Source: https://www.my-across.net/en/legal-notice/privacy-statement
Timestamp: 2019-04-19 23:09:16+00:00

Document:
This section provides information on which personal data we process, for what purpose, on what basis, and for how long.
Further information on our company is available in the legal notice of our website at https://www.across.net/en/legal-notice/.
Where we obtain your consent for processing personal data, point (a) of Art. 6 (1) of the General Data Protection Regulation (GDPR) serves as the legal basis for processing personal data.
Where personal data need to be processed for the performance of a contract with you, point (b) of Art. 6 (1) GDPR serves as the legal basis. The same also applies if the processing is required in order to take steps prior to entering into a contract.
Where personal data need to be processed to comply with a legal obligation to which we are subject, point (c) of Art. 6 (1) GDPR serves as the legal basis.
Where personal data need to be processed in order to protect your vital interests or those of another natural person, point (d) of Art. 6 (1) GDPR serves as the legal basis.
If the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms, point (f) of Art. 6 (1) GDPR serves as the legal basis for the processing.
We generally erase or block the personal data as soon as the purpose of the storage no longer applies. Moreover, data may be stored if provided for by the European or national legislator in regulations under Union law, laws, or other provisions that we as the controller are subject to. The data will also be blocked if a storage period specified in the said standards ends, unless the data need to continue to be stored for the conclusion or performance of a contract.
Where we process personal data on the basis of consent given to the processing of data (point (a) of Art. 6 (1) of the General Data Protection Regulation (GDPR)), the processing will end when you withdraw this consent, unless another legal basis exists for processing the data, which is the case if we, at the time of the withdrawal, are still entitled to process your data for the purpose of the performance of a contract or if the processing of data is required in order to protect our legitimate interests (see below).
Where we, by way of exception, process the data on the basis of our legitimate interests (point (f) of Art. 6 (1) GDPR) according to the previous balancing of interests, we will store these until the legitimate interest no longer exists, the balancing of interests results in a different conclusion, or you effectively object pursuant to Art. 21 GDPR (see highlighted "Note concerning Special Right to Object" under C.).
Where we process the data for the performance of a contract, we will store the data until the contract has been performed and settled and no more claims can be asserted under the contract, i.e. until the end of the limitation period. The general limitation period pursuant to Section 195 of the German Civil Code (BGB) is three (3) years. However, certain claims, such as claims for damages, only expire after 30 years (see Section 197 of the German Civil Code (BGB)). If there is justified reason to assume that this is relevant in the individual case, we will store the personal data for this period. The said limitation periods begin at the end of the year (i.e. on December 31) in which the claim accrues and the creditor learns of the circumstances establishing the claim and of the person of the debtor or should have learned of these if he had not been guilty of gross negligence.
Note: Additionally, we are also subject to statutory retention periods for accounting and tax-related reasons. These require us to retain certain data, which may also include personal data, for a period of six (6) to ten (10) years as accounting evidence. These retention periods have priority over the above-mentioned erasure obligations. The retention periods also begin at the end of the respective year, i.e. on December 31.
supply us with goods or perform services etc. for us as agreed (suppliers).
By way of exception, the personal data processed by us may originate from third parties, e.g. when a person acts on behalf of a third party.
Depending on the category of data in question, we process personal data for the following purposes and in accordance with the indicated legal basis of the General Data Protection Regulation (GDPR).
Data of users of our website are collected and processed by us on a non-personal basis. We cannot map these data to particular persons. The IP address is only processed in anonymized form. If, by way of exception, personal data should be involved, we process these for the purpose of protecting our legitimate interests on the basis of point (f) of Art. 6 (1) GDPR. Our legitimate interests in this meaning are our interest in the security and integrity of our website and of the data on our web server (especially malfunction and error detection as well as tracking of unauthorized access), marketing interests, and interests in statistical surveys (to improve our website, our services, and our offerings). By balancing the various considerations, we have come to the conclusion that the processing of data is necessary to protect the said legitimate interests and are not overridden by your interests or fundamental rights and freedoms, which require the protection of personal data.
Where we process data of potential customers of our services or press representatives, this is only done where you enter and submit these data to us by way of an input field or by e-mail. You are free to provide this information. We will only process these data for the purpose of handling your inquiry to us. The processing of these data freely submitted to us for the purpose of obtaining information about our services takes place in the form of processing prior to entering into a contract pursuant to point (b) of Art. 6 (1) GDPR and/or on the basis of the consent given by you through the transmission pursuant to point (a) of Art. 6 (1) GDPR.
We process our customers' data for contract processing purposes pursuant to point (b) of Art. 6 (1) GDPR and/or on the basis of consent given pursuant to point (a) of Art. 6 (1) GDPR. This also applies if the processing is required in order to take steps prior to entering into a contract (e.g. for the preparation and negotiation of offers).
We process the data of our suppliers and business partners for contract processing purposes pursuant to point (b) of Art. 6 (1) GDPR and/or on the basis of consent given pursuant to point (a) of Art. 6 (1) GDPR. This also applies if the processing is required in order to take steps prior to entering into a contract (e.g. for the preparation and negotiation of offers).
Your personal data will only be forwarded or otherwise transmitted to third parties if this is necessary for the performance of the contract (e.g. to manage and supervise your membership or an order) or for billing purposes (e.g. to handle a payment in connection with the purchase of goods or services), if a legitimate interest in the forwarding/transmission exists, and your interests or fundamental rights and freedoms do not override or with your effective prior consent.
On our website or by sending us a request, you can subscribe to a free newsletter. We only send this newsletter on the basis of the recipients' consent or a statutory permission. If, within the scope of the subscription to the newsletter, its contents are specified in detail, these shall be relevant to the consent given by the users. Apart from this, our newsletters contain information about news, products, events, and subjects related to our business as well as language technology, translation services, and language technologies in general.
The newsletter subscriptions are logged in order to be able to demonstrate the subscription process in accordance with legal requirements. Moreover, the logging serves the prevention of abuse of the services and of the data subject's e-mail address.
The subscription to our newsletter takes place by means of a double opt-in procedure, i.e. upon subscription, you will receive an e-mail requesting you to confirm your subscription. This confirmation is necessary in order to prevent others from subscribing with your e-mail address.
If you purchase goods or services on our website and enter your e-mail address while doing so, the e-mail address may subsequently be used for the delivery of a newsletter. In such a case, the newsletter will only contain direct advertising for similar goods or services of our company.
The data will not be forwarded to any third parties. However, this does not apply if the data need to be forwarded due to a statutory obligation. The data will be used exclusively for the purpose of delivering the newsletter.
The newsletters are delivered via CleverReach, a newsletter delivery service provider of CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany.
The e-mail addresses of our newsletter recipients as well as their other data as described herein are stored on the servers of CleverReach. CleverReach uses this information for the delivery and analysis of the newsletters on our behalf. Moreover, CleverReach may use these data for the purpose of optimizing or improving its own services, e.g. for the technical optimization of the transmission and display of the newsletters or to determine which countries the recipients come from. However, CleverReach does not use the data of our newsletter recipients for the purpose of contacting them directly and does not forward these data to any third parties.
We have concluded an outsourced processing agreement with CleverReach. Under this agreement, CleverReach undertakes to protect the data of our users, to process them on our behalf according to its data protection provisions, and especially not to forward them to any third parties.
The newsletters contain a so-called "web beacon", i.e. a pixel-size file that is queried by the CleverReach server when the newsletter is opened. Within the scope of this query, technical information such as information about the browser and your system as well as your IP address and the access time, is collected. This information is used for the technical improvement of the services on the basis of the technical data, target groups and their reading behavior, access locations (which can be determined with the help of the IP address), and access times. Statistical surveys also include the determination whether the newsletters have been opened, when they were opened, and which links are clicked. Though it is technically possible to map this information to the individual newsletter recipients, neither we nor CleverReach intends to monitor individual users. Rather, the analyses enable us to understand our users' reading habits and adapt our content to their needs or to send different content depending on our users' fields of interest.
In certain cases, we redirect the newsletter recipients to the CleverReach website. For example, our newsletters contain a link with which newsletter recipients can retrieve the newsletters online (e.g. if they are not displayed correctly in the e-mail program). Moreover, newsletter recipients can correct their data (e.g. the e-mail address) retroactively.
In this connection, please note that cookies are used on the CleverReach web pages and personal data are thus processed by CleverReach, its partners, and its service providers. This collection of data is beyond our control.
The collection and processing of the user's e-mail address serves the delivery of the newsletter. We use the e-mail address for advertising purposes.
The collection of other personal data in the course of the subscription process serves the prevention of abuse of the services and of the utilized e-mail address.
The legal basis for processing the data following the user's subscription to the newsletter with the user's consent is point (a) of Art. 6 (1) GDPR.
The legal basis for sending the newsletter due to the sale of goods or services is Section 7 (3) of the German Unfair Competition Act (UWG).
The other personal data collected during the subscription process are processed on the basis of legitimate interests pursuant to point (f) of Art. 6 (1) GDPR. In this context, our legitimate interest consists of the prevention of abuse of our services, web server, mail server, and e-mail address. With respect to the disclosure of the first name and last name, our legitimate interest consists of the personalization of the newsletter and the associated possibility of addressing the recipient directly.
The data will be erased as soon as they are no longer needed for the purpose of their collection. Accordingly, the user's e-mail address will be stored for as long as the newsletter subscription remains active.
The other personal data collected during the subscription process are usually deleted after seven days.
The user can cancel the newsletter subscription informally and free of charge whenever he wishes. A link for this purpose is provided in every newsletter.
This also enables the withdrawal of the consent to the storage of the personal data collected during the subscription process.
As a matter of principle, we only collect and use personal data of the users of our website to the extent required for providing an operable website and our content and services. Usually, personal data of our users are collected and used only after the user gives his consent. An exception applies in cases in which, for valid reasons, it is not possible to obtain prior consent and/or the processing of the data is permitted by statutory regulations.
These data are processed separately from other data. These data are not processed together with other personal data of the user. We cannot map these data to a particular person.
The temporary processing of the data by the system is necessary in order to enable delivery of the content of our website to the user's computer. For this, the user's IP address must be stored for the duration of the session.
The objective of the storage in log files is to ensure the operability of the website. Moreover, we use the data to optimize our offering and the website and to ensure the security of our information technology systems. In this connection, the data are not analyzed for any marketing purposes.
The temporary storage of the data and of the log files takes place on the legal basis of point (f) of Art. 6 (1) GDPR. Our overriding legitimate interest in this data processing lies in the above-mentioned purposes.
The data will be erased as soon as they are no longer needed for the purpose of their collection. Where the data are collected to provide the website, this is the case as soon as the respective session ends. Where data are stored in log files, this is the case after no more than seven days. However, the data may continue to be stored. In this case, the IP addresses of the users will be deleted or anonymized so that the requesting client can no longer be mapped.
The collection of data to provide the website and the storage of data in log files is necessary for the operation of the website. Accordingly, the user cannot object to this. However, the user can stop using the website, thereby preventing the further collection of the said data.
If you want to make the payment via the provider Payplace, the payment will be handled via the company BS PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt/Main, Germany (www.bspayone.com), the provider of the payment service Payplace.
To the extent necessary, we will forward your personal data that are required for processing payments to the provider for the purpose of handling the payment.
On our website http://www.crossmarket.net/, we enable users to register for crossMarket and log in to a protected area with personal data. For this purpose, the data are entered in an input screen, transmitted to us, and stored by us. The data are not forwarded to any third parties.
The data queried in the registration process depend on the type of customer account that you opt for. The data types are indicated in the respective registration dialog. The queried data are mandatory data that we need for your identification, for the performance of the registration, for the creation of a customer account for you, and thus for the services we perform via crossMarket.
In the course of the registration process, the user's consent is obtained for the processing of these data.
The registration of the user enables the creation of a payable customer account on our marketplace crossMarket and thus the conclusion of a service agreement with us. The registration as well as the collection and processing of the queried data are necessary for the performance of this contract.
The legal basis for processing the data is point (b) of Art. 6 (1) GDPR, i.e. the performance of a contract between us and the user.
The data will be erased as soon as they are no longer needed for the purpose of their collection.
This is the case when the data are no longer required for the performance of the contract. Even after the termination of the contract, it may be necessary to store personal data of the contracting partner in order to comply with contractual or statutory obligations, or a legitimate interest may exist pursuant to point (b) of Art. 6 (1) GDPR, e.g. if claims can still be asserted under the contract and/or if, for certain reasons, the user is to be prevented from registering again (blacklisting). Apart from this, please refer to the information above under "Data Erasure and Storage Duration".
You can cancel the registration whenever you wish. You can arrange for this by way of your user account on our website or by sending us a message indicating your request.
Early erasure of the data is possible only if no contractual or statutory obligations make this impossible.
Moreover, you may at any time request the stored data concerning you to be modified.
Our website features contact forms that can be used for contacting us electronically. If you make use of this option, the data entered in the input screen will be transmitted to us and stored by us.
The data types are indicated in the respective contact form. The forms also show which data are mandatory and which ones you can optionally send us additionally.
Alternatively, contact may be established via the provided e-mail address. In this case, the user's personal data that are transmitted in the e-mail will be stored.
In this context, the data will not be forwarded to any third parties. The data will only be used for the purpose of processing the conversation.
The processing of the personal data from the input screen exclusively serves our processing of the contact and your inquiry. In the event of a contact, this also represents the legitimate interest in processing the data.
The other personal data processed during the transmission process serve the prevention of abuse of the contact form and the security of our IT systems.
If consent has been given, point (a) of Art. 6 (1) GDPR is the legal basis for processing the data. Otherwise, our legitimate interest in processing the data pursuant to point (f) of Art. 6 (1) GDPR is the legal basis for the processing.
If the contact or your request aims at the conclusion of a contract, point (b) of Art. 6 (1) GDPR is an additional legal basis for the processing (steps prior to entering into a contract).
For the personal data from the input screen of the contact form and those transmitted by e-mail, this is the case when the respective conversation with you is finished. The conversation will be deemed finished as soon as the circumstances imply that the respective matter has been conclusively clarified.
The personal data collected additionally during the transmission process will be erased after no more than seven days.
You may withdraw any previously granted consent to the processing of personal data or object to the further data processing due to legitimate interests (see "Note concerning Special Right to Object"). In such a case, the conversation cannot be continued.
The withdrawal of consent or the objection to the further processing of the data can be declared by sending us an informal notice (e.g. by e-mail).
In this case, all personal data stored in connection with the contact will be erased.
Where data are processed prior to entering into a contract, it is sufficient for you to expressly tell us that you do not (no longer) intend to enter into a contract.
The details are explained in more detail in the sections concerning the respective third-party providers below.
The use of the analysis tools and/or of the analysis cookies serves the purpose of improving the quality of our website and its content. By means of the analysis cookies, we learn how the website is used and can thus continually optimize our offering.
The legal basis for processing personal data using cookies is point (f) of Art. 6 (1) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the purposes specified above.
Where the user has given his consent, the legal basis for processing personal data using cookies for analysis purposes is point (a) of Art. 6 (1) GDPR.
Some of the cookies we use are deleted from your hard disk after the end of the browser session (so-called "session cookies"). Other cookies remain on your device and enable us or other service providers (third-party providers) to recognize your browser the next time you visit the website (persistent cookies).
Apart from this, we will store the data collected on the basis of a legitimate interest until the legitimate interest no longer exists, the balancing of interest comes to a different conclusion, or you effectively object pursuant to Art. 21 GDPR (see highlighted "Note concerning Special Right to Object" under C.). It is regularly checked (at least once a year) whether the legitimate interest still applies. In particular, our interest no longer exists if the data, due to the passing of time, are no longer sufficiently relevant for us with respect to an analysis and statistics of the website usage, which can be assumed after no more than three years.
Please note that on this website, the "anonymizeIp" code has been added to Google Analytics in order to ensure anonymized logging of IP addresses (so-called "IP masking"). As IP anonymization has been activated on this website, Google will first abbreviate your IP address in Member States of the European Union or other Contracting States to the Agreement on the European Economic Area. The full IP address will only be transmitted to and abbreviated on a Google server in the USA in exceptional cases. By order of the operator of this website, Google will use this information to analyze your use of the website, to compile reports on the website activities, and to render other services related to the use of the website and of the Internet in general for the website operator. The IP addresses sent by your browser within the scope of Google Analytics will not be consolidated with other data of Google.
The use of the analysis tools and/or of the analysis cookies serves the purpose of improving the quality of our website and its content. In this way, we learn how the website is used and can thus continually optimize our offering. The information about your use of this website, which is generated by the cookie, is usually sent to a Google server in the USA and stored there.
The legal basis for processing personal data using cookies is point (f) of Art. 6 (1) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the purposes specified above. As Google Inc. has joined the EU-US Privacy Shield, the transmission of data to the USA is permissible.
You can prevent the storage of cookies by configuring your browser software accordingly; in this case, however, you might not be able to use all functions of this website. Moreover, you can prevent the collection of data concerning your use of the website (including your IP address), which are generated by the cookie, and the processing of these data by Google by downloading and installing the browser plugin that is available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
This website uses Google Maps, a map service of the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), for the presentation of an interactive map. Through the use of Google Maps, information about your use of this website (including your IP address) may be sent to a Google server in the USA and stored there.
Google will transmit the information gained through Maps to third parties if this is required by law or to the extent that third parties process these data on behalf of Google. Google never associates your IP address with other data of Google. Nevertheless, it would be technically possible for Google to identify at least some users on the basis of the data received. It would be possible for Google to process personal data and personality profiles of website users for other purposes beyond our control.
Google Maps is used for the purpose of improving the quality of our website and its content and to provide you with a simple, useful, and well-known map service for orientation, for the display of our company facilities, for planning your trip, etc.
The legal basis for processing personal data using Google Maps is point (f) of Art. 6 (1) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the purposes specified above. As Google Inc. has joined the EU-US Privacy Shield, the transmission of data to the USA is permissible.
Upon registration, you consent to be contacted by Across by agreeing to the following statement: Declaration of Consent Pursuant to Article 7 GDPR *I hereby consent to the processing of my personal data for the purposes specified under https://www.across.net/en/legal-notice/privacy-statement/. I acknowledge that I may declare the withdrawal of this consent to Across Systems GmbH at any time. Upon request of deletion by a webinar registree, Across will inform LogMeIn to delete the registree’s data.
LogMeIn provides a portfolio of cloud-based communication and collaboration, identity and access, and customer engagement and support solutions. The objective and subject of the Processing of Personal Data by LogMeIn, as a Processor, is servicing Customer and providing, supporting, and operating the provision of the Services.
To the extent LogMeIn Processes Personal Data on behalf of Customer, it shall do so in accordance with the requirements of GDPR directly applicable to LogMeIn in the provision of its Services.
Our website also contains so-called "social plugins" – little software programs of the social network Facebook. These are operated exclusively by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). On our website, you can recognize these plugins from the Facebook logo or the word "Like".
When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers in the USA. In this way, the content of the plugin is sent to your browser, which integrates it in the website.
In this way, the information that you have visited our website is forwarded to Facebook. If you are logged in to your personal user account with Facebook while visiting our website, Facebook can map the visit to the website to this account. If you interact with plugins, e.g. by clicking the so-called "Like" button or by entering a comment, this information will be sent directly to Facebook and stored there.
To prevent such data transmission, you need to log out from your Facebook account before you visit our website. In this case, certain data such as your IP address, the time of the click, the browser you use, etc. will still be transmitted to Facebook. The logout merely prevents the mapping of the data to a particular Facebook account.
The use of the Facebook plugin takes place for the purpose of enabling direct feedback ("Like") and direct sharing of our submissions and information ("Share") and thus serves our advertising and marketing interests.
For details on the purpose and scope of the data collection, further processing, and use of the data by Facebook as well as your rights and configuration options in your Facebook account to protect your privacy, please refer directly to the privacy information of Facebook (https://www.facebook.com/privacy/explanation).
If you do not wish Facebook to be able to map the visit to our website to your Facebook account, please log out from your Facebook user account and block the execution of script contents of Facebook in your browser, e.g. using the script blockers of www.noscript.net or www.ghostery.com.
Our website uses the "Tweet" button of the social network Twitter, which is operated by Twitter Inc., 750 Folsom Street, Suite 600, San Francisco, CA 94107, USA ("Twitter"). The "Tweet" button can be recognized from the dark blue bird icon.
When you access one of the web pages of our website that contains such a button, your browser establishes a direct connection to the Google servers. The content of the "Tweet" button is transmitted directly from Twitter to your browser, which integrates it in your Twitter message. Therefore, the scope of data that Twitter collects with the button is beyond our control. As far as we know, only the user's IP address and the URL of the respective web page are transmitted when obtaining the button, but only for the purpose of displaying the button. Interactions such as clicking a "Retweet" button are also forwarded to Twitter.
The use of the Twitter plugin takes place for the purpose of enabling direct feedback and direct sharing of our submissions and information via Twitter ("Tweet") and thus serves our advertising and marketing interests.
If you are a member of Twitter and do not want Twitter to collect data about you via our website and link them to your member data that are stored at Twitter, log out from Twitter before visiting our website.
You can also modify your Twitter privacy settings in the account settings at http://twitter.com/account/settings.
Our website uses the "+1" button of the social network Google Plus, which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). The button can be recognized from the "+1" symbol on white or color background.
When you access one of our web pages that contains such a button, your browser establishes a direct connection to the Google servers. The content of the "+1" button is transmitted directly from Google to your browser, which integrates it in the web page. Therefore, the scope of data that Google collects with the button is beyond our control. According to Google, no personal data are collected unless the button is clicked. Such data (e.g. the IP address) are only collected and processed for members who are logged in.
The use of the Google+ plugin takes place for the purpose of enabling direct feedback and direct sharing of our submissions and information via Google+ and thus serves our advertising and marketing interests.
If you are a member of Google Plus and do not want Google to collect data about you via our website and link them to your member data that are stored at Google, log out from Google Plus before visiting our website.
This website uses the "Share" button of the professional network XING, which is operated by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.
When you access this website, your browser briefly establishes a connection to servers of XING SE ("XING"), with the help of which the XING "Share" button functions (especially the calculation/display of the counter) are provided. XING does not store any personal data about you with respect to the access to this website. In particular, XING does not store any IP addresses. Moreover, your usage behavior is not analyzed by means of cookies in connection with the XING "Share" button.
You can access the latest data protection information on the XING "Share" button and other information at https://www.xing.com/app/share?op=data_protection.
The use of the XING plugin takes place for the purpose of enabling direct feedback and direct sharing of our submissions and information via the XING network and thus serves our advertising and marketing interests.
If you are a member of XING and do not want XING to collect data about you via our website and link them to your member data that are stored at XING, log out from XING before visiting our website.
Our pages contain plugins of the social network LinkedIn of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn"). You can recognize the LinkedIn plugins from the LinkedIn logo or the "Recommend" button on our website. When you visit a website that contains such a button, a direct connection is established between your browser and the LinkedIn server via the plugin, provided that you activated the data transfer by means of click. In this way, LinkedIn receives the information that you have visited our website from your IP address.
If you click the LinkedIn "Recommend" button while you are logged in to your LinkedIn account, you can link the contents of your pages to your LinkedIn profile. In this way, LinkedIn can map the visit to our pages to your user account. Please note that as a site provider, we are not informed about the content of the transmitted data and their use by LinkedIn.
Purpose of the data processing: The use of the LinkedIn plugin takes place for the purpose of enabling direct feedback and direct sharing of our submissions and information via the LinkedIn network and thus serves our advertising and marketing interests.
If you are a member of LinkedIn and do not want LinkedIn to collect data about you via our website and link them to your member data that are stored at LinkedIn, log out from LinkedIn before visiting our website.
Every time a page with an embedded YouTube video is accessed, the user's web browser automatically downloads the respective video from YouTube and plays it.
By means of this procedure, YouTube and Google learn which particular subpage of our website the user visits. If the user is logged in to YouTube at the same time, YouTube will, upon access to a subpage containing a YouTube video, see which particular subpage of our website the user visits. This information is collected by YouTube and Google and mapped to the respective user's YouTube account.
YouTube and Google are informed that the respective user has visited our website whenever the user is logged in to YouTube while accessing our website; this applies regardless of whether or not the respective person clicks a YouTube video. To prevent this information from being transmitted to YouTube and Google, log out from your YouTube account before accessing our website.
The embedding of YouTube videos takes place for the purpose of presenting multimedia content to the user on the website, thereby upgrading and improving the user experience on the website. As this makes our website more attractive, the use of YouTube also serves our marketing and advertising purposes.
It is intended to transmit personal data to the United States of America (USA). The EU Commission has issued an adequacy decision indicating that personal data may be transmitted to the USA if the recipient has joined the EU-US Privacy Shield. Therefore, personal data are only sent to recipients in the USA who have demonstrably joined the EU-US Privacy Shield.
YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA: Provider of an Internet video portal whose videos are embedded in our website YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.
The said companies have joined the EU-US Privacy Shield and have subjected to regulations comparable to the EU data protection level. As a matter of principle, the transmission of data to these companies is therefore permissible. Moreover, where such companies process data on our behalf, outsourced processing agreements have been concluded with these companies to protect the data and our rights to give instructions.
You have the right to obtain from us confirmation, free of charge, as to whether or not personal data concerning you are being processed by us. Where that is the case, you have a right of access to the personal data and further information pursuant to Art. 15 GDPR. For this purpose, you can contact us by mail or e-mail.
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement. For this purpose, you can contact us by mail or e-mail.
You have the right to obtain the erasure of personal data concerning you without undue delay where one of the grounds specified in Art. 17 GDPR applies. For this purpose, you can contact us by mail or e-mail.
You have the right to obtain from us restriction of processing where one of the grounds specified in Art. 18 GDPR applies. For this purpose, you can contact us by mail or e-mail.
If you have asserted the right to rectification, erasure, or restriction of processing vis-à-vis us, we shall communicate this rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
You have a right vis-à-vis us to be notified about these recipients.
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance by us where the grounds specified in Art. 20 GDPR apply. For this purpose, you can contact us by mail or e-mail.
Where we, by way of exception, process personal data on the basis of point (f) of Art. 6 (1) GDPR (i.e. for the purposes of legitimate interests), you have the right to object to our processing of personal data concerning you at any time for reasons relating to your particular situation. If we cannot demonstrate any compelling legitimate grounds for the further processing that override your interests, rights, and freedoms or if we process the respective data for direct marketing purposes, we will no longer process your data (see Art. 21 GDPR). For this purpose, you can contact us by mail or e-mail.
An objection in this meaning may also be a technical procedure that you use, e.g. clear technical information that your web browser sends us ("do not track" notification).
You may revoke any previously granted consent to the collection and use of personal data at any time with effect for the future. For this purpose, you can contact us by mail or e-mail. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless the decision is necessary for entering into, or performance of, a contract between you and us, is authorized by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or is based on your explicit consent.
We do not engage in such automated decision-making.
If the provision of personal data is required by law or contract, we will always indicate this when collecting the data. Some of the data collected by us are required for the conclusion of a contract, namely if we could otherwise not or not sufficiently fulfill our contractual obligation toward you. You are under no obligation to provide personal data. However, in the event of non-provision, we might be unable to perform or offer a service, action, measure, etc. requested by you or conclude a contract with you.
Without prejudice to any other rights, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes data protection law.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 6
 Art. 15
 Art. 17
 Art. 18
 Art. 20
 Art. 6
 Art. 21