5.3 Google Photos

Our website uses Google Photos, a service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Photos allows us to embed images and photo albums directly into our website.

The integration of Google Photos serves to display multimedia content such as images or photo albums in an appealing and simple way. To do this, a connection to Google's servers is established in order to load the requested content.

When uploading content via Google Photos, your IP address is transmitted to Google. In addition, the following technical information may be collected:

• Device type and operating system

• Browser type and version

• the subpages you visited

Google may link this data to other services and use it for its own purposes, such as analysis or marketing measures. In doing so, personal data may be transferred to servers in the USA.

Google also processes data in the US in some cases. Google uses standard contractual clauses (SCCs) in accordance with Art. 46 GDPR to ensure an adequate level of data protection. Nevertheless, there is a potential risk that US authorities could access the data when it is used.

Your data will be processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR, which you can give via our consent management tool. Without your express consent, no content from Google Photos will be loaded and no data will be transmitted to Google.

If you do not want Google to collect data via our website, you can refuse to use Google Photos by not giving your consent in our consent management tool. You can also use data protection add-ons or script blockers in your browser to block the connection to Google servers.

Further information on data processing by Google can be found in Google's privacy policy: https://policies.google.com/privacy.

5.4 Google Play Services

Our website or app uses Google Play Services, a service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Play Services is primarily used for functions such as automatic updates, location tracking, and error reporting.

The integration of Google Play Services serves to provide essential functions such as service updates, location tracking, and error diagnosis in apps and services. This contributes to improving stability and user-friendliness.

Google Play Services processes the following data:

• IP address and device information (e.g., device type, operating system, app version)

• Location data, if you enable location sharing

• Usage and diagnostic data to improve services

The data collected may be used by Google for analysis and optimization purposes and linked to other Google services. In doing so, personal data may be transferred to servers in the United States.

Personal data may be processed in the United States. Google uses standard contractual clauses (SCCs) in accordance with Article 46 of the GDPR to ensure an adequate level of data protection.

• Art. 6 para. 1 lit. b GDPR (performance of a contract): If the use of Google Play Services is necessary to provide functions or services that you have requested (e.g., app updates)

• Art. 6 para. 1 lit. a GDPR (consent): For the processing of location data or other optional functions that you expressly approve

If you do not want Google to collect data via our services, you can refuse to use Google Play Services by adjusting the settings on your device or deactivating the app. You can also use script blockers or privacy add-ons if Google Play Services is used in a web application.

Further information on data processing by Google Play Services can be found in Google's privacy policy: https://policies.google.com/privacy.

5.5 Google Maps

Our website uses Google Maps, a map service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps enables us to embed interactive maps directly into our website and allows you to use the map function conveniently.

When you use Google Maps, a connection is established to Google's servers. Your IP address is transmitted and other information such as your location may be processed, provided you have enabled this in your device settings. This data may be transferred to Google servers in the US. The use of Google Maps is based on your consent in accordance with Art. 6 (1) (a) GDPR, which you can give via our consent management tool.

Further information on data processing by Google Maps can be found in Google's privacy policy: https://policies.google.com/privacy.

5.6 Google Fonts

Our website uses Google Fonts to ensure consistent font display. The fonts are stored locally on our server and integrated so that no connection to Google's servers is established and no personal data is transferred to Google. The use of Google Fonts is in the interest of a consistent and appealing presentation of our content and is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR.

Further information about Google Fonts can be found at: https://developers.google.com/fonts/faq.

6. Use and application of social plugins

6.1 YouTube Plugin

We use the social media channel YouTube, operated by YouTube LLC (“YouTube”), 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We have embedded YouTube videos on our website in what is known as extended data protection mode. Enhanced privacy mode ensures that YouTube does not store cookies or collect data as long as you do not play the video. Only when you play an embedded video will a connection to YouTube's servers be established and personal data, such as your IP address, may be transmitted to YouTube. If you are logged in to YouTube, YouTube can assign your surfing behavior directly to your personal profile.

YouTube stores certain data such as your IP address and other information that may be collected via cookies on your device when you play a video. We have no influence on this data processing. Google, as the operator of YouTube, is solely responsible for this data processing.

Further information on the purpose and scope of data collection and processing by YouTube can be found in Google's privacy policy at: https://policies.google.com/privacy.

An agreement with Google stipulates that Google assumes primary responsibility for the processing of personal data, including the fulfillment of data subject rights in accordance with Articles 15–20 of the GDPR. For more information, please refer to Google's privacy policy: https://policies.google.com/privacy.

Notwithstanding this agreement, you may assert your rights against both us and Google.

If you comment on our posts or video clips via YouTube, we receive additional data from you, such as your name (according to your YouTube account) and the date and time of your comment. Further data records or information provided by you depend on the content of your comments.

If we process personal data from you in connection with the technical provision of the YouTube service, this is done on the legal basis of Art. 6 (1) lit. f GDPR. Our legitimate interest lies in informing you about our work, events, and news, as well as in arousing your interest in our offerings by providing video clips.

If YouTube or we ask for your consent to data processing in certain cases, the legal basis for processing is Art. 6 para. 1 lit. a GDPR.

If you do not want YouTube to collect data via our website and assign it to your user account, please log out of your YouTube user account before visiting our site. You can also prevent YouTube videos from loading by using add-ons for your browser, e.g., a script blocker.

We do not share data records that we have received from you via YouTube with third parties.

7. Deletion, blocking, and duration of storage of personal data

We process and store your personal data only for the period necessary to achieve the respective storage purpose or as required by the various retention periods stipulated by law. Once the purpose for storage no longer applies or the retention period stipulated by law has expired, the personal data is routinely blocked or deleted for further processing in accordance with the statutory provisions.

8. Data protection rights of the data subject

If you have any questions about your personal data, you can contact us in writing at any time. You have the following rights under the GDPR:

8.1 The right to information (sub-section Art. 15 GDPR) 8.2 The right to rectification (Art. 16 GDPR) 8.3 The right to erasure (Art. 17 GDPR) 8.4 Right to restriction (Art. 18 GDPR) 8.5 Right to data portability (Art. 20 GDPR) 8.6 Right to object (Art. 21 GDPR) 8.8 Right to withdraw consent under data protection law (Art. 7(3) GDPR)

9. Legal basis for processing

When processing personal data for which we obtain the consent of the data subject, Article 6(1)(a) of the General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is party, Art. 6 para. 1, sentence 1 b) (GDPR) serves as the legal basis. This provision also covers processing operations that are necessary for the implementation of pre-contractual measures. Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1, sentence 1 c) (GDPR) serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 f) (GDPR) serves as the legal basis for processing. The legitimate interest of our company lies in the performance of our business activities and in the analysis, optimization, and maintenance of the security of our online offering.

10. Transfer of data to third parties

We do not sell or lend user data. Data will only be transferred to third parties beyond the scope described in this privacy policy if this is necessary to process the requested service. We only transfer data if there is a legal obligation to do so. This is the case if government agencies (e.g., law enforcement authorities) request information in writing or if there is a court order. Personal data is not transferred to so-called third countries outside the EU/EEA area.

11. Legal or contractual requirements for the provision of personal data

Data and possible consequences of non-provision

We hereby point out that the provision of personal data is required by law in certain cases (e.g., tax regulations) or may result from contractual provisions (e.g., information about the contractual partner). For example, in order to conclude a contract, it may be necessary for the data subject/contractual partner to provide their personal data so that their request (e.g., order) can be processed by us. An obligation to provide personal data arises primarily when concluding contracts. If no personal data is provided in this case, the contract with the data subject cannot be concluded. Before providing personal data, the data subject can contact our data protection officer or the controller. The data protection officer or the controller will then inform the data subject whether the provision of the required personal data is required by law or contract or is necessary for the conclusion of the contract, and whether the data subject's request gives rise to an obligation to provide the personal data or what consequences the failure to provide the requested data will have for the data subject.

12. Existence of automated decision-making

As a responsible company, we refrain from using automated decision-making or profiling in our business relationships.

13. Further information

In addition to these website-specific privacy notices, you can also view our transparent information.