DATA PROTECTION

1. introduction
Data protection is an important concern for us and your trust is our highest priority! Therefore, we always treat your personal data confidentially and, of course, comply with all applicable data protection regulations. We therefore only process your personal data insofar as this is permitted by law or you have given us your consent to do so.

2. definitions of terms
Unless this Privacy Policy contains or implies a different definition, reference is made to the definitions in Art. 4 GDPR with regard to the terms used.

3. when calling our website
When you access our website, we or the hosting provider dogado GmbH, Antonio-Segni-Straße 11, D-44263 Dortmund, Germany, which acts on our behalf, only collect the personal data that your browser transmits to our server. Your IP address, date and time of the request, content of the request, HTTP status code, amount of data, website from which the request came, browser, operating system and its interface, language and version of the browser software are transmitted.
This data is technically necessary for us to optimally display and provide you with our website. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f GDPR. This data is stored for a period of three days and then deleted.

4. use of cookies
We use cookies to make our website more user-friendly. Cookies are pieces of information that are transmitted from our web server or third-party web servers to your web browser and stored there for later retrieval. Cookies may be small files or other types of information storage. Some elements of our website require that the calling browser can be identified even after a page change. We use cookies to keep our website customer-friendly and functional. The legal basis for the processing of personal data is Art. 6 para. 1 lit. f GDPR.

5. SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, our website uses an SSL or SSL protocol. TLS encryption. You can recognize an encrypted connection by the fact that the browser address bar changes from “http://” to “https://” and by the lock symbol in your browser bar. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

6. google fonts and google analytics
6.1 Google Fonts
Furthermore, we use fonts from Google Fonts on our website. Each time our website is called up, certain personal data is transmitted to a Google server in the USA and stored there. Google has a certification for the EU-US Privacy Shield agreement: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI. The IP address transmitted by the user’s browser is not merged with other data from Google.

6.2 Google Analytics
We use Google Analytics to analyze our website usage. The data obtained from this is used to optimize our website and advertising measures. Google Analytics is a web analytics service provided by Google, Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States). Google processes website usage data on our behalf and is contractually obligated to take measures to ensure the confidentiality of the processed data.
During your visit to the website, the following data is recorded, among others: Pages viewed, your behavior on the pages (for example, clicks, scrolling behavior and dwell time), your approximate location (country and city), your IP address (in shortened form, so that no clear assignment is possible), technical information such as browser, Internet provider, terminal device and screen resolution, source of origin of your visit (i.e., via which website or advertising medium you came to us).
This data is transferred to a Google server in the USA. Google complies with the data protection provisions of the “EU-US Privacy Shield” agreement. Google Analytics stores cookies in your web browser for a period of two years since your last visit. These cookies contain a randomly generated user ID that can be used to recognize you during future visits to the website. The recorded data is stored together with the randomly generated user ID, which enables the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form indefinitely.

7. transmission to third countries
We only process your personal data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) if it is necessary for the fulfillment of our (pre-)contractual obligations (acc. to Art. 6 para. 1 p. 1 lit. b DSGVO), on the basis of your consent (pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO), due to a legal obligation (pursuant to Art. 6 para. 1 p. 1 lit. c DSGVO) or on the basis of our legitimate interests (pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO). The same applies to the processing by third parties on our behalf, the disclosure of your personal data to third parties and their transmission to third parties.

8. deletion of the data
The data processed by us will be deleted in accordance with Art. 17 DSGVO or its processing will be restricted in accordance with Art. 18 DSGVO. Unless otherwise stipulated in this privacy policy, the data processed by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. We review the necessity every six months. If the data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. I.e. the data is locked and not used. This applies, for example, to data that must be retained for reasons of commercial or tax law. According to legal requirements in Germany, the retention or storage in particular of commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting vouchers, etc. is carried out in accordance with § 257 para. 1 HGB for six years and, in particular, of books, records, management reports, accounting vouchers, commercial and business letters as well as documents relevant for taxation, etc. pursuant to Section 147 (1) HGB. 1 AO for ten years.

9. security measures
We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are complied with and thus to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. The security measures include, in particular, the encrypted transmission of data between your browser and our server.

10. links to other websites
We provide links on our website to other websites and their owners, most of which are partners of ours. For the contents, topicality and legal security on web pages, to or from which we are linked, we take over neither a warranty on correctness nor responsibility of the contents published there. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal contents were not recognizable at the time of linking. Should we become aware of any legal infringements, we will remove the corresponding link immediately.

11. final provisions
We reserve the right to change our privacy policy if this should be necessary due to new technologies or changes in our data processing procedures or in order to adapt it to changes in the legal situation applicable to us. However, this only concerns this privacy policy. Insofar as we process your personal data on the basis of consent granted by you or components of the data protection declaration contain provisions of the contractual relationship with you, any changes will only be made with your consent.

12. image and video sources
Image sources
Copyright / Arranoa AG

13. timeliness of the data
Status July 2022