Privacy Policy - A.W. Chesterton Company

This is an automatic translation of the original German version. You can find the original document here: Datenschutzerklärung (Deutsch).

June 13, 2023

Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

Chesterton International LLC
Am Lenzenfleck 23
85737 Ismaning
Germany
+49 89 9965460
Munich@chesterton.com
aw-chesterton.com

Contact information of the Data Protection Officer

The Data Protection Officer of the controller is:

DataCo GmbH
Dachauer Straße 65
80335 Munich
Germany
+49 89 7400 45840
www.dataguard.de

General Information on Data Processing

1. Scope of processing of personal data

As a matter of principle, we process personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services. The processing of personal data of our users regularly takes place only with the user’s consent. An exception applies in those cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by statutory regulations.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 para. 1 sentence 1 lit. a GDPR serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 sentence 1 lit. d GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not override the first-mentioned interest, Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for the processing.

3. Data erasure and storage period

The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or erased if a storage period prescribed by the aforementioned norms expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights against the controller:

1. The right of access (Art. 15 GDPR)

You have the right to request confirmation from us as to whether or not personal data concerning you is being processed.

If this is the case, you have a right of access to this data and to the following information:

1. - Purposes of processing
  - Categories of personal data
  - Recipients or categories of recipients
  - Planned storage period or the criteria for determining this period
  - The existence of the rights to rectification, erasure, restriction of processing, or objection
  - Right to lodge a complaint with the competent supervisory authority
  - If applicable, the origin of the data (if collected from a third party)
  - If applicable, the existence of automated decision-making, including profiling, with meaningful information about the logic involved, as well as the significance and the envisaged consequences
  - If applicable, the transfer of personal data to a third country or an international organization

2. Right to rectification (Art. 16 GDPR)

If your personal data is inaccurate or incomplete, you have the right to request an immediate correction or completion of the personal data.

3. Right to restriction of processing (Art. 18 GDPR)

If one of the following conditions is met, you have the right to request the restriction of the processing of your personal data:

1. - You contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data.
  - In the case of unlawful processing, you oppose the erasure of the personal data and request the restriction of their use instead.
  - We no longer need your personal data for the purposes of the processing, but you require your personal data for the establishment, exercise, or defense of legal claims, or
  - after you have objected to processing, pending the verification whether our legitimate grounds override yours.

4. Right to erasure (“Right to be forgotten”) (Art. 17 GDPR)

If one of the following grounds applies, you have the right to request the immediate erasure of your personal data:

1. - Your data is no longer necessary in relation to the purposes of processing for which it was originally collected.
  - You withdraw your consent and there is no other legal basis for the processing.
  - You object to the processing and there are no overriding legitimate grounds for the processing, or you object pursuant to Art. 21 para. 2 GDPR.
  - Your personal data has been unlawfully processed.
  - The erasure is necessary for compliance with a legal obligation under Union law or the law of the Member State to which we are subject.
  - The personal data was collected in relation to the offer of information society services referred to in Article 8 para. 1 GDPR.

Please note that the above-mentioned grounds do not apply insofar as the processing is necessary:

1. - For exercising the right of freedom of expression and information;
  - For compliance with a legal obligation or for the performance of a task carried out in the public interest to which we are subject.
  - For reasons of public interest in the area of public health.
  - For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes.
  - For the establishment, exercise, or defense of legal claims.

5. Right to data portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, or to request its transmission to another controller.

6. Right to object to certain data processing (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6 para. 1 sentence 1 lit. e or f GDPR. This also applies to profiling based on these provisions.

Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling insofar as it is related to such direct marketing.

7. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR. A list of the locally competent supervisory authorities in Germany can be accessed on the website of the Federal Commissioner for Data Protection via the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

You have the right to complain to a data protection supervisory authority about the processing of your personal data. Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, Phone: +43 1 52 152-0, Email: dsb@dsb.gv.at

Provision of the website and creation of log files

1. Description and scope of data processing

Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

1. - Information about the browser type and the version used
  - The user’s operating system
  - The user’s Internet Service Provider
  - Date and time of access
  - Websites from which the user’s system reaches our website

This data is stored in the log files of our system. The IP addresses of the user or other data that enable the data to be assigned to a user are not affected by this. This data is not stored together with other personal data of the user.

2. Purpose of data processing

Storage in log files is carried out to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

3. Legal basis for data processing

The legal basis for the temporary storage of data is Art. 6 para. 1 sentence 1 lit. f GDPR.

4. Duration of storage

The data will be erased as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of collecting data for the provision of the website, this is the case when the respective session has ended.

5. Possibility of objection

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. The user can object to this. Whether the objection is successful is to be determined within the scope of a balancing of interests.

Use of Cookies

1. Description and scope of data processing

When you visit our website, we use technical tools for various functions, in particular cookies, which can be stored on your terminal device. When accessing our website and at any time later, you have the choice of whether you generally allow the setting of cookies or which individual additional functions you wish to select. You can make changes in your browser settings or via our Consent Manager. Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you use, so that certain information can flow to the party that sets the cookie. Below we describe what type of cookies we use:

We use technically necessary cookies that are required for the technical structure of the website. Without these cookies, our website cannot be displayed (completely correctly) or the support functions are not possible.

The following data is stored and transmitted by the technically necessary cookies:

1. - Language settings
  - Entered search terms
  - Frequency of page views
  - Use of website functions

We use cookies on our website that are not technically necessary. Text files that do not solely serve the functionality of the website but also collect other data are considered technically non-essential cookies.

By setting cookies that are not technically necessary, the following data is processed:

1. - IP address
  - Location of Internet users
  - Date and time of accessing the website
  - Tracking of surfing behavior

2. Purpose of data processing

The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

We require technically necessary cookies for the following applications:

1. - Adoption of language settings
  - Remembering search terms
  - Functionality of the website

Cookies that are not technically necessary are used for the purpose of improving the quality of our website, its content, and thus our reach and economic efficiency. By setting these cookies, we learn how the website is used and can thus continuously optimize our offer. In particular, these cookies serve us for the following purposes:

Website analysis via Google Analytics

3. Legal basis for data processing

For the storage of information in the end user’s terminal equipment and/or access to information already stored in the end user’s terminal equipment, the provisions of the Telecommunications-Telemedia Data Protection Act (TTDSG) apply. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, cookies are stored on and accessed from your terminal equipment on the basis of Section 25 para. 2 No. 2 TTDSG. This storage and access to the information in your terminal equipment serve to make it easier for you to use our website and to be able to offer you our services as requested by you. Some functions of our website do not work without the use of these cookies and could therefore not be offered. The cookies are generally erased after the end of the session (e.g., logging out or closing the browser) or after the expiry of a specified period. Information about differing storage periods for cookies can be found in the following sections of this privacy policy.

Insofar as cookies are used that are not technically necessary, this is done on the basis of your explicit consent, which you can give via the cookie banner. In this case, the basis for the storage and access to information is Section 25 para. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a), Art. 7 GDPR. You can withdraw your consent at any time with effect for the future or grant it again later by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by making appropriate settings in your browser software. Please note that the browser settings made always only apply to the respective browser used. If personal data is processed following the storage of and access to the information on your terminal equipment, the provisions of the GDPR are applicable. Information on this can be found in the following sections of this privacy policy.

Email Contact

1. Description and scope of data processing

On our website, it is possible to contact us via the provided email address. In this case, the user’s personal data transmitted with the email will be stored.

The data will be used exclusively for processing the conversation.

2. Purpose of data processing

In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data.

3. Legal basis for data processing

The legal basis for processing the data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to respond to your inquiry sent via email in an optimal manner.

If the email contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

4. Duration of storage

The data will be erased as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data sent via email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The personal data additionally collected during the sending process will be erased after a period of seven days at the latest.

5. Possibility of objection

If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

via email to By email: datenschutz@chesterton.com

All personal data stored in the course of contacting us will be erased in this case.

Contact Form

1. Description and scope of data processing

There is a contact form on our website which can be used for electronic contact. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.

At the time the message is sent, the following data is stored:

1. - Email address
  - Last name
  - First name
  - IP address of the accessing computer
  - Date and time of contact

2. Purpose of data processing

The processing of the personal data from the input mask of the contact form or via the provided email address serves us solely to handle the contact request.

The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

3. Legal basis for data processing

The legal basis for processing the data transmitted in the course of sending an email is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to respond to your inquiry directed to us via the contact form in an optimal manner. If the email contact aims at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

4. Duration of storage

The data will be erased as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent via email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The personal data additionally collected during the sending process will be erased after a period of seven days at the latest.

5. Possibility of objection

If the user contacts us via the input mask in the contact form, he can object to the storage of his personal data at any time.

via email to By email: datenschutz@chesterton.com

All personal data stored in the course of contacting us will be erased in this case.

Application by email and application form

1. Scope of processing of personal data

There is an application form on our website which can be used for electronic applications. If an applicant makes use of this option, the data entered in the input mask will be transmitted to us and stored. This data includes:

1. - First name
  - Last name
  - Email address
  - CV / Resume
  - Certificates / References
  - Photograph

Alternatively, you can also send us your application via email. In that case, we record your email address and the data you provide in the email.

After sending your application, you will receive a confirmation of receipt of your application documents from us via email.

Your data will not be passed on to third parties. The data will be used exclusively for processing your application.

2. Purpose of data processing

The processing of personal data from the application form serves us solely to handle your application. In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process serves to prevent misuse of the application form and to ensure the security of our information technology systems.

3. Legal basis for data processing

The legal basis for processing your data is the initiation of a contract at the request of the data subject, Art. 6 para. 1 sentence 1 lit. b Alt. 1 GDPR and Section 26 para. 1 sentence 1 BDSG.

4. Duration of storage

After completion of the application process, the data will be stored for up to six months. Your data will be erased after the six months at the latest. In the event of a legal obligation, the data will be stored in accordance with the applicable regulations.

The personal data additionally collected during the sending process will be erased after a period of seven days at the latest.

Corporate Presences

Use of corporate presences in social networks

YouTube:

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States

We use our corporate presence in social networks for communication and information exchange with (potential) customers. In particular, we use the corporate presence for:

Company and product presentation

The publications via the corporate presence may include the following content:

1. - Information about products
  - Information about services
  - Customer contact

Every user is free to publish personal data through activities.

Insofar as we process your personal data to evaluate your online behavior, offer you competitions, or conduct lead campaigns, this is done on the basis of your explicit declaration of consent, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR. The legal basis for processing personal data for the purpose of communicating with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to respond to your inquiry in an optimal manner or to be able to provide the requested information. If the contact aims at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

The data generated by the corporate presence is not stored in our own systems.

For the processing of your personal data in third countries, we have provided appropriate guarantees in the form of standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR. A copy of the standard data protection clauses can be requested from us.

YouTube: https://policies.google.com/privacy?gl=DE&hl=de

Use of corporate presences in professional networks

1. Scope of data processing

We use the opportunity of corporate presences in professional networks. We maintain a corporate presence on the following professional networks:

LinkedIn:

LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland

On our page, we provide information and offer users the opportunity to communicate.

The corporate presence is used for applications, information/PR, and active sourcing.

We do not have any information regarding the processing of your personal data by the companies jointly responsible for the corporate presence. Further information on this can be found in the privacy policy of:

LinkedIn:

https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

If you perform an action on our corporate presence (e.g., comments, posts, likes, etc.), you may make personal data (e.g., real name or photo of your user profile) public as a result.

2. Legal basis for data processing

The legal basis for processing personal data for the purpose of communicating with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to respond to your inquiry in an optimal manner or to be able to provide the requested information. If the contact aims at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

3. Purpose of data processing

Our corporate presence serves us to inform users about our services. Every user is free to publish personal data through activities.

4. Duration of storage

We store your activities and personal data published via our corporate presence until you withdraw your consent. In addition, we comply with statutory retention periods.

5. Possibility of objection

You can object to the processing of your personal data that we collect in the context of your use of our corporate presence at any time and assert your data subject rights mentioned under IV. of this privacy policy. To do so, send us an informal email to the email address mentioned in this privacy policy.

Further information on exercising your rights can be found here:

LinkedIn:

https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

Hosting

The website is hosted on servers of a service provider commissioned by us.

Our service provider is:

STRATO AG, Pascalstraße 10, 10587 Berlin, Germany

via Studio schönereWelt!

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when visiting the website. The stored information includes:

1. - Browser type and browser version
  - Operating system used
  - Referrer URL
  - Hostname of the accessing computer
  - Date and time of the server request
  - IP address

A merging of this data with other data sources is not performed. The collection of this data is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest in processing this data is to display our website without errors and to optimize its functions.

The location of the website’s server is geographically in Germany.

Geotargeting

We use the IP address and other information provided by the user (in particular the postal code in the context of registration or ordering) for regional target group targeting (so-called “geotargeting”).

Regional target group targeting serves, for example, to automatically display regional offers or advertisements that often have a higher relevance for users. The legal basis for the use of the IP address and, if applicable, other information provided by the user (in particular postal code) is Art. 6 para. 1 lit. f GDPR, based on our interest to ensure more precise target group targeting and thus to provide offers and advertising with higher relevance for the users.

In the process, a part of the IP address as well as the information additionally provided by the user (in particular postal code) are merely read and not stored separately.

You can prevent geotargeting by using a VPN or proxy server, for example, which prevents precise localization. In addition, depending on the browser used, you can also deactivate location targeting in the corresponding browser settings (insofar as the respective browser supports this).

We use geotargeting on our website for the following purposes:

- - Website analysis

Plugins Used

We use plugins for various purposes. The plugins used are listed below:

Use of Google AdWords

1. Scope of processing of personal data

We use Google AdWords of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). We use this service to place advertisements. Google sets a cookie on your computer. Personal data can thereby be stored and evaluated, especially the user’s activity (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and the operating system), data about the displayed advertisements (in particular which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (in particular pseudonymized user IDs).
Further information on data processing by Google can be found here:
https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of data processing

We only obtain knowledge of the total number of users who responded to our ad. No information is passed on with which we could identify you. The use does not serve the purpose of tracking.

3. Legal basis for the processing of personal data

The legal basis for processing the personal data of users is generally the user’s consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of storage

Your personal information is stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, e.g., for tax and accounting purposes.

5. Possibility of withdrawal and erasure

You have the right to withdraw your data protection declaration of consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You can prevent the collection as well as the processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
You can deactivate the use of your personal data by Google using the following link:
https://adssettings.google.de
Further information on possibilities of objection and erasure regarding Google can be found at:
https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Analytics

1. Scope of processing of personal data

We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). Google Analytics analyzes, among other things, the origin of visitors, their length of stay on individual pages, and the use of search engines, thereby allowing better monitoring of the success of advertising campaigns. Google sets a cookie on your computer. Personal data can thereby be stored and evaluated, especially the user’s activity (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and the operating system), data about the displayed advertisements (in particular which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (in particular sample user IDs).
We use Google Analytics (Universal Analytics) to evaluate your use of our online presence, to compile reports on your activities, and to use other services provided by Google associated with the use of our online presence and internet usage.
We have requested the anonymization of IP addresses, whereby Google shortens your IP address as soon as technically possible. However, it cannot be excluded that your data will be transmitted to the servers of Google LLC located in the USA.
On behalf of the operator of this online presence, Google will use this information to evaluate your use of the online presence, to compile reports on activities of the online presence, and to provide other services related to the use of the online presence and internet usage to the operator of the online presence.
Further information on data processing by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of data processing

The use of Google Analytics (Universal Analytics) serves us to evaluate the use of our online presence as well as the targeted display of advertising to people who have already expressed an initial interest through their page visit.

3. Legal basis for the processing of personal data

The legal basis for processing the personal data of users is generally the user’s consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of storage

Your personal information is stored for as long as necessary to fulfill the purposes described in this privacy policy or until you exercise your right of withdrawal.

5. Possibility of withdrawal

You have the right to withdraw your data protection declaration of consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You can prevent the collection as well as the processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
You can also prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
You can deactivate the use of your personal data by Google using the following link:
https://adssettings.google.de
Further information on possibilities of objection and erasure regarding Google can be found at:
https://policies.google.com/privacy?gl=DE&hl=de

6. Notice of danger

Your personal data will also be transmitted to the USA. For the USA, there is no adequacy decision pursuant to Art. 45 para. 3 GDPR. We point out that a data transfer without an adequacy decision carries certain risks, about which we may inform you below:
Intelligence services of the USA take certain online identifiers (such as the IP address or unique identification numbers) as a starting point for surveillance of individuals. In particular, it cannot be excluded that these intelligence services have already collected information about you, with the help of which the data transmitted here can be traced back to you.
Providers of electronic communication services headquartered in the USA are subject to surveillance by US intelligence services pursuant to 50 U.S. Code § 1881a (“FISA 702”). Accordingly, providers of electronic communication services headquartered in the USA have the obligation to make personal data available to US authorities pursuant to 50 U.S. Code § 1881a, without you potentially having legal remedies available. Even encryption of data in the data centers of the electronic communication service provider cannot provide adequate protection, as an electronic communication service provider has a direct obligation with respect to imported data in its possession or custody or under its control to grant access to or hand over such data. This obligation may also explicitly extend to cryptographic keys without which the data cannot be read.
The circumstance that this is not merely a “theoretical danger” is demonstrated by the judgment of the CJEU of July 16, 2020 (Case C-311/18, “Schrems II”).
With Google, we have concluded guarantees in the form of standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR. A copy of the standard data protection clauses can be requested from us.

Use of LinkedIn

1. Scope of processing of personal data

We use functions of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland (hereinafter referred to as: LinkedIn). Every time one of our pages containing functions of LinkedIn is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. If you click the “Recommend button” of LinkedIn and are logged into your LinkedIn account, it is possible for LinkedIn to assign your visit to our website to you and your user account. Personal data can thereby be stored and evaluated, especially the user’s activity (in particular which pages have been visited and which elements have been clicked on) and device and browser information (in particular the IP address and the operating system).
We point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn. Further information on data processing by LinkedIn can be found here:
https://www.linkedin.com/legal/privacy-policy

2. Purpose of data processing

The use of the LinkedIn plugin serves the user-friendliness of our online presence.

3. Legal basis for the processing of personal data

The legal basis for processing the personal data of users is generally the user’s consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of storage

Your personal information is stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, e.g., for tax and accounting purposes.

5. Possibility of withdrawal and erasure

You have the right to withdraw your data protection declaration of consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You can prevent the collection as well as the processing of your personal data by LinkedIn by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. Furthermore, the transmission can be prevented by logging out of your LinkedIn account before accessing our website.
With the following links you can deactivate the use of your personal data by LinkedIn:
https://www.linkedin.com/psettings/guest-controls
Further information on possibilities of objection and erasure regarding LinkedIn can be found at:
https://www.linkedin.com/legal/privacy-policy

Use of YouTube

1. Scope of processing of personal data

We use the plugin of YouTube operated by Google, of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA and its representative in the Union Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Google). We use the YouTube plugin to embed videos from YouTube on our online presence. When visiting our online presence, your browser establishes a connection with the servers of YouTube. Personal data can thereby be stored and evaluated, especially the user’s activity (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and the operating system).
We have no influence on the content of the plugin. If you are logged into your YouTube account during the visit, YouTube can assign your visit to our online presence to this account. By interacting with this plugin, this corresponding information is transmitted directly to YouTube and stored there.
Further information on data processing by Google can be found here:
https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of data processing

The use of the YouTube plugin serves to improve user-friendliness and to provide an appealing presentation of our online presence.

3. Legal basis for the processing of personal data

The legal basis for processing the personal data of users is generally the user’s consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of storage

Your personal information is stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, e.g., for tax and accounting purposes.

5. Possibility of withdrawal and erasure

This privacy policy was created with the support of DataGuard.