Privacy Policy
As of: May 18, 2025
1. Introduction
This website is operated by: "Informaten" Max Schumann, Luca Drefke and Alec Putzmann GbR.
It is very important to us to handle our visitors' data with care and to protect it as best we can. For this reason, we make every effort to comply with the requirements of the GDPR.
In the following, we explain how we process your data on our website. We use clear and transparent language so that you can really understand what happens with your data.
2. General information
2.1 Processing of personal data and other terms
Data protection applies to the processing of personal data. Personal means any data that can be used to identify you personally. This includes, for example, the IP address of the device (PC, laptop, smartphone, etc.) in front of which you are currently sitting. Such data is processed whenever 'something happens with it'. For example, the IP is transmitted from the browser to our provider and automatically stored there. This counts as processing (within the meaning of Art. 4 No. 2 GDPR) of personal data (within the meaning of Art. 4 No. 1 GDPR).
These and further legal definitions can be found in Art. 4 GDPR.
2.2 Applicable rules and laws - GDPR, BDSG and TDDDG
The scope of data protection is governed by law. In this case, those laws are the GDPR (General Data Protection Regulation) as a European regulation and the BDSG (German Federal Data Protection Act) as national law.
In addition, the TDDDG supplements the GDPR rules where the use of cookies is concerned.
2.3 The controller
Responsible for the data processing on this website is the controller within the meaning of the GDPR. This is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
You can reach the controller at:
"Informaten" Max Schumann, Luca Drefke und Alec Putzmann GbR
12555 Berlin
Email: mail@informaten.com
2.4 How data is generally processed on this website
As already mentioned, there is data (such as IP addresses) that is collected automatically. This data is mainly required for the technical provision of the homepage. To the extent that we use further personal data or collect other data, we will inform you and/or ask for your consent.
You share other personal data with us deliberately.
You will find detailed information on this further below.
2.5 Your rights
The GDPR grants you comprehensive rights. These include, for example, the right to free information about the origin, recipients and purpose of your stored personal data. You can also request the correction, restriction of processing or deletion of this data, or lodge a complaint with the competent data protection supervisory authority. You can withdraw any consent you have given at any time.
How these rights work in detail and how you can exercise them is described in the last section of this privacy policy.
2.6 Data protection - our view
Data protection is more than a burdensome duty for us. Personal data is highly valuable, and careful handling of such data should be a matter of course in our digital world. As a visitor to our website, you should be able to decide for yourself what happens with your data, when, and through whom. We are therefore committed to complying with all legal provisions, collecting only the data we need, and treating it confidentially as a matter of course.
2.7 Disclosure and deletion
Disclosure and deletion of data are likewise important and sensitive topics. We would therefore like to inform you upfront about our general approach.
Data is only disclosed on the basis of a legal ground and only where it is unavoidable. This may particularly be the case where a so-called processor is involved and a data processing agreement pursuant to Art. 28 GDPR has been concluded.
We delete your data once the purpose and legal basis for processing cease to apply and where no other statutory obligations preclude deletion. Art. 17 GDPR also provides a good overview of this.
For all further information, please refer to this privacy policy and contact the controller with any specific questions.
2.8 Hosting
This website is hosted on our own servers. The personal data collected on this website is stored on our servers. This includes both the automatically collected and stored log files (see below for details) and any other data that website visitors provide.
Legal basis for processing is Art. 6(1)(a), (b) and (f) GDPR, as well as Sec. 25(1) TDDDG, where consent covers the storage of cookies or access to information on the visitor's or user's device within the meaning of the TDDDG.
We only process data that is necessary to perform our service obligations.
2.9 Legal bases
Processing of personal data always requires a legal basis. Art. 6(1) GDPR provides the following options:
- the data subject has given consent to the processing of their personal data for one or more specific purposes;
- processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
- processing is necessary for compliance with a legal obligation to which the controller is subject;
- processing is necessary in order to protect the vital interests of the data subject or of another natural person;
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
In the following sections, we will name the specific legal basis for each form of processing.
3. What happens on our website
3.1 Data collection when visiting the website
When you visit the website, information is automatically stored in so-called server log files. This concerns the following information:
- browser type and browser version
- operating system used
- referrer URL
- hostname of the accessing device
- time of the server request
- IP address
This data is temporarily needed so that we can continuously and reliably display our website to you. In particular, this data serves the following purposes:
- system security of the website
- system stability of the website
- troubleshooting on the website
- establishing a connection to the website
- displaying the website
Data processing takes place under Art. 6(1)(f) GDPR on the basis of our legitimate interest in processing this data, in particular our interest in the functionality and security of the website.
This data is stored in pseudonymised form where possible and deleted once the respective purpose has been achieved.
Where the server log files allow identification of the data subject, the data is stored for a maximum of 14 days. An exception applies if a security-relevant incident occurs. In that case, the server log files are stored until the incident has been resolved and fully investigated.
There is otherwise no merging of this data with other data.
3.2 Cookies
3.2.1 General
This website uses so-called cookies. A cookie is a small data record, a piece of information that is stored in the browser of your device and is related to our website.
Setting cookies can make it easier for visitors to navigate the website, in particular.
3.2.2 Refusing cookies
You can prevent cookies from being set by adjusting the settings in your browser.
Here you will find the relevant links for commonly used browsers:
- Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen
- Google Chrome: https://support.google.com/chrome/answer/95647
- Microsoft Edge: https://support.microsoft.com/de-de/windows/loeschen-und-verwalten-von-cookies
- Safari: https://support.apple.com/de-de/guide/mdm/mdmf7d5714d4/web
If you use a different browser, we recommend entering the name of your browser together with 'delete and manage cookies' into a search engine and following the official link for your browser.
Alternatively, you can manage your cookie settings at www.aboutads.info/choices/ or www.youronlinechoices.com.
We must point out, however, that broadly blocking or deleting cookies can impair the use of the website.
3.2.3 Technically necessary cookies
We use technically necessary cookies on this website so that our website works without errors and in compliance with applicable law. They help us make the website user-friendly. Some functions of our website cannot be provided without the use of cookies.
Depending on the individual case, the legal basis is Art. 6(1)(b), (c) and/or (f) GDPR.
3.2.4 Technically non-necessary cookies
In addition, we also use cookies on our website that are not technically necessary. These cookies serve, among other things, to analyse the browsing behaviour of website visitors or to offer functions that are useful but not strictly necessary.
The legal basis for this is your consent under Art. 6(1)(a) GDPR.
Technically non-necessary cookies are only set with your consent, which you can withdraw at any time via the cookie consent tool.
3.3 Data processing through user input
3.3.1 Own data collection
We offer the following services on our website: IT services and web hosting.
For this purpose, we collect the following data:
- name
- email address
- address
- phone number
The legal basis for this data processing is Art. 6(1)(b) GDPR.
The data is deleted as soon as the respective purpose ceases to apply and statutory requirements allow.
3.3.2 Contacting us
a) Email
If you contact us by email, we process your email address and any further data contained in the email. This is stored on the mail server and partly on the respective end devices. Depending on the matter, the legal basis is regularly Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR. The data is deleted as soon as the respective purpose ceases to apply and statutory requirements allow.
b) Telephone
If you contact us by telephone, call data may be stored on the respective end device and at the telecommunications provider in pseudonymised form. Personal data collected during the call is processed exclusively to handle your enquiry. Depending on the matter, the legal basis is regularly Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR. The data is deleted as soon as the respective purpose ceases to apply and statutory requirements allow.
c) Contact form
We offer a contact form. It is used to get in touch with our company.
In this form we generally process your first and last name, your phone number, your email address, a postal address, and the content of the message. The data is stored on our web server and forwarded internally to the relevant email addresses.
The legal basis for the data processing is Art. 6(1)(f) GDPR, as we have a legitimate interest in answering your enquiry and in providing a straightforward way to get in touch. If the contact aims at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.
We delete this data at the latest 3 months after receipt, unless it is needed for a contractual relationship that has been established.
The contact form on our website is based on our own development. No data is transferred to third parties.
3.3.3 Questionnaires/forms
a) In-house development
We integrate forms developed by ourselves on our website.
The data entered is stored on our servers.
The legal basis for processing is Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG. Consent can be withdrawn at any time. The lawfulness of processing that has already taken place remains unaffected by any subsequent withdrawal.
The stored data can be made available by email at any time, or a request for deletion can be submitted.
3.4 Newsletter
3.4.1 In-house development
We have developed the delivery of our newsletter ourselves.
This allows us to organise and analyse our newsletter. The data entered in order to receive the newsletter is stored on our servers.
The legal basis for processing is Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG. Consent can be withdrawn at any time by unsubscribing from the newsletter. The lawfulness of processing that has already taken place remains unaffected by any subsequent withdrawal.
The stored data can be made available by email at any time, or a request for deletion can be submitted.
3.5 Mailing service
3.5.1 Resend
We use the email delivery service Resend on our website, provided by Resend, Inc., 2261 Market Street, #5039, San Francisco, CA 94114, USA.
This service allows us to send transactional and marketing emails efficiently to our users. Personal data such as email addresses, names and email content is processed for this purpose. The purpose of the data processing is communication with our users, for example order confirmations or newsletter delivery.
The legal basis for processing this data is Art. 6(1)(a) GDPR, as the processing is based on the data subject's consent, as well as Art. 6(1)(f) GDPR, as we have a legitimate interest in efficient communication with our users.
Resend uses cookies to ensure the functionality of the platform and to optimise the user experience. We set these cookies only if consent has been given. You can withdraw that consent at any time. The legal basis for this is Art. 6(1)(a) GDPR.
Personal data is transferred to the USA. Resend is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection. In addition, Standard Contractual Clauses (SCCs) under Art. 46 GDPR are used as appropriate safeguards.
The data is stored for as long as it is required for the stated purpose or as long as statutory retention periods require.
Further information on the data processing can be found at: https://resend.com/legal/dpa.
3.6 Social media profiles
In addition to our website, we are also present on social networks with our company. Our aim is to present our company and to provide a way to get in touch with us.
We also use the option of running advertisements and job postings on social media.
Below we explain which data we and the respective social network process when you visit and interact with our profiles.
3.6.1 LinkedIn
We operate a LinkedIn profile at https://www.linkedin.com/. This social network is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
a) Interaction with our company profile
When you visit our LinkedIn profile and interact with us there, we process personal data. This includes the data publicly available on the profile and the personal data contained in posts, comments or direct messages to us. Through interactions such as liking or sharing, we can see the user profile and its public information.
The legal basis for this processing is Art. 6(1)(f) GDPR. We have a legitimate interest in providing relevant and interesting content and in enabling the use and functionality of our LinkedIn profile.
Where an enquiry is connected with the performance of a contract or is necessary to take pre-contractual steps, our processing is based on Art. 6(1)(b) GDPR.
b) Page Insights
LinkedIn provides us with aggregated statistics and insights (so-called Page Insights) that give us information about how people interact with our company page. Among other things, we receive information about the number of profiles that view, comment on, or otherwise interact with our posts, as well as aggregated demographic and other information that helps us learn about the interaction with our page or LinkedIn profile. Page Insights provided to us by LinkedIn consist of aggregated data; LinkedIn does not provide us with personal data of members in relation to Page Insights. We also have no way to link Page Insights with individual members.
When running advertisements, LinkedIn provides us with information about the types of people who see our ads and about the performance of our ads. Personal data is only shared with us if that person has consented to such processing. We also receive information from LinkedIn that helps us understand which of our ads led to a purchase or an action being taken.
The processing of this data serves the purpose of analysing our reach and tailoring our content and ads to user interests. Based on the analysis of this data, we can see how our content, profile and advertising are being consumed. This enables us to create content for the right target groups and to run ads to better promote our company and our services.
The processing is based on our legitimate interest under Art. 6(1)(f) GDPR.
For the processing of personal data in the context of so-called Page Insights, processing is carried out jointly with LinkedIn under Art. 26(1) GDPR.
We have entered into a corresponding agreement with LinkedIn, which can be viewed here (https://legal.linkedin.com/pages-joint-controller-addendum).
LinkedIn's contact details are:
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
You can contact LinkedIn's data protection officer at the following link:
3.6.2 Processing by LinkedIn
In connection with your visit to our company profile, LinkedIn may also process further personal data. In that case, processing takes place under LinkedIn's sole responsibility and without our knowledge. You can find further information from LinkedIn at:
3.6.3 Facebook
We operate a Facebook fan page at https://www.facebook.com/. This social network is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
a) Interaction with our company profile
When you visit our Facebook profile and interact with us there, we process personal data. This includes the data publicly available on the profile and the personal data contained in posts, comments or direct messages to us. Through interactions such as liking or sharing, we can see the user profile and its public information.
The legal basis for this processing is Art. 6(1)(f) GDPR. We have a legitimate interest in providing relevant and interesting content and in enabling the use and functionality of our Facebook profile.
Where an enquiry is connected with the performance of a contract or is necessary to take pre-contractual steps, our processing is based on Art. 6(1)(b) GDPR.
b) Page Insights
As explained in Meta's privacy policy under 'How do we use your information?', Meta also collects and uses information to provide analytics services - so-called Page Insights - to page operators. This also applies to our Facebook page.
Page Insights are aggregated statistics generated based on certain interactions of visitors with pages and the content connected with them (e.g. viewing a page or a video, subscribing to a page, marking a page with 'Like' or 'Unlike', etc.) and logged by Meta's servers.
In connection with Page Insights, Meta provides us with aggregated statistics and insights that inform us about how people interact with our company page. We do not gain access to personal data, only to the aggregated Page Insights. Using Page Insights, we can view anonymous statistics, e.g. on the reach of our account, page views, likes etc. These also include analyses by age, gender and location of users (as provided by them in their respective Facebook profiles). For evaluating reach, we can adjust settings or apply filters regarding the choice of time period, a specific post, or demographic groupings. This data is anonymised. Conclusions about specific individuals are not possible for us.
The processing of this data serves the purpose of analysing our reach and tailoring our content and ads to user interests so that visitors can derive the greatest possible benefit from them. Based on the analysis of this data, we can see how our content, profile and advertising are being consumed. This enables us to create content for the right target groups and to run ads to better promote our company and our services.
The processing is based on our legitimate interest under Art. 6(1)(f) GDPR.
For the processing of personal data in the context of so-called Page Insights, processing takes place jointly with Facebook under Art. 26(1) GDPR.
We have entered into a corresponding agreement with Facebook, which can be viewed here (https://www.facebook.com/legal/terms/page_controller_addendum).
Facebook's contact details are:
Online contact: https://www.facebook.com/help/contact/1650115808681298
By post: Meta Platforms Ireland Limited, ATTN: Privacy Operations, Merrion Road, Dublin 4, D04 X2K5, Ireland.
You can contact Facebook's data protection officer at the following link:
https://www.facebook.com/help/contact/540977946302970.
Further information on Page Insights:
https://de-de.facebook.com/legal/terms/page_controller_addendum
c) Processing of personal data and cookies by Meta
When you access a Facebook page, the IP address assigned to your device is transmitted to Facebook. According to Facebook, this IP address is anonymised (for 'German' IP addresses). Facebook also stores information about its users' end devices (e.g. in the context of the 'login notification' feature); in some cases, this may allow Facebook to attribute IP addresses to individual users. If you are currently logged in to Facebook as a user, a cookie containing your Facebook identifier is stored on your device. This allows Facebook to track that you have visited this page and how you used it. Through Facebook buttons embedded in websites, Facebook can record your visits to those websites and link them to your Facebook profile. Based on this data, content or advertising can be tailored to you.
Information on how personal data can be managed or deleted can be found in Facebook's Privacy Center:
More information on how Facebook handles data can be found here:
3.6.4 Instagram
We operate an Instagram profile. This social media platform is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
a) Interaction with our company profile
When you visit our Instagram profile and interact with us there, we process personal data. This includes the data publicly available on the profile and the personal data contained in posts, comments or direct messages to us. Through interactions such as liking or sharing, we can see the user profile and its public information.
The legal basis for this processing is Art. 6(1)(f) GDPR. We have a legitimate interest in providing relevant and interesting content and in enabling the use and functionality of our Instagram profile.
Where an enquiry is connected with the performance of a contract or is necessary to take pre-contractual steps, our processing is based on Art. 6(1)(b) GDPR.
b) Insights
As explained in Meta's privacy policy under 'How do we use your information?', Meta also collects and uses information to provide analytics services - so-called Insights - to page operators. This also applies to our Instagram profile.
Insights are aggregated statistics generated based on certain interactions of visitors with pages and the content connected with them, and logged by Meta's servers. Among other things, this includes the following information:
- How many people see and interact with our products, services or content - such as posts, videos, Instagram pages, listings, shops and ads (when ads are shown on Meta products);
- How people interact with our content, websites, apps and services;
- Which group of people interacts with our content or uses our services.
Meta provides us with aggregated reports and insights that inform us about how our content, features, products and services perform.
We do not gain access to personal data, only to the aggregated reports.
For evaluating reach, we can adjust settings or apply filters regarding the choice of time period, a specific post, or demographic groupings. This data is anonymised. Conclusions about specific individuals are not possible for us.
The processing of this data serves the purpose of analysing our reach and tailoring our content and ads to user interests so that visitors can derive the greatest possible benefit from them. Based on the analysis of this data, we can see how our content, profile and advertising are being consumed. This enables us to create content for the right target groups and to run ads to better promote our company and our services.
The processing is based on our legitimate interest under Art. 6(1)(f) GDPR.
For the processing of personal data in the context of so-called Insights, processing takes place jointly with Meta under Art. 26(1) GDPR.
We have entered into a corresponding agreement with Meta, which can be viewed here (https://www.facebook.com/legal/terms/page_controller_addendum).
Meta's contact details are:
Online contact: https://www.facebook.com/help/contact/1650115808681298
By post: Meta Platforms Ireland Limited, ATTN: Privacy Operations, Merrion Road, Dublin 4, D04 X2K5, Ireland.
You can contact Instagram's data protection officer at the following link:
https://www.facebook.com/help/contact/540977946302970.
Further information on Insights:
https://de-de.facebook.com/help/pages/insights.
You can find Instagram's full privacy policy here:
Processing of personal data and cookies by Meta
When you access an Instagram page, the IP address assigned to your device is transmitted to Meta. According to Meta, this IP address is anonymised (for 'German' IP addresses). Meta also stores information about its users' end devices (e.g. in the context of the 'login notification' feature); in some cases, this may allow Meta to attribute IP addresses to individual users. If you are currently logged in to Instagram as a user, a cookie containing your Instagram identifier is stored on your device. This allows Meta to track that you have visited this page and how you used it. Through Meta buttons embedded in websites, Meta can record your visits to those websites and link them to your Instagram profile. Based on this data, content or advertising can be tailored to you.
Further information:
3.6.5 Threads
We also use the features of Threads. Data collected when using the service - including IP address, application used, device information, pages accessed, location and mobile network provider - is processed by Meta Platforms, Inc. as described above. This data may also be transferred to countries outside the European Union. The collected data is linked to the account or profile on Threads. There is no control over the specifics of the data processed by Threads, including its processing, use or sharing with third parties. Further information:
3.6.6 TikTok
We operate a TikTok channel. TikTok is provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok Ireland"). Our TikTok channel allows us to present ourselves to TikTok users and to get in touch with them.
a) Interactions with our TikTok channel
Users can interact with our TikTok channel through their TikTok account, for example by liking or commenting on our posts. In doing so, we process the associated data, such as username and profile picture.
We use this data to optimise our content and its presentation and to adapt it to user interests.
It is also possible to send us direct messages on our TikTok channel. Here too, we are shown the username and profile picture.
The legal basis for the data processing is Art. 6(1)(f) GDPR. We have a legitimate interest in optimising our TikTok channel and the content published there. We also have a legitimate interest in communicating with users in order to answer questions, respond to criticism, build relationships and exchange information. This allows us to improve our services and to address the needs of potential customers. Through communication on TikTok, we particularly reach younger customers.
Comments are stored on the channel for an unlimited time and can be viewed by other users. The same applies to the use of the like function and direct messages.
b) TikTok analytics
When our TikTok channel is accessed and used, additional data is processed for TikTok analytics. This concerns aggregated statistics generated by TikTok based on certain interactions of visitors with our TikTok channel, which provide information about how the channel is being engaged with.
This data includes, but is not limited to:
- Follower growth
- Video views
- Profile views
- Likes, comments and shares
- Average watch time
- Percentage of viewers who watch the whole video
- Sources of traffic (e.g. profile, For You feed)
- Geographic distribution of the audience
- Activity times of followers.
The data is provided to us in aggregated form as statistics. We do not gain access to personal data, only to the aggregated statistics.
Further information on TikTok analytics can be found here:
The processing of this data serves exclusively to analyse and improve the content on our TikTok channel. Based on the analysis of this data, we can see how our content and our TikTok channel are being consumed. This enables us to create content for the right target groups and, where appropriate, to run ads to better promote our company and our services.
The processing is based on our legitimate interest under Art. 6(1)(f) GDPR.
For the processing of personal data in the context of TikTok analytics, processing takes place jointly with TikTok under Art. 26(1) GDPR.
We have entered into a corresponding agreement with TikTok which can be viewed.
TikTok's contact details are:
Online contact: https://privacytiktok.zendesk.com/hc/en-us/requests/new.
By post: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
You can contact TikTok's data protection officer using this form:
c) Processing of personal data by TikTok
When you use TikTok's offerings, TikTok processes personal data of users. This includes data such as your IP address, location data, time zone settings, advertising IDs, app and browser versions, and device data (system, network type, device ID, screen resolution, operating system, audio settings and connected audio devices). The TikTok profiles and channels you access, likes, messages and other usage data are also processed. If you are logged in with your own TikTok account, this data is associated with your account.
Further information on the processing of data by TikTok can be found here:
3.6.7 YouTube
We operate a profile on YouTube. YouTube is a video platform of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which allows us to publish video content and to interact with our audience.
a) Data processing by us
We also process data of profile visitors. We process data from your use of our profile that is provided to us by YouTube.
This information includes statistics on visits to our profile, reports on the watch time of our videos and on user interactions (e.g. 'Like' or comments), as well as information about individual people who actively interact with our page, e.g. through subscriptions or YouTube's communication features.
Data entered on YouTube - in particular the username and the content published under the account - becomes visible to us through interactions with our profile and is processed by us.
We process this data to enable communication and to optimise the reach and target group of our content.
The legal basis for processing is a legitimate interest under Art. 6(1)(f) GDPR for the purposes named above.
b) Data processing by YouTube
When you visit our YouTube channel or interact with our YouTube channel, YouTube collects personal data such as IP address, device information, geographic information, and your activities on the platform - including videos watched and interactions such as likes, comments and subscriptions. This data may be collected through cookies and similar technologies stored on the device.
YouTube uses this information to operate and improve the platform, to deliver personalised advertising, and to perform analytics and measurement in order to understand how users interact with content. The data processing also helps to evaluate and improve the reach and effectiveness of content.
The processing of data by YouTube is based, among other things, on your consent, which is expressed by accepting YouTube's cookie policy.
Data collected by YouTube may be shared within the Google group of companies as well as with third parties located in countries outside the European Union, including the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection even where data is transferred to third countries.
We have no influence on the extent of the data processed by YouTube, the nature of its processing and use, or its disclosure to third parties. We also have no effective means of control in this respect.
Information on which data is processed by YouTube and for what purposes can be found in YouTube's privacy policy:
3.6.8 Google Business Profile
We maintain a so-called Google Business Profile. In doing so, we rely on the information service offered by Google and the services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
a) Data processing by Google
The Google page and its features are used on Google's own responsibility. This applies in particular to the use of social and interactive features (e.g. commenting, sharing, rating, direct messages). When you visit and interact with our Google Business Profile entry, Google also captures your IP address as well as further information in the form of so-called cookies stored on your device. In some cases, this may allow Google to attribute IP addresses to individual users or user accounts. This information is used to provide us, as the operator of the Google Business Profile entry, with statistical information about the use of Google services. The data collected in this context is processed by Google and may be transferred to countries outside the European Union. Which information Google receives and how it is used is described by Google in general terms in its privacy policy.
If you contact us via our Google Business Profile entry or other Google services by direct message, we cannot rule out that these messages may also be read and analysed by Google (both by staff and automatically). We therefore advise against sharing personal data there. Another form of communication should be chosen as early as possible.
Use of this service is subject to Google's privacy policy, which you have already accepted by using the service.
Further information can be found in the privacy policy at the following link:
b) Data processing by us
As the provider of our Google Business Profile entry, we do not collect or process any further data from the use of this Google offering.
If you contact us or publish a review of us, we process your publicly available profile data as well as the content of the review/comment.
The legal basis is Art. 6(1)(f) GDPR. We have a legitimate interest in presenting our company and enabling the rating of our services in order to present our company and services well to the outside.
3.7 Payment services
3.7.1 Mollie
We use the payment service Mollie on our website. This service is offered by Mollie B.V., Keizersgracht 126, 1015CW Amsterdam, Netherlands.
Mollie enables us to integrate all common payment methods on our homepage. When a payment is made on our homepage, Mollie processes the payment data (e.g. bank account number, credit card number), the IP address, internet browser and device type, where applicable first and last name, email address and contact information, and where applicable product information.
The data processed by Mollie is stored on servers in the Netherlands which are located in specially secured data centres and monitored by a NOC team.
The legal basis is Art. 6(1)(b) GDPR. The data is processed for the purpose of (pre-)contractual obligations. We also have a legitimate interest in processing this data within the meaning of Art. 6(1)(f) GDPR in order to ensure a fast and reliable payment process.
Further information:
3.8 CRM systems
3.8.1 In-house development
We use a Customer Relationship Management (CRM) system that we have developed ourselves.
This CRM enables us to manage existing and potential customers as well as contacts and to organise sales, accounting and communication processes. This system is essential for analysing and optimising our customer-related processes.
Using the CRM system, we can efficiently structure our customer communication across various channels in order to present relevant information and offers that match our customers' interests.
As soon as we collect personal data on our website, it is processed by us in the CRM system. Data processing takes place on the basis of Art. 6(1)(b) GDPR for the performance of (pre-)contractual obligations as well as on the basis of Art. 6(1)(f) GDPR, since the use of CRM functions is of central importance for the growth and scaling of our company and we have a legitimate interest in the most efficient possible customer management and communication.
Where corresponding consent has been requested, processing takes place on the basis of Art. 6(1)(a) GDPR; consent can be withdrawn at any time.
Due to the in-house development, we can ensure that no data is transferred to third parties.
4. Other important matters
To conclude, we would like to inform you in detail about your rights and how you will be informed about changes to data protection requirements.
4.1 Your rights in detail
4.1.1 Right of access under Art. 15 GDPR
You can request information as to whether personal data concerning you is being processed. If so, you can request further information on the manner of processing. A detailed list can be found in Art. 15(1)(a) to (h) GDPR.
4.1.2 Right to rectification under Art. 16 GDPR
This right covers the rectification of inaccurate data and the completion of incomplete personal data.
4.1.3 Right to erasure under Art. 17 GDPR
This so-called 'right to be forgotten' gives you the right, under certain conditions, to demand erasure of personal data by the controller. This is generally the case where the purpose of the data processing has ceased to apply, where consent has been withdrawn, or where the original processing took place without a legal basis. A detailed list of grounds can be found in Art. 17(1)(a) to (f) GDPR. This 'right to be forgotten' also corresponds with the controller's obligation under Art. 17(2) GDPR to take reasonable steps to achieve a general erasure of the data.
4.1.4 Right to restriction of processing under Art. 18 GDPR
This right is tied to the conditions in Art. 18(1)(a) to (d).
4.1.5 Right to data portability under Art. 20 GDPR
This governs the general right to receive your own data in a commonly used format and to transmit it to another controller. However, this only applies to data processed on the basis of consent or contract under Art. 20(1)(a) and (b), and only insofar as this is technically feasible.
4.1.6 Right to object under Art. 21 GDPR
In principle, you can object to the processing of your personal data. This applies in particular where your interest in objecting outweighs the legitimate interest of the controller in the processing, and where the processing relates to direct marketing and/or profiling.
4.1.7 Right relating to automated individual decision-making under Art. 22 GDPR
In principle, you have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you. However, this right is also subject to limitations and additions in Art. 22(2) and (4) GDPR.
4.1.8 Further rights
The GDPR contains comprehensive rights regarding notification of third parties as to whether or how you have exercised rights under Art. 16, 17, 18 GDPR. However, this only applies insofar as this is possible or feasible with reasonable effort.
We would like to point out again your right to withdraw consent given under Art. 7(3) GDPR. The lawfulness of processing carried out up to that point remains unaffected.
We would also like to point out your rights under Secs. 32 et seq. BDSG, which are, however, largely identical in substance to the rights just described.
4.1.9 Right to lodge a complaint under Art. 77 GDPR
You also have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of personal data concerning you infringes this Regulation.
5. What if the GDPR is repealed tomorrow or other changes take place?
The current version of this privacy policy is dated December 8, 2025. From time to time it is necessary to adapt the content of the privacy policy in order to react to factual and legal changes. We therefore reserve the right to change this privacy policy at any time. We will publish the amended version in the same place and recommend that you read the privacy policy regularly.
This English version is provided for your convenience. The legally binding version is the German original ("Datenschutzerklärung").