Privacy Policy

1. Responsible person and contact data

The responsible person for processing is Interactive One GmbH (hereinafter referred to as responsible person), who processes data sent by the data subject (hereinafter referred to as customer) in accordance with the provisions of the European General Data Protection Regulation (hereinafter referred to as GDPR).

The contact details of the responsible person are:

Address: Sieglitzhofer Str. 9, 91054 Erlangen, Germany
Phone: 0800 - 589 23 84*
Fax: 0800 - 589 23 85*
*free of charge from German landline phones
Email: service@interactive-one.de

2. Data protection person

The data protection person of the responsible person is Dr Martin Bahr.

The contact details of the data protection person are as follows:
Address: Dr Bahr Consulting GmbH, Mittelweg 41a, 20148 Hamburg, Germany
Phone: 040 / 555 98 300
Email: datenschutz@interactive-one.de

3. Purpose and legal basis

The processing of the customer's personal data is necessary for the fulfilment of a contract to which the customer is a party or for the implementation of pre-contractual measures which are taken at the customer's request. This applies, in particular, to registration for the newsletter. The legal basis for data processing is Art. 6 para. 1 b) of the GDPR.

Should the customer contact the responsible person via the contact form or in any other way, personal data will be used exclusively to process their enquiry. The legal basis for such processing is the customer's consent in accordance with Art. 6 para. 1 a) of the GDPR.

In other cases where personal data is processed, processing takes place to protect the legitimate interests of the responsible person, namely to analyse the use of the website by Google Analytics and to integrate external fonts by Google Fonts or to detect, limit or eliminate faults or errors on the website. The legal basis for data processing is Art. 6 para. 1 f) of the GDPR. The responsible person points out the customer's right of objection. The customer will receive further information under Section 9 of this declaration.

4. Recipient

The personal data of the customer, which is transmitted to the responsible person, is made accessible to the following recipients as follows:

4.1 Fulfilment of the contract or implementation of pre-contractual measures:

In order to fulfil the contract or to carry out pre-contractual measures, the personal data of the customer, which is transmitted to the responsible person, is made accessible to the following recipients:

Personal data will not be made available to third parties without the written consent of the customer unless the law requires this.

4.2 The use of the contact form or in the context of any other approach:

In case of use of the contact form or in the context of any other approach, the personal data of the customer, which is transmitted to the responsible person, will be made accessible to the following recipients:

4.3 Website analysis:

For the analysis of the use of the website, the personal data of the customer, which is transmitted to the responsible person, is made accessible to the following recipient:

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on the customer's PC, to help the website analyse how the customer uses the website. The information generated by the cookie about the use of the website (including the IP address) is transmitted to a Google server in the USA and stored there. If IP anonymisation is activated on this website, your IP address will however first be truncated by Google within the member states of the European Union or in other signatory states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to evaluate the use of the website, to compile reports on activity, and to provide other services regarding activity and internet usage for the website operator. Google will not link the IP address transferred by the customer's browser as part of Google Analytics with any other data held by Google. The customer may refuse the use of cookies by selecting the appropriate settings on his browser. However, the responsible person points out to the customer that, in this case, the customer may not be able to use all functions of this website. The customer can also prevent the data generated by cookies about his use of the website (incl. his IP address) from being passed to Google, and the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB

For more information, the customer can visit https://tools.google.com/dlpage/gaoptout?hl=en-GB or https://support.google.com/analytics/answer/6004245?hl=en (general information about Google Analytics and privacy). The responsible person points out to the customer that on this website Google Analytics has been extended by the code "anonymizeIp" ("analytics.js") in order to guarantee an anonymous collection of IP addresses (so-called IP masking).

Personal data will not be made available to third parties without the written consent of the customer unless the law requires this.

4.4 Google Fonts:

For the integration of external fonts by Google Fonts, personal data of the customer of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, is made accessible. This website uses Google Fonts to integrate external fonts. Google provides the fonts. When the customer visits this website, the required fonts are loaded into the customer's browser cache to display the texts and fonts on the page correctly.

For this purpose, the usual information when calling up a website, in particular, the IP address of the customer and the referrer URL, is transmitted to a server of Google Inc. The customer can receive further information at developers.google.com/fonts/faq and Google's privacy policy https://policies.google.com/privacy?hl=en.

Personal data will not be made available to third parties without the written consent of the customer unless the law requires this.

5. Cookies

On various pages, the responsible person uses cookies to make visits to its web pages attractive and to enable the use of certain functions. Cookies are small text files that are stored on the visitor's computer. Most of the cookies used by the responsible person are deleted from the visitor's hard disk at the end of the browser session (so-called session cookies). Other cookies remain on the visitor's computer and enable the responsible person to recognise the visitor's computer during the next visit (so-called permanent cookies). Of course, the customer can reject the cookies at any time, provided that the browser used permits this.

6. Transfer to third countries

Using Google Analytics means personal data is transmitted to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. There is no decision on adequacy by the European Commission. However, Google LLC is a member of the EU-US Privacy Shield. Further information on the EU-US Privacy Shield can be found at the URL:
www.privacyshield.gov

Using Microsoft Corporation means personal data is transferred to Microsoft Corporation, One Microsoft Way Redmond, WA 98052 USA. There is no decision on adequacy by the European Commission. However, Microsoft Corporation is a member of the EU-US Privacy Shield. Further information on the EU-US Privacy Shield can be found at the URL:
www.privacyshield.gov

7. Storage time

After complete processing of the contract, including complete payment of the agreed remuneration, the data of the customer, which must be kept for legal reasons, is blocked. This data will no longer be available for further use. After legal reasons cease to apply, this blocked data will be deleted.

In the event that the customer uses the contact form or contacts the responsible person otherwise, the personal data will be used for the time needed to process the enquiry. The data that must be kept for legal reasons is then blocked. This data will no longer be available for further use.

The responsible person is subject to various storage and documentation obligations, which result, among other things, from the German Commercial Code (HGB) and the Revenue Code (AO). The period for retention and documentation specified in these regulations can range from two to ten years.

Finally, the retention period is also assessed according to the statutory limitation periods, which, for example, according to Art. 195 ff. of the German Civil Code (BGB) may, as a rule, be three years, but in certain cases also up to thirty years.

Otherwise, personal data will be deleted unless the customer has expressly consented to the further processing and use of his data.

The personal data stored for the purpose of identifying, limiting or eliminating malfunctions or errors on the website will be deleted after seven days at the latest.

The data collected by means of Google Analytics is stored indefinitely.

8. Data protection rights

Every customer has the right of information under Article 15 of the GDPR, the right to correction under Article 16 of the GDPR, the right to cancellation under Article 17 of the GDPR, the right to limitation of processing under Article 18 of the GDPR, the right of opposition under Article 21 of the GDPR, as well as the right to data transfer under Article 20 of the GDPR. The restrictions according to Articles 34 and 35 of the BDSG (German Federal Data Protection Act) apply to the right of information and the right to cancellation. In addition, there is a right to appeal to a competent data protection supervisory authority (Article 77 of the GDPR in conjunction with Article 19 of the German Federal Data Protection Act).

The customer can find the legal texts here. (https://data.box.com/v/legislative-texts)

Appropriate requests should be addressed to the address given under Section 1 or to datenschutz@interactive-one.de.

9. The right of objection and other rights

If the customer has given his consent to the processing of his personal data for one or more specific purposes, the customer has the option of revoking the consent with effect for the future.

In particular, the customer has the right to object to the processing of personal data at any time free of charge with effect for the future in order to analyse the website or to detect, limit or eliminate faults or errors on the website. Just send an email to datenschutz@interactive-one.de or to the address mentioned in Section 1.

Without prejudice to any other administrative or judicial remedy, any data subject shall have the right of appeal to a supervisory authority, in particular, in the Member State where he resides, works or is alleged to have carried out an infringement, where the data subject is of the opinion that the processing of his personal data is contrary to this regulation.

A competent authority is, for example, the Bavarian State Commissioner for Data Protection, Wagmüllerstraße 18, 80538 Munich, Germany. However, the customer can choose another one.

10. Obligation to provide data

The following data is mandatory (mandatory data):

10.1 Fulfilment of the contract:

The following data is mandatory for the conclusion of a contract (mandatory data):

The following data is mandatory for using the newsletter:

All other information is not required for the conclusion of the contract and is, therefore, voluntary.

If the mandatory information required for the conclusion of the contract is not provided, no contract will be concluded. The failure to provide voluntary information has no influence on the conclusion of the contract.

10.2 Use of the contact form or processing of another enquiry:

For processing a general enquiry within the scope of the contact form or any other approach, the following data is absolutely necessary (mandatory data):

All other information is not required for the processing of an enquiry and is, therefore, voluntary.

If the mandatory information required for processing a request is not provided, the enquiry will not be processed. Failure to provide voluntary information does not affect the processing of the request.

10.3 Website analysis:

The deactivation of data transmission within the framework of Google Analytics has no effect on the use of this website.

10.4 Eliminating faults:

The following data is required to identify, limit or eliminate faults or errors on the website (mandatory information):

All other information is not required to identify, limit or eliminate faults or errors on the website and is, therefore, voluntary.

If the mandatory information required to identify, limit or eliminate faults or errors on the website is not provided, this website cannot be used.

10.5 Google Fonts:

The non-use of Google Fonts has no effect on the use of this website. In this case, a standard font of the customer's computer will be used.

11. Automated decision-making

An automated decision-making form including profiling does not take place.