Privacy Policy

A. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR), other national data protection laws of the member states, and other data protection regulations is:

Mawave Marketing GmbH
Moosacher Str. 70
80809 Munich

Email address: get-started@mawave.de
Website: https://mawave.com/

‍External Data Protection Officer for Mawave Marketing GmbH‍

c/o TÜV SÜD Akademie GmbH
Westendstraße 160
80339 Munich
Email: datenschutz@mawave.de‍

B. Provision of the website and creation of log files

1. Description and scope of data processing

Every time you access our website, our system automatically collects data and information from the computer system of the accessing device.

The following data is collected:

Information about the browser type and version used
The user's operating system
The user's IP address
Date and time of access
Websites accessed by the user's system via our website
The data is stored in our system's log files. This data is not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for the collection and temporary storage of data is Art. 6 (1) (f) GDPR.

3. Purpose of data processing and legitimate interest

The system must temporarily store the IP address to enable the website to be delivered to the user's computer. To do this, the user's IP address must remain stored for the duration of the session.

Data is stored in log files to ensure the functionality of the website. Furthermore, we use this data to optimize the website and ensure the security of our IT systems. The data is not analyzed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 (1) (f) GDPR.

4. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected for the provision of the website, this is the case when the respective session has ended.

In the case of data stored in log files, this is the case after no more than seven days. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or masked so that it is no longer possible to identify the accessing client.

5. Right to object and removal

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no option for the user to object.

C. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in or by the internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is visited again.

We use cookies to make our website functional. Some elements of our website require the accessing browser to be identified even after a page change.

When you visit our website, you are informed about the use of cookies and, in the case of non-technically necessary cookies, your consent to the processing of the personal data used in this context is obtained. In this context, a reference to this privacy policy is also provided. You have the option to access and adjust your cookie consents at any time at the bottom of our website in the footer under "Manage cookies." You can also make changes directly here:

2. Legal basis for data processing

The use of technically necessary cookies and similar technologies in the "Technically necessary" category is based on Section 25(2) no. 2 of the German Telecommunications-Telemedia Data Protection Act (TTDSG). Subsequent data processing is based on legitimate interests in accordance with Art. 6(1)(f) GDPR.

3. Purpose of data processing

The purpose of using technically necessary cookies is to enable the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

4. Duration of storage, withdrawal of consent

Cookies are stored on the user's computer and transmitted to our site. As a user, you therefore have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the storage of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to use all of the website's functions to their full extent.

5. Third-party cookies

In addition to technically necessary cookies, we use cookies and similar technologies from third-party providers ("third-party cookies") on our website. These are only loaded after you have given your explicit consent via our consent management tool.

Processing is based on your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications-Telemedia Data Protection Act (TTDSG).

The services used can be categorized as follows:

Analysis / Statistics: For evaluating user behavior and optimizing our website (e.g., Google Analytics, Microsoft Clarity, PostHog)
Marketing / Tracking: For measuring the effectiveness of marketing activities and displaying personalized advertising (e.g., Meta Pixel, LinkedIn Insight Tag)
Customer management and marketing automation: For managing contacts, analyzing user interactions, and carrying out marketing and communication activities (e.g., HubSpot)

When using these services, personal data such as IP addresses, usage data, device information, and interaction data are processed.

A transfer of personal data to third countries, particularly the USA, cannot be ruled out. For the providers we use (in particular Google, Meta, LinkedIn, and HubSpot), there is an adequacy decision by the European Commission under the EU-US Data Privacy Framework (DPF), provided they are certified accordingly. In addition, standard contractual clauses pursuant to Art. 46 GDPR may be used.

In addition, we use technical service providers that are necessary for the provision and security of our website (e.g., Cloudflare as an infrastructure and security service and Bunny.net as a content delivery network). These providers process data to deliver the website and ensure system security.

Further information on the individual services used, the specific data processed, the respective recipients, and the storage periods can be found in the following sections.

You can revoke or adjust your consent at any time with future effect via the cookie settings at the bottom of our website ("Manage cookies").

a) Google Analytics

Provided you have given your consent, we use the web analytics service Google Analytics 4 on this website. The provider for users in the European Economic Area and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Scope of processing

Google Analytics uses cookies and similar technologies to analyze the use of our website. Information about your usage behavior is processed and recorded in the form of events. This includes, in particular:

Page views and sessions
Click paths and website interactions
Scrolling behavior
Clicks on external links
Interactions with content (e.g., videos or downloads)
Referrer URL (origin of visitors)

In addition, the following data is processed:

your IP address (shortened, as IP anonymization is enabled by default)
approximate location data (region)
technical information about your device (browser, operating system, screen resolution)
Your internet service provider

We use the User-ID feature in Google Analytics. This allows interactions across multiple sessions and devices to be assigned to a pseudonymous identifier.

We also use Google Signals. This enables cross-device analysis of user behavior and the creation of aggregated reports on demographic characteristics and interests. Google Signals is only activated if you have consented to the use of marketing or analytics cookies.

Purposes of processing

Processing is carried out to evaluate the use of our website, to compile reports on website activity, and to optimize our online services and marketing efforts.

Recipients

Recipients of the data may include:

Google Ireland Limited, Ireland
Google LLC, USA
Alphabet Inc., USA

Third-country transfer

A transfer of personal data to the USA cannot be ruled out. Google is certified under the EU-US Data Privacy Framework (DPF). Consequently, an adequacy decision by the European Commission exists for data transfers to the USA. In addition, standard contractual clauses in accordance with Art. 46 GDPR may be used.

Storage duration

The data we send that is linked to cookies is automatically deleted after 14 months. This deletion process is automated.

Legal basis

The legal basis for this processing is your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TTDSG.

Withdrawal

You can withdraw your consent at any time with future effect by accessing the cookie settings at the bottom of our website ("Manage cookies") and adjusting your selection. The lawfulness of the processing carried out prior to the withdrawal remains unaffected.

Alternatively, you can prevent the storage of cookies by adjusting your browser settings accordingly. Please note that if you do this, you may not be able to use the full functionality of this website.

b) Meta Pixel

If you provide your consent, we use the Meta Pixel from the provider Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta") on this website.

Scope of processing

The Meta Pixel allows us to track user behavior after they have been redirected to our website by clicking on a Meta advertisement (e.g., on Facebook or Instagram) ("conversion tracking").

The following data may be processed in particular:

Information about your activities on our website (e.g., page views, clicks, interactions)
Technical information, in particular IP address, browser information, device data, and referrer URL
Pixel-specific data such as the pixel ID and cookie information
Information about ad tracking status

If the relevant features are enabled, additional data, such as hashed identifiers (e.g., email addresses), may be transmitted to Meta as part of the Meta Pixel's operation. Furthermore, the system may be extended using server-side tracking technologies (e.g., Conversions API). Whether and to what extent these features are used in any individual case depends on the specific technical implementation.

The data we collect is generally not directly attributable to a specific individual. However, Meta may link this data to existing user profiles and use it for its own purposes.

Joint controllership

The collection and transmission of data to Meta takes place under a joint controllership agreement in accordance with Art. 26 GDPR between us and Meta. The corresponding agreement ("Controller Addendum") governs the distribution of data protection obligations.

Meta is primarily responsible for fulfilling data subject rights regarding the data stored by Meta.

Purposes of processing

Data is processed to analyze the effectiveness of our advertisements, optimize our marketing efforts, and target users effectively.

Recipients

Recipients of the data may include:

Meta Platforms Ireland Limited, Ireland
Meta Platforms Inc., USA

Third-country transfer

A transfer of personal data to the USA cannot be ruled out. Meta is certified under the EU-US Data Privacy Framework (DPF). There is therefore an adequacy decision by the European Commission for data transfers to the USA. In addition, standard contractual clauses in accordance with Art. 46 GDPR may be used.

Storage duration

The data collected and transmitted by us will be deleted after 10 months, provided there are no longer statutory retention obligations.

Legal basis

The legal basis for this processing is your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TTDSG.

Withdrawal

c) HubSpot

We use the service HubSpot Inc., 25 First Street, Cambridge, MA 02141 USA, to manage customer data and optimize the customer experience.

Scope of processing

HubSpot uses cookies and, in this context, stores the IP address, pages visited on our website, clicks and any sales, browsing and clickstream behavior of visitors and users of services, session heatmaps and scrolls, as well as non-identifying data about the device used, operating system, browser, language settings, date/time stamps, geographic location, and/or unique device identifier. Data processing generally takes place on a server in Europe.

Purpose of processing

The purpose of data processing is to optimize our website and increase customer satisfaction.

Recipients

Recipients of the data may include companies affiliated with HubSpot Inc. and sub-processors based in the USA.

Third country

HubSpot is based outside the EU and the EEA in the USA. There is no level of data protection there that corresponds to European standards. Therefore, to ensure an adequate level of data protection, we have entered into EU Standard Contractual Clauses with the service provider. A transfer of data to the USA and access to the data stored by us by US authorities cannot be excluded. From a data protection perspective, the USA is currently considered a third country. You do not have the same rights there as you do within the EU or the EEA, which may mean that you have no legal remedies against access by authorities.

Storage duration

The data will be deleted after 12 months at the latest.

Legal basis

The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) GDPR.

Withdrawal

You can prevent your data from being collected by HubSpot by not consenting to the use of HubSpot cookies in the banner displayed when you first access our website. You can withdraw your consent at any time with future effect by accessing the cookie settings in the footer at the bottom of our website under "Manage Cookies" or within our privacy policy and changing your selection there. The lawfulness of the processing carried out based on your consent prior to withdrawal remains unaffected.

You can also prevent the storage of cookies from the outset by adjusting your browser software settings accordingly. However, if you configure your browser to reject all cookies, some functionality on this and other websites may be limited.

d) LinkedIn Insight Tag

We use the LinkedIn Insight Tag service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

Scope of processing

The service provider uses cookies and processes the following:

URL
Referrer URL
Device characteristics
Browser characteristics and
IP address.
We do not receive any personal data from LinkedIn, only aggregated reports on the demographics of our target audience and the performance of our ads. This includes the following information regarding criteria such as:

Industry
Job title
Company size
Seniority
Location

Purpose of processing

The purpose of this processing is to analyze LinkedIn members on a website in order to optimize our offerings and the performance of advertising campaigns on LinkedIn.

Recipients

The information generated by the cookies regarding the user's use of the online service may be transmitted to and stored on a server operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Third country

Insofar as data is processed outside the EU or the EEA and there is no level of data protection equivalent to the European standard, the service provider has concluded EU standard contractual clauses with the service provider LinkedIn Corporation to ensure an adequate level of data protection. A transfer of data to the USA and access by US authorities to the data stored at LinkedIn Corporation cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as you do within the EU or the EEA, which may mean that you have no legal remedies against access by authorities.

Storage duration

LinkedIn anonymizes the data within 7 days. The data is deleted within 90 days.

Legal basis

The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) GDPR.

Withdrawal

You can prevent LinkedIn from collecting your data by not consenting to the use of LinkedIn cookies in the banner displayed when you first access our website. You can withdraw your consent at any time with future effect by accessing the cookie settings in the footer at the bottom of our website under "Manage cookies" or in our privacy policy and changing your selection there. The lawfulness of the processing carried out based on your consent until the withdrawal remains unaffected.

e) Microsoft Clarity

Provided you give your consent, we use the web analytics service Microsoft Clarity on this website, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland ("Microsoft").

Scope of processing

Microsoft Clarity allows us to analyze and visually evaluate user behavior on our website. In particular, the following data is processed:

Mouse movements, clicks, and scrolling behavior
Session recordings
Interactions with the website (e.g., form usage)
technical information such as IP address, browser type, operating system, and device data
Referrer URL and pages visited

Data is processed in a pseudonymized form. We do not directly identify you as an individual.

Purposes of processing

Processing is carried out to analyze user behavior and to optimize our website and improve user-friendliness.

Recipients

Recipients of the data may include:

Microsoft Ireland Operations Limited, Ireland
Microsoft Corporation, USA

Third-country transfer

A transfer of personal data to the USA cannot be ruled out. Microsoft is certified under the EU-US Data Privacy Framework (DPF). Therefore, an adequacy decision by the European Commission exists for data transfers to the USA. In addition, standard contractual clauses in accordance with Art. 46 GDPR may be used.

Storage duration

The data is stored by Microsoft for a period of up to 12 months and subsequently deleted.

Legal basis

The legal basis for this processing is your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TTDSG.

Withdrawal

f) PostHog

If you provide your consent, we use the analytics service PostHog on this website. The provider is PostHog Inc., 2261 Market Street, Suite 4008, San Francisco, CA 94114, USA ("PostHog").

Scope of processing

PostHog allows us to analyze user behavior on our website. In particular, the following data may be processed:

Page views and sessions
Clicks, scrolling behavior, and interactions
technical information such as IP address, browser type, operating system, and device data
Referrer URL and usage data

PostHog uses cookies and similar technologies to recognize users. The data is processed in a pseudonymized form.

Purposes of processing

Processing is carried out to analyze and evaluate user behavior and to optimize our website and marketing activities.

Recipients

Recipients of the data may include:

PostHog Inc., USA

If processing takes place via European servers, data processing may also occur within the EU.

Third-country transfer

A transfer of personal data to the USA cannot be ruled out. PostHog is certified under the EU-US Data Privacy Framework (DPF). Therefore, an adequacy decision by the European Commission exists for data transfers to the USA. In addition, standard contractual clauses in accordance with Art. 46 GDPR may be used.

Storage duration

Data is only stored for as long as it is necessary for the respective analysis purposes. The specific storage period depends on the settings of the system being used.

Legal basis

The legal basis for this processing is your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TTDSG.

Withdrawal

D. Newsletter

1. Description and scope of data processing

Our website offers the option to subscribe to a free newsletter. When you sign up for the newsletter, the data entered in the input mask is transmitted to us. Providing your email address is sufficient for this purpose.

2. Legal basis for data processing

The legal basis for processing the email address is the user's consent pursuant to Art. 6 (1) (a) GDPR.

3. Purpose of data processing

The user's email address is used exclusively for the purpose of delivering the newsletter.

We use other personal data voluntarily provided by the user, such as your name, to provide a personalized experience.

4. Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. The user's email address will therefore be stored until you unsubscribe from the newsletter.

5. Revocation

You may revoke your consent to receive the newsletter at any time. You can do this by contacting the email address provided above or by using the unsubscribe link included in the newsletter.
‍

E. Contact form, contact via email

1. Description and scope of data processing

If you contact us via email, we will process all data provided in your message. The data you provide will be transmitted to us and stored.

2. Data processing for collaborations and co-registrations

For selected content (e.g., whitepapers, reports, studies, or events) that we offer in collaboration with partners, it may be necessary for the personal data you provide in the form (e.g., name, email address, company) to be processed by both us and the respective cooperation partner.

The data is collected and exchanged between us and the respective cooperation partner for the purpose of providing the content and for follow-up communication related to the topic.

The specific data processing and the partners involved are detailed in the respective form or on the relevant offer page.

a) Overview of current campaigns and cooperation partners

W&V Social Media Marketing Report / Collaboration with Ebner Media Group

In conjunction with the social media marketing report "W&V Social Media Report - Entering a Social First Era," published in partnership with W&V / Werben & Verkaufen, we are collaborating with Ebner Media Group GmbH & Co. KG. If you request the report via the provided download form, we will process the personal data you provide in the form, specifically your name, business email address, company, job title, and any other information you voluntarily provide.

Processing is carried out for the purpose of providing the report, handling your inquiry, documenting your consent, and—if you provide your consent—for promotional contact via email by Mawave Marketing GmbH and Ebner Media Group GmbH & Co. KG. Promotional contact may include information about our own offers, events, training opportunities, whitepapers, webinars, other publishing products, as well as relevant marketing, social media, and industry content.

As part of this campaign, the personal data you provide may be exchanged between Mawave Marketing GmbH and Ebner Media Group GmbH & Co. KG and processed independently by both parties for the stated purposes. Ebner Media Group GmbH & Co. KG processes your data in accordance with its own privacy policy.

If you consent to receiving promotional emails via the form, you also agree that the emails sent will be analyzed through individual measurement, storage, and evaluation of open and click rates. This evaluation is used to improve the content and technical aspects of future emails and to better tailor content to the interests of the recipients.

The legal basis for processing your data in connection with promotional contact and the analysis of open and click rates is your consent in accordance with Art. 6 (1) (a) GDPR. Where processing is necessary for the technical provision of the form, the handling of your inquiry, or the documentation of your consent, it is based on Art. 6 (1) (b) GDPR or Art. 6 (1) (f) GDPR. Our legitimate interest lies in the proper execution and verifiability of the campaign.

You may withdraw your consent at any time with future effect. You can withdraw your consent by using the unsubscribe link in the respective emails or by sending an email to datenschutz@mawave.de. Withdrawal of consent from Ebner Media Group GmbH & Co. KG can be carried out via the contact channels specified in their privacy policy or by email to widerruf@ebnermedia.de. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

‍

3. Legal basis for data processing

The legal basis for processing your contact inquiry is our legitimate interest under Art. 6 (1) (f) GDPR in responding to your request, or, in the case of an inquiry related to a contractual relationship, Art. 6 (1) (b) GDPR.

If your data is processed jointly or shared with cooperation partners as part of collaborations or co-registrations, this processing is based on your consent in accordance with Art. 6 (1) (a) GDPR.

4. Purpose of data processing

We process your contact details to handle your inquiry.

5. Duration of storage

Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the information provided in your inquiry, this is the case when it is clear from the circumstances that the matter in question has been conclusively resolved.

6. Right to object

Users may object to the storage of their personal data at any time. In such cases, however, processing cannot be continued.

F. Photos and videos at events

1. Description and scope of data processing

We take photos and videos during events, functions, and similar formats. Participants may be identifiable in these recordings.

The recordings are made primarily during closed B2B events (e.g., invite-only or VIP events).

2. Purpose of processing

The recordings are used to document our events and for public relations and corporate communications purposes.

This includes, in particular, publication:

on our website (e.g., as event impressions or background images)
on our social media channels (in particular Instagram, TikTok, and LinkedIn)

The recordings are not used for paid advertising (e.g., ads).

3. Legal basis

Processing is based on Art. 6 (1) (f) GDPR.

Our legitimate interest lies in the presentation and documentation of our events and in the external representation of our company.

4. Type of publication

The recordings are used exclusively for the purposes mentioned above.
As a general rule, individuals are not identified by name or by tagging.

5. Events with cooperation partners

If events are held jointly with cooperation partners, the processing of photo and video recordings is carried out under joint controllership in accordance with Art. 26 GDPR.

In these cases, the recordings may also be used by the respective cooperation partners for their own public relations work.
This use is limited to organic publications (e.g., website and social media) and does not include paid advertising.

6. Recipients of the data

Recordings may be made publicly accessible as part of our publications, particularly via our website and social media platforms.

7. Storage period

In principle, recordings are stored for as long as is necessary for the stated purposes.

Data may be stored for longer if there is a legitimate interest in continued use or if there are no overriding legitimate interests of the data subjects.

Recordings that are no longer required are regularly reviewed and deleted at appropriate intervals.

8. Right to object

You have the right to object to the processing of your personal data at any time.

In the event of an objection, we will review the recordings in question and—provided there are no compelling legitimate grounds—will cease using them or delete them.

To exercise your right to object, you may contact us at any time using the contact details provided above.

9. Notice regarding participation in events

Participants are informed about the creation of photo and video recordings during registration and on-site.

If you do not wish to be included, you have the option to inform us on-site or subsequently at any time.

G. Social Media Presence

We maintain profiles on social media. These social media platforms are operated by service providers who process data to provide such pages.

1. Scope of processing

The processed data consists of content and usage data on these social media profiles. Depending on the social media service, usage data may also be analyzed to improve our social media presence. This typically includes the following information:

User interactions (posts, likes, etc.)
Profile name and data provided by the user in conversation history, e.g., for processing inquiries
Statistical surveys for target group advertising
Statistical data on user interactions in aggregated form, i.e., without personal identification (e.g., page activity, page views, page previews, likes, recommendations, posts, videos, page subscriptions, including origin and time of day)
Targeted advertisements based on aggregated demographic data without personal identification (e.g., age, location, language, gender)

2. Legal basis for processing

The legal basis is our legitimate interest in communicating and evaluating aggregated (anonymous) data regarding the use of our social media channels in accordance with Art. 6(1)(f) GDPR. Our legitimate interest outweighs the user's interest in this context.

3. Purpose of processing

The purpose of data processing on our social media profiles is to provide engaging content, interact with visitors on social media platforms, and analyze usage data to improve our social media presence.

a) Facebook and Instagram

We and Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter "Meta"), as the provider of Instagram, are joint controllers for the processing of personal data via our Instagram profile. The joint controller agreement is available at: https://www.facebook.com/legal/terms/page_controller_addendum. Under this agreement, Meta is responsible for informing data subjects about the processing. Instagram's privacy policy is available at: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect. Data subjects may exercise their rights against either controller, us and/or Meta. Further information on the data that Meta shares with us can be found at https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.

b) LinkedIn

We and LinkedIn (for users in the EU/EEA: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland) are joint controllers for the processing of personal data via our LinkedIn profile. The joint controller agreement is available at: https://legal.linkedin.com/pages-joint-controller-addendum. Under this agreement, LinkedIn is responsible for informing data subjects about processing activities. LinkedIn's privacy policy is available at: https://www.linkedin.com/legal/privacy-policy. Data subjects may exercise their rights against either controller, us and/or LinkedIn. Further information on the data that LinkedIn shares with us can be found at https://www.linkedin.com/help/linkedin/answer/a547077/viewing-company-page-analytics?lang=en.

c) TikTok

Please be aware that TikTok stores user data (e.g., personal information, IP addresses, etc.) and may use it for business purposes. For more information on how TikTok processes data, please refer to their privacy policy at: https://www.tiktok.com/legal/privacy-policy-eea?lang=en. We have no control over the data collection and subsequent processing by TikTok. Furthermore, we are not aware of the extent, location, or duration for which the data is stored, the extent to which TikTok complies with existing deletion obligations, what analyses and links are made with the data, or to whom the data is disclosed. To the extent that data you transmit to us via TikTok is also or exclusively processed by TikTok, both we and TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, are joint controllers for data processing under the General Data Protection Regulation (GDPR). You can find information on how to access your own data on TikTok here (with further references): https://support.tiktok.com/en/account-and-privacy/account-information.

4. Recipients

Information and data displayed or shared on our social media profiles may be accessible to the respective operator of the social media platform, its users, or commissioned service providers.

5. Transfer to a third country

Insofar as personal data is transferred to servers in the USA and stored and further processed there, the respective social media provider has concluded the EU Commission's standard contractual clauses with the companies based in the USA, which allow for the transfer of personal data to the USA in individual cases.

6. Duration of storage

Once your request has been processed, the personal data you provided will be deleted from our systems. If you interact with us publicly, for example by leaving a comment or "liking" a post, this data will remain publicly visible on the page until it is deleted by us or by you. If legal retention requirements necessitate longer storage, your data will be stored only for that purpose and blocked for other uses.

7. Right to object to data processing

You may object to the processing at any time. Please contact the email address mentioned above for this purpose.

8. Obligation to provide data

Providing your data is voluntary. However, visiting our profile is not possible without us processing personal data.

H. Recipients

Within our company, access to your data is granted to those departments that require it to fulfill our contractual and legal obligations. Service providers and agents employed by us (e.g., technical service providers, transport companies, waste disposal companies) may also receive data for the fulfillment of our contractual and legal obligations. Your data will only be disclosed to recipients outside the company if this is permitted or required by law, if the transfer is necessary for the processing and thus the fulfillment of the contract or at your request for the implementation of pre-contractual measures, or if you have given us your consent. We have concluded data processing agreements with our service providers who act on our behalf and according to our instructions in accordance with Article 28 of the GDPR. In this case, categories of recipients include:

IT service providers
Customer management system providers
Email marketing providers

I. Rights of the data subject

In accordance with Article 15(1) of the GDPR, you have the right to request information free of charge regarding the personal data we have stored about you. Furthermore, provided the legal requirements are met, you have the right to rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), and data portability (Article 20 GDPR) of your personal data.

If data processing is based on Article 6(1)(e) or (f) of the GDPR, you have the right to object under Article 21 of the GDPR. If you object to data processing, we will cease such processing in the future, unless the controller can demonstrate compelling legitimate grounds for further processing that outweigh your interests in objecting. If data processing is based on consent under Article 6(1)(a) or Article 9(2)(a) of the GDPR, you may withdraw your consent at any time with effect for the future, without affecting the lawfulness of processing based on consent before its withdrawal.

Please contact us in writing or by email using the contact details provided above in the aforementioned cases.

Additionally, you have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the data protection supervisory authority of the federal state in which you reside or in which the controller is based.

J. Automated decision-making/profiling

We do not engage in automated decision-making or profiling (automated analysis of your personal circumstances).

K. SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.

L. Changes to this privacy policy

As we continue to develop our website and the services offered through it, or due to changes in legal or regulatory requirements, it may become necessary to update this privacy policy. The version currently available on our website is the one that applies.