Privacy Policy

A. Overview of data protection

General information

The following information will provide you with an easy to navigate overview of what will happen with your personal data and to what extent (type, scope, purpose) data is processed when you visit this website or our external online presence (e.g. social media profiles). The term „personal data“ comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.

Please check the contents of this privacy policy regularly, as we will adjust it as soon as changes to the data processing require that. If your participation is required (such as consent), we will notify you.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e. the „controller“)?
The data on this website is processed by the operator of the website. His contact information is available under the Imprint section on this website or below the point data processing controller.

How do we record your data?
We collect your data as a result of your sharing of your data with us. This may, for instance be information you enter into our contact form. Our IT systems automatically record other data when you visit our website. This data comprises primarily technical information (e.g. web browser, operating system or time the site was accessed). This information is recorded automatically when you access this website.

What are the purposes we use your data for?
A portion of the information is generated to guarantee the error free provision of the website, for you wishing us to get in contact with you or to analyse your user patterns. In addition, we use the collected data for advertising purposes and to improve our website.

What rights do you have as far as your information is concerned?
You have the right to receive information about the source, recipients and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have a right to request the blocking, deletion and correction of this data. You may object at any time to the future processing of your personal data. If you have consented to the processing of your personal data, you have a right of withdrawal for the future. Furthermore, you have the right to complain to the relevant supervisory agency. If you have any questions about this or other matters relating to data protection, you can contact us at any time under the address given in the imprint or below under data processing controller.

Analysis tools and tools provided by third parties

There is a possibility that your browsing patterns will be statistically analysed when your visit this website. Such analyses are performed primarily with cookies and with what we refer to as analysis programmes. As a rule, the analyses of your browsing patterns are conducted anonymously; i.e. the browsing patterns cannot be traced back to you. You have the option to object to such analyses or you can prevent their performance by not using certain tools. For detailed information about the tools and about your options to object, please consult our Data Protection Declaration below.

B. General information and mandatory information

Data protection

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.

In the event that you visit our online presence (e.g. social media profiles on Facebook or Instagram), we process personal data of you only if you contact us within the social networks via messages, posts, comments or in similar ways. In principle, when you use the respective networks and platforms, the data processing guidelines and terms of use of the respective operators of these platforms, to which you have generally consented, provided that you are a registered user.

We herewith advise you that the transmission of data via the Internet (i.e. through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third party access.

Information about the responsible party (referred to as the „controller“ in the GDPR)

The data processing controller according to Art. 4 Nr. 7 GDPR on this website is:

Daniel Goll
Pfarrer-Nicolai-Straße 2
97903 Collenberg

Email: kontakt@3d-bogenregion.de

Revocation of your consent to the processing of data

Some data processing operations are only possible with your express consent. You can revoke an already given consent at any time. An informal message, e.g. by e-mail to us is enough. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to the collection of data in special cases; right to object to direct advertising

In the event that data are processed on the basis of Art. 6 (1) lit. e or f GDPF, you have the right to at any time object to the processing of your personal data based on grounds arising from your unique situation. This also applies to any profiling based on these provisions. To determine the legal basis, on which any processing of data is based, please consult this data protection declaration. If you log an objection, we will no longer process your affected personal data, unless we are in a position to present compelling protection worthy grounds for the processing of your data, that outweigh your interests, rights and freedoms or if the purpose of the processing is the claiming, exercising or defence of legal entitlements. (objection pursuant to Art. 21 (1) GDPR)

If your personal data is being processed in order to engage in direct advertising, you have the right to at any time object to the processing of your affected personal data for the purposes of such advertising. This also applies to profiling to the extent that it is affiliated with such direct advertising. If you object, your personal data will subsequently no longer be used for direct advertising purposes. (objection pursuant to Art. 21 (2) GDPR)

For further information on personal data, please contact us at any time at the address given in the imprint.

Right of information about, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time at the address provided in the Imprint section or here below data processing controller.

Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time at the address provided in the Imprint section of this website.

Right to data portability

You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

Right to log a complaint with the competent supervisory agency

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption programme. You can recognise an encrypted connection by checking whether the address line of the browser switches from „http://“ to „https://“ and also by the appearance of the lock icon in the browser line. If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Rejection of unsolicited e-mails

We herewith object to the use of contact information published in conjunction with the mandatory information to be provided in the Imprint section to send us promotional and information material that we have not expressly requested. The operators of this website and its pages reserve the express right to take legal action in the event of the unsolicited sending of promotional information, for instance via SPAM messages.

C. Recording of data on this website

Cookies

In some instances, our website and its pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. The purpose of cookies is to make our website more user friendly, effective and more secure. Cookies are small text files that are placed on your computer and stored by your browser e.g. to remember your language settings for this website.

You can adjust the settings of your browser to make sure that you are notified every time cookies are placed and to enable you to accept cookies only in specific cases or to exclude the acceptance of cookies for specific situations or in general and to activate the automatic deletion of cookies when you close your browser. If you deactivate cookies, the functions of this website may be limited.

Cookies that are required for the performance of the electronic communications transaction or to provide certain functions you want to use, are stored on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error free and optimised provision of the operator’s services.

If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 (1) lit. a GDPR; the agreement can be revoked at any time for example by changing your Cookie-Settings via this link.

If other cookies (e.g. cookies for the analysis of your browsing patterns) should be stored, they are addressed separately in this Data Protection Declaration.

A general objection to the use of cookies for online marketing purposes of some services can also be explained through the US website http://aboutads.info/choices/, the European-hosted site http://www.youronlinechoices.eu or http://optout.aboutads.info.

Cookie-Consent with Borlabs Cookie

Our website uses the Borlabs cookie consent technology to obtain your consent to the storage of certain cookies in your browser and for their data privacy protection compliant documentation. The provider of this technology is Borlabs - Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany (hereinafter referred to as Borlabs).

When you visit our website, you will see a banner at the bottom of the screen where you can give your consent to the storage of cookies that are not essential for the operation of the website. The setting made there by you is stored in a cookie (Borlabs Cookie) in your browser. This will also save the revocation of the consent, if you later adjust your cookie settings on our website. This data will not be shared with the provider of Borlabs Cookie. The recorded data shall remain archived until you ask us to eradicate them or you delete the Borlabs cookie yourself or the purpose of storing the data no longer exists. This shall be without prejudice to any retention obligations mandated by law. Your User-ID for this browser is . Details on data processing by Borlabs Cookie can be found athttps://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/. We use the Borlabs cookie consent technology to obtain the declarations of consent mandated by law for the use of cookies. The legal basis for the use of such cookies is Art. 6 (1) lit. c GDPR.

Your current Cookie-Settings in terms of Borlabs Cookie can be viewed and adjusted here.

Hosting

In order to be able to provide you with our web pages, we use an external web hosting provider who delivers the page accordingly. With the hosting provider (processor pursuant to Art. 28 GDPR) we have concluded an order processing contract according to Art. 28 (3) sentence 1 GDPR.

In order for the website to be sent to you, your IP address must be processed. The basis for the processing is our legitimate interest in an online presentation and the provision of information in accordance with Art. 6 (1) lit. f GDPR.

In addition, our web hosting provider also stores the IP address of each visitor in the log files in order to ward off or track attacks on the website and / or the systems of the provider. According to the provider, these data will be deleted after 7 days. Data processing is also carried out on the basis of legitimate interest in accordance with Art. 6 (1) lit. f GDPR.

Server log files

We or our hosting provider, automatically collects and stores information about access to the servers in so-called server log files, which your browser automatically sends to us. The stored information is: name of the retrieved web page or file, browser type and browser version, the operating system used, referrer URL, IP address, requesting provider, host name of the accessing computer, date and time of the server request. This data is not merged with other data sources.

The server logfile files are stored for a maximum of 7 days and then deleted unless they are needed for the analysis of technical problems, for evidence purposes or for permanent defense against attacks / abuses on the systems (security). Otherwise they will be deleted as soon as a storage for the reasons named above is no longer necessary.

This data is recorded on the basis of Art. 6 (1) lit. f GDPR.

D. Online presence in social networks

Data processing through social networks

We maintain publicly available profiles in social networks. The individual social networks we use can be found below. Social networks such as Facebook, Google+ etc. can generally analyse your user behaviour comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:

If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media network. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.

Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.

Please also note that we cannot retrace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media networks. Details can be found in the terms of use and privacy policy of the respective social media network.

Legal basis

Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) (a) GDPR).

Responsibility and assertion of rights

If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g. Facebook). Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.

Storage Time

The data collected directly from us via the social media presence will be deleted from our systems as soon as the purpose for their storage lapses, you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions - in particular, retention periods - remain unaffected. We have no control over the storage duration of your data that are stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g. in their privacy policy, see below).

Individual social networks

Facebook
We have a profile on Facebook. Provider is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified under the EU-US Privacy Shield.
There is an agreement on the joint processing of personal data (Controller Addendum). This agreement determines which computing operations we or Facebook will be responsible for when you visit our Facebook page. This agreement can be found at the following link:https://www.facebook.com/legal/terms/page_controller_addendum.
Privacy Policy: https://www.facebook.com/about/privacy/
Objection/Adjustment of Advertising Settings: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com

YouTube
We have a profile on YouTube. Provider is Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin 4, D04 E5W5, Irland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google is certified under the EU-US Privacy Shield.
Privacy Policy: https://policies.google.com/privacy
Objection/Adjustment of Advertising Settings: https://adssettings.google.com/authenticated

Instagram
We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.
Privacy Policy: https://www.instagram.com/legal/privacy/

E. Contacting us

In any form of contact with us (telephone, e-mail, message in social media, contact form, etc.) your given information and data is processed to answer your requests and processing them in accordance with Art. 6 (1) lit. b GDPR (in case the processing is required for precontractual measures or for the performance of a contract) or in accordance with Art. 6 (1) lit. f GDPR (for the protection of our legitimate interests) and stored in a customer relationship management system or comparable database/data system. The data will be deleted if storage is no longer required or statutory retention requirements and deadlines have expired. A necessity is checked every two years.

F. Third-party Plug-ins and Tools

As part of our online offering, we use third-party services or content to provide you with enhanced content, more information, a visually pleasing website and, at the same time, the easiest, quickest, and most enjoyable use of our website without redirecting you from our website to external sites tp use these services. A prerequisite for this is that the third-party providers of this content process your IP address in order to send the content to your browser. The processing of your IP address in this context is therefore required. We endeavor to limit the use of third party services as far as possible and the providers, while weighing our legitimate interests (Article 6 (1) sentence 1 GDPR) on the economic operation of a website and your interest in a website designed and edited for you, as well as the protection of your personal data conscientiously. Nevertheless, we must assume that the third-party providers collect and process further personal and other data in connection with the use of their services. This may include, for example, device-related information (operating system version, device identifiers, information about hardware used, the mobile network), protocol data (method of using the services, IP address, browser type, browser language, referrer URL, date and time of the request, query from Cookies through which your browser can be identified), location-related information (eg via GPS, if you have set this accordingly in your device). In addition, personal information may be stored locally on your device, or cookies and similar technologies may be used to collect and store information and to identify your device. Furthermore, cookies, web beacons or pixel tags may contain information such as e.g. visitor traffic is evaluated on the pages where the third-party services are integrated. The processing of the data can also take place on servers in the USA. For more information on the privacy policies of third-party providers, please refer to their respective privacy policy, see below.

YouTube with expanded data protection integration

Our website embeds videos of the website YouTube. The website operator is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in the expanded data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. Nevertheless, this does not necessarily mean that the sharing of data with YouTube partners can be ruled out as a result of the expanded data protection mode. For instance, regardless of whether you are watching a video, YouTube will always establish a connection with the Google DoubleClick network.

As soon as you start to play a YouTube video on this website, a connection to YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited. If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.

Furthermore, after you have started to play a video, YouTube will be able to place various cookies on your device. With the assistance of these cookies, YouTube will be able to obtain information about our website's visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud. These cookies will stay on your device until you delete them.

Under certain circumstances, additional data processing transactions may be triggered after you have started to play a YouTube video, which are beyond our control.

The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6 (1) lit. f GDPR. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 (1) lit. a GDPR; the agreement can be revoked at any time. For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under:https://policies.google.com/privacy?hl=de.

Google Maps

Via an API, this website uses the mapping service Google Maps. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data transfer.

We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. Pursuant to Art. 6 (1) lit. f GDPR.

For more information on the handling of user data, please review Google’s Data Privacy Declaration under:https://policies.google.com/privacy?hl=de.

G. Contractual services as part of our agency activities

As part of our contractual services (strategic and conceptual consulting, design development, campaign planning, web design, social media marketing, implementation of SEO and local SEO measures, advertisements on our platform and our social media channels) we process the data of our customers. These are master data (e.g. names or addresses), contact data (e.g. e-mail, telephone numbers, fax numbers), content data (e.g. photos, texts, videos, logos), contract data (e.g. subject matter, term), payment data (e.g. bank details, Payment history) and, where applicable, usage and metadata (e.g. in the context of the evaluation and success measurement of marketing measures). We do not process any special categories of personal data, as long as they are not part of a commissioned processing.

Affected by the aforementioned processing are our customers, the interested parties, as well as the customers, users, website visitors, employees of our customers. The processing takes place in any case for the purpose of providing contractual services, billing, evaluation of own business activity and our customer service. Legal basis for the processing under our o.g. Agency services is Art. 6 (1) lit. GDPR or for analyzes and evaluations Art. 6 (1) lit. f GDPR.

Disclosure of your information to third parties only occurs if it is required as part of an order to perform a contractual service. With regard to the processing of the data that you provide us with in the context of an order, we only act in accordance with the agreements made in the closed order processing contract in accordance with Art. 28 GDPR and process the data only for the purposes specified in the order and in accordance with statutory provisions.

Deletion of the data takes place after expiry of the statutory warranty obligations or comparable retention periods or if storage of the data e.g. is still necessary because of continued project support. A necessity of keeping the data is checked every three years. In the case of statutory tax retention, a deletion takes place after its expiration. The deletion of data disclosed to us by third parties within the framework of an order by our client, we delete the data according to the specifications of the data processing agreement according to Art. 28 GDPR. This is basically the case after the end of the order.

H. Contact Management, Administration, Financial Accounting & Organization

As part of our administrative tasks, as well as the organization of our business, financial accounting and other legal obligations (such as archiving), we process the same data that we process in the course of the performance of our contractual services. The purpose of this processing is our interest in maintaining our business and providing services to our clients, administration, financial accounting, data archiving, office organization and contact management. The legal basis for these processing operations is Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR.

As part of these processing activities, we might submit data to the financial administration, tax consultants and auditors. Due to our business interests, we also store information about suppliers, consultants, organizers and other business partners for the purpose of later establishing contacts or initiating contracts. Since most of this data is company-related data, we store it permanently. The legal basis for the use of such cookies is Art. 6 (1) lit. f GDPR.

I. Market research and other business analyzes

In order to operate our business efficiently and to recognize customer wishes, user expectations and market trends and to be able to optimize our offer, we analyze data on business transactions, contracts, inquiries, etc. that we have. In the course of this, we process communication, inventory, contract, payment and usage data as well as, if necessary, metadata on the basis of Art. 6 (1) Sentence 1 lit. f GDPR. The analyzes are for internal purposes only and will not be published or disclosed to third parties.

J. Competitions and Raffles

We process personal data of participants in our competitions and raffles in compliance with the relevant data protection provisions, as far as the processing for the offer and implementation of the raffle is contractually required, the participants have consented to the processing of the data or the processing of our legitimate interests, such as protection against misuse or the safety of the raffle.

If in the course of the competition or raffle entries of the participants are published (e.g. in the context of a vote or presentation of the raffle entries or the winners or the reporting on the raffle), we point out that the names of the participants can also be published in this context. The participants can object the publication at any time.

If the raffle takes place within a social network (e.g. Facebook or Instagram), the usage and privacy policies of the respective platforms apply. In this case we point out that we are responsible for the participants' information provided in the raffle and for inquiries regard to the raffle.

The data of the participants will be deleted as soon as the raffle or the competition is over and the data is no longer required to inform the winners or we no longer expect any questions regarding the raffle. The data of the participants will be deleted six months after the end of the competition at the latest. Data of the winners can be stored longer, e.g. to be able to answer questions about the winnings or fulfill the winnings; in this case, the retention period depends on the type of winning and is e.g. for goods or services up to three years, e.g. to handle warranty cases.

The legal basis for the processing of personal data in the context of competitions and raffles is Art. 6 (1) lit. b GDPR.

If data in connection with the raffle were also collected for other purposes, their processing and the duration of storage is performed according to the data protection guidelines to this use.

K. Participation in Affiliate Affiliate Programs

We as the operator of this website receive a commission if users follow an affiliate link placed on our website and then buy something on our partner's website. The price of the recommended items will not be higher for the buyers.

Within our online presence, we rely in this regard on the basis of our legitimate interests in the economic operation of our website according to Art. 6 (1) lit. f GDPR, when participating in affiliate systems, uses industry-standard tracking as required to operate, analyze, and optimize the Affiliate System offer.

Our participation in affiliate programs requires us and our affiliate to understand and measure whether and how many users are taking advantage of our affiliate's offers through affiliate links on our website. For this purpose, the affiliate links are either supplemented by specific values and / or components of the links or, after reaching the target website, certain information about the click on the affiliate link is stored in a cookie. Among the values processed and stored in this context are e.g. the home page (referrer), our affiliate program identifier, the time of the click, an online user ID, or values relevant to tracking, such as: an ad ID, affiliate ID or categories of products.

Amazon Affiliate Program
We participate in the affiliate program of Amazon EU. By placing advertisements and links to the Amazon.com website, we can earn advertising reimbursements. Amazon uses cookies in order to understand the cause/origin of the orders. Amazon can recognize that you clicked the affiliate link on our website and then purchased a product from Amazon. For more information about Amazon's use of the data and possible ways of objection please see their privacy policy:https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010. Note: Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or one of its partners.

Booking.com Partner Program
We are participants of the partner program of Booking.com. By placing advertisements and links to the Booking.com website, we can earn advertising reimbursements. Booking.com uses cookies in order to understand the cause/origin of the bookings. Booking.com can recognize that you clicked the affiliate link on our website and then made a booking. Further information on the use of the data by Booking.com and to abjection options can be found in their privacy policy:https://www.booking.com/content/privacy.de.html.

Date: July 1, 2023