Privacy Policy

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is all data that can be used to identify you personally. Detailed information on data protection can be found in our privacy policy listed below this text.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the "Information on the Responsible Party"section of this privacy policy.

How do we collect your data?

Your data is collected, on the one hand, when you provide it to us. This may, for example, be data you enter in a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This primarily includes technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you access this website.

What do we use your data for?

Some of the data is collected to ensure the website functions correctly. Other data may beused to analyze your user behavior.

What rights do you have regarding your data?

You have the right to obtain information about the origin, recipient, and purpose of yourstored personal data free of charge at any time. You also have the right torequest the correction or deletion of this data. If you have given your consentto data processing, you can revoke this consent at any time with effect for thefuture. Furthermore, you have the right to request the restriction of theprocessing of your personal data under certain circumstances. Furthermore, youhave the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time with any questions about this or other issues relatingto data protection.

Analysis tools and third-­party tools

When you visit this website, your browsing behavior may be statistically evaluated. This is done primarily using so-called analysis programs.

Detailedinformation about these analysis programs can be found in the following privacypolicy.

2. Hosting

We host thecontent of our website with the following provider:

Webflow

The provideris Webflow, Inc., 398 11th Street, San Francisco, CA 94103, USA (hereinafter"Webflow").

Webflow is atool for building and hosting websites. When you visit our website, Webflowanalyzes user behavior, visitor sources, the region of website visitors, andvisitor numbers. Webflow stores cookies on your browser that are necessary forthe website to function and to ensure security (necessary cookies).

The datacollected via Webflow may be stored on various servers worldwide. Webflow'sservers are located in the USA, among other places.

For details,see Webflow's privacy policy: https://webflow.com/legal/privacy

According toWebflow, data transfer to the USA and other third countries is based on the EUCommission's standard contractual clauses or comparable guarantees pursuant toArt. 46 GDPR. Details can be found here: https://webflow.com/legal/dpa

Webflow isused on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest inpresenting our website as reliably as possible. If consent has been requested,processing will be carried out exclusively on the basis of Art. 6 (1) (a) GDPRand Section 25 (1) TTDSG, insofar as the consent includes the storage ofcookies or access to information on the user's device (e.g., devicefingerprinting) within the meaning of the TTDSG. Consent can be revoked at anytime.

The company iscertified according to the EU-US Data Privacy Framework (DPF). The DPF is anagreement between the European Union and the United States designed to ensurecompliance with European data protection standards when processing data in theUnited States. Every company certified according to the DPF is committed toadhering to these data protection standards. Further information can beobtained from the provider at the following link:https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnbGAAS&status=Active

Orderprocessing

We haveconcluded a data processing agreement (DPA) for the use of the above-mentionedservice. This is a contract required by data protection law, which guaranteesthat the personal data of our website visitors will only be processed accordingto our instructions and in compliance with the GDPR.

Google CloudCDN

We use theGoogle Cloud CDN content delivery network. The provider is Google IrelandLimited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Googleoffers a globally distributed content delivery network. The transfer ofinformation between your browser and our website is technically routed throughGoogle's network. This allows us to increase the global accessibility andperformance of our website.

The use ofGoogle Cloud CDN is based on our legitimate interest in providing our websiteas error-free and securely as possible (Art. 6 (1) (f) GDPR).

Datatransfer to the USA is based on the EU Commission's standard contractualclauses. Details can be found here: https://cloud.google.com/terms/eu-model-contract-clause.

For moreinformation about Google Cloud CDN, please visit:https://cloud.google.com/cdn/docs/overview?hl=de.

The companyis certified according to the EU-US Data Privacy Framework (DPF). The DPF is anagreement between the European Union and the United States designed to ensurecompliance with European data protection standards when processing data in theUnited States. Every company certified according to the DPF is committed toadhering to these data protection standards. Further information can beobtained from the provider at the following link:https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

3. Generalinformation and mandatory ­information

Data protection

Theoperators of these websites take the protection of your personal data veryseriously. We treat your personal data confidentially and in accordance withthe statutory data protection regulations and this privacy policy.

When you usethis website, various personal data is collected. Personal data is data thatcan be used to identify you personally. This privacy policy explains what datawe collect and what we use it for. It also explains how and for what purpose.

We wouldlike to point out that data transmission over the Internet (e.g., whencommunicating via email) may be subject to security gaps. Complete protectionof data from access by third parties is not possible.

Note on theresponsible body

Theresponsible body for data processing on this website is:

ParksideStudios

Thaddeus vanDoesburg

Reichsstraße5B

44651 Herne

Germany

Phone: +49176 81343898

Email:info@theparksidestudios.com

Theresponsible body is the natural or legal person who alone or jointly withothers decides on the purposes and means of processing personal data (e.g.names, e-mail addresses, etc.).

Storageperiod

Unless amore specific storage period is specified in this privacy policy, your personaldata will remain with us until the purpose for data processing no longerapplies. If you make a legitimate request for deletion or revoke your consentto data processing, your data will be deleted unless we have other legallypermissible reasons for storing your personal data (e.g., retention periodsunder tax or commercial law); in the latter case, deletion will occur oncethese reasons no longer apply.

Generalinformation on the legal basis for data processing on this website

If you haveconsented to data processing, we will process your personal data on the basisof Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR if special categories of data areprocessed pursuant to Art. 9 (1) GDPR. In the event of express consent to thetransfer of personal data to third countries, data processing will also becarried out on the basis of Art. 49 (1) (a) GDPR. If you have consented to thestorage of cookies or to access information on your device (e.g. via devicefingerprinting), data processing will also be carried out on the basis ofSection 25 (1) TTDSG. Consent can be revoked at any time. If your data isrequired to fulfill the contract or to carry out pre-contractual measures, wewill process your data on the basis of Art. 6 (1) (b) GDPR. Furthermore, ifyour data is required to fulfill a legal obligation, we will process it on thebasis of Art. 6 (1) (c) GDPR. Data processing may also be based on ourlegitimate interest pursuant to Art. 6 (1) (f) GDPR. The relevant legal basesin each individual case are explained in the following paragraphs of thisprivacy policy.

Note on datatransfer to third countries that are not secure under data protection law andon transfer to US companies that are not DPF-certified

We use toolsfrom companies based in third countries that do not have secure data protectionlaws, as well as US tools whose providers are not certified under the EU-USData Privacy Framework (DPF). If these tools are active, your personal data maybe transferred to these countries and processed there. We would like to pointout that a level of data protection comparable to that in the EU cannot beguaranteed in third countries with unsafe data protection laws.

We wouldlike to point out that the USA, as a safe third country, generally offers alevel of data protection comparable to that of the EU. Data transfer to the USAis therefore permitted if the recipient is certified under the "EU-US DataPrivacy Framework" (DPF) or has appropriate additional safeguards.Information on transfers to third countries, including the data recipients, canbe found in this privacy policy.

Recipientsof personal data

As part ofour business activities, we work with various external parties. In some cases,this also requires the transfer of personal data to these external parties. Weonly pass on personal data to external parties if this is necessary to fulfilla contract, if we are legally obliged to do so (e.g., passing on data to taxauthorities), if we have a legitimate interest in the transfer pursuant to Art.6 (1) (f) GDPR, or if another legal basis permits the data transfer. When usingcontract processors, we only pass on our customers' personal data on the basisof a valid contract for order processing. In the case of joint processing, acontract for joint processing is concluded.

Revocationof your consent to data processing

Many dataprocessing operations are only possible with your express consent. You canrevoke your consent at any time. The legality of the data processing carriedout up to the time of revocation remains unaffected.

Right toobject to data collection in special cases and to direct advertising (Article21 GDPR)

If dataprocessing is based on Article 6 (1) (e) or (f) of the GDPR, you have the rightto object to the processing of your personal data at any time for reasonsrelated to your particular situation; this also applies to profiling based onthese provisions. The respective legal basis on which processing is based canbe found in this privacy policy. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOURPERSONAL DATA UNLESS WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THEPROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSINGSERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART.21 (1) GDPR).

If yourpersonal data is processed for direct marketing purposes, you have the right toobject at any time to the processing of personal data concerning you for suchmarketing purposes ; this also applies to profiling insofar as it is associatedwith such direct marketing. If you object, your personal data will subsequentlyno longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).

to lodge acomplaint ­with the competent supervisory authority

In the eventof violations of the GDPR, data subjects have the right to lodge a complaintwith a supervisory authority, in particular in the Member State of theirhabitual residence, place of work, or place of the alleged violation. Thisright of complaint is without prejudice to other administrative or judicialremedies.

Right todata ­portability

You have theright to have data that we process automatically based on your consent or infulfillment of a contract handed over to you or to a third party in a common,machine-readable format. If you request the direct transfer of the data toanother controller, this will only be done if technically feasible.

Information,correction and deletion

Within thescope of applicable law, you have the right at any time to obtain freeinformation about your stored personal data, its origin and recipient, and thepurpose of data processing, as well as the right to have this data corrected ordeleted. You can contact us at any time with any questions about this or other issuesrelating to personal data.

Right torestriction of processing

You have theright to request the restriction of the processing of your personal data. Youcan contact us at any time to do so. The right to restriction of processingexists in the following cases:

If youdispute the accuracy of your personal data stored by us, we generally need timeto verify this. You have the right to request that the processing of yourpersonal data be restricted while we verify your claim.

If theprocessing of your personal data was/is unlawful, you can request therestriction of data processing instead of deletion.

If we nolonger need your personal data, but you require it to exercise, defend orassert legal claims, you have the right to request that the processing of yourpersonal data be restricted instead of deleted.

If you havelodged an objection pursuant to Art. 21 (1) GDPR, your interests must beweighed against ours. As long as it is not yet clear whose interests prevail,you have the right to request that the processing of your personal data berestricted.

If you haverestricted the processing of your personal data, this data may – with theexception of its storage – only be processed with your consent or for theestablishment, exercise or defense of legal claims or to protect the rights ofanother natural or legal person or for reasons of important public interest ofthe European Union or a Member State.

SSL or TLSencryption

For securityreasons and to protect the transmission of confidential content, such as ordersor inquiries that you send to us as the site operator, this site uses SSL orTLS encryption. You can recognize an encrypted connection by the browser'saddress line changing from "http://" to "https://" and bythe lock symbol in your browser's address bar.

If SSL orTLS encryption is activated, the data you send to us cannot be read by thirdparties.

4. Datacollection on this website

Cookies

Our websiteuses so-called "cookies." Cookies are small data packets and do notcause any damage to your device. They are stored either temporarily for theduration of a session (session cookies) or permanently (permanent cookies) onyour device. Session cookies are automatically deleted after your visit.Permanent cookies remain stored on your device until you delete them yourselfor they are automatically deleted by your web browser.

Cookies canoriginate from us (first-party cookies) or from third-party companies(so-called third-party cookies). Third-party cookies enable the integration ofcertain third-party services within websites (e.g., cookies for processingpayment services).

Cookiesserve various functions. Many cookies are technically necessary, as certainwebsite features would not work without them (e.g., the shopping cart functionor the display of videos). Other cookies can be used to evaluate user behavioror for advertising purposes.

Cookies thatare required to carry out electronic communication, to provide certainfunctions you have requested (e.g. for the shopping cart function) or tooptimize the website (e.g. cookies to measure web audiences) (necessarycookies) are stored on the basis of Art. 6 (1) (f) GDPR, unless another legalbasis is specified. The website operator has a legitimate interest in storingnecessary cookies for the technically error-free and optimized provision of itsservices. If consent to the storage of cookies and similar recognitiontechnologies has been requested, processing will take place exclusively on thebasis of this consent (Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG); thisconsent can be revoked at any time.

You canconfigure your browser to inform you about the use of cookies and to onlyaccept cookies on a case-by-case basis, to exclude cookies for specific casesor in general, and to automatically delete cookies when you close your browser.Disabling cookies may limit the functionality of this website.

You can findout which cookies and services are used on this website in this privacy policy.

Server logfiles

The websiteprovider automatically collects and stores information in so-called server logfiles, which your browser automatically transmits to us. These include:

Browser typeand version

operatingsystem used

Referrer URL

Hostname ofthe accessing computer

Time ofserver request

IP address

This datawill not be merged with other data sources.

This data iscollected on the basis of Art. 6 (1) (f) GDPR. The website operator has alegitimate interest in the technically error-free presentation and optimizationof its website – for this purpose, the server log files must be collected.

Contact form

If you sendus inquiries via the contact form, your information from the form, includingthe contact details you provided there, will be stored by us for the purpose ofprocessing your inquiry and in case of follow-up questions. We will not sharethis data without your consent.

This data isprocessed on the basis of Art. 6 (1) (b) GDPR, provided your request is relatedto the fulfillment of a contract or is necessary to carry out pre-contractualmeasures. In all other cases, the processing is based on our legitimateinterest in the effective processing of the requests addressed to us (Art. 6(1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), if requested; consentcan be revoked at any time.

The data youenter in the contact form will remain with us until you request its deletion,revoke your consent to storage, or the purpose for storing the data no longerapplies (e.g., after your request has been processed). Mandatory legalprovisions—in particular, retention periods—remain unaffected.

Inquiry byemail, telephone or fax

If youcontact us by email, phone, or fax, your inquiry, including all personal data(name, inquiry), will be stored and processed by us for the purpose ofprocessing your request. We will not share this data without your consent.

This data isprocessed on the basis of Art. 6 (1) (b) GDPR, provided your request is relatedto the fulfillment of a contract or is necessary to carry out pre-contractualmeasures. In all other cases, the processing is based on our legitimateinterest in the effective processing of the requests addressed to us (Art. 6(1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), if requested; consentcan be revoked at any time.

The data yousend to us via contact requests will remain with us until you request itsdeletion, revoke your consent to storage, or the purpose for storing the datano longer applies (e.g., after your request has been processed). Mandatorylegal provisions—in particular, statutory retention periods—remain unaffected.

5. Socialmedia

Facebook

This websiteincorporates elements of the social network Facebook. This service is providedby Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.However, according to Facebook, the collected data is also transferred to theUSA and other third countries.

An overviewof Facebook social media elements can be found here:https://developers.facebook.com/docs/plugins/?locale=de_DE.

When thesocial media element is active, a direct connection is established between yourdevice and the Facebook server. Facebook thus receives the information that youhave visited this website using your IP address. If you click the Facebook“Like” button while logged into your Facebook account, you can link the contentof this website to your Facebook profile. This allows Facebook to associateyour visit to this website with your user account. We would like to point outthat, as the provider of the pages, we have no knowledge of the content of thetransmitted data or how Facebook uses it. For more information, see Facebook’sprivacy policy at: https://de-de.facebook.com/privacy/explanation.

If consenthas been obtained, the use of the aforementioned service is based on Art. 6 (1)(a) GDPR and Section 25 of the German Telemedia Act (TTDSG). Consent can berevoked at any time. If no consent has been obtained, the use of the service isbased on our legitimate interest in the most comprehensive visibility possibleon social media.

To theextent that personal data is collected on our website with the help of the tooldescribed here and forwarded to Facebook, we and Meta Platforms IrelandLimited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland arejointly responsible for this data processing (Art. 26 GDPR). The jointresponsibility is limited exclusively to the collection of the data and itsforwarding to Facebook. The processing by Facebook after forwarding is not partof the joint responsibility. Our joint obligations have been set out in a jointprocessing agreement. The wording of the agreement can be found at:https://www.facebook.com/legal/controller_addendum. According to this agreement,we are responsible for providing data protection information when using theFacebook tool and for implementing the tool on our website in a way thatcomplies with data protection law. Facebook is responsible for the datasecurity of Facebook products. You can assert the rights of those affected(e.g. requests for information) regarding the data processed by Facebookdirectly with Facebook. If you assert your rights as a data subject with us, weare obliged to forward these to Facebook.

Datatransfer to the USA is based on the EU Commission's standard contractualclauses. Details can be found here:https://www.facebook.com/legal/EU_data_transfer_addendum,https://de-de.facebook.com/help/566994660333381 andhttps://www.facebook.com/policy.php.

The companyis certified under the EU-US Data Privacy Framework (DPF). The DPF is anagreement between the European Union and the United States designed to ensurecompliance with European data protection standards when processing data in theUnited States. Every company certified under the DPF is committed to adheringto these data protection standards. Further information can be obtained fromthe provider at the following link:https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active

Instagram

This websiteincorporates features of the Instagram service. These features are offered byMeta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour,Dublin 2, Ireland.

When thesocial media element is active, a direct connection is established between yourdevice and the Instagram server. Instagram thus receives information about yourvisit to this website.

If you arelogged into your Instagram account, you can link the content of this website toyour Instagram profile by clicking the Instagram button. This allows Instagramto associate your visit to this website with your user account. We would liketo point out that, as the provider of these pages, we have no knowledge of thecontent of the transmitted data or how it is used by Instagram.

If consenthas been obtained, the use of the aforementioned service is based on Art. 6 (1)(a) GDPR and Section 25 of the German Telemedia Act (TTDSG). Consent can berevoked at any time. If no consent has been obtained, the use of the service isbased on our legitimate interest in the most comprehensive visibility possibleon social media.

To theextent that personal data is collected on our website with the help of the tooldescribed here and forwarded to Facebook or Instagram, we and Meta PlatformsIreland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irelandare jointly responsible for this data processing (Art. 26 GDPR). The jointresponsibility is limited exclusively to the collection of the data and itsforwarding to Facebook or Instagram. The processing carried out by Facebook orInstagram after forwarding is not part of the joint responsibility. Our jointobligations have been set out in a joint processing agreement. The wording ofthe agreement can be found at:https://www.facebook.com/legal/controller_addendum. According to thisagreement, we are responsible for providing data protection information whenusing the Facebook or Instagram tool and for implementing the tool on ourwebsite in accordance with data protection law. Facebook is responsible for thedata security of Facebook and Instagram products. You can assert the rights ofthose affected (e.g. requests for information) regarding the data processed byFacebook or Instagram directly with Facebook. If you assert your data subjectrights with us, we are obliged to forward them to Facebook.

Datatransfer to the USA is based on the EU Commission's standard contractualclauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum,https://privacycenter.instagram.com/policy/, andhttps://de-de.facebook.com/help/566994660333381.

For moreinformation, please see Instagram’s privacy policy:https://privacycenter.instagram.com/policy/.

The companyis certified under the EU-US Data Privacy Framework (DPF). The DPF is anagreement between the European Union and the United States designed to ensurecompliance with European data protection standards when processing data in theUnited States. Every company certified under the DPF is committed to adheringto these data protection standards. Further information can be obtained fromthe provider at the following link:https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active

6. Analysistools and advertising

GoogleAnalytics

This websiteuses features of the web analysis service Google Analytics. The provider isGoogle Ireland Limited ("Google"), Gordon House, Barrow Street,Dublin 4, Ireland.

GoogleAnalytics enables website operators to analyze the behavior of websitevisitors. This provides the website operator with various usage data, such aspage views, length of stay, operating systems used, and user origin. This datais summarized in a user ID and assigned to the respective device of the websitevisitor.

Furthermore,Google Analytics allows us to record your mouse and scroll movements, clicks,and more. Furthermore, Google Analytics uses various modeling approaches tosupplement the collected data sets and employs machine learning technologies indata analysis.

GoogleAnalytics uses technologies that enable user recognition for the purpose ofanalyzing user behavior (e.g., cookies or device fingerprinting). Theinformation collected by Google about your use of this website is usuallytransferred to a Google server in the USA and stored there.

The use ofthis service is based on your consent in accordance with Art. 6 (1) (a) GDPRand Section 25 (1) TTDSG. This consent can be revoked at any time.

Datatransfer to the USA is based on the EU Commission's standard contractualclauses. Details can be found here:https://privacy.google.com/businesses/controllerterms/mccs/.

The companyis certified according to the EU-US Data Privacy Framework (DPF). The DPF is anagreement between the European Union and the United States designed to ensurecompliance with European data protection standards when processing data in theUnited States. Every company certified according to the DPF is committed toadhering to these data protection standards. Further information can beobtained from the provider at the following link:https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Browserplug-in

You canprevent Google from collecting and processing your data by downloading andinstalling the browser plug-in available under the following link:https://tools.google.com/dlpage/gaoptout?hl=de.

For moreinformation on how Google Analytics handles user data, please see Google’sprivacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Orderprocessing

We haveconcluded a contract with Google for order processing and fully implement thestrict requirements of the German data protection authorities when using GoogleAnalytics.

GoogleAnalytics E-Commerce Measurement

This websiteuses the "E-Commerce Measurement" feature of Google Analytics.E-Commerce Measurement allows the website operator to analyze the purchasingbehavior of website visitors to improve their online marketing campaigns.Information such as orders placed, average order values, shipping costs, andthe time from viewing to purchasing a product is collected. Google mayaggregate this data under a transaction ID that is assigned to the respectiveuser or their device.

Hotjar

This websiteuses Hotjar, a service provided by Hotjar Ltd., Level 2, St Julians BusinessCentre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website:https://www.hotjar.com).

Hotjar is atool for analyzing your user behavior on this website. With Hotjar, we canrecord, among other things, your mouse and scroll movements and clicks. Hotjarcan also determine how long you hovered your mouse over a particular location.Hotjar uses this information to create heatmaps that can be used to determinewhich areas of the website visitors prefer to view.

Furthermore,we can determine how long you stayed on a page and when you left. We can alsodetermine at which point you abandoned your contact form (so-called conversionfunnels).

In addition,Hotjar allows for direct feedback from website visitors. This feature helpsimprove the website operator's web offerings.

Hotjar usestechnologies that enable the recognition of the user for the purpose ofanalyzing user behavior (e.g. cookies or the use of device fingerprinting).

If consenthas been obtained, the use of this service is based exclusively on Art. 6 (1)(a) GDPR and Section 25 of the German Telemedia Act (TTDSG). Consent can berevoked at any time. If no consent has been obtained, this service is used onthe basis of Art. 6 (1) (f) GDPR; the website operator has a legitimateinterest in analyzing user behavior in order to optimize both its website andits advertising.

DeactivatingHotjar

If you wouldlike to deactivate data collection by Hotjar, click on the following link andfollow the instructions there: https://www.hotjar.com/policies/do-not-track/

Please notethat Hotjar must be deactivated separately for each browser or device.

For moreinformation about Hotjar and the data collected, please see Hotjar's privacypolicy at the following link: https://www.hotjar.com/privacy

Orderprocessing

We haveconcluded a data processing agreement (DPA) for the use of the above-mentionedservice. This is a contract required by data protection law, which guaranteesthat the personal data of our website visitors will only be processed accordingto our instructions and in compliance with the GDPR.

Google Ads

The websiteoperator uses Google Ads. Google Ads is an online advertising program providedby Google Ireland Limited ("Google"), Gordon House, Barrow Street,Dublin 4, Ireland.

Google Adsenables us to display advertisements in the Google search engine or onthird-party websites when the user enters certain search terms into Google(keyword targeting). Furthermore, targeted advertisements can be displayedbased on user data available to Google (e.g., location data and interests)(audience targeting). We, as website operators, can evaluate this dataquantitatively, for example, by analyzing which search terms led to the displayof our advertisements and how many ads resulted in corresponding clicks.

The use ofthis service is based on your consent in accordance with Art. 6 (1) (a) GDPRand Section 25 (1) TTDSG. This consent can be revoked at any time.

Datatransfer to the USA is based on the EU Commission's standard contractualclauses. Details can be found here:https://policies.google.com/privacy/frameworks andhttps://privacy.google.com/businesses/controllerterms/mccs/.

The companyis certified according to the EU-US Data Privacy Framework (DPF). The DPF is anagreement between the European Union and the United States designed to ensurecompliance with European data protection standards when processing data in theUnited States. Every company certified according to the DPF is committed to adheringto these data protection standards. Further information can be obtained fromthe provider at the following link:https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Meta Pixel(formerly Facebook Pixel)

This websiteuses the Facebook/Meta visitor action pixel to measure conversions. Thisservice is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square,Dublin 2, Ireland. However, according to Facebook, the collected data is alsotransferred to the USA and other third countries.

This allowsthe behavior of site visitors to be tracked after they have been redirected tothe provider's website by clicking on a Facebook ad. This allows theeffectiveness of Facebook ads to be evaluated for statistical and marketresearch purposes and to optimize future advertising measures.

The datacollected is anonymous to us as the operator of this website; we cannot drawany conclusions about the identity of the users. However, the data is storedand processed by Facebook, allowing a connection to the respective user profileand allowing Facebook to use the data for its own advertising purposes, inaccordance with the Facebook Data Usage Policy(https://de-de.facebook.com/about/privacy/). This allows Facebook to enable theplacement of advertisements on Facebook pages and outside of Facebook. We, asthe website operator, cannot influence this use of the data.

The use ofthis service is based on your consent in accordance with Art. 6 (1) (a) GDPRand Section 25 (1) TTDSG. This consent can be revoked at any time.

To theextent that personal data is collected on our website with the help of the tooldescribed here and forwarded to Facebook, we and Meta Platforms IrelandLimited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland arejointly responsible for this data processing (Art. 26 GDPR). The jointresponsibility is limited exclusively to the collection of the data and itsforwarding to Facebook. The processing by Facebook after forwarding is not partof the joint responsibility. Our joint obligations have been set out in a jointprocessing agreement. The wording of the agreement can be found at:https://www.facebook.com/legal/controller_addendum. According to thisagreement, we are responsible for providing data protection information whenusing the Facebook tool and for implementing the tool on our website in a waythat complies with data protection law. Facebook is responsible for the datasecurity of Facebook products. You can assert the rights of those affected(e.g. requests for information) regarding the data processed by Facebookdirectly with Facebook. If you assert your rights as a data subject with us, weare obliged to forward these to Facebook.

Datatransfer to the USA is based on the EU Commission's standard contractualclauses. Details can be found here:https://www.facebook.com/legal/EU_data_transfer_addendum andhttps://de-de.facebook.com/help/566994660333381.

You can findfurther information on protecting your privacy in Facebook’s privacy policy:https://de-de.facebook.com/about/privacy/.

You can alsodeactivate the "Custom Audiences" remarketing feature in the AdSettings section athttps://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. Youmust be logged in to Facebook to do so.

If you donot have a Facebook account, you can opt out of Facebook's usage-basedadvertising on the European Interactive Digital Advertising Alliance website:http://www.youronlinechoices.com/de/praferenzmanagement/.

The companyis certified under the EU-US Data Privacy Framework (DPF). The DPF is anagreement between the European Union and the United States designed to ensurecompliance with European data protection standards when processing data in theUnited States. Every company certified under the DPF is committed to adheringto these data protection standards. Further information can be obtained fromthe provider at the following link:https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active

7. Pluginsand tools

YouTube

This websiteembeds videos from the YouTube website. The website is operated by GoogleIreland Limited ("Google"), Gordon House, Barrow Street, Dublin 4,Ireland.

When youvisit one of our websites that integrates YouTube, a connection to YouTube'sservers is established. The YouTube server is informed of which of our pagesyou have visited.

Furthermore,YouTube may store various cookies on your device or use similar recognitiontechnologies (e.g., device fingerprinting). This allows YouTube to receiveinformation about visitors to this website. This information is used, amongother things, to collect video statistics, improve user-friendliness, andprevent fraud.

If you arelogged into your YouTube account, you allow YouTube to directly associate yourbrowsing behavior with your personal profile. You can prevent this by loggingout of your YouTube account.

YouTube isused in the interest of providing an appealing presentation of our onlineofferings. This represents a legitimate interest within the meaning of Art. 6(1) (f) GDPR. If consent has been requested, processing will be carried outexclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG,insofar as the consent includes the storage of cookies or access to informationon the user's device (e.g., device fingerprinting) within the meaning of theTTDSG. Consent can be revoked at any time.

Furtherinformation on how user data is handled can be found in YouTube’s privacypolicy at: https://policies.google.com/privacy?hl=de.

The companyis certified according to the EU-US Data Privacy Framework (DPF). The DPF is anagreement between the European Union and the United States designed to ensurecompliance with European data protection standards when processing data in theUnited States. Every company certified according to the DPF is committed toadhering to these data protection standards. Further information can beobtained from the provider at the following link:https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

SoundCloud

This websitemay incorporate plug-ins from the social network SoundCloud (SoundCloudLimited, Berners House, 47-48 Berners Street, London W1T 3NF, United Kingdom).You can recognize the SoundCloud plug-ins by the SoundCloud logo on therelevant pages.

When youvisit this website, a direct connection is established between your browser andthe SoundCloud server after activating the plugin. SoundCloud thus receives theinformation that you have visited this website using your IP address. If youclick the "Like" or "Share" button while logged into yourSoundCloud user account, you can link and/or share the content of this websitewith your SoundCloud profile. This allows SoundCloud to associate your visit tothis website with your user account. We would like to point out that, as theprovider of the pages, we have no knowledge of the content of the transmitteddata or how it is used by SoundCloud.

The data isstored and analyzed on the basis of Art. 6 (1) (f) GDPR. The website operatorhas a legitimate interest in the most comprehensive visibility possible onsocial media. If consent has been requested, processing will be carried outexclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG, insofaras the consent includes the storage of cookies or access to information on theuser's device (e.g., device fingerprinting) within the meaning of the TTDSG.Consent can be revoked at any time.

The UnitedKingdom is considered a third country with secure data protection laws. Thismeans that the United Kingdom has a level of data protection equivalent to thatin the European Union.

For moreinformation, please see SoundCloud’s privacy policy at:https://soundcloud.com/pages/privacy.

If you donot want SoundCloud to associate your visit to this website with yourSoundCloud user account, please log out of your SoundCloud user account beforeactivating content from the SoundCloud plugin.

Spotify

This websiteincorporates features of the Spotify music service. The provider is Spotify AB,Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. You can recognize Spotifyplugins by the green logo on this website. An overview of Spotify plugins canbe found at: https://developer.spotify.com.

This allowsa direct connection to be established between your browser and the Spotifyserver via the plugin when you visit this website. Spotify thus receives theinformation that you have visited this website using your IP address. If youclick the Spotify button while logged into your Spotify account, you can linkthe content of this website to your Spotify profile. This allows Spotify toassociate your visit to this website with your user account.

Please notethat when you use Spotify, Google Analytics cookies are used, meaning your usagedata may also be transferred to Google. Google Analytics is a tool provided bythe Google Group for analyzing user behavior and is based in the USA. Spotifyis solely responsible for this integration. We, as the website operator, haveno influence over this processing.

The data isstored and analyzed on the basis of Art. 6 (1) (f) GDPR. The website operatorhas a legitimate interest in the appealing acoustic design of its website. Ifcorresponding consent has been requested, processing is carried out exclusivelyon the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG, insofar as theconsent includes the storage of cookies or access to information on the user'sdevice (e.g., device fingerprinting) within the meaning of the TTDSG. Consentcan be revoked at any time.

For moreinformation, please see Spotify’s privacy policy:https://www.spotify.com/de/legal/privacy-policy/.

If you donot want Spotify to be able to associate your visit to this website with yourSpotify user account, please log out of your Spotify user account.

8. eCommerceand payment ­providers

Processingof customer and contract data

We collect,process, and use personal customer and contract data to establish, define, andmodify our contractual relationships. We collect, process, and use personaldata about the use of this website (usage data) only to the extent necessary toenable the user to use the service or to bill them. The legal basis for this isArt. 6 (1) (b) GDPR.

Thecollected customer data will be deleted after completion of the order ortermination of the business relationship and expiration of any applicablestatutory retention periods. Statutory retention periods remain unaffected.

9. Audio andvideo conferences

Dataprocessing

Tocommunicate with our customers, we use online conferencing tools, among others.The tools we use are listed below. If you communicate with us via video oraudio conference over the internet, your personal data will be collected andprocessed by us and the provider of the respective conferencing tool.

Theconference tools collect all data you provide/use to use the tools (emailaddress and/or your telephone number). Furthermore, the conference toolsprocess the duration of the conference, the start and end (time) ofparticipation in the conference, the number of participants, and other"context information" related to the communication process (metadata).

Furthermore,the provider of the tool processes all technical data necessary to handleonline communication. This includes, in particular, IP addresses, MACaddresses, device IDs, device type, operating system type and version, clientversion, camera type, microphone or speaker, and the type of connection.

If contentis shared, uploaded, or otherwise made available within the tool, this contentis also stored on the tool providers' servers. Such content includes, inparticular, cloud recordings, chat/instant messages, voicemails, uploadedphotos and videos, files, whiteboards, and other information shared while usingthe service.

Please notethat we do not have full control over the data processing procedures of thetools used. Our options depend largely on the company policies of therespective provider. Further information on data processing by the conferencetools can be found in the privacy policies of the respective tools used, whichwe have listed below this text.

Purpose andlegal basis

The conferencetools are used to communicate with prospective or existing contractual partnersor to offer certain services to our customers (Art. 6 (1) (b) GDPR).Furthermore, the use of the tools serves to generally simplify and acceleratecommunication with us or our company (legitimate interest within the meaning ofArt. 6 (1) (f) GDPR). If consent has been requested, the use of the respectivetools is based on this consent; this consent can be revoked at any time withfuture effect.

Storageperiod

The data wecollect directly via the video and conference tools will be deleted from oursystems as soon as you request deletion, revoke your consent to storage, or thepurpose for storing the data no longer applies. Stored cookies remain on yourdevice until you delete them. Mandatory statutory retention periods remainunaffected.

We have noinfluence on the storage period of your data, which is stored by the operatorsof the conference tools for their own purposes. For details, please contact theoperators of the conference tools directly.

Conferencetools used

We use thefollowing conference tools:

zoom

We use Zoom.This service is provided by Zoom Communications Inc., San Jose, 55 AlmadenBoulevard, 6th Floor, San Jose, CA 95113, USA. Details on data processing canbe found in Zoom's privacy policy: https://explore.zoom.us/de/privacy/.

Datatransfer to the USA is based on the EU Commission's standard contractualclauses. Details can be found here: https://explore.zoom.us/de/privacy/.

Orderprocessing

We haveconcluded a data processing agreement (DPA) for the use of the above-mentionedservice. This is a contract required by data protection law, which guaranteesthat the personal data of our website visitors will only be processed accordingto our instructions and in compliance with the GDPR.

10. Ownservices

Handlingapplicant data

We offer youthe opportunity to apply to us (e.g., by email, post, or via an onlineapplication form). Below, we will inform you about the scope, purpose, and useof your personal data collected during the application process. We assure youthat the collection, processing, and use of your data will be carried out incompliance with applicable data protection laws and all other legal provisions,and that your data will be treated with the strictest confidentiality.

Scope andpurpose of data collection

If you sendus an application, we will process your associated personal data (e.g., contactand communication details, application documents, notes taken during jobinterviews, etc.) to the extent necessary to decide whether to establish anemployment relationship. The legal basis for this is Section 26 of the FederalData Protection Act (BDSG) under German law (initiation of an employmentrelationship), Art. 6 (1) (b) GDPR (general contract initiation), and – if youhave given your consent – Art. 6 (1) (a) GDPR. This consent can be revoked atany time. Your personal data will only be passed on within our company topeople involved in processing your application.

If yourapplication is successful, the data you submit will be stored in our dataprocessing systems on the basis of Section 26 BDSG and Article 6 (1) (b) GDPRfor the purpose of implementing the employment relationship.

Dataretention period

If we areunable to make you a job offer, if you reject a job offer, or if you withdrawyour application, we reserve the right to retain the data you have submittedfor up to six months from the end of the application process (rejection orwithdrawal of the application) based on our legitimate interests (Art. 6 (1)(f) GDPR). The data will then be deleted and the physical application documentsdestroyed. Retention is primarily for evidential purposes in the event of alegal dispute. If it is apparent that the data will be required after thesix-month period (e.g., due to impending or pending legal proceedings),deletion will only occur when the purpose for further retention no longerapplies.

Longerstorage may also take place if you have given your consent (Art. 6 (1) (a)GDPR) or if statutory retention periods prevent deletion.

Google Drive

We haveintegrated Google Drive into this website. The provider is Google IrelandLimited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Driveallows us to integrate an upload area on our website where you can uploadcontent. When you upload content, it is stored on Google Drive's servers. Whenyou visit our website, a connection is also established with Google Drive,allowing Google Drive to determine that you have visited our website.

The use ofGoogle Drive is based on Art. 6 (1) (f) GDPR. The website operator has alegitimate interest in a reliable upload area on its website. If consent hasbeen requested, processing will be carried out exclusively on the basis of Art.6 (1) (a) GDPR; consent can be revoked at any time.

The companyis certified according to the EU-US Data Privacy Framework (DPF). The DPF is anagreement between the European Union and the United States designed to ensurecompliance with European data protection standards when processing data in theUnited States. Every company certified according to the DPF is committed toadhering to these data protection standards. Further information can beobtained from the provider at the following link:https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active