Inventory data (e.g., names, addresses); Payment data (e.g., bank details, invoices, payment history); Contact data (e.g., email, phone numbers).
      • Affected Individuals: Customers; Users (e.g., website visitors, online service users).
      • Processing Purposes: Feedback (e.g., collecting feedback via online forms); Marketing; Providing contractual services and customer service.
      • Legal Bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).

   

  Additional Information on Processing Procedures, Methods, and Services:

  • • • Review Widget: We integrate so-called “Review Widgets” into our online offerings. A widget is a functional and content element embedded in our online offering that displays variable information. It may be presented, for example, in the form of a seal or similar element, sometimes also referred to as a “badge.” The content of the widget is displayed within our online offering but is retrieved from the servers of the respective widget provider at that moment. This way, the current content can always be shown, especially the latest rating. To achieve this, a data connection must be established from the webpage accessed within our online offering to the server of the widget provider, and the widget provider receives certain technical data (access data, including IP address) needed for delivering the content of the widget to the user’s browser. Furthermore, the widget provider receives information that users have visited our online offering. This information may be stored in a cookie and used by the widget provider to recognize which online offerings participating in the evaluation process have been visited by the user. The information may be stored in a user profile and used for advertising or market research purposes; Legal Bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
      • Amazon: Marketing of advertising materials and advertising spaces; Service Provider: Amazon EU S.à r.l. (Limited Liability Company), 38 avenue John F. Kennedy, L-1855 Luxembourg; Legal Bases: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR); Website: https://www.amazon.com; Privacy Policy: Click here
      • Amazon: Online marketplace for e-commerce; Service Provider: Amazon EU S.à r.l. (Limited Liability Company), 38 avenue John F. Kennedy, L-1855 Luxembourg; Legal Bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website: https://www.amazon.com; Privacy Policy: Click here
    • • Spotify: Spotify – Music Hosting and Widget; Service Provider: Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden; Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR); Website: https://www.spotify.com; Privacy Policy: Click here
      • SoundCloud: SoundCloud – Music Hosting; Service Provider: SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany; Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR); Website: https://soundcloud.com; Privacy Policy: Click here

   

  Plugins and Embedded Functions and Content

  We integrate functional and content elements into our online offerings that are sourced from the servers of their respective providers (hereinafter referred to as “Third Parties”). This may include graphics, videos, or maps (hereinafter collectively referred to as “Content”).

  The integration always requires that the third-party providers of this Content process the users’ IP addresses, as they could not send the content to the users’ browsers without the IP address. The IP address is, therefore, necessary for the presentation of this Content or functions. We strive to use only those contents whose respective providers use the IP address solely for the delivery of the content. Third parties may also use so-called pixel tags (invisible graphics, also referred to as “Web Beacons”) for statistical or marketing purposes. Pixel tags allow for the evaluation of information such as visitor traffic on the pages of this website. Pseudonymous information may also be stored in cookies on the users’ devices and may contain technical information about the browser and operating system, referring websites, visit times, as well as other usage data of our online offerings and may be linked with information from other sources.

  • • • Processed Data Types: Usage Data (e.g., visited websites, interest in content, access times); Meta/Communication Data (e.g., device information, IP addresses); Inventory Data (e.g., names, addresses); Contact Data (e.g., email, phone numbers); Content Data (e.g., entries in online forms).
      • Affected Persons: Users (e.g., website visitors, users of online services).
      • Purposes of Processing: Provision of our online offerings and user-friendliness; reach measurement (e.g., access statistics, identification of recurring visitors); conversion measurement (measurement of the effectiveness of marketing measures); profiles with user-related information (creation of user profiles).
      • Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR).

   

  Additional Information on Processing Procedures, Methods, and Services:

  • • • Integration of Third-Party Software, Scripts, or Frameworks (e.g., jQuery): We incorporate software into our online offerings that we retrieve from the servers of other providers (e.g., functional libraries used to present or enhance the user-friendliness of our online offerings). The respective providers collect the IP addresses of users and may process these for the purpose of delivering the software to users’ browsers, as well as for security purposes, and for the evaluation and optimization of their services; Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR).
      • Font Awesome (Hosted on Own Server): Provision of fonts and icons; Service Provider: Font Awesome Icons are hosted on our server, and no data is transmitted to the Font Awesome provider; Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR).
      • Google Fonts (Sourced from Google Server): Sourcing fonts (and icons) for the purpose of secure, maintenance-free, and efficient use regarding currency and load times, uniform display, and consideration of potential licensing restrictions. The IP address of the user is transmitted to the font provider so that the fonts can be made available in the user’s browser. Furthermore, technical data (language settings, screen resolution, operating system, used hardware) is transmitted, which is necessary for providing the fonts depending on the used devices and technical environment; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR); Website: https://fonts.google.com/; Privacy Policy: Click here
      • YouTube Videos: Video content; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR); Website: https://www.youtube.com; Privacy Policy: Click here Opt-Out Possibility: Opt-Out Plugin: Click here Ad settings: Click here
      • SoundCloud: SoundCloud – Music Hosting; Service Provider: SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany; Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR); Website: https://soundcloud.com; Privacy Policy: Click here

   

  Management, Organization, and Support Tools

  We utilize services, platforms, and software from third-party providers (hereinafter referred to as “Third Parties”) for the purposes of organization, management, planning, and delivery of our services. In selecting third-party providers and their services, we adhere to legal requirements.

  In this context, personal data may be processed and stored on the servers of third-party providers. Various data may be affected, which we process in accordance with this privacy policy. This data may include, in particular, user master data and contact data, transaction-related data, contract data, other processes, and their content.

  If users are referred to third-party providers or their software or platforms in the context of communication, business, or other relationships with us, the third-party providers may process usage data and metadata for security purposes, service optimization, or marketing purposes. We therefore request that you observe the privacy notices of the respective third parties.

  • • • Processed Data Types: Content Data (e.g., entries in online forms); Usage Data (e.g., visited websites, interest in content, access times); Meta/Communication Data (e.g., device information, IP addresses).
      • Affected Persons: Communication partners; users (e.g., website visitors, users of online services).
      • Purposes of Processing: Provision of contractual services and customer service; office organization and management; communication with partners and service users; reach measurement (e.g., access statistics).
      • Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR).

   

  Additional Information on Processing Procedures, Methods, and Services:

  • • Google Workspace: Email service provider and collaboration tools; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR); Website: https://workspace.google.com/; Privacy Policy: Click here
    • Zoom: Video conferencing service; Service Provider: Zoom Video Communications, Inc., 55 Almaden Blvd, 6th Floor, San Jose, CA 95113, USA; Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR); Website: https://zoom.us/; Privacy Policy: Click here