Privacy Policy

As of September 8, 2025

Our company takes the protection of personal data very seriously. We want you to know when we store which data and how we use it. When collecting and processing personal data, we comply with the provisions of the EU General Data Protection Regulation (GDPR) and the new Federal Data Protection Act (BDSG).

Introduction

With the following information, we would like to provide you, as a “data subject,” with an overview of how we process your personal data and your rights under data protection laws. In general, you can use our website without providing any personal data. However, if you wish to use specific services offered by our company via our website, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we will generally obtain your consent.

The processing of personal data—such as your name, address, or email address—is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to “Alfred Weigel Federnfabrik GmbH & CO. KG.” Through this Privacy Policy, we would like to inform you about the scope and purpose of the personal data we collect, use, and process.

As the data controller, we have implemented numerous technical and organizational measures to ensure the most comprehensive protection possible for the personal data processed through this website. However, internet-based data transmissions may inherently involve security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, you are free to provide us with personal data through alternative means, such as by phone or mail.

Person in Charge

The controller within the meaning of the GDPR is:

Alfred Weigel Federnfabrik GmbH & CO. KG
Annaberger Straße 138,
D-091 Chemnitz, Germany

Data Protection Officer

You can contact the Data Protection Officer as follows:

Steve Vetter I Vetter Consulting
Phone: 035150081750
Email: info@vc-datenschutz.de

If you have any questions or suggestions regarding data protection, you can contact our Data Protection Officer directly at any time.

Disclosure of Data to Third Parties

Your personal data will not be disclosed to third parties for any purposes other than those listed below.

We will only share your personal data with third parties if:

You have given us your explicit consent pursuant to Article 6(1)(a) of the GDPR to,
the disclosure is permitted under Article 6(1)(f) of the GDPR to safeguard our legitimate interests, and there is no reason to believe that you have a legitimate interest in the non-disclosure of your data that
outweighs our legitimate interests,
in the event that there is a legal obligation to disclose information pursuant to Article 6(1)(c) of the GDPR, as well as
this is permitted by law and is necessary, pursuant to Article 6(1)(b) of the GDPR, for the performance of contractual relationships with you.

To protect your data and, if necessary, to enable us to transfer data to third countries (outside the EU/EEA), we have entered into data processing agreements based on the European Commission’s Standard Contractual Clauses. If the Standard Contractual Clauses are insufficient to ensure an adequate level of security, your consent pursuant to Article 49(1)(a) of the GDPR may serve as the legal basis for transfers to third countries. This does not apply, however, to data transfers to third countries for which the European Commission has issued an adequacy decision pursuant to Article 45 of the GDPR.

Your personal data will not be disclosed to third parties for any purposes other than those listed below.

We will only share your personal data with third parties if:

You have given us your explicit consent pursuant to Article 6(1)(a) of the GDPR to,
the disclosure is permitted under Article 6(1)(f) of the GDPR to safeguard our legitimate interests, and there is no reason to believe that you have a legitimate interest in the non-disclosure of your data that
outweighs our legitimate interests,
in the event that there is a legal obligation to disclose information pursuant to Article 6(1)(c) of the GDPR, as well as
this is permitted by law and is necessary, pursuant to Article 6(1)(b) of the GDPR, for the performance of contractual relationships with you.

As part of the data processing activities described in this Privacy Policy, personal data may be transferred to the United States. Companies in the United States are deemed to provide an adequate level of data protection only if they have obtained certification under the EU-U.S. Data Privacy Framework and the European Commission’s adequacy decision pursuant to Article 45 of the GDPR therefore applies. We have explicitly stated this for the relevant service providers in the Privacy Policy. To protect your data in all other cases, we have entered into data processing agreements based on the European Commission’s Standard Contractual Clauses. If the Standard Contractual Clauses are insufficient to ensure an adequate level of security, your consent pursuant to Article 49(1)(a) of the GDPR may serve as the legal basis for the transfer to third countries. This does not apply, however, to data transfers to third countries for which the European Commission has issued an adequacy decision pursuant to Article 45 of the GDPR.

Technology

5.1 SSL/TLS Encryption

This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential information—such as orders, login credentials, or contact requests—that you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser’s address bar displays “https://” instead of “http://,” and by the padlock icon in your browser’s address bar.

We use this technology to protect the data you submit.

5.2 Data Collection When Visiting the Website

When you use our website solely for informational purposes—that is, if you do not register, do not otherwise provide us with information, or do not give consent to processing activities requiring consent—we collect only the data that is technically necessary to provide the service. This typically consists of data that your browser transmits to our server (in so-called “server log files”). Every time you or an automated system accesses a page on our website, our website collects a range of general data and information. This general data and information is stored in the server’s log files. The following may be collected:

types and versions of browsers used,
the operating system used by the accessing system,
the website from which a connecting system accesses our website (known as a "referrer"),
the subpages that are accessed via a system connecting to our website,
the date and time of a visit to the website,
an Internet Protocol (IP) address, and,
the Internet service provider of the accessing system.

When using this general data and information, we do not draw any conclusions about your identity. Rather, this information is needed to

to deliver the content of our website accurately,
to optimize the content of our website as well as the advertising for it,
to ensure the continued functionality of our IT systems and the technology behind our website, as well as
to provide law enforcement agencies with the information necessary for criminal prosecution in the event of a cyberattack.

We therefore evaluate this collected data and information, on the one hand, for statistical purposes and, on the other hand, with the aim of enhancing data protection and data security within our company, ultimately to ensure an optimal level of protection for the personal data we process. The data from the server log files is stored separately from any personal data provided by a data subject.

The legal basis for data processing is Article 6(1), first sentence, subparagraph (f) of the GDPR. Our legitimate interest stems from the purposes of data collection listed above.

5.3 Data Collection When Visiting the Website

When you use our website solely for informational purposes—that is, if you do not register, do not otherwise provide us with information, or do not give your consent to processing activities that require consent—we collect only the data that is technically necessary to provide the service. This typically consists of data that your browser transmits to our server (in so-called “server log files”). Every time you or an automated system accesses a page on our website, our website collects a range of general data and information. This general data and information is stored in the server’s log files. The following may be collected:

types and versions of browsers used,
the operating system used by the accessing system,
the website from which a connecting system accesses our website (known as a "referrer"),
the subpages that are accessed via a system connecting to our website,
the date and time of a visit to the website,
a truncated Internet Protocol address (anonymized IP address), as well as,
the Internet service provider of the accessing system.

When using this general data and information, we do not draw any conclusions about your identity. Rather, this information is needed to

to deliver the content of our website accurately,
to optimize the content of our website as well as the advertising for it,
to ensure the continued functionality of our IT systems and the technology behind our website, as well as
to provide law enforcement agencies with the information necessary for criminal prosecution in the event of a cyberattack.

We therefore evaluate this collected data and information both for statistical purposes and with the goal of enhancing data protection and data security within our company, ultimately to ensure an optimal level of protection for the personal data we process. The anonymous data from the server log files is stored separately from any personal data provided by a data subject.

The legal basis for data processing is Article 6(1)(f) of the GDPR. Our legitimate interest stems from the purposes of data collection listed above.

5.4 Amazon Web Services (AWS) – Hosting Individual Components

Our website incorporates components from Amazon Web Services (AWS), a division of Amazon.com Inc., Seattle, 410 Terry Ave N, United States. Amazon Web Services (AWS) is the world's most comprehensive and widely used cloud platform.

One of the purposes of using AWS in this case is to have applications and services hosted on AWS and to rent resources for computationally intensive tasks.

If you have consented to the use of services hosted by AWS, the legal basis for the processing of personal data is Article 6(1)(a) of the GDPR. Furthermore, it is in our legitimate interest, within the meaning of Article 6(1)(f) of the GDPR, to use AWS to host individual components in order to operate our website in an appealing and secure manner.

The parent company, Amazon Inc., is a U.S. company certified under the EU-U.S. Data Privacy Framework. This constitutes an adequacy decision pursuant to Article 45 of the GDPR, meaning that personal data may be transferred even without further safeguards or additional measures.

You can view the AWS Privacy Policy at: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice_German_2023-08-11.pdf.

5.5 Hosting by All-Inkl

We host our website with ALL-INKL.COM – Neue Medien Münnich, owned by René Münnich, Hauptstraße 68, 02742 Friedersdorf (hereinafter referred to as All-Inkl).

When you visit our website, your personal data (e.g., IP addresses in log files) is processed on All-Inkl's servers.

The use of All-Inkl is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in ensuring that our website is displayed, provided, and secured as reliably as possible.

We have entered into a data processing agreement (DPA) with All-Inkl in accordance with Article 28 of the GDPR. This is a contract required by data protection law that ensures that All-Inkl processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

For more information about All-Inkl's privacy policy, please visit: https://all-inkl.com/datenschutzinformationen/

Cookies

6.1 General Information About Cookies

Cookies are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.

Information related to the specific device being used is stored in the cookie. However, this does not mean that we thereby gain direct knowledge of your identity.

We use cookies to make your experience on our website more enjoyable. For example, we use so-called session cookies to recognize that you have already visited certain pages on our website. These cookies are automatically deleted when you leave our site.

In addition, to optimize the user experience, we also use temporary cookies that are stored on your device for a specific, predetermined period of time. When you visit our site again to use our services, the system automatically recognizes that you have visited us before and recalls the information and settings you entered, so you do not have to re-enter them.

In addition, we use cookies to collect statistical data on the use of our website and to evaluate our offerings for the purpose of optimization. These cookies allow us to automatically recognize that you have previously visited our website when you return. The cookies set in this way are automatically deleted after a specified period of time. The respective storage periods for the cookies can be found in the settings of the consent tool used.

6.2 Legal Basis for the Use of Cookies

The data processed by cookies, which is necessary for the proper functioning of the website, is therefore required to safeguard our legitimate interests and those of third parties pursuant to Article 6(1)(f) of the GDPR.

For all other cookies, you have provided your consent via our opt-in cookie banner in accordance with Article 6(1)(a) of the GDPR.

6.3 Borlabs Cookie (Consent Management Tool)

We use the WordPress cookie plugin “Borlabs Cookie” from Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany. This service allows us to obtain and manage website users’ consent to data processing.

Borlabs Cookie uses cookies to collect data generated by end users who visit our website. When an end user provides consent, the following data, among other things, is automatically logged:

- Cookie duration,

- Cookie version,

- Domain and path of the WordPress site,

- Selection in the cookie banner,

- UID (a randomly generated ID),

The consent status is also stored in the end user’s browser, allowing the website to automatically read and honor the end user’s consent for all subsequent page requests and future end-user sessions for up to 12 months. Consent data (consent and withdrawal of consent) is stored for three years. The retention period corresponds to the standard statute of limitations under Section 195 of the German Civil Code (BGB). The data is then deleted immediately.

The website cannot function properly without the processing described above. The user has no right to object as long as there is a legal obligation to obtain the user’s consent for certain data processing operations, Art. 7(1), 6(1), first sentence, subparagraph (c) of the GDPR.

The collected data is neither forwarded to Borlabs GmbH nor does Borlabs GmbH have access to it.

For more information, visit: https://de.borlabs.io/borlabs-cookie/.

Content on Our Website

7.1 Contacting Us / Contact Form

When you contact us (e.g., via the contact form or email), personal data is collected. The specific data collected when using a contact form is indicated on the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) of the GDPR. If your contact is intended to lead to the conclusion of a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. Your data will be deleted once your inquiry has been fully processed; this is the case when the circumstances indicate that the matter in question has been conclusively resolved and there are no legal retention obligations preventing deletion.

7.2 Services / Digital Goods

We disclose personal data to third parties only when necessary for the fulfillment of the contract, such as to the financial institution responsible for processing payments.

Your data will not be disclosed to any other parties, or will only be disclosed if you have expressly consented to such disclosure. Your data will not be disclosed to third parties without your express consent, for example for advertising purposes.

The legal basis for data processing is Article 6(1)(b) of the GDPR, which permits the processing of data for the purpose of fulfilling a contract or taking steps prior to entering into a contract.

7.3 Application Management / Job Board

We collect and process applicants’ personal data for the purpose of handling the application process. This processing may also be carried out electronically. This is particularly the case when an applicant submits the relevant application documents to us electronically, for example via email or through a web form on our website. If we enter into an employment or service contract with an applicant, the data provided will be stored for the purpose of managing the employment relationship in accordance with applicable laws. If we do not enter into a contract with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests on our part preclude such deletion. An example of such a legitimate interest is the burden of proof in proceedings under the General Equal Treatment Act (AGG).

The legal basis for the processing of your data is Article 6(1)(b) and Article 88 of the GDPR in conjunction with Section 26(1) of the BDSG.

Our Activities on Social Media

To enable us to communicate with you on social media and keep you informed about our services, we maintain our own pages on these platforms. When you visit one of our social media pages, we are jointly responsible with the provider of the respective social media platform for the processing operations triggered thereby, within the meaning of Article 26 of the GDPR.

We are not the original providers of these pages; rather, we simply use them within the scope of the options offered to us by the respective providers.

Therefore, as a precaution, we would like to point out that your data may also be processed outside the European Union or the European Economic Area. Using this service may therefore involve data protection risks for you, as it may be difficult to exercise your rights—such as the right to access, erasure, objection, etc., may be more difficult, and processing on social networks is often carried out directly by the providers for advertising purposes or to analyze user behavior, without us having any influence over this. When the provider creates usage profiles, cookies are often used, or your usage behavior is linked to the social media profile you have created.

The processing of personal data described herein is carried out in accordance with Article 6(1)(f) of the GDPR, based on our legitimate interest and the legitimate interest of the respective provider, in order to communicate with you in a timely manner and to inform you about our services. If you, as a user, are required to provide consent to data processing with the respective providers, the legal basis is Article 6(1)(a) of the GDPR in conjunction with Article 7 of the GDPR.

Since we do not have access to the providers’ databases, we would like to point out that the best way to exercise your rights (e.g., the right to access, correction, deletion, etc.) is to contact the respective provider directly. We have provided further information on the processing of your data on social media platforms below, listed by the respective social media provider we use:

8.1 LinkedIn

(Joint) Data Controller in Europe:

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

https://www.linkedin.com/legal/privacy-policy

Web Analytics

9.1 Google Analytics 4 (GA4)

On our websites, we use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

In this context, pseudonymized usage profiles are created and cookies are used (see the “Cookies” section). The information generated by the cookie regarding your use of this website may include, among other things:

- Temporary collection of the IP address without permanent storage

Location Data
Browser Type/Version
Operating system used
Referrer URL (previously visited page)
Time of the server request

The pseudonymized data may be transferred by Google to a server in the United States and stored there.

The information is used to analyze website usage, to compile reports on website activity, and to provide other services related to website and Internet usage for the purposes of market research and to tailor the design of these web pages to user needs. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf.

These processing activities are carried out only upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

Google’s default data retention period is 14 months. Otherwise, personal data is retained for as long as necessary to fulfill the purpose of processing. The data is deleted as soon as it is no longer necessary to achieve that purpose.

The parent company, Google LLC, is a U.S. company certified under the EU-U.S. Data Privacy Framework. An adequacy decision pursuant to Article 45 of the GDPR is therefore in place, meaning that personal data may be transferred even without further safeguards or additional measures.

For more information on data protection when using GA4, visit: https://support.google.com/analytics/answer/12017362?hl=de.

9.2 Google Analytics 4 (GA4) – Additional Information on Consent Mode, Advanced Implementation

Under the Digital Markets Act, Google is required to obtain users’ consent before processing user data for personalized advertising. Google complies with this requirement through “Consent Mode.” Users are required to implement this feature and thereby demonstrate that they have obtained consent from website visitors.

Google offers two implementation modes: the simple implementation and the advanced implementation.

We use the extended implementation method of Google Consent Mode. If you consent to data processing in connection with the use of GA4 (see above), a connection to Google is established, Google Analytics cookies are set, and the corresponding processing operations are carried out. If you do not consent, no Google Analytics cookies will be set. However, a unique “Ping ID” will be generated and transmitted to Google. The Google code will be executed, and only limited user data will be transmitted to Google, including, among other things, information such as:

IP address
Browser Details
URL Visited

A personalized user ID is not assigned.

If you have consented to the use of Google Analytics 4, Consent Mode, extended implementation, the legal basis for the processing of personal data is Article 6(1)(a) of the GDPR. Furthermore, it is in our legitimate interest within the meaning of Article 6(1)(f) of the GDPR to use Google Analytics 4, Consent Mode, extended implementation, in order to obtain data on conversions without creating user profiles and thereby increase profitability.

9.3 Leadinfo (Lead Generation Service)

On our website, we use the lead generation service provided by Leadinfo B.V., Rivium Quadrant 141, Capelle aan den IJssel, South Holland 2909.

The service identifies visits to our website by companies based on IP addresses and displays publicly available information to us, such as company names or addresses. The IP addresses are neither displayed nor stored.

In addition, Leadinfo uses two first-party cookies to analyze user behavior on our website and processes domains from form submissions (e.g., \?leadinfo.com\?) to correlate IP addresses with companies and improve our services.

The following data is generally collected and processed in this process:

IP Address Without Permanent Storage
Location based on IP address
Domain from form field entries

These processing activities are carried out exclusively upon your express consent in accordance with Article 6(1)(a) of the GDPR. Your data will be stored until the purpose has been fulfilled or until you withdraw your consent.

For more information about Leadinfo's privacy policy, please visit: https://www.leadinfo.com/de/rechtliches/datenschutz/.

9.4 WordPress Stats – Jetpack

This website uses the WordPress tool “WordPress Stats,” provided by Jetpack, to analyze visitor traffic statistics. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA. The operator uses tracking technology from Quantcast Inc., 201 Third Street, San Francisco, CA 94103, USA.

Jetpack uses cookies that are stored on your computer and allow WordPress Stats to analyze how the website is used. The information generated by the cookies regarding the use of our website is stored on servers in the United States. Your IP address is anonymized after processing and before storage.

The cookies remain on your device until you delete them.

These processing activities are carried out only upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

This U.S. company is certified under the EU-U.S. Data Privacy Framework. An adequacy decision pursuant to Article 45 of the GDPR has been issued, meaning that personal data may be transferred even without further safeguards or additional measures.

You can view Jetpack's privacy policy at: https://jetpack.com/support/privacy/.

Advertisement

10.1 Google Ads (AdWords) Remarketing/Retargeting

We have integrated Google Ads into this website. The operator of Google Ads services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

We use this to advertise this website in Google search results and on third-party websites. To do this, Google places a cookie in your device’s browser, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited.

Any additional data processing will only take place if you have consented to Google linking your web and app browsing history to your Google Account and using information from your Google Account to personalize the ads you see on the web. In this case, if you are signed in to Google while visiting our website, Google will use your data in conjunction with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, Google temporarily links your personal data with Google Analytics data to form target audiences.

These processing activities are carried out exclusively upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

You can view the Google Ads Privacy Policy and additional information at: https://www.google.com/policies/technologies/ads/

10.2 Google Ads with Conversion Tracking

We have integrated Google Ads into this website. The operator of Google Ads services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads is an online advertising service that allows advertisers to place ads both in Google’s search results and on the Google Display Network. Google Ads enables an advertiser to specify certain keywords in advance, so that an ad is displayed in Google’s search results only when a user enters a search query containing those keywords. On the Google Display Network, ads are distributed across thematically relevant websites using an automated algorithm and based on the previously specified keywords.

The purpose of Google Ads is to promote our website by displaying interest-based ads on third-party websites and in Google search results, as well as by displaying third-party ads on our website.

If you arrive at our website via a Google ad, Google will place a so-called conversion cookie on your computer. A conversion cookie expires after thirty days and is not used to identify you. Provided the cookie has not yet expired, the conversion cookie is used to track whether certain subpages—such as the shopping cart in an online store system—have been accessed on our website. The conversion cookie allows both us and Google to track whether a user who arrived at our website via an AdWords ad generated revenue—that is, whether they completed or abandoned a purchase.

The data and information collected through the use of the conversion cookie are used by Google to generate visitor statistics for our website. We, in turn, use these visitor statistics to determine the total number of users who were referred to us via Google Ads, that is, to assess the success or failure of each ad and to optimize our ads for the future. Neither our company nor other Google Ads advertisers receive information from Google that could be used to identify you.

The conversion cookie is used to store personal information, such as the web pages you have visited. Each time you visit our website, personal data—including the IP address of the Internet connection you are using—is therefore transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may, under certain circumstances, share this personal data—collected through technical means—with third parties.

These processing activities are carried out only upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

You can view Google AdSense's privacy policy and additional information at: https://www.google.de/intl/de/policies/privacy/.

10.3 Google Ads – Additional Information on Consent Mode, Advanced Implementation

Google offers two implementation modes: the simple implementation and the advanced implementation.

We use the extended implementation method of Google Consent Mode. If you consent to data processing in connection with the use of Google Ads (see above), a connection to Google is established, Google Analytics cookies are set, and the corresponding processing operations are carried out. If you do not consent, no Google Ads cookies will be set. However, a unique “Ping ID” will be generated and transmitted to Google. The Google code will be executed, and only limited user data will be transmitted to Google, including, among other things, information such as:

IP address
Browser Details
URL Visited

A personalized user ID is not assigned.

If you have consented to the use of Google Ads, Consent Mode, extended implementation, the legal basis for the processing of personal data is Article 6(1)(a) of the GDPR. Furthermore, it is in our legitimate interest within the meaning of Article 6(1)(f) of the GDPR to use Google Analytics 4, Consent Mode, and the extended implementation to obtain data on conversions without creating user profiles, thereby increasing profitability.

Plugins and Other Services

11.1 Google Maps

We use Google Maps (API) on our website. Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies, headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps is a web service for displaying interactive (map) images to visually present geographic information. By using this service, for example, you can view our location and find it easier to get here.

As soon as you visit any of the subpages that include a Google Maps map, information about your use of our website (such as your IP address) is transmitted to Google’s servers in the U.S. and stored there, provided you have given your consent within the meaning of Art. 6(1)(a) of the GDPR. In addition, Google Maps loads Google Web Fonts, Google Photos, and Google Stats. These services are also provided by Google Ireland Limited. When you visit a page that embeds Google Maps, your browser loads the web fonts and photos required to display Google Maps into your browser cache. For this purpose as well, the browser you are using establishes a connection to Google’s servers. As a result, Google becomes aware that our website has been accessed via your IP address. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want this data to be associated with your Google profile, you must log out of your Google user account. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google.

If you do not consent to your data being transmitted to Google in the future when using Google Maps, you also have the option to completely disable the Google Maps web service by turning off JavaScript in your browser. In that case, Google Maps—and thus the map display on this website—will no longer be available.

These processing activities are carried out only upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

You can view Google's Terms of Service at https://www.google.de/intl/de/policies/terms/regional.html; the additional Terms of Service for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html.

You can view the Google Maps Privacy Policy at: (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/.

11.2 Google reCAPTCHA

We use the reCAPTCHA feature on this website. Google reCAPTCHA is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies, headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The reCAPTCHA feature is primarily used to distinguish whether an input is made by a human or is being misused through machine-based and automated processing. The service also involves sending the IP address and, if necessary, other data required by Google for the reCAPTCHA service to Google.

These processing activities are carried out only upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

For more information about Google reCAPTCHA and Google's Privacy Policy, please visit: https://www.google.com/intl/de/policies/privacy/.

11.3 Google Tag Manager

We use the Google Tag Manager service on this website. Google Tag Manager is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies, headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This tool allows you to implement “website tags” (i.e., keywords embedded in HTML elements) and manage them through a user interface. By using Google Tag Manager, we can automatically track which button, link, or personalized image you have actively clicked on and can then determine which content on our website is of particular interest to you.

The tool also triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If you have disabled tracking at the domain or cookie level, this setting remains in effect for all tracking tags implemented using Google Tag Manager.

These processing activities are carried out only upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

For more information about Google Tag Manager and Google's Privacy Policy, please visit: https://www.google.com/intl/de/policies/privacy/.

Your Rights as a Data Subject

12.1 Right to Confirmation

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

12.2 Right of Access, Art. 15 of the GDPR

You have the right to receive, at any time and free of charge, information from us regarding the personal data we have stored about you, as well as a copy of this data, in accordance with the provisions of the law.

12.3 Right to Rectification, Art. 16 of the GDPR

You have the right to request the correction of inaccurate personal data concerning you. Furthermore, you have the right to request that incomplete personal data be completed, taking into account the purposes of the processing.

12.4 Erasure—Article 17 of the GDPR

You have the right to request that we delete your personal data without delay, provided that one of the grounds specified by law applies and the processing or storage of such data is not necessary.

12.5 Restriction of Processing, Art. 18 of the GDPR

You have the right to request that we restrict the processing of your personal data if any of the legal requirements are met.

12.6 Data Portability, Art. 20 of the GDPR

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller to whom the personal data has been provided, without hindrance from us, provided that the processing is based on consent pursuant to Art. 6(1)(a) of the GDPR or Art. 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability pursuant to Art. 20(1) of the GDPR, you have the right to have your personal data transmitted directly from one controller to another, provided that this is technically feasible and does not infringe upon the rights and freedoms of others.

12.7 Right to Object under Article 21 of the GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(e) (data processing in the public interest) or (f) (data processing based on a balancing of interests) of the GDPR.

This also applies to profiling based on these provisions within the meaning of Article 4(4) of the GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

In certain cases, we process personal data for the purpose of direct marketing. You may object at any time to the processing of your personal data for such marketing purposes. This also applies to profiling, to the extent that it is related to such direct marketing. If you object to our processing of your personal data for direct marketing purposes, we will no longer process your personal data for these purposes.

In addition, you have the right to object, on grounds relating to your particular situation, to the processing of your personal data that we carry out for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

In connection with the use of information society services, notwithstanding Directive 2002/58/EC, you are free to exercise your right to object through automated means that use technical specifications.

12.8 Withdrawal of Consent Under Data Protection Law

You have the right to withdraw your consent to the processing of personal data at any time, effective for the future.

12.9 Filing a Complaint with a Regulatory Authority

You have the right to file a complaint with a data protection supervisory authority regarding our processing of personal data.

Routine Storage, Deletion, and Blocking of Personal Data

We process and store your personal data only for the period necessary to fulfill the purpose of storage or to the extent required by the laws to which our company is subject.

If the purpose of storage no longer applies or a required retention period expires, the personal data will be routinely blocked or deleted in accordance with legal requirements.

Retention Period for Personal Data

The criterion for the duration of personal data storage is the applicable statutory retention period. Once this period has expired, the relevant data is routinely deleted, provided it is no longer necessary for the performance or initiation of a contract.

This Privacy Policy was created with the help of the data protection software: VC Data Security Manager.