3.1 What data we collect from you and from whom we receive this data

First and foremost, we process personal data that you provide to us or that we collect when operating our website. We may also receive personal data about you from third parties. These may be the following categories:

• Personal master data (name, address, dates of birth, etc.);
• Contact information (cell phone number, email address, etc.);
• Financial data (e.g. account details);
• Online identifiers (e.g. cookie identifier, IP addresses);
• Location and traffic data;
• Sound and image recording;
• particularly sensitive data (e.g. biometric data or information about your health).

3.2 Under what conditions do we process your data?

We process your data in good faith and for the purposes set out in this privacy policy. In doing so, we ensure transparent and proportionate processing.

If, in exceptional cases, we are unable to comply with these principles, the data processing may still be lawful because there is a justification. A justification reason may be in particular:

• Your consent;
• the execution of a contract or pre-contractual measures;
• our legitimate interests, unless your interests are overridden.

3.3 How can you withdraw your consent?

If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of this consent unless we have another justification.

You can revoke your consent at any time by sending an e-mail to the address given in the imprint. Data processing that has already taken place is not affected by this.

3.4 In which cases can we share your data with third parties?

3.5 How long do we keep your data?

We store personal data only for as long as is necessary to fulfill the individual purposes for which the data was collected.

Data that we store when you visit our website is kept for twelve months. An exception is made for analysis and tracking data, which may be kept longer.

We store contract data for longer, as we are obliged to do so by legal regulations. In particular, we must retain business communications, concluded contracts and accounting records for up to 10 years. As far as we no longer need such data from you to perform the services, the data will be blocked and we will only use it for accounting and tax purposes.

3.6 How do we protect your data?

We will keep your information secure and take all reasonable steps to protect your information from loss, access, misuse or alteration.

Our contractual partners and employees who have access to your data are obliged to comply with data protection regulations. In some cases, it will be necessary for us to pass on your requests to companies affiliated with us. In these cases, too, your data will be treated confidentially.

Within our website, we use the SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your browser.

3.7 What rights do you have?

3.8 Changes to the privacy policy

We may change this privacy policy at any time. The changes will be published on our website, you will not be informed separately.

4.1 Providing the website and creating log files

By visiting , certain data is automatically stored on our servers or on servers of services and products that we obtain and / or have installed, for purposes of system administration, for statistical or backup purposes or for tracking purposes. These are:

• the name of your Internet service provider;
• Your IP address (in some circumstances);
• the version of your browser software;
• the operating system of the computer with which the URL is accessed;
• the date and time of access;
• the web page from which you are visiting URL;
• the search words you used to find the URL.

This data cannot be assigned to a specific person and there is no merging of this data with other data sources. The log files are stored in order to guarantee the functionality of the website and to ensure the security of our information technology systems. This is our legitimate interest.

The data is only stored for as long as is necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted after the end of each session. The storage of the log files is mandatory for the operation of the website, you therefore have no possibility to object.

4.2 Google Ads

We use the Google Ads service on our website, an online advertising service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). Google Ads enables us to place advertisements in the Google search results as well as in the Google advertising network.

4.3 Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site.

The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.

4.4 Google Tag Manager

For the management of website tags via an interface, we use the Google Tag Manager, a service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The Google Tag Manager itself (which implements the tags) is a cookie-less domain and does not process any personal data. The service provides for the triggering of other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager.

By using the Google Tag Manager, scripts (so-called tags) can be activated automatically on our website and data can be transmitted from your browser to Google. This data may include information about your IP address, the browser you use, the subpages of our website visited and other interactions during your website visit.

4.5 Hotjar

We use the web analytics service Hotjar on our website, provided by Hotjar Ltd. Hotjar Ltd is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe). Hotjar allows us to measure and analyze the behavior of our website visitors.

For example, Hotjar allows us to see how long users stay on a page, which links they click, and how they move through the page. This helps us to make our website more user-friendly. The information is collected anonymously and is not merged with other data.

Hotjar uses cookies and other technologies to collect information about our users' behavior and about their end devices. This can be the IP address of the device (stored only in anonymized form), screen size, device type, browser information, geographical location (country only) and preferred language.

4.6 Sendgrid

Our website uses the Sendgrid service, a product of Twilio Inc. to optimize and send email communications. Sendgrid helps us ensure that our emails are reliably delivered to our users and allows us to analyze user behavior in relation to those emails.

When you contact us, subscribe to a newsletter, or receive other forms of email communication from us, your email address and, if applicable, other personal data, such as your name or preferences, are stored and transmitted to Sendgrid for processing. This data is used to send you the information you request and to monitor the effectiveness of our communications.

Sendgrid uses technologies such as cookies or tracking pixels to detect whether emails have been opened and which links have been clicked. This allows us to analyze in detail the effectiveness of our email campaigns and the interests of our users.

You have the option to revoke your consent to the processing of your data and unsubscribe from our newsletter at any time. In every email we send you will find a corresponding unsubscribe link.

4.7 Google Fonts API

On our website, we use the Google Fonts API, a service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"), to embed fonts. By integrating these fonts, your browser will establish a connection to Google's servers when you visit our website in order to download the fonts and display them correctly.

Through this connection, data, in particular your IP address and information about the browser you are using, may be transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries.

If you want to prevent the transfer of data within the Google Fonts API, you can block access to the domain fonts.googleapis.com in your browser settings. Please note that in this case our website may not be displayed correctly.

4.8 Vercel

Our website and applications are hosted on Vercel, a platform provided by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA; "Vercel"). Vercel offers a suite of services and tools designed to improve the deployment, performance, and reliability of web and mobile applications.

By utilizing Vercel, certain types of data, including your IP address, details about the browser you are using, the date and time of access, and other interaction data, may be collected and stored by Vercel on their servers. This information is crucial for delivering our website's functionality, enhancing performance, troubleshooting issues, and enhancing overall user experience.

Here are some specific services from Vercel that we may employ:

• Vercel Deployments: A service that allows us to deploy our web and mobile applications seamlessly.
• Vercel Analytics: An analytics service that gathers data on website performance and user interactions, helping us understand how users engage with our applications.
• Vercel Edge Network: A global distribution network to ensure fast loading times by serving content from locations close to the user.
• Vercel Integrations: Tools and services that integrate with Vercel to provide additional functionality for our applications, such as backend services, monitoring, and optimization tools.

The collection and use of data by Vercel are governed by their privacy policy. We use this information to ensure the stable operation of our applications, to monitor and improve performance, and to make our services more relevant and accessible to you.

Your privacy is important to us, and we are committed to protecting it. We encourage you to review Vercel's privacy policy to understand how they collect, use, and protect your information. If you have any questions or concerns about how your data is handled, please contact us for further information.

4.9 Supabase

Our website and applications leverage Supabase, a platform provided by Supabase Inc. (Supabase IO, Inc., 548 Market St, PMB 98174, San Francisco, CA 94104-5401, USA; "Supabase"). Supabase offers a collection of tools and services designed for the rapid development, management, and scaling of web and mobile applications, emphasizing real-time functionality and PostgreSQL database support.

When using Supabase, a range of data, including but not limited to your IP address, browser details, access times, and other interaction data, may be collected and stored by Supabase on their servers. This information is instrumental for delivering the functionality of our applications, optimizing performance, diagnosing problems, and enhancing the user experience.

Some specific services from Supabase that we might utilize include:

• Supabase Database: A PostgreSQL-based cloud database service that provides real-time data capabilities.
• Supabase Auth: A service offering authentication and authorization features to secure our applications and protect user data.
• Supabase Storage: A service for storing and serving large files, such as images or videos, efficiently and securely.
• Supabase Realtime: A service that allows subscribing to database changes in real-time, enabling dynamic and interactive application experiences.

The collection and processing of data by Supabase are conducted in accordance with their privacy policy. We use this data to ensure the effective operation of our applications, to monitor and enhance their performance, and to tailor our services to better meet the needs of our users.

We prioritize your privacy and are dedicated to safeguarding it. We encourage you to review Supabase's privacy policy to understand their data collection, usage, and protection practices. Should you have any queries or concerns regarding how your information is managed, please feel free to reach out to us for more information.