Data Protection

We take the protection of your data seriously and generally strive to collect and store as little data as possible. Nevertheless, a certain amount of storage and evaluation of user data is necessary to ensure and improve the operation of this website. The use of this website is generally possible without the need to provide any personal data. Furthermore, data cannot be assigned to a specific person unless you provide us with your name, for instance, in an email or through one of our forms.

If you use one of the services offered on this website, this will regularly involve the collection, processing, and storage of personal data, such as your name, address, email address, or telephone number. This collection, processing, and storage is generally carried out either based on your prior explicit consent or a corresponding legal authorisation, and in accordance with the provisions of the European General Data Protection Regulation and the German Federal Data Protection Act. We would like to inform you here about the nature, scope, and purpose of the data we collect, process, store, and use through this website, as well as your rights in this context.

We use SSL transport encryption on this site. This serves, among other things, to protect confidential content, such as enquiries to us. You can recognise that the connection is indeed encrypted by the address bar of your browser, which always begins with “https://” and confirms the existing transport encryption with a green padlock symbol.

Data protection law has specific terminology, which we also use in this privacy policy in accordance with the legal definitions of the European General Data Protection Regulation. Therefore, in this privacy policy, the term

• “personal data”

all information relating to an identified or identifiable natural person (“data subject”);

• “data subject”

any identified or identifiable natural person whose personal data is processed; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more specific characteristics that are an expression of the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;

• “Processing”

any operation or set of operations performed with or without the help of automated procedures in relation to personal data such as the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

• “Restriction of Processing”

the marking of stored personal data with the aim of restricting their future processing;

• “Profiling”

any form of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects regarding work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or changes of location of that natural person; as a company committed to data protection, we refrain from any form of profiling;

• “Pseudonymisation”

the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures that ensure that the personal data is not assigned to an identified or identifiable natural person;

• “File system”

any structured collection of personal data that is accessible according to specific criteria, regardless of whether this collection is managed centrally, decentrally, or organised according to functional or geographical aspects;

• “Controller” (or: “controller for processing”)

the natural or legal person, authority, institution, or other entity that alone or jointly with others determines the purposes and means of the processing of personal data; if the purposes and means of such processing are laid down by Union law or the law of the Member States, the controller or the specific criteria for their designation may be provided for by Union law or the law of the Member States;

• “Processor”

a natural or legal person, authority, institution or other entity that processes personal data on behalf of the controller;

• “Recipient”

a natural or legal person, authority, institution, or other entity to whom personal data is disclosed, regardless of whether it is a third party or not. Authorities that may receive personal data in the context of a specific investigative task under Union law or the law of the Member States are not considered recipients; the processing of this data by the aforementioned authorities is carried out in accordance with the applicable data protection regulations in line with the purposes of processing;

• “Third”

a natural or legal person, authority, institution or other entity, other than the data subject, the controller, the processor, and the persons who are authorised to process the personal data under the direct responsibility of the controller or the processor;

• “Consent”

a declaration made voluntarily by the data subject for a specific case, in an informed manner and unequivocally, in the form of a statement or another clear confirmatory action, by which the data subject indicates that they consent to the processing of their personal data;

• “Breach of personal data protection”

a breach of security that leads to the destruction, loss, or alteration, whether intentional or unlawful, or to the unauthorised disclosure of or unauthorised access to personal data that has been transmitted, stored, or otherwise processed;

• “cross-border processing”

the processing of personal data that takes place in the context of the activities of establishments of a controller or a processor in the Union in more than one Member State, where the controller or processor is established in more than one Member State, or
the processing of personal data that takes place in the context of the activities of a single establishment of a controller or a processor in the Union, which has or may have significant effects on data subjects in more than one Member State;

• “significant and substantiated objection”

a objection regarding whether there is a breach of this regulation or not, or whether the intended measure is in accordance with this regulation concerning the controller or the processor, whereby this objection clearly outlines the extent of the risks posed by the draft decision in relation to the fundamental rights and freedoms of the affected individuals and, where applicable, the free movement of personal data within the Union.

The processing of personal data by us is carried out on the basis of the provisions of the European General Data Protection Regulation and the German Federal Data Protection Act:

• For processing operations where we obtain consent for a specific processing purpose, the processing is based on Article 6(1)(a) of the General Data Protection Regulation.
• Insofar as the processing of personal data is necessary for the fulfilment of a contract to which the data subject is a party (such as in the case of the delivery of goods or the provision of other services or benefits) or for the performance of pre-contractual measures (e.g. in the case of enquiries about our products or services), the processing is based on Article 6(1)(b) of the General Data Protection Regulation.

• Insofar as the processing of personal data is necessary due to a legal obligation applicable to us, such as for the fulfilment of tax obligations or commercial retention requirements, the processing is based on Article 6(1)(c) of the General Data Protection Regulation.

• Insofar as the processing of personal data is exceptionally necessary to protect vital interests of the data subject or another natural person, the processing would be based on Article 6(1)(d) of the General Data Protection Regulation.

• The processing of personal data that is necessary for the safeguarding of a legitimate interest of our company or a third party is based on Article 6(1)(f) of the General Data Protection Regulation, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, outweigh this. Such a legitimate interest also includes the conduct of our business activities for the benefit of the well-being of all our employees and our shareholders. The provision of personal data may be required for legal (e.g. commercial or tax) reasons or may be necessary for the performance of a contract. If such data (e.g. information about a contractual partner) is not made available to us for processing, we may not be able to conclude a corresponding contract.

On our internet server, as on other web servers, a log file is maintained. This log file stores records that include

1. the IP address you are using to browse the internet and the internet service provider you are using,
2. the date and time of each access to our website,
3. the exact URL of each webpage you visit,
4. the data you have requested from the server,
5. general information about the web browser you used to access the website (particularly the browser type and version) and operating system, as well as
6. partially the website from which you came to our internet offering (the so-called “referrer”)

are recorded. We use this information

• for the correct delivery of the respective webpage,
• for statistical purposes,
• for further improvement of our internet offering and optimisation of the advertising contained therein,
• to ensure the long-term functionality and integrity of our information technology systems, including risk prevention in the event of attacks on our information technology systems, as well as
• in the event of an attack on our information technology systems to provide the necessary information for law enforcement authorities

and used.

This data is collected anonymously by us and stored separately from any personal data provided to us by an affected individual. The storage of the IP address is done in a form truncated to the last octet.

In accordance with legal provisions, we can

• provide user-friendly services that would not be possible without the setting of cookies,
• for advertising purposes, for market research, as well as
• to improve our services and online offerings

evaluate usage profiles under a pseudonym, but only insofar as you have not exercised your legal right to object to this use of your data. Part of our services requires us to use so-called cookies.

Cookies are small amounts of data (text files) that your internet browser stores on your computer. Cookies can store information about your visit to our website, allowing us to recognise your browser and distinguish it from those of other affected individuals. Most browsers are set by default to accept cookies. However, you can reconfigure your browser at any time to refuse cookies or to prompt you for confirmation beforehand. If you refuse cookies, this may result in not all offers and functions of this website working smoothly or being usable for you.

Consent dialogue

On your first visit we ask which optional services you want to allow (analytics and statistics, advertising, external media). For this we use our own consent management, which runs on our server; no external provider is involved. Optional services are only loaded after you have given your consent.

We store your choice for 180 days in the local storage of your browser (entry “rw_consent_v2”): the decision for each service, the time, the version of our settings and a random receipt ID. To be able to demonstrate consent, we store the same details on our server for a maximum of 180 days, without your IP address and without information about your browser. The legal basis is § 25 para. 2 no. 2 TDDDG and Art. 6 para. 1 lit. c GDPR in conjunction with Art. 7 para. 1 GDPR.

You can change or withdraw your choice at any time via the link “Cookie settings” at the bottom of every page.

Further details regarding the use of cookies on this website – including existing opt-out options – can be found in this privacy policy in the sections

• on internal visitor statistics and
• online advertising

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and allow for an analysis of your use of the website. The information generated by the cookie regarding your use of this website is usually transmitted to a server of Google in the USA and stored there. In the event that IP anonymisation is activated on this website, your IP address will, however, be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a server of Google in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide further services related to website usage and internet usage to the website operator.

(2) The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data from Google.

(3) You can prevent the storage of cookies by adjusting the settings of your browser software; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of these data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

(4) This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are truncated before further processing, thus excluding any personal reference. To the extent that the data collected about you can be related to a person, this will be immediately excluded and the personal data will be promptly deleted.

(5) We use Google Analytics to analyse and regularly improve the use of our website. Through the statistics obtained, we can improve our offerings and make them more interesting for you as a user. For the exceptional cases in which personal data are transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/ps/program-overview. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR.

(6) Information from the third party: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/en.html, overview of data protection: http://www.google.com/intl/en/analytics/learn/privacy.html, as well as the privacy policy: https://policies.google.com/privacy?hl=en&gl=en.

[(7) This website also uses Google Analytics for cross-device analysis of visitor flows, which is conducted via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My Data”, “Personal Data”.]

Piwik PRO

(1) We also use Piwik PRO, a web analytics service provided by Piwik PRO SA, ul. Św. Antoniego 2/4, 50-073 Wrocław, Poland (“Piwik PRO”). We use Piwik PRO to analyse how our website is used, for example which pages are viewed and whether contact or application forms are submitted or telephone numbers and email addresses are clicked.

(2) Piwik PRO is only loaded after you have agreed to the service Piwik PRO (category “Analytics / statistics”) in our consent dialogue. Without your consent, no analysis with Piwik PRO takes place.

(3) For this purpose Piwik PRO sets cookies in your browser: “_pk_id” (recognising your browser, stored for 13 months), “_pk_ses” (grouping the page views of one visit, 30 minutes) and “ppms_privacy” (storing your consent status with Piwik PRO, 12 months). The data processed includes in particular the pages viewed, the time and duration of the visit, the page visited previously, information about your browser, operating system and device, and your IP address.

(4) Piwik PRO processes this data on our behalf.

(5) The legal basis is your consent pursuant to § 25 para. 1 TDDDG and Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future via the link “Cookie settings” at the bottom of every page.

(6) Further information on data protection at Piwik PRO: https://piwik.pro/privacy-policy/.

This website uses the Tag Manager of the company Google, Inc., which allows us to manage various website tags, i.e. small code snippets, through a single interface. The Google tool Manager is solely for the implementation of tags from various providers, does not set any cookies itself, and does not collect any personal data. To the extent that such data collection occurs through the tags implemented by the Google Tag Manager, we will specifically point this out in this privacy policy in the section regarding the respective Tag provider.

1. Use of Google AdWords Conversion

(1) We utilise the services of Google AdWords to draw attention to our attractive offers on external websites using advertising materials (so-called Google AdWords). We can determine the success of individual advertising measures in relation to the data from the advertising campaigns. This allows us to display ads that are of interest to you, make our website more appealing to you, and achieve a fair calculation of advertising costs.

(2) These advertising materials are delivered by Google via so-called ‘Ad Servers’. For this purpose, we use Ad Server cookies, which allow certain parameters for measuring success, such as ad impressions or clicks by users, to be tracked. If you arrive at our website via a Google ad, a cookie will be stored on your PC by Google AdWords. These cookies typically expire after 30 days and are not intended to identify you personally. The following analytical values are usually stored with this cookie: the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions), and opt-out information (indicating that the user no longer wishes to be addressed).

(3) These cookies enable Google to recognise your internet browser. If a user visits certain pages of an AdWords customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to that page. Each AdWords customer is assigned a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. We do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can identify which of the advertising measures employed are particularly effective. We do not receive any further data from the use of the advertising materials, and in particular, we cannot identify users based on this information.

(4) Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence over the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our current knowledge: By integrating AdWords Conversion, Google receives the information that you have accessed the relevant part of our online presence or clicked on an ad from us. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will learn and store your IP address.

(5) You can prevent participation in this tracking procedure in various ways: a) by adjusting your browser software settings, in particular, suppressing third-party cookies will result in you not receiving ads from third parties; b) by disabling cookies for conversion tracking by configuring your browser to block cookies from the domain ‘www.googleadservices.com’, https://www.google.de/settings/ads, noting that this setting will be deleted when you delete your cookies; c) by disabling interest-based ads from providers that are part of the self-regulation campaign ‘About Ads’ via the link http://www.aboutads.info/choices, noting that this setting will be deleted when you delete your cookies; d) by permanently disabling in your browsers Firefox, Internet Explorer, or Google Chrome at the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case, you may not be able to use all features of this offer to their full extent.

(6) The legal basis for processing your data is Art. 6 para. 1 sentence 1 lit. f GDPR. Further information on data protection at Google can be found here: http://www.google.com/intl/en/policies/privacy and https://services.google.com/sitestats/en.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, https://www.dataprivacyframework.gov/s/.

2. Remarketing

In addition to AdWords Conversion, we use the Google Remarketing application. This is a procedure through which we would like to address you again. Through this application, our advertisements can be displayed to you during your further internet use after visiting our website. This is done using cookies stored in your browser, through which your usage behaviour when visiting various websites is recorded and evaluated by Google. Thus, Google can determine your previous visit to our website. According to Google, there is no merging of the data collected in the context of remarketing with your personal data that may be stored by Google. In particular, according to Google, pseudonymisation is employed in remarketing.

3. DoubleClick by Google

(1) This website also uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to serve relevant ads to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Through a cookie ID, Google records which ads are served in which browser and can thus prevent them from being displayed multiple times. Furthermore, DoubleClick can use cookie IDs to record so-called conversions related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser’s website using the same browser and makes a purchase. According to Google, DoubleClick cookies do not contain any personal information.

(2) Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence over the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our current knowledge: By integrating DoubleClick, Google receives the information that you have accessed the relevant part of our online presence or clicked on an ad from us. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will learn and store your IP address.

(3) You can prevent participation in this tracking procedure in various ways: a) by adjusting your browser software settings, in particular, suppressing third-party cookies will result in you not receiving ads from third parties; b) by disabling cookies for conversion tracking by configuring your browser to block cookies from the domain ‘www.googleadservices.com’, https://www.google.de/settings/ads, noting that this setting will be deleted when you delete your cookies; c) by disabling interest-based ads from providers that are part of the self-regulation campaign ‘About Ads’ via the link http://www.aboutads.info/choices, noting that this setting will be deleted when you delete your cookies; d) by permanently disabling in your browsers Firefox, Internet Explorer, or Google Chrome at the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case, you may not be able to use all features of this offer to their full extent.

(4) The legal basis for processing your data is Art. 6 para. 1 sentence 1 lit. f GDPR. Further information on DoubleClick by Google can be found at https://www.google.de/doubleclick and http://support.google.com/adsense/answer/2839090, as well as on data protection at Google in general: https://www.google.de/intl/en/policies/privacy. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield.

4. Meta Pixel (Facebook Custom Audiences)

(1) We use the so-called Meta Pixel of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”) on our website, provided you have given us your consent.

(2) The pixel enables us to track the behaviour of users after they have seen or clicked on a Facebook or Instagram ad. This allows us to record the effectiveness of the advertising for statistical and market research purposes and to optimise future advertising measures. In addition, the Meta Pixel enables interest-based advertising on Facebook, Instagram and in the Meta Audience Network (“Custom Audiences”).

(3) Through the Meta Pixel, your browser automatically establishes a direct connection to Meta’s servers. We have no influence over the scope and further use of the data collected by Meta through the use of this tool. Meta may link this information to your Facebook or Instagram account and also use it for its own purposes (for example to create usage profiles).

(4) Legal basis: the Meta Pixel is only used with your express consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. You can withdraw this consent at any time via our consent manager.

(5) Data transfer to third countries: data processing by Meta may also take place in the USA. Meta relies on the EU Standard Contractual Clauses (SCC) as appropriate safeguards within the meaning of the GDPR.

Further information on the processing of your data by Meta can be found at: https://www.facebook.com/about/privacy/

5. Use of Bing Ads

We use the service “Bing Ads” (ads.microsoft.com), provided and operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”), to draw attention to our attractive offers with the help of advertising materials on external websites. This allows us to determine, in relation to the data from the advertising campaigns, how successful the individual advertising measures are. Our interest is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

If you reach our website via a “Bing Ads” advertisement, a cookie will be stored in your web browser by Microsoft. These cookies are used to measure the success of the advertisements, specifically to determine whether someone who clicked on the advertisement and thus reached our site has reached a previously defined target page (“Conversion Site”). Furthermore, Microsoft collects and processes information through the cookie for the creation and use of pseudonymous usage profiles, which serve to analyse user behaviour and display advertisements. We do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Microsoft. Based on these evaluations, we can identify which of the advertising measures used are particularly effective. We do not receive further data from the use of the advertising materials, and in particular, we cannot identify users based on this information.

You can prevent participation in this tracking procedure in various ways:

a) by adjusting the settings of your browser software, in particular, suppressing third-party cookies will result in you not receiving advertisements from third parties; or

b) by your objection, which you can declare in the settings at Microsoft.

The legal basis for processing your data is Art. 6 para. 1 sentence 1 lit. f GDPR. Further information on data protection at Bing Ads and Microsoft can be found here: https://privacy.microsoft.com/de-de/privacystatement. Microsoft has submitted to the EU-US Privacy Shield, https://www.dataprivacyframework.gov/s/.

6. Use of ChatGPT Ads

We display advertisements within the ChatGPT service. The provider is OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (“OpenAI”). OpenAI is solely responsible for the display of advertisements within ChatGPT and the processing of data of ChatGPT users that occurs in this context. Therefore, we have no influence over the processing of your personal data by OpenAI.

To measure the effectiveness of our campaigns and to attribute conversions – defined by us as events such as page views by you, submission of the contact form in our dealer search, and customer conversions – to the displayed advertisements, we additionally use the pixel provided by OpenAI and the Conversion API on our website. We also receive reporting data from OpenAI, particularly reports, analyses, metrics, and insights related to the conversion tools that we use for measuring, analysing, optimising, and reporting on the conversion tools and services.

The OpenAI Pixel and the OpenAI Conversion API will only be loaded and executed if and after you have given your consent via our consent management system. Until then, and in the event that you do not provide consent, these will remain blocked.

The legal basis for storing information on your end device and for accessing information already stored there is your consent under § 25 para. 1 TDDDG. The legal basis for the subsequent processing of your personal data, including transmission to OpenAI, is your consent under Art. 6 para. 1 lit. a GDPR. Consent is voluntary; if you do not provide it, you will not incur any disadvantages when using our website, and the processing explained here will not take place.

As part of the processing, the following data will be processed:

• the designation of the triggered conversion event,
• the time of the event (timestamp),
• the URL of the page where the event was triggered, as well as the previously visited page (Referrer),
• the campaign or click identifier that was passed from the advertisement when our website was accessed,
• the conversion value and the currency,
• an order or transaction identifier as well as an event ID to avoid double counting,
• Your IP address,
• Information about your browser and device (including User-Agent, language settings, screen resolution),
• the identifier assigned within the framework of the conversion tag.

If you have consented, we will additionally transmit the following details or events that you provided in the order process/request form to OpenAI:

• Event type,
• Timestamp,
• the hashed contact details
• possibly an order value.

This information is already converted in your browser using the SHA-256 procedure into checksums (“hash values”) before being transmitted. We do not transmit the underlying clear data to OpenAI. OpenAI matches the hash values with the corresponding values of registered user accounts at OpenAI to attribute a conversion to a previously displayed advertisement.

We process the data to attribute conversions to our ChatGPT advertising campaigns, to measure the effectiveness of our advertisements, and to evaluate and optimise our campaigns. OpenAI further processes the transmitted data for its own purposes in accordance with the terms applicable to the advertising services, particularly for the provision of reports as well as for measuring, optimising, and improving the advertising services.

No automated decision-making in individual cases, including profiling with legal effect or similarly significant impairment within the meaning of Art. 22 (1) GDPR takes place.

For information on data transfer to third countries during processing by OpenAI under its own responsibility, please refer to the privacy information of the provider linked at the end of this section.

The conversion data we store ourselves is retained only as long as necessary for the stated purposes or as required by legal retention obligations; thereafter, it will be deleted or anonymised. The retention period at OpenAI is determined by OpenAI’s specifications and is based on the purpose of processing, the nature and sensitivity of the data, the existing risk, and legal obligations.

You can withdraw your consent at any time with effect for the future. The legality of the processing carried out until the withdrawal remains unaffected; data already transmitted to OpenAI is not covered by the withdrawal. You can make the withdrawal through the settings of our consent management system.

For further information on processing by OpenAI and on exercising your rights against OpenAI, please visit https://openai.com/de-DE/policies/eu-privacy-policy/ as well as https://help.openai.com/de-de/articles/20001047-ads-in-chatgpt

As far as you send us an email or contact us via a contact form, the personal data voluntarily provided to us will be automatically stored and, if necessary, processed for the purpose of processing or contacting you. This includes – as far as you have provided – in particular the name you have specified, your address or email address, your telephone number, as well as any other information you have voluntarily provided. When contacting us via a form provided on this website, the IP address you used will also be stored. In principle, we only use the personal data collected in this context to the extent necessary to process your enquiries and orders. Under no circumstances will this data be passed on to third parties, unless we are legally obliged to do so.

As far as you leave a comment on one of our articles, the data collected in this process will be stored. This includes the name you provide (which can also be a pseudonym), the email address you provide, as well as the IP address you use. The storage of this data, particularly the IP address, is carried out

• for the purpose of spam protection and
• for the purposes of tracking and for our protection in cases where comments are submitted that violate the rights of third parties or contain other unlawful content.

The transfer of the personal data collected in this way to third parties will only occur if it serves the legal defence of the data controller or any of our employees or assistants, if it is necessary to safeguard our rights against an abusive use of our web service, or if we are legally obliged to do so. If you do not agree with the collection of this data, please do not use the comment function!

If you use the commenting and sharing functions to social networks (such as Twitter, Facebook or Google+) offered on this website, visitor data will be collected by these networks, over which we have no influence regarding transmission, processing, storage, and use. You can avoid this by not using these functions.

If you subscribe to a newsletter offered by us on this website, you must provide certain personal data, particularly your email address, through the corresponding input form.

For legal reasons, we use the “Double-Opt-In” procedure for newsletter registration, which involves an automatically processed confirmation email sent to the email address you provided. This allows us to verify whether the owner of the email address you provided has indeed authorised the receipt of the newsletter.

The personal data collected during the newsletter registration will be used exclusively

• for sending the newsletters and
• for sending information and enquiries via email that are necessary or required for the operation or further development of the newsletter service.

A newsletter subscription can be cancelled at any time, and consent to the storage of personal data can be revoked at any time. This cancellation or revocation can be done via the link included in each newsletter or through any other communication to the data controller responsible for processing. In the case of a cancellation or revocation, we will delete the respective personal data, provided that there are no legal requirements to the contrary, and will cease sending the newsletter to the affected person.

In addition to the information provided through the input form, we also store the date and time of your registration as well as the IP address you used during this process. This is done for the purpose of our own legal protection and to safeguard our technical systems against misuse.

The newsletters we send contain tracking pixels, i.e., embedded miniature graphics in the email, whose retrieval is recorded in a log file, allowing us to determine whether and when the respective newsletter was opened. The same method is used to record and evaluate the retrieval of links contained in the newsletter. The storage and processing of this data is carried out solely for the purpose of statistical evaluation of the newsletter dispatch, optimisation of the newsletter dispatch, and better tailoring of the newsletter content to the respective subscriber.

1. We have integrated YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website. [These are all embedded in the ‘enhanced privacy mode’, meaning that no data about you as a user is transmitted to YouTube unless you play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence over this data transmission.]
2. By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. Additionally, the data mentioned in § 3 of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account that you are logged into, or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not wish for this association with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising purposes, market research, and/or the tailored design of its website. Such evaluation occurs particularly (even for non-logged-in users) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must address YouTube to exercise this right.
3. Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find additional information about your rights and options for protecting your privacy: https://policies.google.com/privacy?hl=de&gl=de. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield

1. On this website, we use the services of Google Maps. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function. The map is only loaded after you have agreed to external media in our consent dialogue.
2. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. Additionally, the data mentioned in § 3 of this statement is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data is directly associated with your account. If you do not wish for the association with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses it for advertising purposes, market research, and/or tailored design of its website. Such evaluation occurs particularly (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, and you must address your objection to Google.
3. Further information on the purpose and scope of data collection and its processing by the plugin provider can be found in the provider’s privacy policies. There you will also find further information regarding your rights and options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google processes your personal data also in the USA and has submitted to the EU-US Privacy Shield.

For the forms used on this website, we utilise the Google reCaptcha service. This service is provided by Google Ireland, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The use of the reCaptcha service is based on our legitimate interest in the functionality of our form system, particularly in protecting against spam and abuse by bots. As part of the reCaptcha service, your IP address and possibly other data required by Google for the reCAPTCHA service will be transmitted to Google. The processing of this data by Google is carried out on the basis of Google’s privacy policy, which you can view in the Google Privacy Centre at http://www.google.de/intl/de/privacy .

1. On this website, we utilise the services of Twitter International Company based in Dublin, Ireland, to integrate Twitter messages. This allows us to display relevant tweets directly on the website and enables you to use them conveniently.
2. By visiting the website, Twitter receives the information that you have accessed the corresponding subpage of our website. Additionally, the data mentioned in point 4 of this statement is transmitted. This occurs regardless of whether you are logged in with a Twitter account or not. If you are logged in to Twitter, your data can be directly associated with your account. Twitter may store this data as usage profiles and use it for advertising, market research, and/or the tailored design of its website. Such evaluation may particularly be carried out to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must address your objection to Twitter.
3. Further information on the purpose and scope of data collection and its processing by Twitter can be found in the provider’s privacy policies. There you will also find additional information regarding your rights and options for protecting your privacy: https://twitter.com/de/privacy.

Personal data of the affected individuals will be processed or stored by the data controller only for the period necessary to achieve the purpose of storage, subject to other legal provisions. Another determining criterion for the duration of storage of personal data is the respective statutory retention period. After the purposes of storage have ceased and existing statutory storage periods have expired, the personal data will be blocked or deleted by the data controller in accordance with legal regulations and requirements, even without a corresponding request from the affected individual.

Below we describe the rights that every person affected by the processing of personal data has against the data controller responsible for the processing. If you wish to exercise any of these rights, you can contact the data controller at any time. We recommend that you communicate your request to us via email at datenschutz@rheinwunder.com.

Every person affected by the processing of personal data has the following rights against the data controller:

1. The right to confirmation, i.e. the right to request confirmation from the controller as to whether personal data concerning them is being processed;

2. The right to access, i.e. in the case of the processing of personal data, the right to obtain information about this personal data and the following information:

a) the purposes of the processing;

b) the categories of personal data being processed;

c) the recipients or categories of recipients to whom the personal data has been disclosed or will be disclosed, particularly in the case of recipients in third countries or international organisations;

d) where possible, the planned duration for which the personal data will be stored, or, if that is not possible, the criteria used to determine that duration;

e) the existence of the right to rectification or erasure of personal data concerning them or to restriction of processing by the controller or a right to object to such processing;

f) the existence of a right to lodge a complaint with a supervisory authority;

g) if the personal data has not been collected from the data subject, all available information about the source of the data;

h) the existence of automated decision-making, including profiling, in accordance with Article 22 paragraphs 1 and 4 of the General Data Protection Regulation and – at least in these cases – meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.

3. In the event of the transfer of personal data to a third country or an international organisation, the right to be informed about the appropriate safeguards in accordance with Article 46 of the General Data Protection Regulation in connection with the transfer;

4. The right to obtain a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on the administrative costs. If the data subject requests the information electronically, the information shall be provided in a commonly used electronic format unless otherwise specified. This right to receive a copy shall not adversely affect the rights and freedoms of others;

5. The right to rectification, i.e. the right to request from the controller the rectification of inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data – including by means of a supplementary statement;

6. The right to erasure (“right to be forgotten”), i.e. the right to request from the controller the immediate deletion of personal data concerning them, and the controller is obliged to delete personal data without undue delay if one of the following reasons applies:

a) The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

b) The data subject withdraws their consent on which the processing is based according to Article 6 paragraph 1 letter a or Article 9 paragraph 2 letter a of the General Data Protection Regulation, and there is no other legal basis for the processing.

c) The data subject objects to the processing pursuant to Article 21 paragraph 1 of the General Data Protection Regulation and there are no overriding legitimate grounds for the processing, or the data subject objects pursuant to Article 21 paragraph 2 of the General Data Protection Regulation.

d) The personal data have been unlawfully processed.

e) The erasure of personal data is necessary for compliance with a legal obligation under Union law or the law of the member states to which the controller is subject.

f) The personal data were collected in relation to the offer of information society services in accordance with Article 8 paragraph 1. If the controller has made the personal data public and is obliged to delete them under paragraph 1, they shall take reasonable steps, taking into account available technology and the cost of implementation, to inform data controllers who process the personal data that a data subject has requested the deletion of all links to such personal data or of copies or replications of such personal data. This does not apply to the extent that the processing is necessary

a) for exercising the right of freedom of expression and information;

b) for compliance with a legal obligation which requires processing under Union law or the law of the member states to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

c) for reasons of public interest in the area of public health in accordance with Article 9 paragraphs 2 letters h and i as well as Article 9 paragraph 3 of the General Data Protection Regulation;

d) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 paragraph 1 of the General Data Protection Regulation, insofar as the aforementioned right is likely to make it impossible or seriously impair the achievement of the objectives of that processing, or

e) for the establishment, exercise or defence of legal claims.

7. The right to restriction of processing, i.e. the right of a person affected by the processing of personal data to request from the controller that personal data concerning them be restricted immediately, and the controller is obliged to restrict personal data without undue delay if one of the following reasons applies:

a) the accuracy of the personal data is contested by the data subject, for a duration that enables the controller to verify the accuracy of the personal data,

b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use;

c) the controller no longer needs the personal data for the purposes of processing, but the data subject needs them for the establishment, exercise or defence of legal claims, or

d) the data subject has lodged an objection to the processing pursuant to Article 21 paragraph 1 of the General Data Protection Regulation, as long as it is not yet clear whether the legitimate grounds of the controller override those of the data subject. If processing has been restricted in this way, the personal data – apart from their storage – may only be processed with the consent of the data subject or for the establishment, exercise or defence of legal claims or to protect the rights of another natural or legal person or for reasons of substantial public interest of the Union or a member state. A data subject who has obtained a restriction of processing will be informed by the controller before the restriction is lifted.

8. The right to data portability, i.e. the right of the person affected by the processing of personal data to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format, and they have the right to transmit those data to another controller without hindrance from the controller to whom the personal data have been provided, provided that

a) the processing is based on consent in accordance with Article 6 paragraph 1 letter a or Article 9 paragraph 2 letter a of the General Data Protection Regulation or on a contract in accordance with Article 6 paragraph 1 letter b of the General Data Protection Regulation and

b) the processing is carried out by automated means. In exercising their right to data portability, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible. This right shall not adversely affect the rights and freedoms of others. The exercise of this right to data portability shall not affect the right to erasure (“right to be forgotten”). This right does not apply to processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

9. The right to object, i.e. the right of the person affected by the processing of personal data to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them which is based on Article 6 paragraph 1 letters e or f of the General Data Protection Regulation; this also applies to profiling based on these provisions. The controller shall no longer process the personal data unless they demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise or defence of legal claims.

If personal data are processed for the purpose of direct marketing, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing.

If the data subject objects to the processing for the purposes of direct marketing, the personal data shall no longer be processed for these purposes. In connection with the use of information society services, the data subject may exercise their right to object by automated means, using technical specifications.

The data subject has the right to object, on grounds relating to their particular situation, to the processing of personal data concerning them that is carried out for scientific or historical research purposes or for statistical purposes in accordance with Article 89 paragraph 1 of the General Data Protection Regulation, unless the processing is necessary for the performance of a task carried out in the public interest.

10. The right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning them or similarly significantly affects them.

This does not apply if the decision

a) is necessary for entering into or performance of a contract between the data subject and the controller,

b) is authorised by Union or member state law to which the controller is subject and which also lays down appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject, or

c) is based on the explicit consent of the data subject. In the cases referred to in letters a and c above, the controller shall implement appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject, which shall include at least the right to obtain human intervention on the part of the controller, to express their point of view, and to contest the decision. Automated decisions shall not be based on special categories of personal data unless the data subject has given consent or the processing is based on Union law or the law of a member state that is proportionate to the pursued objective, respects the essence of the right to data protection, and provides for appropriate and specific measures to safeguard the fundamental rights and interests of the data subject for reasons of substantial public interest.