PRIVACY POLICY

1. Controller’s Name and Contact Information (Art. 4 No. 7 GDPR):

G & P Erste Management GmbH
Siesmayerstraße 21
D-60323 Frankfurt am Main

G & P Zweite Management GmbH
Siesmayerstraße 21
D-60323 Frankfurt am Main

G & P Dritte Management GmbH
Siesmayerstraße 21
D-60323 Frankfurt am Main

G & P Vierte Management GmbH
Siesmayerstraße 21
D-60323 Frankfurt am Main

Phone: +49 (0) 69 36 00 95-100
EMail:

Collectively referred to as the "Operating Companies."

2. Data Protection Officer

The Operating Companies have appointed an external data protection officer.

You can reach him as follows:

Groß & Partner
Grundstücksentwicklungsgesellschaft mbH
Data Protection Officer
Siesmayerstraße 21
60323 Frankfurt/Main

Email:

3. Collection and processing of personal data when visiting the website

You can generally visit our website without telling us who you are. However, our web servers automatically store technical information during your visit. This includes the type of web browser, the operating system, your IP address, your Internet service provider, the website from which you accessed us, the pages you visit on our site, as well as the date and duration of your visit. The processing of this data, particularly your IP address and the aforementioned data, is necessary to deliver the website. For this purpose, your IP address must be stored for the duration of the session. We do not combine this data with other data from other sources. The legal basis for this data processing to enable the use of the website is Art. 6 (1) (f) GDPR, as our legitimate interest lies in providing our services.

Furthermore, we only store and evaluate this data for statistical purposes in anonymised form and use it in this anonymised form to analyse the use of our offering and to further develop and optimise it. This is also based on Art. 6 (1) (f) GDPR. Our legitimate interest here is the ongoing improvement of our services to offer you the best possible user experience.

4. Type and scope of further data collection and processing

In some cases, we may need your personal data, such as:

• When providing our services, that is, operating a real estate development company and all related transactions;
• When you contact us;
• When you sign up for our newsletter to receive free information or participate in surveys.

a) Service provision and other inquiries

We only collect or process personal data when you voluntarily provide it to us, e.g., as part of an inquiry. In this case, your data, including the contact information you provide, will be stored and used to fulfil the purpose associated with its transmission, such as processing your inquiry and for any follow-up questions. The legal basis for storing and using this personal data is Art. 6 (1) (b) GDPR, provided you provide this data to initiate a contractual relationship with us. Only in this case is the submission of personal data necessary for a potential contract within the meaning of Art. 13 (2) (e) GDPR.

Otherwise, this storage and use is based on Art. 6 (1) (f) GDPR, as our legitimate interest is to carefully process your request.

If you commission us to provide a service or we use your services, we generally collect, store, and use your personal data only as far as it is necessary to provide the service or fulfil the contract. The legal basis for the related data processing is Art. 6 (1) (b) GDPR. It may also be necessary to transfer your personal data to companies we use to provide the service or process the contract. These could be, for example, transport companies or other service providers. Such transfers to our service providers are also based on Art. 6 (1) (b) GDPR.

In all cases where data processing serves the fulfilment of a contract, the provision of your personal data is required for the conclusion of the contract (see Art. 13 (2) (e) GDPR). Without your personal data, we cannot fulfil the contract.

b) Sending and evaluating the newsletter via MailChimp

With your consent, we are happy to send you our newsletter. To do this, you need to register for our newsletter. Details about the contents of the newsletter are provided in the consent form or on the registration page.

For the newsletter registration, we use the so-called double opt-in process. After registering, we will send an e-mail to the address you provided with a link you can click to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will not be used for the newsletter, and it will be deleted after one month. To prove your registration, we store the time of registration and confirmation, as well as your IP address at the time.

We also inform you that we evaluate your usage behaviour when sending the newsletter. The e-mails we send contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the evaluation, we link the aforementioned data and web beacons to your e-mail address and an individual ID. Links in the newsletter also contain this ID. The data is collected exclusively in a pseudonymised manner, meaning the IDs are not linked to other personal data. This allows us to evaluate the general use of the newsletter and understand which content should be further improved based on user habits. This helps us tailor the newsletter to your specific needs and interests. You can prevent this evaluation by disabling the display of images in your e-mail program. In this case, the newsletter may not be displayed completely, and you may not be able to use all its functions.

Since the newsletter is only sent and evaluated with your consent, the legal basis for the related data processing is Art. 6 (1) (a) GDPR. You can revoke your consent and unsubscribe from the newsletter at any time. You can revoke it by clicking the link provided in each newsletter e-mail or by contacting us using the information provided in our imprint.

The newsletter is sent and evaluated using MailChimp, a service provided by The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA ("MailChimp"). For these purposes, MailChimp receives and processes the aforementioned information on our behalf. Additionally, MailChimp may use this data to optimize or improve its own services, such as improving the technical delivery of the newsletter or its display. For more information on how MailChimp handles your personal data, please visit: https://mailchimp.com/legal/privacy/.

MailChimp uses servers located in the USA. Any transfer of personal data to MailChimp in the USA is based on the European Commission's adequacy decision under Art. 45 GDPR, as MailChimp is certified under the EU-U.S. Data Privacy Framework, which attests certified companies an appropriate level of data protection under GDPR. Additionally, standard contractual clauses have been agreed with MailChimp to ensure the implementation of appropriate safeguards for specific cases. The standard contractual clauses can be found at: https://mailchimp.com/legal/data-processing-addendum/.

5. Will personal data be shared with third parties?

We only share your personal data with third parties if you have given us explicit consent, in line with Art. 6 (1) (a) GDPR. The only exceptions are transfers to our service providers or partners, such as technical service providers or payment processors, that we use to provide our services or online offerings. These data transfers are necessary for the performance of a contract, and take place under Art. 6 (1) (b) GDPR. In these cases, both we and our partners strictly comply with GDPR regulations. Before sharing any of your personal data, we ensure that our service providers and partners have implemented the necessary technical and organisational measures to safeguard your data. The amount of data shared is always limited to what is necessary.

We do not sell, rent, or otherwise make your data available to third parties.

Data may be shared with government authorities or institutions only to meet legal obligations, or if we are required to do so by a court order. In such instances, sharing your data is necessary to fulfil legal obligations under Art. 6 (1) (c) GDPR.

6. Use of cookies

In certain areas of our website, we use cookies or similar technologies (hereinafter collectively referred to as “cookies”). Cookies are small text files stored on your hard drive by websites. They do not harm your device and do not contain viruses. The cookies we use on our website do not collect personal data. They are designed to make your experience on our site easier and more tailored to your needs.

Most of the cookies we use are session cookies, which are deleted automatically after your visit (so-called session cookies). Some cookies, however, remain on your device beyond your current session (so-called persistent cookies). Persistent cookies allow us to recognize your browser the next time you visit our website. On this website, persistent cookies are stored for a maximum of two years before they are automatically deleted. You can also delete cookies manually in your browser’s settings at any time.

Cookies are typically classified based on their function as follows:

Necessary cookies: These cookies are essential for navigating the site, using its basic functions, and ensuring its security. They do not track your browsing activity for marketing purposes or log which other sites you visit. The legal basis for the use of necessary cookies is Section 25 (2) No. 2 TDDDG, as they are required for the safe operation of the site. Data processing associated with these cookies is based on Art. 6 (1) (f) GDPR, as we have a legitimate interest in providing a functional and secure website.

Preference Cookies, Statistics Cookies, and Marketing Cookies: With your consent, we may also use preference, statistics, or marketing cookies. These cookies, which are not strictly necessary, are used only with your explicit, active, and revocable consent in accordance with Section 25 (1) TDDDG. Further processing of the data collected via these cookies is based on your consent under Art. 6 (1) (a) GDPR. More detailed information about these cookies can be found in our cookie banner (where you can also manage your consent), as well as in the following specific sections of this privacy policy related to the services using cookies.

You have the right to withdraw your consent at any time with effect for the future. The validity of data processing up until the withdrawal remains unaffected. You can change your cookie settings whenever you wish. Manage cookie settings.

7. YouTube Videos

Our website may include embedded content (such as videos) from the video platform YouTube. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google Ireland”), a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

If you give your consent to the use of YouTube videos and access a section of our website that contains YouTube content, a connection is established to YouTube’s and Google’s servers. In this process, your IP address and information that you have visited our website are transmitted, particularly when you play a YouTube video. If you are logged into your YouTube account at the same time, this information may be linked directly to your personal profile. You can prevent this by logging out of your YouTube account before accessing the content.

Data processing by YouTube or Google may also take place in countries outside the European Union or the European Economic Area, in particular in the United States. Further information on data protection at YouTube and Google, including the type, scope, and purpose of data processing, can be found in Google’s Privacy Policy at: https://policies.google.com/privacy.

Google also processes YouTube video views for statistical purposes and provides us with aggregated reports containing only general information, such as the total number of video views. We do not receive any data that allows us to identify individual users. Google uses cookies for these purposes; the respective storage periods can be found in our cookie banner. Based on our understanding, these statistics do not involve detailed behavioral analysis attributable to individual users. However, Google carries out these evaluations independently and automatically, without us being able to influence, restrict, or access the underlying analyses in detail.

By embedding YouTube content, we aim to provide visitors with informative videos in a user-friendly manner and to statistically evaluate video views in order to improve the overall user experience on our website.

As part of the use of YouTube, personal data may be transferred to Google servers in the United States. The United States is subject to an adequacy decision by the European Commission under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection in accordance with the GDPR. Google is certified under this framework and listed in the Data Privacy Framework List maintained by the U.S. Department of Commerce. Accordingly, any transfer of data to Google servers in the United States is based on Article 45(1) GDPR and ensures a consistently high level of data protection.

We only make YouTube content available on our website if you have given your consent to the processing of your data by YouTube or Google. The legal basis for the use of cookies and access to information stored on your device is § 25(1) TDDDG. The legal basis for the related data processing is Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect via the cookie banner settings for the respective device.

You can manage your preferences at any time in the cookie banner settings.

8. Google Maps

Our website also features Google Maps, which allows us to display interactive maps. This service is provided by Google Ireland Limited, based in Dublin, Ireland, a subsidiary of Google LLC. in the US. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

When using Google Maps, information such as your device's IP address may be sent to and processed by Google servers in the US. Google may use this data to improve services, conduct market research, or personalise ads. If you are logged into your Google account, this data may be linked to your profile. To avoid this, you should log out of your Google account before using Google Maps. We do not have any control over this data processing by Google. Details on data protection at Google, in particular the type, scope and purpose of data processing, can be found here: https://policies.google.com/privacy.

As we have already explained, Google is certified under the EU-U.S. Data Privacy Framework and is also registered in the list maintained by the U.S. Department of Commerce (Data Privacy Framework List). A consistently high level of data protection is therefore guaranteed when data is transferred to Google servers in the US. Insofar as data is transferred to the US, such a third country transfer is based on Art. 45 (1) GDPR.

The legal basis for using Google Maps on our website is Art. 6 (1) (a) GDPR. The service allows us to visually present geographic information and offer interactive maps, improving user experience by making it easier to find our locations. You can withdraw your consent with effect for the future at any time through the cookie settings.

Manage cookie settings.

9. Google Analytics (with IP Anonymization)

With your consent, we use Google Analytics with IP anonymization on our website. Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”), a subsidiary of Google LLC. To manage the service more efficiently, we use Google Tag Manager (see section 11 of this privacy policy).

Google Analytics helps us analyze website traffic and user behavior. In doing so, the service collects information such as the referring website from which visitors arrive, access times, visit frequency, approximate location (country, region, or city), the pages visited, and the duration of visits. The resulting statistics and reports enable us to optimize our website and improve its appeal and usability for our users.

Google Analytics uses cookies that allow an analysis of your use of the website. Information on the storage duration of these cookies can be found in our cookie banner. The information generated by the cookies is generally transmitted to and stored on Google servers in the United States.

Google Analytics also processes the IP address of your device to ensure service security and to provide us with aggregated geographic information about website usage (“IP-based location data”). We use Google Analytics exclusively with IP anonymization (also known as “IP masking”). This means that your IP address is truncated within the European Union or other EEA member states before being transmitted to a Google server in the United States. Google processes this information on our behalf to evaluate your use of the website, compile reports on website activity, and provide additional services related to website and internet usage.

Google Analytics also processes the IP address of your device to ensure service security and to provide us with aggregated geographic information about website usage (“IP-based location data”). We use Google Analytics exclusively with IP anonymization (also known as “IP masking”). This means that your IP address is truncated within the European Union or other EEA member states before being transmitted to a Google server in the United States. Google processes this information on our behalf to evaluate your use of the website, compile reports on website activity, and provide additional services related to website and internet usage.

Google may process the data collected via Google Analytics for its own purposes in accordance with its privacy policy. This may include storing the data in usage profiles and using it for purposes such as product improvement, development of new services, measuring advertising effectiveness, market research, and personalizing content and ads. If you are logged into your Google account, the data may be linked directly to your account. To prevent this, you must log out of your Google account before enabling Google Analytics. We have no influence over Google’s further processing of your data. Further details can be found in Google’s Privacy Policy at https://policies.google.com/privacy.

Additional information on Google Analytics data processing is available at https://marketingplatform.google.com/about/analytics/terms/us/ and https://support.google.com/analytics/answer/6004245?hl=en&sjid=4941015242310497237-EU

Google is certified under the EU-U.S. Data Privacy Framework and is listed in the Data Privacy Framework List maintained by the U.S. Department of Commerce. Accordingly, any transfer of data to Google servers in the United States is based on an adequacy decision pursuant to Article 45(1) GDPR and ensures an adequate level of data protection.

We use Google Analytics on our website only with your explicit consent. The legal basis for the use of Google Analytics cookies and access to information stored on your device is §25(1) TDDDG. The legal basis for the associated data processing is Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect. The lawfulness of data processing carried out prior to withdrawal remains unaffected.

10. Google Marketing Platform

With your consent, we use the Google Marketing Platform (formerly DoubleClick) to optimise our statistical evaluations and marketing activities, including serving personalised ads in search engines, on Google sites and on Google’s partner sites ("Google Ad Network"), as well as measuring the effectiveness of our marketing efforts. The Google Marketing Platform is provided by Google Ltd., a subsidiary of Google.

The Google Marketing Platform evaluates the use of the contact form on our website and stores this information in user profiles. We have linked the Google Marketing Platform with Google Analytics 4 so that data collected via Google Analytics 4 (such as the submission of the contact form) can be transferred to the Google Marketing Platform. This provides us with more in-depth statistical insights and allows us to perform conversion tracking, for example by linking the information collected by Google Analytics 4 about the respective event (in this case the submission of the completed contact form) with advertising measures. This helps us measure the success of our campaigns, even if the user has not yet visited a page with a conversion tracking tag. Additionally, we can tailor our marketing efforts to your user profile, enabling us to deliver personalised ads.

When you access our website, your browser automatically establishes a direct connection with Google’s servers. We do not independently collect personal data, nor do we control the extent of data collection or processing by Google. According to our knowledge, Google collects information about your activities on our website, including your IP address, the date and time of your activity, and device information. Google may store this data in user profiles, which Google or third-party advertisers may use to display personalised ads on third-party sites. Google may also use the data to improve products, develop new services, measure the effectiveness of advertisements, and conduct market research. If you have a Google account, the data may be linked to your profile. If you don’t want this, you can log out of your Google account before using the platform. Even if you’re not logged in or don’t have a Google account, it’s still possible for Google to collect your IP address, time window and other identifying features and link them to the actions assigned to you. For more information on Google’s data processing, visit https://policies.google.com/privacy?hl=en and https://policies.google.com/technologies/ads?hl=en

It is possible that personal data may be transferred to Google server locations in the US when using the Google Marketing Platform. As noted earlier, Google LLC is certified under the EU-U.S. Data Privacy Framework and is listed in the U.S. Department of Commerce’s Data Privacy Framework List. Therefore, a high level of data protection is maintained when data is transferred to Google’s servers in the US. Data transfers to the US are based on Art. 45 (1) GDPR.

We only use the Google Marketing Platform with your consent. The legal basis for using cookies, as described above, is Section 25 (1) TDDDG. The subsequent data processing is based on Art. 6 (1) (a) GDPR. You have the right to withdraw your consent at any time with future effect. The legality of data processing prior to withdrawal remains unaffected.

11. Google Tag Manager

Our website uses Google Tag Manager, a service provided by Google Ltd., a subsidiary of Google. This tool allows us to manage website tags from one interface. Google Tag Manager itself doesn’t use cookies and does not collect any personal data. It merely triggers other tags, which may collect data. However, Google Tag Manager doesn’t access that data. If cookies or tracking have been disabled at the domain or cookie level, this setting will apply to all tags managed through Google Tag Manager.

For more information on data protection, visit:

• Privacy Policy: Privacy Policy – Privacy & Terms – Google
• Google Tag Manager FAQ: Tag Manager Help
• Google Tag Manager Terms of Use: Google Tag Manager Use Policy | Google Tag Manager – Google

12. Google Fonts

Our website uses web fonts provided by Google Fonts to enhance and improve the appearance of the text. This helps us ensure that the website is visually optimised and user-friendly. When you visit our site, your browser automatically loads the necessary web font into its cache. If your browser doesn’t support this feature, a default font from your computer will be used instead.

We host these Google Fonts on a local server within the European Economic Area, meaning that no data is transmitted to Google when you access our site.

The legal basis for using Google Fonts and the associated data processing is Art. 6 (1) (f) GDPR. Our legitimate interest lies in optimising the website for an improved user experience.

13. Cookiebot

We use the consent management tool Cookiebot, provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark ("Usercentrics"). This tool helps us provide a cookie banner to inform visitors about the optional cookies used on our website, allow them to adjust their cookie settings, and document any consents given.

When you visit our site, Cookiebot displays information and options for managing the optional cookies we use. During this process, a connection is made with the tool provider’s server, and technical data such as your device type (e.g., operating system, browser version, language, and IP address), the URL of the visited site, approximate location, and your chosen cookie settings (cookie categories, date, and time) are transmitted to Usercentrics. This data is stored only as long as necessary to document your consent.

Your cookie settings are stored in a browser cookie with a unique consent ID, allowing your settings to be remembered between visits. This prevents you from needing to adjust your preferences each time you return to our website. The cookie has a maximum storage period of two years, after which it is automatically deleted.

Usercentrics stores the collected data on servers within the European Union. However, since Usercentrics uses service providers located outside the EU and EEA (such as in the US.), data transfers to third countries may occasionally occur. To ensure adequate data protection, Usercentrics only transfers data to countries that the European Commission has recognized as having an adequate level of protection (e.g., the EU-U.S. Data Privacy Framework, under which the service provider is certified) or to recipients that have agreed to the European Commission’s standard contractual clauses. These transfers are based on Art. 45 GDPR or Art. 46 (2) (c) GDPR.

We have signed a data processing agreement with Usercentrics regarding the use of Cookiebot. The data collected by Usercentrics is processed according to our instructions, in compliance with Art. 28 GDPR.

The legal basis for setting the Cookiebot cookie is Section 25 (2) No. 2 TDDDG, and the subsequent data processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest is to provide you with a compliant and user-friendly website where you can easily manage your cookie preferences. Setting the Cookiebot cookies is therefore absolutely necessary.

14. LinkedIn Pixel (LinkedIn Insight Tag)

With your consent, we use the LinkedIn Pixel (also known as the LinkedIn Insight Tag) provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”), on our website. The LinkedIn Insight Tag is a small JavaScript code snippet embedded in our website.

The LinkedIn Pixel allows us to analyze how visitors interact with our website (for example, by tracking clicks on specific links or visits to certain pages). It also enables us to display targeted, personalized advertisements to users on LinkedIn and other websites, track interactions with our advertising campaigns (such as ad clicks), and measure the effectiveness of our marketing activities. For these purposes, cookies are placed on your device. Information on their storage duration can be found in the cookie banner.

When the LinkedIn Pixel is integrated, your browser automatically establishes a direct connection to LinkedIn’s servers. LinkedIn is solely responsible for processing the transmitted data for the purposes described and independently determines which advertisements are displayed. We can only define general targeting parameters when placing advertisements, based on options provided by LinkedIn, to limit the categories of users to whom our ads may be shown.

We have no control over the scope or further use of the data collected by LinkedIn through the LinkedIn Pixel. To the best of our knowledge, embedding the LinkedIn Pixel allows LinkedIn to receive information about your activity on our website or in connection with our advertisements (e.g., that you visited a specific page of our website or clicked on one of our ads), your IP address, the date and time of the activity, and information about your device. LinkedIn may store this data in user profiles and use it—or make it available to third parties—to display personalized advertising, including on third-party websites. In addition, LinkedIn may process this data for purposes such as product improvement, development of new products, measuring advertising effectiveness, and market research.

If you are logged into LinkedIn, the transmitted information may be associated with your LinkedIn account. Even if you are not registered with LinkedIn or not logged in, LinkedIn may still identify you using your IP address, timestamps, and other identifiers and link this information to your actions.

Further information about data processing by LinkedIn can be found in LinkedIn’s Privacy Policy at https://de.linkedin.com/legal/privacy-policy. You can disable the LinkedIn Insight Tag and manage your advertising preferences via LinkedIn’s ad settings at https://www.linkedin.com/help/linkedin/answer/62931 or through the guest controls at https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

As part of the use of the LinkedIn Pixel, personal data may be transferred to LinkedIn servers in the United States. The United States is subject to an adequacy decision by the European Commission under the EU-U.S. Data Privacy Framework. LinkedIn Corporation is certified under this framework and listed in the Data Privacy Framework List maintained by the U.S. Department of Commerce. Accordingly, any transfer of data to LinkedIn servers in the United States is based on Article 45(1) GDPR and ensures an adequate level of data protection.

We use the LinkedIn Pixel only if you have given your consent. The legal basis for the use of cookies (including pixels) is §25(1) TDDDG, and the legal basis for the associated data processing is Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect. The lawfulness of data processing carried out prior to withdrawal remains unaffected.

You can manage your preferences at any time in the cookie banner settings.

15. Microsoft Ads Pixel (UET Tag)

With your consent, we use the Microsoft Ads Pixel (also known as the “Universal Event Tracking” or “UET” tag) provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (“Microsoft”), on our website. The Microsoft Ads Pixel is a small JavaScript code snippet embedded in our website.

The Microsoft Ads Pixel allows us to collect information about how users interact with our website after they have reached it via a Microsoft Ads advertisement. This includes, for example, clicks on specific links or offers and visits to certain pages. Based on this information, we are able to measure the effectiveness of our advertising campaigns (conversion tracking), create user groups for interest-based advertising (remarketing), and optimize and target our ads more effectively. For these purposes, cookies are placed on your device. Information on their storage duration can be found in the cookie banner.

When the Microsoft Ads Pixel is integrated, your browser automatically establishes a direct connection to Microsoft’s servers. Microsoft is solely responsible for processing the transmitted data for the purposes described and independently determines which advertisements are displayed. We can only define general targeting parameters when placing advertisements, based on options provided by Microsoft, to limit the categories of users to whom our ads may be shown.

We have no control over the scope or further use of the data collected by Microsoft through the Microsoft Ads Pixel. To the best of our knowledge, embedding the pixel enables Microsoft to receive information about your activities on our website or in connection with our advertisements (e.g., that you visited a specific page of our website or clicked on one of our ads), your IP address, the date and time of the activity, and information about your device. Microsoft may store this data in user profiles and use it—or make it available to third parties—to display personalized advertising, including on third-party websites. In addition, Microsoft may process this data for purposes such as product improvement, development of new products, measuring advertising effectiveness, and market research.

If you are logged into a Microsoft account, the transmitted information may be associated with your account. Even if you are not registered with Microsoft or not logged in, Microsoft may still identify you using your IP address, timestamps, and other identifiers and link this information to your actions.

Further information on data processing by Microsoft can be found in Microsoft’s Privacy Statement at https://www.microsoft.com/privacy.

Additional information about the Microsoft Ads Pixel (UET Tag) is available at https://learn.microsoft.com/advertising/guides/universal-event-tracking.

As part of the use of the Microsoft Ads Pixel, personal data may be transferred to Microsoft servers in the United States. The United States is subject to an adequacy decision by the European Commission under the EU-U.S. Data Privacy Framework. Microsoft Corporation is certified under this framework and listed in the Data Privacy Framework List maintained by the U.S. Department of Commerce. Accordingly, any transfer of data to Microsoft servers in the United States is based on Article 45(1) GDPR and ensures an adequate level of data protection.

We use the Microsoft Ads Pixel only if you have given your consent. The legal basis for the use of cookies (including pixels) is §25(1) TDDDG, and the legal basis for the associated data processing is Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect. The lawfulness of data processing carried out prior to withdrawal remains unaffected.

You can manage your preferences at any time in the cookie banner settings.

16. Automated Decision-Making

We do not use any automated decision-making processes, including profiling, as defined by Art. 22 (1) and (4) GDPR.

17. No Obligation to Provide Personal Data

You are not legally or contractually required to provide us with your personal data. However, please note that certain services may be limited or unavailable if the necessary data is not provided (see section 4a).

18 Security

We employ appropriate technical and organisational security measures, as outlined in Art. 32 GDPR, to ensure the adequate protection of your data managed by us. These measures safeguard your data against accidental or intentional manipulation, loss, destruction, or unauthorised access. We continuously improve these security measures in line with technological advancements. Your data is stored solely on secure systems within Germany. Only authorised personnel, bound by confidentiality agreements, have access to this data for technical, administrative, or editorial purposes.

19. Data Retention and Deletion

We retain your personal data only for as long as necessary to fulfil the intended purpose (e.g., fulfilling a contract or answering your inquiry) or for legitimate reasons within the meaning of Art. 17 (3) GDPR, such as statutory retention periods, which make storage necessary. As long as statutory retention obligations, such as tax and commercial law regulations, prevent the deletion of your personal data, we will restrict the processing of your data. Once the retention period has expired, your data will be deleted in compliance with legal requirements.

20. Your Rights

You have the right to request information at any time regarding the personal data we have stored about you, the purposes for which it is processed, its source, and the recipients or categories of recipients to whom your data has been disclosed. You may also inquire about how long your data will be stored and the rights available to you as a data subject. We will provide this information free of charge in writing or electronically.

Furthermore, you have the right to request the correction of inaccurate data, the deletion of your personal data (unless there are legitimate reasons preventing this), or the restriction of its processing. If the data is required to provide services to you, deletion or restriction will only be possible after you stop using our services or offerings.

You also have the right to object, at any time, to data processing based on Art. 6 (1) (f) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, or if the processing is for the establishment, exercise, or defense of legal claims. You may also object at any time to the processing of your data for direct marketing purposes without providing any specific reason.

If we process data based on your consent or to fulfil a contract, you may request that we provide you with this data in a structured, commonly used, and machine-readable format, or that we transfer this data to another data controller, if technically feasible (so-called right to data portability).

You may revoke any consent you have given for the use of your personal data at any time with future effect.

Additionally, you have the right to lodge a complaint with a supervisory authority if you believe that our processing of your data violates any legal provisions.

To exercise any of these rights, please contact us at the address provided above, or e-mail our data protection officer at .

21. Scope of this Privacy Policy

This privacy policy only applies to our services and the data processing carried out on the servers we use. It does not cover the content or websites of third parties to which our services may link. For example, this includes social networks like Facebook and Twitter (now "X"). The processing of your personal data on these social networks is handled by the network operators, over which we have no control. This also applies to any personal data you share with us through such platforms, such as by messaging our profile on these social networks. For details on how your personal data is handled and protected on these platforms, please consult their respective privacy policies.

However, if we store your personal data that you’ve shared with us via a social network or data we receive from a social network on our own servers - for instance, to handle your inquiry or for other purposes - then our privacy policy will apply to that data.

22. Revisions to this Privacy Policy

We reserve the right to review and update this privacy policy as necessary due to new technological developments, changes in legal rulings, or updates to our business operations. We recommend reviewing this privacy policy from time to time to ensure you are aware of how we collect, process, and use your personal data.