The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this privacy policy.

Using our website is generally possible without providing personal data. Where personal data (such as name, address, or email addresses) is collected on our pages, this is always done on a voluntary basis wherever possible. This data will not be passed on to third parties without your explicit consent.

Please note that data transmission over the internet (e.g. when communicating by email) may have security vulnerabilities. Complete protection of data from access by third parties is not possible.

1. General Information on Data Processing

1. Scope of Processing Personal Data

We process personal data of our users only to the extent necessary to provide a functioning website and our content and services. Personal data is generally only processed with the user's consent. An exception applies where prior consent is not practically obtainable and processing is required by law.

2. Legal Basis for Processing Personal Data

Where we obtain consent from the data subject, Art. 6(1)(a) GDPR serves as the legal basis.

For processing necessary to perform a contract to which the data subject is party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to pre-contractual measures.

Where processing is necessary to fulfil a legal obligation, Art. 6(1)(c) GDPR serves as the legal basis.

Where vital interests of the data subject or another person require processing, Art. 6(1)(d) GDPR serves as the legal basis.

Where processing is necessary to protect a legitimate interest of our company or a third party, and the data subject's interests do not override that interest, Art. 6(1)(f) GDPR serves as the legal basis.

3. Data Deletion and Retention Period

Personal data is deleted or blocked once the purpose for storing it no longer applies. Data may be retained longer if required by European or national law. Data will also be blocked or deleted when a legally prescribed retention period expires, unless further storage is necessary for contract conclusion or performance.

2. Rights of Data Subjects

If your personal data is being processed, you are a data subject under the GDPR and have the following rights against the controller:

1. Right of Access

You may request confirmation from the controller as to whether personal data concerning you is being processed. If so, you may request information including whether your data is transferred to a third country or international organisation, and about appropriate safeguards under Art. 46 GDPR. Specifically, you may request:

1. The purposes for which the data is processed
2. The categories of personal data being processed
3. The recipients or categories of recipients to whom data has been or will be disclosed
4. The planned retention period or the criteria used to determine it
5. The existence of rights to rectification, erasure, restriction of processing, or objection
6. The right to lodge a complaint with a supervisory authority
7. All available information about the origin of the data, if not collected from you directly
8. The existence of automated decision-making including profiling under Art. 22(1) and (4) GDPR, and meaningful information about the logic involved and its significance and consequences

This right may be restricted where it would likely frustrate research or statistical purposes and the restriction is necessary for those purposes.

2. Right to Rectification

You have the right to request correction and/or completion of inaccurate or incomplete personal data. The controller must carry out rectification without delay. This right may be restricted where it would frustrate research or statistical purposes.

3. Right to Restriction of Processing

You may request restriction of processing where:

• You contest the accuracy of the data, for a period allowing the controller to verify it
• Processing is unlawful and you request restriction rather than erasure
• The controller no longer needs the data but you require it for legal claims
• You have objected under Art. 21(1) GDPR and it has not yet been determined whether the controller's legitimate grounds override yours

Where processing has been restricted, such data may only be processed — other than for storage — with your consent, for legal claims, to protect another person's rights, or for reasons of important public interest.

You will be informed before any restriction is lifted. This right may also be restricted where it would frustrate research or statistical purposes.

4. Right to Erasure

a) Obligation to Erase

You may request immediate erasure of your personal data where:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• You object under Art. 21(1) and there are no overriding legitimate grounds, or you object under Art. 21(2) GDPR
• The data was unlawfully processed
• Erasure is required to comply with a legal obligation
• The data was collected in relation to information society services under Art. 8(1) GDPR

b) Notification to Third Parties

Where the controller has made the data public and is obliged to erase it, they shall take reasonable technical measures to inform other controllers processing the data that you have requested erasure of all links, copies, or replications.

c) Exceptions

The right to erasure does not apply where processing is necessary for:

• Exercising the right to freedom of expression and information
• Compliance with a legal obligation or performance of a public interest task
• Public health purposes under Art. 9(2)(h) and (i) and Art. 9(3) GDPR
• Archiving, scientific or historical research, or statistical purposes under Art. 89(1) GDPR, where erasure would frustrate those purposes
• Establishing, exercising, or defending legal claims

5. Right to Notification

Where you exercise your rights to rectification, erasure, or restriction of processing, the controller must notify all recipients to whom your data was disclosed, unless this is impossible or involves disproportionate effort. You have the right to be informed of those recipients.

6. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller without hindrance, where:

• Processing is based on consent under Art. 6(1)(a) or Art. 9(2)(a) GDPR, or on a contract under Art. 6(1)(b) GDPR, and
• Processing is carried out by automated means

You also have the right to have your data transferred directly from one controller to another where technically feasible, provided this does not adversely affect others' rights and freedoms. This right does not apply to processing carried out in the exercise of official authority.

7. Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data based on Art. 6(1)(e) or (f) GDPR, including profiling.

The controller will cease processing unless they demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defence of legal claims.

Where data is processed for direct marketing purposes, you have the right to object at any time, including profiling related to such marketing. After objection, your data will no longer be used for that purpose.

You may also exercise your right to object via automated means using technical specifications in connection with information society services.

You also have the right to object to processing for scientific, historical, or statistical purposes under Art. 89(1) GDPR on grounds relating to your particular situation, unless the restriction would frustrate those purposes.

8. Right to Withdraw Consent

You have the right to withdraw your data protection consent declaration at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

9. Automated Individual Decision-Making Including Profiling

You have the right not to be subject to a decision based solely on automated processing — including profiling — that produces legal effects or significantly affects you, unless the decision:

• Is necessary for entering into or performing a contract
• Is authorised by Union or Member State law with appropriate safeguards
• Is based on your explicit consent

Such decisions may not be based on special categories of data under Art. 9(1) GDPR unless Art. 9(2)(a) or (b) applies and appropriate safeguards are in place.

In the cases listed under (1) and (3), the controller shall implement appropriate safeguards, including at minimum the right to obtain human intervention, to express your point of view, and to contest the decision.

10. Right to Lodge a Complaint

Without prejudice to other administrative or judicial remedies, you have the right to lodge a complaint with a supervisory authority — particularly in the Member State of your residence, place of work, or location of the alleged infringement — if you believe processing of your data violates the GDPR.

The supervisory authority will inform you of the status and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

3. Provision of the Website

Use of Google Fonts

Scope of Processing

The Google Fonts API is designed to limit collection, storage, and use of end-user data to what is necessary for the efficient delivery of fonts. Use of the API is unauthenticated and no cookies are set or logged. Requests are sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. Credentials for font requests are sent separately from google.com and are not linked to authenticated Google services such as Gmail.

The Google Fonts API logs HTTP request details including the timestamp, the requested URL, and HTTP headers (including referrer URL and user agent string) provided with the CSS API. IP addresses are not logged.

Access to logged data is secure. Aggregated usage statistics are used to measure the popularity of font families and are published on the Google Fonts analytics page. For more information, please see Google's privacy policy.

Purpose of Processing

The purpose is to reach a target audience that has already shown initial interest by visiting the page.

Legal Basis

The legal basis is user consent under Art. 6(1)(a) GDPR. By accepting via the cookie banner, the user explicitly agrees to the display.

Retention Period

No cookies are set. Only fonts (1 year) and associated CSS files (1 day) are stored on the user's device.

Right to Withdraw

You may withdraw consent at any time. If rejected via the cookie banner, fonts will not be loaded, which may significantly affect the visual appearance of the website. Withdrawal does not affect the lawfulness of prior processing.

4. Email Contact

Description and Scope

Our website allows contact via the provided email address. In this case, personal data transmitted with the email is stored and used exclusively to process the conversation.

Purpose

In the case of email contact, there is also a legitimate interest in processing the data.

Legal Basis

Where consent exists: Art. 6(1)(a) GDPR. For data transmitted via email: Art. 6(1)(f) GDPR. If the email aims to conclude a contract, Art. 6(1)(b) GDPR additionally applies.

Retention Period

Data is deleted once it is no longer needed for the purpose for which it was collected — i.e. when the conversation is concluded and the matter has been fully resolved. Additional data collected during the submission process is deleted within seven days at the latest.

Right to Object

Users may withdraw consent at any time. If a user objects to storage during an email conversation, that conversation cannot be continued and all stored personal data will be deleted.

5. Hosting

The website is hosted on servers of commissioned service providers. The service provider is Dreher.Media GmbH. Further information is available on the Dreher.Media GmbH company website.

Contact for enquiries: contact@dreher-media.de

6. Plugins Used

Facebook Plugins (Like Button)

Our pages include plugins from the social network Facebook, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook plugins are identified by the Facebook logo or the "Like" button. An overview of Facebook plugins is available at: http://developers.facebook.com/docs/plugins/

When you visit our pages, a direct connection is established between your browser and Facebook's servers via the plugin. Facebook thereby receives the information that you have visited our page with your IP address. If you click the Facebook "Like" button while logged into your Facebook account, you can link the content of our pages to your Facebook profile, allowing Facebook to associate your visit with your account. We have no knowledge of the content of the transmitted data or its use by Facebook. For more information, see Facebook's privacy policy at: http://de-de.facebook.com/policy.php

To prevent Facebook from associating your visit with your account, please log out of your Facebook account.

Instagram

Our pages incorporate functions of the Instagram service, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button, allowing Instagram to associate your visit with your account. We have no knowledge of the content of the transmitted data or its use by Instagram. For more information, see Instagram's privacy policy at: http://instagram.com/about/legal/privacy/

YouTube

Our website uses plugins from YouTube, operated by Google. The operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to YouTube's servers is established and YouTube is informed which of our pages you visited.

If you are logged into your YouTube account, YouTube can associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

For more information on how YouTube handles user data, see Google's privacy policy at: https://www.google.de/intl/de/policies/privacy

‍