Privacy Policy

General

As the operator of this website and as a company, we come into contact with your personal data. This refers to all data that relates to you and can be used to identify you. In this Privacy Policy, we would like to explain how, for what purpose, and on what legal basis we process your data.

The party responsible for data processing on this website and within our company is:

HPUandYou GmbH
Sonja Schmitzer

25a Kantstrasse

14513 Teltow

Phone: 03328 4446167

Email: support@hpuandyou.de

General Information

SSL or TLS Encryption

When you enter your data on websites, place online orders, or send emails over the Internet, you must always assume that unauthorized third parties may gain access to your data. Complete protection against such access does not exist. However, we make every effort to protect your data as effectively as possible and to close security gaps wherever feasible.

An important security measure is the SSL or TLS encryption of our website. This ensures that data you transmit to us cannot be read by third parties. You can recognize the encryption by the padlock icon displayed before the website address in your browser and by the fact that our website address begins with https:// rather than http://.

How Long Do We Store Your Data?

In certain sections of this Privacy Policy, we inform you about how long we, or the companies processing your data on our behalf, store your data. If no such information is provided, we will store your data until the purpose of the data processing no longer applies, you object to the processing of your data, or you withdraw your consent to the processing of your data.

However, in the event of an objection or withdrawal of consent, we may continue to process your data if at least one of the following conditions applies:

• We have compelling legitimate grounds for continuing the data processing that override your interests, rights, and freedoms (this applies only if you object to the processing of your data; if your objection relates to direct marketing, we cannot rely on such overriding legitimate grounds).
• The data processing is necessary for the establishment, exercise, or defense of legal claims (this does not apply if your objection concerns direct marketing).
• We are legally required to retain your data.

In such cases, we will delete your data as soon as the relevant condition or conditions no longer apply.

Transfer of Data to the United States

We also use tools on our website provided by companies that transfer your data to the United States, where it is stored and, if necessary, further processed.

The European Commission has adopted an adequacy decision for the EU–US Data Privacy Framework. This decision confirms that the United States provides an adequate level of protection for personal data transferred from the EU to U.S. companies.

The decision is based on new safeguards and measures introduced by the United States to meet data protection requirements. Among other things, the adequacy decision includes restrictions and safeguards regarding access to data by U.S. intelligence agencies. Binding safeguards have been implemented to limit access by U.S. intelligence services to what is necessary and proportionate for the protection of national security.

In addition, enhanced oversight of U.S. intelligence activities has been established to ensure compliance with these limitations on surveillance activities. An independent redress mechanism has also been introduced to handle and resolve complaints from European citizens concerning access to their data.

As a result, the EU–US Data Privacy Framework enables European companies to transfer data to certified U.S. companies without the need to implement additional data protection safeguards.

A list of all certified companies can be found at the following link:

https://www.dataprivacyframework.gov/s/participant-search

Changes to the European Commission’s decision cannot be ruled out.

Your Rights

Objection to Data Processing

If you read in this Privacy Policy that we have a legitimate interest in processing your data and therefore rely on Article 6(1)(f) GDPR as the legal basis, you have the right under Article 21 GDPR to object to such processing. This also applies to any profiling carried out on the basis of that provision.

To exercise your right to object, you must provide reasons relating to your particular situation. However, no justification is required if your objection concerns the use of your data for direct marketing purposes.

The consequence of your objection is that we may no longer process your data. This does not apply if one of the following conditions is met:

• We can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.
• The processing is necessary for the establishment, exercise, or defense of legal claims.

These exceptions do not apply if your objection is directed against direct marketing or against profiling related to such direct marketing.

Additional Rights

Withdrawal of Your Consent to Data Processing

Many data processing activities are carried out on the basis of your consent. For example, you may provide your consent by ticking a corresponding checkbox in online forms before submitting them or by allowing certain cookies when visiting our website.

You may withdraw your consent at any time without providing any reasons (Article 7(3) GDPR). From the moment of withdrawal, we may no longer process your data.

The only exception is where we are legally required to retain the data for a certain period. Such retention periods exist particularly under tax and commercial law.

Right to Lodge a Complaint with the Competent Supervisory Authority

If you believe that we have violated the General Data Protection Regulation (GDPR), you have the right under Article 77 GDPR to lodge a complaint with a supervisory authority.

You may contact a supervisory authority in the Member State of:

your place of residence,
your place of work, or
the place where the alleged infringement occurred.

The right to lodge a complaint exists in addition to any administrative or judicial remedies available to you.

Right to Data Portability

Data that we process automatically on the basis of your consent or for the performance of a contract must be provided to you or to a third party in a commonly used, machine-readable format if you request it.

We can transfer the data directly to another controller only to the extent that such transfer is technically feasible.

Right of Access, Erasure, and Rectification

Under Article 15 GDPR, you have the right to obtain, free of charge, information about the personal data we have stored about you, including where the data originates from, to whom we disclose it, and for what purpose it is stored.

If the data is incorrect, you have the right to rectification (Article 16 GDPR). Under the conditions of Article 17 GDPR, you may also request the deletion of your data.

Right to Restriction of Processing

In certain situations, you may request, pursuant to Article 18 GDPR, that we restrict the processing of your data.

In such cases, apart from storage, the data may only be processed as follows:

• with your consent
• for the establishment, exercise, or defense of legal claims
• for the protection of the rights of another natural or legal person
• for reasons of important public interest of the European Union or a Member State

The right to restriction of processing applies in the following situations:

• You have disputed the accuracy of your personal data stored by us, and we need time to verify this. In this case, the right applies for the duration of the review.
• The processing of your personal data is unlawful or was unlawful in the past. In this case, you have the right to restriction of processing instead of deletion of the data.
• We no longer need your personal data, but you require it for the establishment, exercise, or defense of legal claims. In this case, you have the right to restriction of processing instead of deletion of the data.
• You have lodged an objection under Article 21(1) GDPR, and a balancing of interests between your rights and ours is required. In this case, the right applies until the outcome of the balancing test has been determined.

Hosting and Content Delivery Networks (CDN)

External Hosting

Our website is hosted on a server provided by the following internet service provider (host):

ALL-INKL.COM – Neue Medien Münnich
Inh. René Münnich
Hauptstraße 68
02742 Friedersdorf

How Do We Process Your Data?

The host stores all data of our website. This also includes all personal data that is automatically collected or entered by you. This may include in particular: your IP address, pages visited, names, contact details and inquiries, as well as meta and communication data.

The host processes the data strictly according to our instructions and only to the extent necessary to fulfil its service obligations toward us.

Legal Basis for Processing

Since we use our website to approach potential customers and maintain contact with existing customers, the data processing by our host serves the initiation and performance of contracts and is therefore based on Article 6(1)(b) GDPR.

In addition, it is our legitimate interest as a company to provide a professional online presence that meets the necessary requirements in terms of security, speed, and efficiency. To that extent, we also process your data on the basis of Article 6(1)(f) GDPR.

Data Collection on This Website

Use of Cookies

Our website places cookies on your device. Cookies are small text files used for various purposes. Some cookies are technically necessary for the website to function properly (necessary cookies). Others are required to perform certain actions or enable specific functions on the site (functional cookies). For example, without cookies it would not be possible to use the shopping cart features in an online store.
Other cookies are used to analyze user behavior or optimize advertising measures. When we use third-party services on our website, such as for processing payment transactions, these companies may also place cookies on your device when you visit the website (so-called third-party cookies).

How Do We Process Your Data?

Session cookies are stored on your device only for the duration of your browsing session. Once you close your browser, they are automatically deleted.
Persistent cookies, on the other hand, remain on your device unless you delete them manually. This may result, for example, in your user behaviour being analyzed over a longer period of time.
You can control how your browser handles cookies through its settings:

• Do you want to be informed when cookies are set?
• Do you want to exclude cookies in general or only in certain cases?
• Do you want cookies to be automatically deleted when you close your browser?

If you disable or do not allow cookies, the functionality of the website may be restricted.

If we use cookies from other companies or for analysis purposes, we will inform you about this within this Privacy Policy. We also obtain your consent for this when you visit our website.

Legal Basis for Processing Your Data

We have a legitimate interest in ensuring that our online services can be used by visitors without technical problems and that all required functions are available. The storage of necessary and functional cookies on your device is therefore based on Article 6(1)(f) GDPR.

All other cookies are used on the basis of Article 6(1)(a) GDPR, provided you give us your consent. You may withdraw this consent at any time with effect for the future.

If you have consented to the placement of necessary and functional cookies during the consent process, these cookies are also stored exclusively on the basis of your consent.

Cookie Consent with Borlabs Cookie

What is Borlabs Cookie?

A cookie plugin used to comply with GDPR and ePrivacy requirements.

Who processes your data?

Only us, not the provider of Borlabs Cookie.

Where can you find more information about data protection at Borlabs Cookie?

https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

How Do We Process Your Data?

We use Borlabs Cookie to obtain your consent for storing cookies on your device.

When you visit our website and close the Borlabs Cookie consent banner, a Borlabs cookie is stored in your browser with the following information:

• Cookie duration
• Cookie version
• Domain and path of the website
• Consent
• A randomly generated ID

These data are not transmitted to the provider of Borlabs Cookie.

We store the data until the purpose of storage no longer applies, you delete the Borlabs cookie, or you request deletion of the data. This does not apply if we are legally required to retain the data.

Legal Basis for Processing Your Data

We are legally required to obtain consent from our website visitors for the use of certain cookies. To fulfil this obligation, we use Borlabs Cookie. The legal basis for this data processing is therefore Article 6(1)(c) GDPR.

Server Log Files

Server log files record all requests and accesses to our website and log error messages. They also include personal data, in particular your IP address. However, this is anonymized by the provider after a short time, so we can no longer assign the data to any individual.

The data is automatically transmitted from your browser to our hosting provider.

How Do We Process Your Data?

Our provider stores the server log files in order to monitor website activity and identify errors. The files include the following data:

• • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing device
  • Time of the server request
  • IP address (possibly anonymized)

We do not merge this data with other data sets; instead, we use it solely for statistical analysis and to improve our website.

Legal Basis for Processing Your Data

We have a legitimate interest in ensuring that our website runs without technical issues. It is also in our legitimate interest to obtain an anonymized overview of website usage. The data processing is therefore lawful under Article 6(1)(f) GDPR.

Contact Form

You can send us a message via the contact form on this website.

How Do We Process Your Data?

We store your message and the information provided in the form in order to process your inquiry, including any follow-up questions. This also includes the contact details you provide.

We do not share this data with third parties without your consen

How Long Do We Store Your Data?

We delete your data as soon as one of the following conditions applies:

• Your request has been fully processed.
• You request the deletion of the data.
• You revoke your consent for the storage of data.

This does not apply if we are legally required to retain the data.

What is the legal basis for processing your data?

If your request is related to our contractual relationship or is necessary for carrying out pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. In all other cases, it is our legitimate interest to effectively handle inquiries addressed to us. The legal basis for data processing is therefore Article 6(1)(f) GDPR. If you have given consent to the storage of your data, Article 6(1)(a) GDPR serves as the legal basis. In this case, you may withdraw your consent at any time with effect for the future.

Inquiry via email, phone, or fax

You can send us a message via email or fax, or call us.

How do we process your data?

We store your message as well as the contact details you provide or the phone number transmitted to us in order to process your inquiry, including any follow-up questions. Without your consent, we do not share your data with other persons.

How long do we store your data?

We delete your data as soon as one of the following conditions applies:

• Your request has been fully processed.
• You request the deletion of the data.
• You revoke your consent for the storage of data.

This does not apply if we are legally required to retain the data.

What is the legal basis for processing your data?

If your request is related to our contractual relationship or is necessary for carrying out pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. In all other cases, it is our legitimate interest to effectively handle inquiries addressed to us. The legal basis for data processing is therefore Article 6(1)(f) GDPR. If you have given consent to the storage of your data, Article 6(1)(a) GDPR serves as the legal basis. In this case, you may withdraw your consent at any time with effect for the future.

Registration function

In order to use certain functions or services on our website, you must register. For this purpose, it is necessary to provide your email address and, if applicable, additional personal data.

How do we process your data?

We store the data you provide during registration and use it to make the function or service available for which you have registered. If there are any changes regarding the service or function, we use your email address to inform you about them. In addition, we may use your email address to offer you additional contractual services.

How long do we store your data?

We delete your data as soon as one of the following conditions applies:

• The purpose of data processing no longer applies.
• You request the deletion of the data.
• You revoke your consent for the storage of data.

This does not apply if we are legally required to retain the data.

What is the legal basis for processing your data?

We store and use your data in order to fulfill the user relationship established during registration and, if applicable, to initiate additional contracts. The legal basis is therefore Article 6(1)(b) GDPR.

Comment function

You have the option to comment on content on our website using the corresponding input fields. To use the comment function, you must provide your email address. It is also possible to subscribe to other users’ comments.

How do we process your data?

When you leave comments on our website, we store the following data:

• Your comment
• Your email address
• The time of the comment
• Any additional data you provide when commenting, e.g. your username
• Your IP address

We store data that can identify you in order to take legal action against you if your comment is defamatory, incites hatred, or is otherwise criminally relevant.

If you subscribe to comments, we will send you an email to verify that you are the owner of the provided email address. You can unsubscribe from receiving comment notifications at any time via a link in that email.

How long do we store your data?

We store your comments and the associated data until the commented content is completely deleted or until the comments must be deleted for legal reasons, e.g. because they violate criminal law provisions.

If you have subscribed to comments and unsubscribe from notifications, all data provided in the context of the subscription will be deleted. If we have also stored your data for another reason, e.g. because you subscribed to our newsletter, this data is not affected by the deletion.

What is the legal basis for processing your data?

By using the comment function, you consent to the storage of your data. The legal basis for data processing is therefore Article 6(1)(a) GDPR. You may withdraw your consent at any time by sending us an email stating your revocation. From that point on, we are no longer permitted to process your data.

Analysis tools and advertising

We use the following tools to analyze visitor behavior on our website and to show you advertisements.

Google Analytics

What is Google Analytics?

A tool for analyzing user behavior provided by Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about Google Analytics data protection?

https://support.google.com/analytics/answer/6004245?hl=de

On what basis do we transfer your data to the USA?

On the basis of the European Commission’s adequacy decision and the respective certification of the company.

How can you prevent data collection?

Among other options, via a browser plugin: https://tools.google.com/dlpage/gaoptout?hl=de

How do we process your data?

We are always interested in optimizing our website for visitors and placing advertising effectively. For this purpose, we use Google Analytics, a tool that analyzes user behavior and provides us with the necessary data for improvements. Through this tool, we receive information about the origin of our visitors, their page views, their time spent on pages, and the operating system they use.

Standard processing

To collect data, Google Analytics uses cookies, device fingerprinting, or other recognition technologies. The data is transmitted to Google servers in the USA and, together with the IP address collected, combined into a profile that can be assigned to you or your device.

You can prevent Google from processing your data by installing a browser plugin provided by Google: https://tools.google.com/dlpage/gaoptout?hl=de.

How long do we store your data?

Data stored at the user and event level, linked with cookies, user IDs (e.g. user IDs), or advertising IDs, is deleted or anonymized by Google after 26 months according to its own information https://support.google.com/analytics/answer/7667196?hl=de).

What is the legal basis for processing your data?

As a website operator, we have a legitimate interest in analyzing user behavior in order to optimize our website and the advertising placed there. The data processing is therefore lawful under Article 6(1)(f) GDPR. If you have consented to cookie storage or otherwise agreed to data processing by Google Analytics, the sole legal basis is Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

META Pixel

What is META Pixel?

A tool for analyzing user behavior that measures the effectiveness of advertising on Facebook.

Who processes your data?

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland

Where can you find more information about META Pixel data protection?

https://de-de.facebook.com/about/privacy/

On what basis do we transfer your data to the USA?

On the basis of the European Commission’s adequacy decision and the respective certification of the company.

How can you prevent data processing?

If you have a Facebook account: deactivate the “Custom Audiences” remarketing function in your ad settings (https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen).

If you do not have a Facebook account: disable interest-based advertising via the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

How do we process your data?

We use META Pixel on our website. This tool helps us learn more about visitor behavior after they click on one of our Facebook ads. This allows us to measure the effectiveness of our Facebook advertising and adjust future campaigns accordingly. The data collected via the pixel is anonymous to us as website operators. We cannot identify you as a visitor. However, Facebook stores and processes the data. Facebook links the data to your Facebook account and uses it to display ads within and outside its network (see Facebook data policy). During storage and processing, Facebook also transfers data to the USA and other third countries.

If you have a Facebook account, you can deactivate the “Custom Audiences” function in your ad settings: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen deaktivieren.

If you do not have a Facebook account, you can opt out of interest-based advertising via: http://www.youronlinechoices.com/de/praferenzmanagement/.

What is the legal basis for processing your data?

As a website operator, we have a legitimate interest in effective advertising on social networks. The data processing is therefore lawful under Article 6(1)(f) GDPR. If you have consented to cookie storage or otherwise agreed to data processing by Facebook, the sole legal basis is Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Newsletter

ActiveCampaign

What is ActiveCampaign?

A service for sending newsletters and analyzing recipient behavior.

Who processes your data?

ActiveCampaign Inc., 1 N Dearborn, 5th Floor, Chicago, Illinois 60602, USA

Where can you find more information about ActiveCampaign data protection?

https://www.activecampaign.com/privacy-policy

On what basis do we transfer your data to the USA?

On the basis of the European Commission’s adequacy decision and the respective certification of the company.

How do we process your data?

We use ActiveCampaign for sending newsletters. The service manages subscriber data, sends newsletters, and analyzes newsletter campaigns.

To receive our newsletter, we need your email address. We also use a confirmation email (double opt-in) to verify that you are the owner of the email address. No additional data is collected unless voluntarily provided. Your data is used exclusively for sending the newsletter and is stored on ActiveCampaign servers in the USA.

When a newsletter is opened, a file contained in it connects to ActiveCampaign servers. This informs the service that the newsletter has been opened and records all clicks on links inside it. It may also record whether a purchase was made after clicking a link. In addition, technical information such as access time, IP address, browser type, and operating system is collected.

We may segment newsletter recipients by categories such as age, gender, or location to better tailor content.

You can unsubscribe at any time.

How long do we store your data?

After unsubscribing, your data will be deleted from the mailing list. In some cases, your email address may be placed on a blacklist (e.g., if you object to advertising). This storage is based on Article 6(1)(f) GDPR.

Otherwise, we reserve the right to delete the data at any time after the purpose for collection no longer applies or at our discretion.

What is the legal basis for processing your data?

By subscribing to the newsletter, you consent to data processing by ActiveCampaign. The legal basis is therefore Article 6(1)(a) GDPR. You may withdraw your consent at any time by unsubscribing or by sending us a message. From that point on, we will no longer send you newsletters.

Google Fonts (local hosting)

We use fonts from the US company Google on our website. However, these fonts are hosted locally, so no connection to Google servers is established when you visit our website.

Weitere Informationen zu den Google Fonts finden Sie unter https://developers.google.com/fonts/faq und in der Datenschutzerklärung von Google: https://policies.google.com/privacy?hl=de.

eCommerce

Customer and contract data

How do we process your data?

When we enter into a contract with you, we require certain personal data from you. We collect, process, and use this data only to the extent necessary to establish, structure, or modify our contractual relationship. If you can only use our services via our website or if the services are billed through the website, we also collect usage data where necessary to enable you to use our services or to invoice the service you have used.

How long do we store your data?

We store your data until our contractual relationship ends, unless we are legally required to retain it for a longer period.

What is the legal basis for processing your data?

We store your data in order to fulfill the contract with you or to carry out pre-contractual measures. The legal basis for data processing is therefore Article 6(1)(b) GDPR.

Data transfer when using services and digital content

How do we process your data?

For payment processing, we transfer your data to a payment service provider or the credit institution responsible for handling the payment. We only transfer data that is strictly necessary for the payment process. If we wish to transfer additional data, we will obtain your consent.

What is the legal basis for processing your data?

We transfer your data in order to fulfill the contract we have concluded with you. The legal basis is therefore Article 6(1)(b) GDPR. If you have consented to the transfer of your data, the processing is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Payment services

To make purchases on our website convenient for you, we use payment service providers—external companies that handle payments on our behalf. The specific providers used are listed at the end of this section.

How do we process your data?

For the payment process, you must provide certain personal data, such as your name, bank account details, or credit card number. We pass this data on to the respective payment service provider. The respective provider’s contractual and privacy policies apply to the transaction itself.

What is the legal basis for processing your data?

We transfer your data in order to fulfill the contract concluded with you. The legal basis is therefore Article 6(1)(b) GDPR. In addition, we have a legitimate interest in processing payments quickly, conveniently, and securely. The legal basis is also Article 6(1)(f) GDPR. If you have consented to the transfer of your data, the processing is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Payment service used

Ablefy

What is Ablefy?
A platform for selling digital products and online courses as well as processing payments.

Who processes your data?
Ablefy GmbH, Potsdamer Straße 125, 10783 Berlin, Germany

Where can you find more information about Ablefy’s privacy policy?
https://myablefy.com/privacy?locale=de

How do we process your data?
We offer certain goods or services via the sales and payment platform Ablefy. If you purchase a product or service from us, you will be redirected to the Ablefy platform to complete the purchase and payment, or an order form provided by Ablefy will be embedded. In this process, Ablefy processes the data necessary for contract fulfillment under its own responsibility, such as name, address, email address, and payment data.

Integration of Ablefy on our website
We integrate Ablefy services via plugins or scripts into our website. Each time this is done, non-personal data is loaded from Ablefy’s servers, for example a JavaScript file. When this content is loaded, your web browser retrieves a webpage from Ablefy’s servers. Our server has no control over the extent to which your browser transmits data to Ablefy’s servers. In this context, our server does not transmit any data to Ablefy’s servers.

Which data Ablefy stores and processes during such requests is determined by Ablefy GmbH as the responsible party and is described in its own privacy policy. You can find Ablefy’s privacy policy here: https://myablefy.com/privacy?locale=de

Checkout and payment processing
For the ordering and payment process, we use Ablefy’s checkout system. Once you complete a purchase, your order and payment data are transmitted directly to Ablefy and processed there for contract fulfillment, payment processing, and fraud prevention. Depending on the selected payment method, data may also be shared with additional payment service providers used by Ablefy. Which providers are involved and how they process your data can also be found in Ablefy’s privacy policy.

Digistore24

What is Digistore24?

An automated sales platform and affiliate network.

Who processes your data?

Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany

Where can you find more information about Digistore24’s privacy policy?

https://www.digistore24.com/dataschutz

How do we process your data?

We offer certain goods or services via the Digistore24 sales platform.

Digistore24 WordPress plugin

We integrate Digistore24 services into our website via a WordPress plugin. Each time this is done, non-personal data is loaded from Digistore24’s servers (e.g. a JavaScript file). When this content is loaded, your browser accesses Digistore24’s servers. Our server has no control over the extent to which your browser transmits data to Digistore24. Our server itself does not transmit any data to Digistore24 servers in this context.

Which data Digistore24 stores and processes is determined by Digistore24 GmbH as the responsible party and is described in its own privacy policy. You can find it here: https://www.digistore24.com/dataschutz.

Conversion tools / shopping cart

Digistore24 allows the integration of various services via HTML and JavaScript codes on our website, such as the social proof bubble or the Digistore24 shopping cart. Each time these are loaded, non-personal data is retrieved from Digistore24 servers (e.g. a JavaScript file). Our server has no control over what data your browser transmits to Digistore24 servers. Our server itself does not transmit any data to Digistore24 servers in this context.

Which data Digistore24 stores and processes during this website request is described by Digistore24 GmbH, as the responsible party, in its own privacy policy. You can find Digistore24’s privacy policy here: https://www.digistore24.com/dataschutz.

Promo links / content links

We link to Digistore24 offers on our website to inform you about interesting products. Some links lead to digistore24.com. We do not transmit any data to Digistore24 through these links. However, your browser may transmit data directly to Digistore24, over which we have no control.

Affiliate advertising tool generator

With the affiliate advertising tool generator on our website, you can create promotional materials automatically. To do this, you enter your Digistore24 ID into the input field. This is used to check whether an affiliate partnership exists.

Audio and video conferencing

As a company, we communicate with many people: customers, business partners, service providers, etc. In addition to other communication tools, we also use online conferencing tools. Information relevant to data protection regarding the providers we use can be found at the end of this section. If you communicate with us via such a tool, not only we but also the provider of the respective tool processes your personal data.

How do we process your data?

Online conferencing tools collect and store various types of personal data to enable participation in and smooth execution of an online conference. In addition to registration, conference, and technical data, this also includes certain communication content.

• Registration data: Your email address and/or phone number, and any additional data you provide when registering for the conference.
• Conference data: Start, end, and duration of your participation in the conference, number of participants, and other metadata related to the conference.
• Technical data: IP address, MAC address, device ID, device type, operating system and version, client version, camera type, microphone or speaker, and type of connection.
• Communication content: Cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during use of the service.

For details on data processing, please refer to the privacy policies of the respective conference tool provider.

How long do we store your data?

As your communication partner, we delete your data from our systems as soon as one of the following applies:

• The purpose of data processing no longer applies
• You request deletion of the data
• You withdraw your consent to data storage

This does not apply if we are legally required to retain the data.

Cookies remain on your device until you delete them.

The providers of conference tools also store your data for their own purposes. For information about storage duration, please contact the providers directly.

What is the legal basis for processing your data?

If we are already contractually linked or intend to enter into a contract with you, we use conference tools to fulfill the contract or to inform you about our services or products. The data processing is therefore based on Article 6(1)(b) GDPR. Otherwise, the use of conference tools serves the purpose of simple and fast communication, which is necessary for efficiently running our business. We therefore also have a legitimate interest in data processing under Article 6(1)(f) GDPR. Another possible legal basis is your consent, in which case Article 6(1)(a) GDPR applies. This legal basis ceases to apply for the future if you withdraw your consent.

Processing of personal data in the context of withdrawal procedures

If you exercise your right of withdrawal via the withdrawal button provided on our website, we process the personal data you provide exclusively to handle your withdrawal request and to fulfill our legal obligations regarding contract cancellation.

We process the following data: your first and last name, your email address, the order ID or invoice number, the type of withdrawal exercised, as well as a timestamp and a system-generated withdrawal ID. If you use the optional free text field, we also process the information contained therein.

The legal basis for processing is Article 6(1)(b) GDPR insofar as it is necessary for processing the contract cancellation, and Article 6(1)(c) GDPR insofar as we are fulfilling legal obligations — in particular the obligation to confirm receipt of the withdrawal on a durable medium in accordance with § 356 BGB.

Your data is shared with our payment service provider for processing refunds and with our email service provider for sending confirmation emails. No further disclosure to third parties takes place.

We store your data for the duration of the statutory retention periods, typically ten years from receipt of the withdrawal declaration. The withdrawal record is stored in an unalterable form and cannot be deleted or modified retrospectively.

Which online conferencing tools do we use?

Zoom

What is Zoom?

A communication platform for video meetings, voice communication, webinars, and chat across desktop computers, phones, mobile devices, and conference room systems.

Who processes your data?

Zoom Communications Inc., 55 Almaden Boulevard, Suite 600, San Jose, CA 95113, USA

Where can you find more information about Zoom data protection?

https://zoom.us/de-de/privacy.html

On what basis is your data transferred to the USA?

Zoom Communications Inc. complies with the European Commission’s Standard Contractual Clauses https://zoom.us/de-de/privacy.html

Data processing on social media

What is social media?

Social media refers to the social networks on which we maintain publicly accessible profiles. The specific networks are listed below.

Who processes your data?

The operators of the respective social networks. Details are provided in the sections for each network.

How is your data processed?

Social network operators are generally able to collect and analyze extensive data about user behavior. We cannot fully track all processing activities, so additional processes may occur that are not listed here. Further information can be found in the privacy policies of the respective networks.

Data processing may be triggered when you visit our profile or a website containing embedded social media content (e.g., like or share buttons). If you are logged in, your visit may be linked to your user account. Even if you are not logged in, data such as your IP address may still be collected. This can be used to create user profiles and show personalized advertising.

Legal basis for processing

We operate social media profiles to ensure broad online presence. This constitutes a legitimate interest under Article 6(1)(f) GDPR.

Data processing by the social network operators themselves may be based on other legal grounds, which are defined by the operators.

Responsibility and user rights

When you visit our social media profiles, we are jointly responsible with the platform operator for the data processing triggered by your visit. You may exercise your rights both against us and against the platform operator.

However, our influence on data processing by the operators is limited and governed primarily by their policies.

How long is your data stored?

Data collected via our social media profiles is deleted from our systems once the purpose no longer applies, you request deletion, or you withdraw consent. Cookies remain on your device until you delete them. Legal retention obligations remain unaffected.

We have no control over how long social media platforms store data for their own purposes.

Social networks we use

Facebook

What is Facebook?
A social network

Who processes your data?
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Data transfers to third countries?
Yes, to the USA and other third countries

Where can you find more information about data protection on Facebook?
https://www.facebook.com/about/privacy/

Where can Facebook users adjust their ad settings?
As a registered Facebook user, you can adjust your ad settings in your account. Click the following link and log in:
https://www.facebook.com/settings?tab=ads.

Instagram

What is Instagram?
A photo and video-based social network

Who processes your data?
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Data transfers to third countries?
Yes

Where can you find more information about data protection on Instagram?
https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram-Hilfebereich&bc[1]=Richtlinien%20und%20Meldungen

Where can users adjust their privacy settings?
As a registered Instagram user, you can adjust your privacy settings in your account. Click the following link and log in:
https://www.instagram.com/accounts/privacy_and_security/

YouTube

What is YouTube?
A social network in the form of a video platform

Who processes your data?
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Data transfers to third countries?
Yes

Where can you find more information about data protection at YouTube?
https://policies.google.com/privacy?hl=de

Where can you, as a user, adjust your privacy settings?
https://policies.google.com/privacy?hl=de#infochoices