PRIVACY POLICY

HINTE Expo & Conference GmbH

Thank you for your interest in our online content. Protecting your privacy while processing personal information and the security of all business data is important to us, and it is a priority in our business processes. Here you can find out all you need to know about how we handle your data on our web pages and in our mobile applications.

CONTROLLER AS PER ARTICLE 4, PARA. 7 OF THE EU GENERAL DATA PROTECTION REGULATION (GDPR)

HINTE Expo & Conference GmbH
Bannwaldallee 60
76185 Karlsruhe
Deutschland
Telefax: +49 721 93133-110 +49 151 67110380
info@hinte-expo.com

DATA PROTECTION OFFICER FOR THE CONTROLLER

Dr. Ralf W. Schadowski
+49 2471 / 705 9605
data.protection@hinte-expo.com

§ 1 LAWFULNESS OF PROCESSING PERSONAL DATA

(1) Article 6, para. 1 (a) of the EU General Data Protection Regulation (GDPR) shall constitute the legal grounds if we obtain consent from the data subject for processing procedures relating to personal data.

(2) Article 6, para. 1 (b) of the GDPR shall constitute the legal grounds for personal data processing that is necessary for the performance of a contract to which the data subject is party. This shall also apply to processing procedures that are necessary to adopt pre-contractual measures.

(3) Article 6, para. 1 (c) of the GDPR shall constitute the legal grounds where processing personal data is necessary to comply with a legal obligation to which our company is subject.

(4) Article 6, para. 1 (d) of the GDPR shall constitute the legal grounds where vital interests of the data subject or of another natural person make processing personal data necessary.

(5) Article 6, para. 1 (f) of the GDPR shall constitute the legal grounds for the processing if the processing is necessary for the purpose of a legitimate interest pursued by our company or by a third party and such interest is not overridden by the interests or fundamental rights and freedoms of the data subject.

§ 2 DELETING DATA AND DURATION OF STORAGE

(1) The data subject’s personal data is deleted or blocked as soon as the purpose for storing it is no longer relevant.
(2) Data may continue to be stored if this is stipulated by European or national legislators in EU regulations, statutes or other provisions that the Controller is obliged to adhere to.
(3) The data is also blocked or deleted if a storage period stipulated by the above-listed EU regulations, statutes or other provisions that the Controller is obliged to adhere to expires, unless there is a necessity to continue storing the data for the purposes of concluding or performing a contract.

§ 3 INFORMATION ABOUT COLLECTING PERSONAL DATA ON OUR WEBSITE

(1) In this section, we provide information about how and what personal data is collected when you use our website. Personal data refers to all information that allows you to be personally identified, e.g. name, address, e-mail addresses, user behaviour.

(2) If you contact us by e-mail or via a contact form, we will store the data you submit (your e-mail address, where applicable your name and telephone number) in order to answer your questions. We will delete the data that accrues in this context once storing it is no longer necessary or restrict the processing if there is a statutory obligation to retain the data.

(3) If we call on appointed service providers for individual functions of our offering or would like to use your data for advertising purposes, we will provide you with detailed information about the respective procedures below. We will also outline the stipulated criteria for the duration of storage.

Collecting personal data during visits to our website

If you use our website merely for information, i.e. if you do not register for an account or otherwise transfer information to us, we will only collect the personal data that your browser transfers to our server. If you would like to look at our website, we collect the following types of data, which are technically necessary to show you our website and ensure stability and security (Article 6, para. 1, sentence 1 (f) of the GDPR constitutes the legal grounds for this):

IP address
Host name
Date and time of request
Time zone difference to Greenwich Mean Time (GMT)
Content of request (specific page)
Access status / HTTP status code
Volume of data transmitted each time
Website requesting access (referrer)
Which specific pages on our website you access
Browser – type, version and language settings
Operating system – type and version
If JavaScript is activated, also:

> Screen resolution, color depth, size of the browser window, installed browser plug-ins

Use of cookies

(1) In addition to the aforementioned data, cookies are stored on your computer whenever you use our website. Cookies are small text files stored on your hard drive and assigned to the browser you are using; these files channel certain information to the site that places the cookie. Cookies are not able to run any programs or transmit viruses to your computer. They serve to make the internet offering as a whole more user-friendly and effective.

(2) This website uses the following types of cookies, the scope and functions of which are explained below:

Transient cookies (see b)

Persistent cookies (see c)

b) Transient cookies are automatically deleted when you close your browser. Examples most notably include session cookies, which save a session ID that enables different requests from your browser to be assigned to the same session. This enables your computer to be recognized if you return to our website. Session cookies are deleted when you log out or close your browser.

c) Persistent cookies are automatically deleted after a set period, which can vary depending on the cookie. You can delete these cookies via your browser’s security settings at any time.

d) You can configure your browser settings however you wish and, among other things, block third-party cookies or all cookies. Third-party cookies are placed by a third party and therefore not by the actual website you are on at the time. We would like to point out that blocking cookies may mean you cannot use all the functions of this website.

e) We use cookies to identify you during subsequent visits if you have an account with us. Otherwise, you would need to log in again for each visit.

§ 3 INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA IN OUR APP

(1) In this section, we provide information about how and what personal data is collected when you use our app. Personal data refers to all information that allows you to be personally identified, e.g. name, address, e-mail addresses, user behaviour.

(2) If we call on appointed service providers for individual functions of our offering or would like to use your data for advertising purposes, we will provide you with detailed information about the respective procedures below. We will also outline the stipulated criteria for the duration of storage.

(3) Using the QR code scan function you can send your own contact details to another end-user/exhibitor or receive the contact details from another enduser/exhibitor using the same function. By scanning the “exhibitor and product QR codes” the contact details given when buying the ticket or the contact details given in the App can be transferred to an exhibitor in the form of lead reporting. The same applies to exchanging digital business cards between attendees. This personal data includes your first name and surname, email address, company, job title, telephone number/mobile number. The contact and connectivity function makes communication between trade fair attendees and exhibitors easier by giving them the possibility to open simple communication paths and also maintain these during the period of time after the trade fair.

(4) When you log in to the App a personal profile with the data from your registration in the TicketShop will be automatically set up for you. You can supplement this data with further data, for example, in the fields “Company”, “Position”, “Telephone number”, “Areas of interest”, “Further information and a profile picture”. This data is used to present the relevant user to other users and exhibitors, to describe their interests and make it easier to make contact and keep in contact.

(5) Using the networking function, you can communicate with other users of the App in private chatrooms without these being visible to anyone else apart from the attendees you have set for the private chatroom. You can also be individually contacted by other users via a private channel. In order to provide this networking function, we process your personal data, in particular your user account data (surname, first name, company, job title, position, profile picture and country). If you use the networking function, we will use an algorithm for matchmaking. This algorithm will identify matches between your interests and the interests of other users and exhibitors and will display these in the order of matching relevance. If you use networking and matchmaking, we will form a profile derived from the interests you have given. We will compare your interests with the interests of other networking participants and form a list of networking participants with whom you share the most interests, adjusted for you in descending order. These participants will be suggested to you as possible contacts. In this respect your personal data will be processed to carry out the agreement and to provide the networking function.

Collecting personal data when you use our app

If you use our app merely for information, i.e. if you do not register for an account or otherwise transfer information to us, we only collect the personal data that your device transfers to our server. If you would like to look at our website, we collect the following types of data, which are technically necessary to ensure our app works properly for you (Article 6, para. 1, sentence 1 (f) of the GDPR constitutes the legal grounds for this):

IP address
Internal device ID
Date and time of request
Time zone difference to Greenwich Mean Time (GMT)
Which page you visit
Operating system – type and version
Search terms entered

USE OF COOKIES

Our app uses cookies. Cookies are small data units that are stored on your end device. They make it possible, for example, to recognise you if you access the app again at a later point in time. For this purpose, the cookie is sent to the provider as soon as you start using the app. (Article 6, para. 1, sentence 1 (f) of the GDPR constitutes the legal grounds for this)

Creating a user account

In our app, you have the option of registering for a user account and/or logging in. Some information is mandatory in order to register – all other data is optional. The mandatory information is used to authenticate you when you log in. Optional information can be displayed in the app and, if you wish, also made accessible to other app users. (Article 6, para. 1, sentence 1 (b) of the GDPR constitutes the legal grounds for this)

Google Analytics SDK

To be able to analyse how our app is used, we use Google Analytics SDK from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. We use an additional function offered by Google that ensures all users’ IP addresses are anonymised, thereby ruling out the possibility of individuals being identified. You can object to your user behaviour being analysed via Google Analytics at any time.
You can find further information about how Google protects data at: http://www.google.de/intl/de/p...

Purposes and legal basis of processing

(1) Performance of the contract and implementation of the event

HINTE Expo & Conference GmbH processes the personal data pursuant to §3 for the purpose of the establishment and performance of the contract and participation in the event (legal basis: Art. 6 (1) (b) GDPR). The technologies mentioned in §3 are also used to navigate the event app and to provide some functionalities.

This processing purpose and legal basis shall also include, in particular, the following functionalities of the event app, if available:

Profiles and exhibitor profile
This enables the creation of a personal user profile or an exhibitor profile for the presentation of exhibitors / companies in order to establish new contacts and network with other participants and/or to present the respective company and its products and services and to present job advertisements on the job board. For this purpose, participants can be informed by e-mail about news within the profile, such as new contact requests.
If exhibitors/companies or participants post URL links to their own content or similar (e.g., social media), participants will leave the event platform by clicking on this link and will be forwarded to the linked website. The respective website operator is the controller for this linked website in accordance with the Data Protection Regulation (GDPR). Further information can be found in the data protection and cookie notices of the respective website operator (legal basis: the participant's consent pursuant to Art. 6 (1) (a) GDPR). The content, availability and/or function and/or terms of use of these linked websites are not controlled by HINTE Expo & Conference GmbH and HINTE Expo & Conference GmbH is not responsible for them; the external links are subject to the terms of use of the third parties and may be changed and/or discontinued by the third parties without the knowledge of HINTE Expo & Conference GmbH.

Video/live streaming
This feature allows retrieval of live streaming and video on demand.

Communication and networking
This enables participants to communicate with other participants (e.g. chats), also using so-called emoticons, and to communicate, set up and organise meetings, take notes, as well as to arrange and conduct appointments between different participants (including notification function). Within the user communication centre, contacts can be searched for, recommended, favoured and blocked, as well as one's own status can be indicated, and the network function can be activated or deactivated.

Profiling/matchmaking
Search/filter functions within the event platform enable filtering by various categories such as sectors, employee functions/roles or product groups. These interest filters can be defined by the participants themselves. This involves an automated matching of the set filters with the aim of optimising networking. If the participants agree, suitable contacts are suggested on the basis of the profiles and information. These and other settings can be changed at any time in the personal profile.

Push notifications
Users of the app can be centrally informed about the event term via push notifications with a wide variety of information about the event itself or its exhibitors and products. The push notification service can be switched off individually and the processing of data can be objected to. In the case of push messages, the data is generally deleted as soon as the request has been processed.

(2) Calendar access (option)

The calendar access offers the possibility to save the dates of the trade fair visit planning in the personal calendar. No personal data is read from the calendar or stored centrally. Access can be revoked at any time in the app settings. (Legal basis: Art. 6 (1) (a) GDPR).

(3) Address book access (option)

Access to the address book offers the option of saving the contacts received via the digital business card or the exhibitor directory. The system checks locally on your device whether the contact is already saved in your address book. To save the exhibitor contacts, the app requires access to your address book.

Address book access also offers the option of inviting your own contacts to use the app. As soon as you search for a contact in Networking who is not yet an app user / net-working participant, you can check whether the user exists in the local address book after granting access to the address book and then invite them to use the app.

Access will only take place if you have given your prior consent. The legal basis for this is your consent in accordance with Art. 6 (1) (a) GDPR, which can be revoked at any time. To do so, please deactivate access in the app settings on your device.

(4) Camera access (option)

Access to the camera offers the option of reading digital business cards in the form of QR codes. The data is stored on the device. Access can be revoked at any time in the app settings. (Legal basis: Art. 6 (1) (a) GDPR).

(5) Memory access (option)

Memory access offers the possibility to select the profile photo, to save your own digital business card and to save the individually generated trade fair visit data on the device. Access can be revoked at any time in the app settings. (Legal basis: Art. 6 (1) (a) GDPR).

(6) Security

The log data mentioned in §3 are processed for the legitimate interest of HINTE Expo & Conference GmbH in ensuring the security of the event platform, the event app and the data collected on it (legal basis: Art. 6 (1) (f) GDPR).

§ 4 OUR WEBSITE’S OTHER FUNCTIONS AND OFFERINGS

(1) Besides using our website for purely informational purposes, we offer various services that you can use if interested. To do so, you usually need to supply further personal data, which we use to provide the service in question and to which the aforementioned principles regarding data processing apply. Mandatory fields are labelled with an asterisk. Fields without this marking are entirely optional.
(2) Personal data is collected whenever you contact the service provider by e-mail or via the contact form. You can see which data is collected when you use a contact form by looking at the form itself. Alternatively, you can make contact by sending an e-mail to the address provided. In this case, the personal user data transferred in the e-mail is stored to process your request.
(3) In some instances, we employ external service providers to process your data. We select and instruct these providers with care; they are subject to our directives and monitored on a regular basis.
(4) If our service providers or partners are based in a state outside of the European Economic Area (EEA), we will inform you about the consequences of this fact in the offering description.

§ 5 DATA SUBJECT RIGHTS

We have outlined for you below the data subject rights you possess as per Article 15 of the GDPR. You may avail yourself of these rights at any time, and contact us directly to do so. If you do contact us to claim these rights, we will inspect them in detail, taking into account the relevant statutory requirements and conditions. We may ask you to provide further information for this purpose. We will provide you with a detailed explanation of the results of our inspection and how we will proceed to carry out your request. It is possible that we may not be able to fully meet your wishes in the way you would like.
This should not discourage you from contacting us to claim your rights or inquire about them. We are very happy to answer any queries you send.

(1) Right of access

You are entitled to request information from us about whether we process data concerning yourself and, if so, which data. This also covers information pertaining to the purposes of the processing, any recipients to whom we have disclosed your data, the envisaged duration of storage, and any information about the origin of this data if we have not collected it from you directly. In addition to this, you are entitled to one free copy of the personal data relating to you that we store. We shall retain the right to charge a reasonable administrative fee for producing any further copies.

(2) Right to rectification

You are entitled to request that we rectify inaccurate personal data that we have stored about you. This also includes the right for incomplete personal data to be completed.

(3) Right to erasure

You are entitled to request that we erase personal data that we have stored about you. In the context of the “right to be forgotten” as per Article 17, para. 2 of the GDPR, if we have made your data public, we are likewise obligated, taking into account available technology and the costs of implementation, to forward your request to erase all links to such data as well as copies and/or replications of such data to other controllers responsible for processing such public personal data.

(4) Right to restriction of processing

You are entitled to request that we restrict the processing of personal data that we have stored about you. Thereafter, processing such data is only possible with your consent or for limited purposes defined by statute.

(5) Right to object to the processing

Provided we have based the processing of your personal data on a balance of interests, you are entitled to file an objection to the processing. This is particularly the case if the processing is not necessary to perform a contract with you, which we will always illustrate in the subsequent description of the functions. Should you exercise this right to object, please state the reasons why we should not process your personal data in the way we have been doing so. If your objection is valid, we will review the situation and either terminate/adjust the data processing or demonstrate to you the compelling legitimate reasons why we will continue with the processing.
You can of course object to your personal data being processed for advertising and data analysis purposes at any time. You can contact us for information about your objection to advertising by using the contact details given above.

(6) Right to withdraw consent as per data protection law

If you have consented to your data being processed, you can withdraw your consent at any time. Informing us of your withdrawal of such consent will affect the admissibility of the processing of your personal data.

(7) Right to data portability

You are entitled to receive your personal data that you provided to us from us in a structured, commonly used and machine-readable format for the purpose of transmitting such data to another controller. This also includes, upon your request and taking into account the technical possibilities available, the direct transmission from us to the other controller.

(8) Right to lodge a complaint with a supervisory authority

You are entitled to lodge a complaint at any time about how we process your personal data to the data protection supervisory authority responsible for us: The State Representative for Data Protection and Freedom of Information in Baden-Wuerttemberg (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (BfDI))
Königstraße 10a, 70173 Stuttgart
Fax: +49 7 11/61 55 41-15
+49 7 11/61 55 41-0
poststelle@lfdi.bwl.de
http://www.baden-wuerttemberg.datenschutz.de

(9) Automated decision-making, including profiling

You are entitled to receive information about the existence of automated decision-making, including profiling, as per Article 22, paras. 1 and 4 of the GDPR and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

PROTECTING MINORS

People under the age of 16 may not submit any personal data to us without the permission of their legal guardians. In pursuance of Article 8 of the GDPR, children under 16 years of age may only grant such consent with the permission of their legal guardians. Personal data of minors shall not be knowingly collected or processed.

E-MAIL INFORMATION SERVICES

1. Inxmail newsletter

(1) For the dispatch of our newsletter, we use the “Inxmail” service offered by Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany. Data saved during registration is transferred to Inxmail GmbH and stored by Inxmail GmbH. Data entered during registration is not transferred to any other third parties.
(2) The only piece of mandatory information for sending the newsletter is your e-mail address. Any other, separately marked information is optional and used in order to contact you personally.
(3) For the subscription to our newsletter, we follow the double opt-in process. This means that once you have subscribed, Inxmail will send you an e-mail to the e-mail address provided, in which we will ask you to confirm that you would like us to send you the newsletter. Inxmail will store your IP address, the date and time you clicked on the confirmation link, and the recipient’s e-mail address in a log file as proof of valid consent.
(4) We would like to point out that Inxmail uses “newsletter tracking” in its newsletters. This involves recording recipients’ reactions (opening a mailshot, clicking text/image links, downloading images with an e-mail program) and storing them in an anonymised format for statistical purposes. It is not possible to use the stored data to identify individual users.
Provided you have previously given your express consent, the aforementioned recipient reactions are recorded and stored as information specific to you as an individual. This enables Inxmail to align the newsletter content more effectively to the user’s personal interests.
(5) You can withdraw your consent to the newsletter being sent and cancel your subscription at any time. You can announce your withdrawal by clicking the unsubscribe link provided in every newsletter e-mail. This will equally negate any existing consent to the recording of data regarding personal user behaviour in the newsletter.

WEB ANALYTICS

1. Use of Google Analytics

(1) This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses cookies, text files that are stored on your computer and enable your use of the website to be analysed. Information generated by the use of cookies about your usage of this website is generally transmitted to and stored on a Google server in the United States. If, however, the Anonymise IP option has been activated on this website, Google will remove the end of your IP address so it only locates you as within the member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be transmitted to a Google server in the United States and truncated there. Google will use this information on behalf of the website operator to evaluate the way you use this website, to compile reports about activity on the website, and to provide the website operator with additional services associated with usage of the website and of the internet.
(2) The IP address transferred by your browser through Google Analytics will not be combined with any other Google data.
(3) You can set your browser software to prevent cookies from being stored but we would advise you that, if you do so, you may not have full access to all the functions of this website. Furthermore, you can prohibit Google from recording and processing the data generated by the cookie about your use of the website (including your IP address) by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout. With regard to mobile devices, you can permanently prevent Google Analytics from recording your data by setting an opt-out cookie. Deactivate Google Analytics.
(4) This website uses Google Analytics with the “_anonymizeIp()” extension. As a result, IP addresses are processed in a shortened form, ruling out direct associations to individuals. If the data collected about you gains a personal reference, such reference will be eliminated immediately and the personal data therefore promptly deleted.
(5) For the exceptional cases in which personal data is transmitted to the United States, Google has agreed to uphold the EU-US Privacy Shield, https://www.privacyshield.gov/.
(6) Information about the third-party supplier: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001

SOCIAL MEDIA AND OTHER THIRD-PARTY SERVICES

1. Use of Social-Media-Plug-ins

(1) We currently use the following social media plug-ins: Facebook, Google+, Google Bookmarks, Twitter, Xing. You can see who the plug-in provider is from the label on the box by looking at its initial letter or the logo. You can use the button to get in touch with the plug-in provider directly. The plug-in provider will only receive information that you have accessed the relevant website of our online offering if you click and thereby activate the selected field. The data set out in § 5 of this data protection declaration will also be transferred. With regard to Facebook and Xing, the respective providers within Germany state that the IP address is anonymised immediately after it is collected. By activating the plug-in, your personal data is therefore transferred to the respective plug-in provider and stored there (in the case of U.S. providers, it is stored in the United States). Given that the plug-in provider collects data, notably by using cookies, we recommend that you delete all cookies by adjusting your browser privacy settings before you click on the greyed-out box.
(2) We have no influence over the collected data and the data processing procedures; in addition, we do not know the full extent of the data collection, the purposes of the processing, or the storage periods. We also do not possess information on the deletion of the collected data by the plug-in provider.
(3) The plug-in provider stores the data they collect about you as usage profiles, which they use for the purposes of advertising, market research and/or customising their website to specific needs. In particular, the data is used in this way (even for users who are not logged in) to display targeted advertising and to inform other users of the social network about your activity on our website. You have a right to object to these user profiles being created; to exercise this right, you must get in touch with the respective plug-in provider. The plug-ins allow us to pursue our interest in offering you the opportunity to interact with social networks and other users so that we can improve our offering and make it more interesting and appealing for you as a user. Article 6, para. 1, sentence 1 (f) of the GDPR constitutes the legal grounds for using such plug-ins.
(4) The data is transferred irrespective of whether you have an account with the plug-in provider or whether you are logged into such an account. If you are logged into your account with the plug-in provider, the data we have collected about you will be directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the site, the plug-in provider will store this information in your user account, too, and publicly share it with your contacts. We recommend that you regularly log out after using social networks, but particularly before activating the button so that you can prevent your data from being assigned to your account with the plug-in provider.
(5) You can find further information regarding the purpose and scope of the data collected and its processing performed by the plug-in provider in their privacy policies listed below. These policies also contain further information about the relevant rights and settings for protecting your privacy.
(6) Addresses of the respective plug-in providers and URLs with their data protection notices:
a) Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; http://www.facebook.com/policy; further information about data collection: Facebook has agreed to uphold the EU-US Privacy Shield, https://www.privacyshield.gov/.
b) Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland;
More details Google has agreed to uphold the EU-US Privacy Shield, https://www.privacyshield.gov/.
c) Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND; https://twitter.com/privacy. Twitter has agreed to uphold the EU-US Privacy Shield, https://www.privacyshield.gov/.
d) Xing SE, Dammtorstrasse 30, 20354 Hamburg, Germany; http://www.xing.com/privacy.

2. Integration of YouTube videos

(1) We have integrated YouTube videos into our online offering that are stored on http://www.YouTube.com and can be played directly on our website. They are all integrated in the “privacy-enhanced mode”, i.e. no data about you as a user will be transmitted to YouTube if you do not play the videos. Only if you start to play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence over this data transmission. By integrating YouTube videos, we are pursuing our interest in making our website more interesting and appealing for our visitors and improving how we display content and/or information. Article 6, para. 1, sentence 1 (f) of the GDPR constitutes the legal grounds for using this plug-in.
(2) If you visit the website, YouTube receives information that you have accessed the relevant subpage on our website. The data set out in § 5 of this data protection declaration will also be transferred. This occurs irrespective of whether YouTube provides a user account that you are logged into or whether there is no user account. If you are logged into Google, your data is directly assigned to your account. You need to log out before activating the button if you do not want your data to be assigned to your YouTube profile. YouTube stores your data as usage profiles, which it uses for the purposes of advertising, market research and/or customising its website to specific needs. In particular, the data is used in this way (even for users who are not logged in) to place targeted advertising and to inform other users of the social network about your activity on our website. You have a right to object to these user profiles being created; you must get in touch with YouTube to exercise this right.
(3) You can find further information regarding the purpose and scope of the data collected and its processing performed by YouTube by reading its privacy policy, which also contains further information about your rights and settings for protecting your privacy. YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States, represented by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; https://policies.google.com/privacy. Google also processes your personal data in the United States and has agreed to uphold the EU-US Privacy Shield, https://www.privacyshield.gov/.

3. Integration of Google Maps

(1) We make use of Google Maps on this website. In doing so, we are pursuing our interest in boosting our website’s appeal by showing you interactive maps directly on our website and enabling you to use the maps function with ease. Article 6, para. 1, sentence 1 (f) of the GDPR constitutes the legal grounds for using this plug-in.
(2) If you visit the website, Google receives information that you have accessed the relevant subpage on our website. The data set out in § 5 of this data protection declaration will also be transferred. This occurs irrespective of whether Google provides a user account that you are logged into or whether there is no user account. If you are logged into Google, your data is directly assigned to your account. You need to log out before activating the button if you do not want your data to be assigned to your Google profile. Google stores your data as usage profiles, which it uses for the purposes of advertising, market research and/or customising its website to specific needs. In particular, the data is used in this way (even for users who are not logged in) to place targeted advertising and to inform other users of the social network about your activity on our website. You have a right to object to these user profiles being created; you must get in touch with Google to exercise this right.
(3) You can find further information regarding the purpose and scope of the data collected and its processing performed by the plug-in provider in the provider’s privacy policies. These policies also contain further information about the relevant rights and settings for protecting your privacy: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; https://policies.google.com/privacy. Google also processes your personal data in the United States and has agreed to uphold the EU-US Privacy Shield, https://www.privacyshield.gov/.

4. Integration of Google web fonts

(1) To depict fonts consistently, this site uses web fonts provided by Google Ireland Ltd. “Google”, Gordon House, Barrow Street, Dublin 4, Ireland. When you access a page, your browser loads the necessary web fonts in your browser cache to correctly display text and fonts.
(2) For this purpose, the browser you use needs to connect to Google’s servers. This lets Google know that our website was accessed via your IP address. We use Google web fonts in the interest of ensuring our online offerings are displayed in a consistent and appealing manner. This represents a legitimate interest within the meaning of Article 6, para. 1 (f) of the GDPR. If your browser does not support web fonts, a standard font on your computer will be used.
(3) You can find further information about Google web fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

5. Facebook fan page

(1) Using our Facebook fan page requires personal data to be collected. Some is collected despite the user not being logged in. In particular, metadata is received from Facebook (how frequently, for how long and where was the “Like” button clicked, when are users online, which posts reach fans, which fans interacted with posts and in what way, information about the device used, data about the person (gender, age, place of residence, language and other demographic data)). This personal data is used for statistical purposes. Article 6, para. 1 (f) of the GDPR constitutes the legal grounds for this use.
(2) As a user, you can exercise your rights as per Articles 12 to 23 of the GDPR. Detailed explanations can be found in § 5 (Data subject rights).
(3) Further information about Facebook’s data policy is available at https://www.facebook.com/policy.php.
Contract As at: 7 May 2020