Privacy policy
We hereby inform you about the processing of your personal data by us and the claims and rights to which you are entitled under the data protection regulations.
Responsible body for data processing
Herth+Buss Mobility Solutions GmbH & Co. KG
Dieselstrasse 2-4
63150 Heusenstamm
Phone: +49 (0)6104 6080
Fax: +49 (0)6104 608 333
Email address: verwaltung@herthundbuss.com
Entered in the commercial register of Munich District Court: HRB 104599
Data protection officer:
We have appointed the following data protection officer for our company:
Contact: Manfred Schlitt
CAS Datenschutz GmbH & Co. KG
Bürgermeister-Mahr-Str. 14
63179 Obertshausen
Telephone: 06104-6104-9808-0
Email: datenschutz@herthundbuss.com
What rights do you have with regard to your data?
You have the right to obtain information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking, deletion or restriction of the processing of this data. Furthermore, you have the right to data portability, insofar as this is technically feasible. If your data is processed on the basis of a legitimate interest, you have the right to object. In the case of consent, you have the right to revoke your consent, although this will only take effect for the future. If you have any further questions on the subject of data protection, you can contact us at any time at the address given in the imprint. Furthermore, you have the right to lodge a complaint with a supervisory authority.
Sources and data
We process personal data that we receive from you in the context of your use of the internet or social media, or that you have transmitted to us via the contact form by registering in our database.
When using the Internet, data is stored in server log files, which are collected and automatically stored by the provider and mostly transmitted to us by your browser. These include, for example:
- Referrer URL
- Host name of the accessing computer
- Date and time of the server request
- Name of the requested file
- Page from which the file was requested
- Web browser and operating system used
- (Full) IP address of the requesting computer
- Amount of data transferred
We collect the listed data to ensure a smooth connection to the website and to enable users to use our website comfortably. The log file is also used to evaluate system security and stability and for administrative purposes. The legal basis for the temporary storage of data or log files is our legitimate interest pursuant to Art. 6(1)(f) GDPR.
We currently also offer the following social media channels:
When using social media, we can retrieve statistical usage data from the respective social media company. This may include information about page views and activities; views of individual articles, videos, services (e.g. route planner), etc.; comments, shared content, responses, usage rates: men and women, origin in terms of country and city, language. The legal basis for retrieving data when using social media for YouTube and Facebook is your consent in accordance with Art. 6 (1) (a) GDPR. For all other social media channels, the legal basis for retrieving data is our legitimate interest in accordance with Art. 6 (1) (f) GDPR.
We recommend that you assert your rights as a data subject in relation to your social media use vis-à-vis the social media company and use settings to protect your privacy.
You can find further information on Facebook and at: facebook.com/legal/terms/information_about_page_insights_data
For Xing and Kununu, you can find further information at:privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen
For YouTube, you can find further information at: policies.google.com/privacy?hl=en#infocollect
Please note: When using the internet or social media, you only need to provide the personal data that is necessary for use or that we are legally obliged to collect. Without this data, meaningful use may be restricted or impossible.
If you send us enquiries via the contact form or email, your details from the enquiry form or your email, including the contact details you provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. Your name and email address are required. We will not pass on this data without your consent. The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f) GDPR and, if applicable, Art. 6 (1) lit. b) GDPR, provided that your enquiry is aimed at concluding a contract. Your data will be deleted after your enquiry has been processed, provided that there are no legal obligations to retain it. In the case of Art. 6 (1) lit. f) GDPR, you can object to the processing of your personal data at any time.
Newsletter
If you subscribe to our regular newsletter, your details from the enquiry form or your e-mail, including the contact details you provided there, will be stored by us for the purpose of sending the newsletter. Your name and e-mail address are required. We use a processor for the processing of the newsletter, with whom we have concluded a contract for order processing. We will not pass on your data to other third parties without your consent. The legal basis for the processing of the data is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time. You will find the link for this in the footer of the newsletter. Your data will then be deleted from the distribution list.
Purpose of processing and legal basis
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG):
Where necessary, we process your data beyond the actual fulfilment of the contract to protect our legitimate interests or those of third parties (Art. 6(1)(f) GDPR). We collect the data listed above to ensure a smooth connection to the website and to enable users to use our website comfortably. In addition, the log file is used to evaluate system security and stability and for administrative purposes. We also store your data for technical security reasons, in particular to defend against attempts to attack our web server.
Examples in this context:
- Testing and optimisation of procedures for needs analysis and direct customer contact;
- Advertising or market and opinion research, e.g. through the use of cookies, provided you have not objected to the use of your data;
- Assertion of legal claims and defence in legal disputes;
- Ensuring IT security and IT operations;
- Measures for business management and further development of services and products.
In particular, social media companies use your usage behaviour to create so-called usage profiles and use them to place advertisements. For this purpose, cookies are usually stored on your computer. Depending on the social media channels, the legal basis for this is your consent (Art. 6(1)(a) GDPR) or our legitimate interest (Art. 6(1)(f) GDPR).
If you have given us your consent to process personal data for specific purposes (e.g. transfer of data to third parties, evaluation of data for marketing purposes, social media applications), the lawfulness of this processing is based on your consent. Consent that has been given can be revoked at any time.
Please note that the revocation only applies to the future. Processing that took place before the revocation is not affected.
If we process your personal data for the performance of a contract, the processing is based on Art. 6 (1) (b) GDPR. This is the case, for example, for the delivery of goods or the provision of services, or for pre-contractual measures such as enquiries about our products.
If the processing of your personal data is necessary on the basis of a legal obligation, such as the fulfilment of tax obligations, the processing is based on Art. 6 para. 1 lit. c) GDPR.
Transfer of data
Within the company, your data will be received by those departments that need it to fulfil our contractual and legal obligations. Processors employed by us (Art. 28 GDPR) may also receive data for these purposes. These are companies in the categories of IT services, telecommunications, consulting and sales and marketing.
With regard to the transfer of data to recipients outside the company, please note that we only transfer your data if this is permitted or required by law, if you have given your consent or if we are authorised to provide information. Under these conditions, recipients of personal data may include, for example:
- Public authorities and institutions (e.g. public prosecutor's office, police, supervisory authorities) in the event of a legal or official obligation.
Other data recipients may be those entities for which you have given us your consent to transfer data.
Duration of storage
To the extent permitted by law, we process and store your personal data, in particular for as long as this is necessary to fulfil the respective purposes.
Data transfer to third countries
Data will only be transferred to third countries (countries outside the European Economic Area – EEA) if this is necessary for the execution of our social media offerings, if it is required by law or if you have given us your consent. We will inform you separately about the details, if required by law.
When you visit our social media offerings, we would like to point out that when you visit social media offerings, data about you as a user outside the EU may be processed.
Use of cookies
Our website uses cookies, which are stored by the browser on your device and contain certain settings for using the website (e.g. for the current session). Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted when you close your browser. Other cookies remain stored on your device until you delete them or the storage period expires. These cookies enable us to recognise your browser the next time you visit.
Cookies serve to simplify website processes by storing settings (e.g. retaining previously selected options). If personal data is also processed by individual cookies implemented by us, the processing is based on your consent in accordance with Art. 6 (1) (a) GDPR and in order to ensure the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
You can declare a general objection to cookies used for online marketing purposes via the US website www.aboutads.info/choices or via the EU website www.youronlinechoices.com.
You can also deactivate the storage of cookies in your browser settings. Please note that in this case, you may not be able to use all the functions of this online offer.
The cookie policy can be found here: https://herthundbuss.com/en/cookie-policy/
Cavok database
Cavok is a browser-based digital asset management system (DAM) from our service partner Peak-14 (PEAK-14 GmbH, Otto-Röhm-Str. 69, 64293 Darmstadt), which deals with the management of content and data. It is used as an image database on our homepage. You can request access to download image material of our products.
The following data is stored in this access:
- Full company name
- Full name of the contact person
- Email address
- Login name (consisting of customer number_surname, e.g. 1234567_Smith)
Your name and email address are required. We will not disclose this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) (f) GDPR and, if applicable, Art. 6 (1) (b) GDPR, provided that your request is aimed at concluding a contract.
Further information about data processing by our service partner can be found at: www.cavok.pro/de/datenschutz
Google Analytics
On our homepage, we use the web analysis service Google Analytics from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, to evaluate the use of our website, to compile reports on website activity and to provide other services related to website and internet usage. The legal basis is the consent you have given in accordance with Art. 6 (1) (a) GDPR or Art. 49 (1) (a) GDPR.
For this service, a cookie is set on your computer and the usage data stored therein is forwarded to Google and transferred to a server, which is usually located in the USA, where it is stored.
Google uses this information to evaluate the use of our online offering and, in particular, to compile user statistics with pseudonymised usage profiles. Google Analytics is only used with IP anonymisation enabled, which means that the IP address of users within member states of the European Union or in other signatory states to the Agreement on the European Economic Area is truncated. However, the transmission of the full IP address to a Google server in the USA cannot be ruled out. Users can prevent the storage of cookies by refusing to give their consent or by adjusting their browser software settings accordingly. Furthermore, you can prevent the transmission of the data stored by the cookie to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout?hl=en.
Further information can be found in Google's privacy policy: policies.google.com/technologies/ads.
Google marketing services
We use the marketing and remarketing services (hereinafter referred to as "Google Marketing Services") of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), ("Google") on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f) GDPR), we use the marketing and remarketing services (in short, "Google Marketing Services") of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), ("Google").
Google Marketing Services allow us to display advertisements for and on our website in a more targeted manner, so that users are only presented with advertisements that potentially match their interests. For this purpose, cookies may be set from various domains, including google.com or doubleclick.net. This file records which websites the user has visited, what content they are interested in and which offers they have clicked on, as well as technical information about the browser and operating system, referring websites, visit time and other information about the use of the online offer. The IP address of the user is also recorded, whereby we inform you within the scope of Google Analytics that the IP address is truncated within member states of the European Union or in other signatory states to the Agreement on the European Economic Area and only in exceptional cases is it transferred in full to a Google server in the USA and truncated there.
User data is processed pseudonymously within the framework of Google Marketing Services. This means that Google does not store and process the name or email address of users, for example, but processes the relevant data in relation to cookies within pseudonymous user profiles. This does not apply if a user has expressly permitted Google to process the data without this pseudonymisation.
We may integrate third-party advertisements based on the Google marketing service "DoubleClick". DoubleClick uses cookies that enable Google and its partner websites to place advertisements based on users' visits to this website or other websites on the Internet.
Furthermore, we may use "Google Tag Manager" on the basis of your consent in accordance with Article 6(1)(a) to integrate and manage Google's analytics and marketing services on our website.
For more information on Google's use of data for marketing purposes, please visit the overview page: policies.google.com/technologies/ads
Google's privacy policy can be found at policies.google.com/privacy
If you wish to object to interest-based advertising by Google Marketing Services, you can use the settings and opt-out options provided by Google: adssettings.google.com/authenticated
Google Maps
This site uses the Google Maps map service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. This service allows us to embed map material on our website.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google may use Google Fonts for the purpose of uniform font display. When you access Google Maps, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
The use of Google Maps is in the interest of an appealing presentation of our online offerings and to make it easy to find the locations we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://privacy.google.com/businesses/gdprcontrollerterms/ and
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
For more information on how user data is handled, please refer to Google's privacy policy:
https://policies.google.com/privacy?hl=en.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that aims to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780 .
Google Fonts (local hosting)
This site uses Google Fonts, which are provided by Google, for the uniform display of fonts. The Google Fonts are installed locally. There is no connection to Google servers.
Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=en.
Google reCAPTCHA
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to verify whether the data entered on this website (e.g. in a contact form) is entered by a human or by an automated programme . To do this, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. reCAPTCHA evaluates various information for the analysis (e.g. IP address, length of time spent on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.
The storage and analysis of the data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and SPAM. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
For more information about Google reCAPTCHA, please refer to Google's privacy policy and Google's terms of use at the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en .
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when processing data in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
Social plug-ins
We use social plugins on the basis of our legitimate interests, i.e. interest in the analysis, optimisation and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f) GDPR. When you visit our site, the plugin establishes a direct connection between your browser and, for example, the Facebook server. This tells Facebook that you have visited our site with your IP address. If you click on Facebook while logged into your account, you can link the content of our pages to your Facebook profile. This allows your user profile to be associated with your visit to our site. If you are not a member of Facebook, it is still possible for Facebook to find out and store your IP address. According to Facebook, only an anonymised IP address is stored in the United Kingdom. If you do not want Facebook to collect data via this online service, you must log out of Facebook and delete your cookies before using our online service.
As the provider of the site, we have no knowledge of the content of the data transmitted or its use by Facebook. For more information, please see Facebook's privacy policy at de-de.facebook.com/policy.php.
In addition to the Facebook plug-in, we use plug-ins from Xing and Kununu. The above applies.
As the provider of this website, we have no knowledge of the content of the data transmitted or its use by NEW WORK SE. Further information can be found in the privacy policy of Xing and Kununu at privacy.xing.com/en/privacy-policy
Meta Pixel (formerly Facebook Pixel)
This website uses Meta's visitor action pixel for conversion measurement. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Meta, the data collected is also transferred to the USA and other third countries.
This allows the behaviour of page visitors to be tracked after they have been redirected to the provider's website by clicking on a Meta advertisement. This allows the effectiveness of Meta advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimised.
The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Meta, so that a connection to the respective user profile on Facebook or Instagram is possible and Meta can use the data for its own advertising purposes in accordance with the Meta Data Use Policy (https://de-de.facebook.com/about/privacy/). This enables Meta to place advertisements on Facebook or Instagram pages and other advertising channels. As the website operator, we have no influence over this use of the data.
The use of this service is based on your consent in accordance with Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. Consent can be revoked at any time.
We use the extended matching function within Meta Pixel.
Advanced matching enables us to transmit various types of data (e.g. place of residence, state, postcode, hashed email addresses, names, gender, date of birth or telephone number) of our customers and prospects, which we collect via our website, to Meta. This allows us to tailor our advertising campaigns on Facebook and Instagram even more precisely to people who are interested in our offers. In addition, enhanced matching improves the attribution of website conversions and expands custom audiences.
Insofar as personal data is collected on our website using the tool described here and forwarded to Meta, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is limited exclusively to the collection of data and its transfer to Meta. The processing by Meta after the transfer is not part of the joint responsibility. Our joint obligations have been set out in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum.
According to this agreement, we are responsible for providing data protection information when using the Meta tool and for the data protection-compliant implementation of the tool on our website. Meta is responsible for the data security of Meta products. You can assert your rights as a data subject (e.g. requests for information) regarding the data processed by Facebook or Instagram directly with Meta. If you assert your rights as a data subject with us, we are obliged to forward them to Meta.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381. You can find further information on the protection of your privacy in Meta's privacy policy: https://de-de.facebook.com/about/privacy/.
You can also deactivate the "Custom Audiences" remarketing function in the ad settings section at: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook.
If you do not have a Facebook or Instagram account, you can deactivate usage-based advertising from Meta on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when processing data in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452
YouTube
Based on your consent in accordance with Art. 6 (1) (a) GDPR, we embed YouTube videos in our online offering that are stored on YouTube and can be played directly from our homepage. The integration (plug-in) serves to make our websites more appealing.
YouTube is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you visit a page on our website that contains such a plug-in, a connection to the YouTube servers is established and the plug-in is displayed. This tells the YouTube server that you have visited our website. If you are logged in as a member of YouTube, YouTube assigns this information to your personal user account. When using the plugin, e.g. clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your YouTube user account and other user accounts of YouTube LLC and Google Inc. before using our website and deleting the corresponding cookies of the companies.
The data collected by the cookies is usually sent to a server in the USA and stored there. In the event of data being transferred to the USA, the data transfer is based on the existence of standard contractual clauses.
Further information on data processing and information on data protection by YouTube (Google) can be found at google.co.uk/intl/en/policies/privacy.
Userlike Chat
With your consent in accordance with Art. 6 (1) (a) GDPR, we use the chat software of the company Userlike UG (limited liability), Probsteigasse 44-46, 50670 Cologne, Germany.
You can use the chat like a contact form to chat with our employees in near real time. When you start the chat, the following personal data is collected:
- Date and time of the call,
- Browser type/version,
- IP address,
- Operating system used,
- URL of the previously visited website,
- amount of data sent.
- And if provided: first name, surname, and email address.
Depending on the course of the conversation with our employees, further personal data may be collected in the chat, which you enter yourself. The type of data collected depends largely on your enquiry or the problem you describe to us. All this data is processed in order to provide you with a fast and efficient means of contact and thus improve our customer service.
When you visit our homepage, the chat widget is loaded from AWS Cloudfront in the form of a JavaScript file. Technically, the chat widget represents the source code that is executed on your computer and enables the chat.
The storage of chat data also serves the purpose of ensuring the security of our information technology systems.
Further information can be found here: userlike.com/terms#privacy-policy
Gravatar
This site uses the Gravatar avatar service, operated by Automattic Inc., 132 Hawthorne Street, San Francisco, CA 94107, USA ("Automattic"), to display user images ("avatars") in comments. When a comment is submitted, the email address provided by the user is transmitted to Gravatar in order to display any user image associated with this email address within the comments. If the email address is linked to a user image, Gravatar transmits this to us so that it can be integrated into the comments on our website. Gravatar may store the user's IP address by displaying the user images. If you do not want a user image linked to your email address at Gravatar to appear in the comments on our website, you can use an email address that is not stored at Gravatar to comment. Further information on the collection and use of data by Gravatar can be found in Gravatar's privacy policy at https://automattic.com/privacy/.
Font Awesome (local hosting)
This site uses Font Awesome for the uniform display of fonts. Font Awesome is installed locally. There is no connection to Fonticons, Inc. servers.
Further information on Font Awesome can be found in the Font Awesome privacy policy at: https://fontawesome.com/privacy.
Friendly Captcha
We use Friendly Captcha (hereinafter "Friendly Captcha") on this website. The provider is Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany.
Friendly Captcha is used to check whether the data entered on this website (e.g. in a contact form) is entered by a human or by an automated programme. To do this, Friendly Captcha analyses the behaviour of the website visitor based on various characteristics. Friendly Captcha evaluates various information for analysis (e.g. anonymised IP address, referrer, visit time, etc.). Further information can be found at: https://friendlycaptcha.com/legal/privacy-end-users/.
The storage and analysis of the data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and SPAM. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
CleanTalk
This website uses anti-spam plugins from CleanTalk. The provider is CleanTalk Inc, 711 S Carson Street, suite 4, Carson City, NV, 89701, USA (hereinafter "CleanTalk").
CleanTalk serves to protect our website from spam activities (e.g. preventing unwanted advertising, unwanted messages or comments). For this purpose, CleanTalk collects various personal data such as IP address, email address, nickname of the message sender, information about the JavaScript technology in the sender's browser and the texts entered.
This information is usually transferred to a CleanTalk server in the USA and stored there.
For security reasons and to protect against spam, your data is processed in the CleanTalk Cloud Service and stored in log files for a maximum of 31 days. After this period, the data is completely deleted.
The use of CleanTalk is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from spam activities as effectively as possible. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device within the meaning of the TTDSG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:https://cleantalk.org/my/session?back_url=profile#scc_agreement.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that aims to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt00000008SzYAAU&status=Active
External links
Where links to other websites are provided, we have no influence or control over the linked content and the data protection provisions there. We recommend that you check the data protection declarations of these websites when you visit them in order to determine whether and to what extent personal data is collected, processed, used or made available to third parties.
Automated decision-making in individual cases
Fully automated decision-making in accordance with Art. 22 GDPR does not take place. Should we use these procedures in individual cases, we will inform you separately if this is required by law.
Data use for profiling (scoring)
We do not process your data with the aim of evaluating certain personal aspects (profiling). In the context of data collection by tracking services, your data is used to evaluate your usage behaviour and possibly to create movement profiles.
Bunny.net CDN
We use the Bunny.net content delivery network. The provider is BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia (hereinafter "Bunny.net CDN").
Bunny.net CDN is a globally distributed content delivery network. Technically, the transfer of information between your browser and our website is routed via the content delivery network. This enables us to increase the global accessibility and performance of our website. The CDN records the IP address, but this is anonymised. In addition, the CDN collects personal data if this is entered by the user themselves (e.g. by submitting a contact form on the website).
The use of Bunny.net CDN is based on our legitimate interest in providing our website as error-free and secure as possible (Art. 6(1)(f) GDPR).
Further information on Bunny.net CDN can be found here: https://bunny.net/privacy/.
Order processing
We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.