Data Protection

Claim Ventures GmbH (hereinafter also referred to as "Claim Ventures") provides information on consumer law issues on the internet platform "claimback.org" (hereinafter "Portal" or "Website").

Claim Ventures is aware of the importance of the personal data (Art. 4 No. 1 GDPR) entrusted to it. Personal data includes all data that can be related to you personally, e.g., name, address, email addresses, or user behavior. Claim Ventures ensures that this data is treated confidentially.

Below, we provide information about the collection of personal data when using our website. We also outline the rights of data subjects that apply to customers and interested parties.

(1) The controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is Claim Ventures GmbH, Katharinenstraße 4, 61476 Kronberg, info@claimback.org (see our legal notice). For questions regarding data protection, you can contact us at datenschutz@claimback.org or via our postal address with the addition "Data Protection".

(2) When you contact us by email or via a contact form, the data you provide will be stored by us in order to process your inquiry. The legal basis for processing the data transmitted in the course of contacting us is Article 6(1) sentence 1 lit. b GDPR (performance of a contract), Article 6(1) sentence 1 lit. f GDPR (legitimate interest of the controller), or Article 6(1) sentence 1 lit. a GDPR (consent). We delete the data collected in this context once storage is no longer necessary, or we restrict processing if there are legal retention obligations.

(3) If we use commissioned service providers for individual functions of our offering or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below.

(1) You have the following rights regarding your personal data:

Right of access,
Right to rectification or erasure,
Right to restriction of processing,
Right to object to processing,
Right to data portability.

(2) You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

(1) When simply using the website for informational purposes, meaning if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which is technically necessary for us to display the website to you and to ensure stability and security (the legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred in each case
Website from which the request comes (previously visited website)
Browser type
Operating system and its interface
Language and version of the browser software
Requesting provider

The aforementioned data is processed by us for the following purposes:

Ensuring a smooth connection to the website
Ensuring comfortable use of our website
Evaluation of system security and stability, and
for other administrative purposes

(2) In addition to the aforementioned data, we use technical tools for various functions when you use our website, particularly cookies, which may be stored on your device. When visiting our website and at any time thereafter, you have the option to allow or disallow the setting of cookies generally or select specific additional features. You can make changes via your browser settings or through our consent manager.

(3) Cookies are small text files stored on your hard drive assigned to the browser you are using, and through which certain information flows to the party that sets the cookie (in this case, us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the internet offering more user-friendly and effective overall. This website uses the following types of cookies, whose functionality and legal basis are explained below:

Transient cookies: These, especially session cookies, are automatically deleted when you close the browser or log out. They contain what is known as a session ID, which allows various requests from your browser to be assigned to the same session, so your computer can be recognized when you return to our website.
Persistent cookies: These are automatically deleted after a set duration, which varies depending on the cookie. You can view and manually delete the cookies and their durations at any time in your browser settings.

(4) Mandatory functions required for displaying the website: The technical setup of the website requires us to use technologies, particularly cookies. Without these technologies, our website cannot be displayed correctly or support functions cannot be provided. These are generally transient cookies, which are deleted at the end of your website visit or at the latest when you close your browser. These cookies cannot be disabled if you wish to use our website. The individual cookies are listed in the consent manager. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

(5) Optional cookies with your consent: We only use certain cookies after obtaining your consent, which you can provide when you first visit our website via the cookie consent tool. The functions are only activated if you consent and can serve, in particular, to help us analyze and improve visits to our website, facilitate operation across different browsers or devices, recognize you upon return visits, or display advertisements (possibly also tailored to your interests, to measure ad effectiveness, or to show interest-based advertising). The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of processing carried out based on consent before its withdrawal.

(1) In addition to purely informational use of our website, we offer various services that you can use if interested. To do so, you generally need to provide additional personal data that we use to deliver the respective service, and for which the aforementioned principles of data processing apply.

(2) In some cases, we use external service providers to process your data. These providers are carefully selected and commissioned by us, are bound by our instructions, and are listed under § 7 ff.

(3) Furthermore, we may share your personal data with third parties when services are offered in cooperation with partners (lawyers, legal service providers, litigation funders, etc.). The data shared with third parties will be used exclusively for the specified purposes (e.g., legal representation). More detailed information can be found in the description of the third-party offer.

(4) If our service providers or partners are based in a country outside the EEA, we will inform you about the consequences of this circumstance in the description of the offer.

(1) If you have given consent for the processing of your data, you can revoke it at any time. Such a revocation affects the lawfulness of the processing of your personal data after you have declared it to us.

(2) If we base the processing of your personal data on a balancing of interests (Art. 6 para. 1 sentence 1 lit. f GDPR), you may object to the processing. When exercising such an objection, please explain the reasons why you believe we should not process your personal data as we have been. In the event of a justified objection, we will examine the situation and either stop or adjust the data processing, or demonstrate to you our compelling legitimate grounds on the basis of which we will continue processing.

(3) Of course, you may object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection using the following contact details: Claim Ventures GmbH, Katharinenstraße 4, 61476 Kronberg, datenschutz@claimback.org.

(1) For registration and authentication, Claimback.org uses the service provider Firebase Authentication, Google Commerce Limited ("GCL"), Gordon House, Barrow Street, Dublin 4, Ireland. In cases where personal data is transferred to the USA, Google claims to have committed to standards equivalent to the former EU-US Privacy Shield and has pledged to comply with applicable data protection laws for international data transfers. We have also agreed to so-called Standard Contractual Clauses with Google, the purpose of which is to ensure an adequate level of data protection in the third country. More information on Google Firebase and data protection can be found at https://policies.google.com/privacy and firebase.google.com. If you wish to use our portal, you can first register by providing your email address and later, if applicable, by choosing a password and username. In addition to the email address, the browser ID and IP address are transmitted via HTTPS encryption for authentication. Firebase Authentication uses the aforementioned data to authenticate users during login, usage, and account management. Additional voluntary information may later be provided, which is necessary for the provision of our services.

(2) You can also register to use our portal via "single sign-on" using your existing Google, Twitter, GitHub, or Facebook profile. For this, Claimback also uses the service provider Firebase Authentication (see details in paragraph 1). Browser ID and IP address are transmitted encrypted via HTTPS (see paragraph 1 for use of this data). For login, you will be redirected to the respective provider's website (Google, Twitter, Facebook, GitHub). There, you can log in using your credentials for that service. This links your profile from that account with your user account on our portal, and the following information is automatically transmitted to us:

Name
Email address
Phone number (optional)

This information is required for using our portal and particularly serves to personally identify you. The legal basis for processing the data entered during registration is Art. 6 para. 1 sentence 1 lit. a GDPR (consent) and Art. 6 para. 1 sentence 1 lit. b GDPR (performance of a contract).

(3) When you use our portal, we store the data required to fulfill the contract. After your data is transmitted to the partner law firm, you can have all information changed by written notice or by email to Claimback. The legal basis is Art. 6 para. 1 sentence 1 lit. a, b, and f GDPR.

(4) To prevent unauthorized access by third parties to your personal data, especially financial data, the connection is encrypted using TLS technology.

(1) To process user inquiries via the contact form on this website, we use the CRM system Zendesk. The provider is Zendesk, Inc, 1019 Market Street, San Francisco, CA 94103 USA. We use Zendesk to handle your inquiries quickly and efficiently. The legal basis for processing your data is the legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

(2) In cases where personal data is transferred to the USA, Zendesk states that it has committed to standards equivalent to the former EU-US Privacy Shield and has pledged to comply with applicable data protection laws for international data transfers. We have also agreed to so-called Standard Contractual Clauses with Google, the purpose of which is to ensure an adequate level of data protection in the third country.

(3) The data you enter in the contact form will remain with us until you request deletion or the purpose for data storage ceases (e.g., after your inquiry has been fully processed). Mandatory legal provisions – especially retention periods – remain unaffected. If you do not agree to the processing of your inquiry with us via Zendesk, you may alternatively communicate with us by email or telephone. Further information can be found in Zendesk’s privacy policy: https://www.zendesk.de/company/customers-partners/privacy-policy/

(1) As a central database, we use Atlas from MongoDB, Inc., 3 Shelbourne Building, Crampton Avenue Ballsbridge, Dublin 4, Ireland. The data processing is based on our legitimate interests (Art. 6 para. 1 lit. f GDPR) in the technically error-free and optimized provision of our services.

(2) In the Atlas database, we store data that you have provided to us as a user. The data remains with us until you request its deletion or the purpose for data storage no longer applies (e.g., after your matter has been fully processed). Mandatory legal provisions – especially retention periods – remain unaffected.

(3) More information on data processing by MongoDB can be found in MongoDB's privacy policy at www.mongodb.com/legal/privacy-policy. In cases where personal data is transferred to the USA, MongoDB states that it has committed to standards equivalent to the former EU-US Privacy Shield and has pledged to comply with applicable data protection laws for international data transfers. We have also agreed to so-called Standard Contractual Clauses with Google, the purpose of which is to ensure an adequate level of data protection in the third country.

(1) To contact users of this website via WhatsApp, SMS, or phone call, data is shared with the service Twilio, an offering of Twilio Inc. (hereinafter "Twilio"), 645 Harrison St # 3rd Floor, San Francisco, CA 94107 USA. However, Twilio does not use the data to contact users themselves. Twilio also does not share the data with third parties.

(2) According to the Commission Implementing Decision (EU) 2016/1250 of 12 July 2016, the transfer of data from a controller or processor in the EU to organizations in the USA that have self-certified with the US Department of Commerce to comply with the principles of the EU-US Privacy Shield, including the supplemental principles, is permitted (US Privacy Shield). Twilio has self-certified with the US Department of Commerce to comply with these principles. Further information on data protection at Twilio can be found at: https://www.twilio.com/legal/privacy.

(3) The data remains with Twilio until you request its deletion or the purpose for data storage no longer applies (e.g., after your matter has been fully processed). Mandatory legal provisions – especially retention periods – remain unaffected.

(1) We use the search technology Algolia via an API. The provider is Algolia, Inc., 301 Howard Street, 3rd Floor, San Francisco, CA 94105, USA. The use of the Algolia search functions is necessary to work efficiently with your data in our internal systems. The data is usually transferred to and stored on a server of Algolia in Europe or the USA.

(2) The use of the Algolia search is based on our legitimate interests (Art. 6 para. 1 lit. f GDPR) in the technically error-free and optimized provision of our services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Further information on how user data is handled can be found in Algolia’s privacy policy: https://www.algolia.com/policies/privacy.

(3) The data remains with Algolia until you request deletion or the purpose for data storage no longer applies (e.g., after your matter has been fully processed).

(1) We use “Zapier” to connect different web apps. This allows us to automate actions between various web apps. Zapier is a service of Zapier Inc., 548 Market St #6241, San Francisco, CA 94104, USA. When using Zapier, it is possible that data may be transferred to servers of Zapier in the USA.

(2) We have concluded a data processing agreement with Zapier. Additionally, the data processing is secured by the EU standard contractual clauses. We use Zapier to automate actions between different apps to improve and make our website more time-efficient, which also constitutes our legitimate interest under Art. 6 para. 1 lit. f GDPR.

(3) Further information about data protection at Zapier can be found at: https://zapier.com/privacy/.

(1) We use the service Sentry (Sentry, 1501 Mariposa St #408, San Francisco, CA 94107, USA) to improve the technical stability of our service by monitoring system stability and detecting code errors.

(2) Sentry serves solely these purposes and does not analyze data for advertising purposes. User data, such as device information or error timestamps, is collected anonymously, not used as personal data, and subsequently deleted.

(3) Further information can be found in Sentry’s privacy policy: https://sentry.io/privacy/.

(1) This website uses the services of MailChimp for sending newsletters and other information to users. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

(2) MailChimp is a service that organizes and analyzes the sending of newsletters, among other things. If you enter data for the purpose of receiving the newsletter (e.g., your email address), these are stored on MailChimp’s servers in the USA. In cases where personal data is transferred to the USA, MailChimp claims to have adopted standards equivalent to the former EU-US Privacy Shield and has committed to comply with applicable data protection laws during international data transfers. We have also concluded so-called standard contractual clauses with Google, which ensure an adequate level of data protection in the third country.

(3) With the help of MailChimp, we can analyze our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (a so-called web beacon) connects to MailChimp’s servers in the USA. This allows it to be determined whether a newsletter message was opened and which links, if any, were clicked. Technical information is also collected (e.g., time of access, IP address, browser type, and operating system). This information cannot be assigned to the respective newsletter recipient. It is solely used for statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients. If you do not want analysis by MailChimp, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.

(4) Data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of data processing that has already taken place remains unaffected by the revocation.

(5) The data you provide to us for the purpose of receiving the newsletter is stored by us until you unsubscribe from the newsletter and, after unsubscribing, deleted both from our servers and from MailChimp’s servers. Data stored for other purposes (e.g., email addresses for the user area) remain unaffected.

(6) For more details, please refer to MailChimp’s privacy policy at: https://mailchimp.com/legal/terms/.

(1) With your consent, you can subscribe to our newsletter, through which we inform you about our current interesting offers. The advertised products and services are specified in the consent declaration.

(2) The only mandatory information required to send the newsletter is your email address. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

(3) You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking the link provided in every newsletter email or by sending an email to datenschutz@claimback.org.

(4) We point out that when sending the newsletter, we evaluate your user behavior. For this evaluation, the sent emails contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the evaluations, we link the data mentioned in § 3 and the web beacons with your email address and an individual ID. The data is collected exclusively in a pseudonymized manner; thus, the IDs are not linked to your other personal data, and direct personal reference is excluded. You can object to this tracking at any time by clicking the separate link provided in each email or by contacting us via another contact method. The information is stored as long as you are subscribed to the newsletter. After unsubscribing, we store the data purely statistically and anonymously.

Social Media

(1) We currently use the following social media plug-ins: Facebook, Google+, Twitter, Xing, LinkedIn, Instagram. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially transmitted to the providers of the plug-ins. You can recognize the provider of the plug-in by the marking on the box with its initial letter or logo. We give you the opportunity to communicate directly with the plug-in provider via the button. Only if you click on the marked field and thus activate it, the plug-in provider receives the information that you have accessed the corresponding webpage of our online offering. In addition, the data mentioned under § 3 of this declaration are transmitted. In the case of Facebook and Xing, according to the respective providers, the IP address is anonymized immediately after collection in Germany. By activating the plug-in, personal data about you is transmitted to the respective plug-in provider and stored there (in the USA for US providers). Since the plug-in provider collects data primarily via cookies, we recommend that you delete all cookies in your browser's security settings before clicking on the greyed-out box.

(2) We have neither influence on the data collected and data processing procedures, nor do we know the full extent of the data collection, the purposes of processing, or the storage periods. We also have no information regarding the deletion of the data collected by the plug-in provider.

(3) The plug-in provider stores the data collected about you as user profiles and uses them for advertising, market research, and/or the tailored design of its website. Such evaluations take place in particular (also for users not logged in) to display demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the possibility to interact with social networks and other users so that we can improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f GDPR.

(4) Data transmission takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data we have collected about you is directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend logging out regularly after using a social network, especially before activating the button, to avoid linking it to your profile with the plug-in provider.

(5) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the privacy statements of these providers communicated below. There you will also find additional information about your related rights and settings options to protect your privacy.

(6) Addresses of the respective plug-in providers and URLs with their privacy notices:

a) Meta Platforms Inc. (“Facebook”), 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

c) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

d) Xing SE, Dammtorstraße 30, 20354 Hamburg, DE; https://privacy.xing.com/de/datenschutzerklaerung.

e) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

f) Meta Platforms Ireland Limited (Instagram), 4 Grand Canal Square, Dublin 2, Ireland; https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram-Hilfebereich&bc[1]=Privatsphäre%20und%20Sicherheit.

(7) Facebook Meta Pixel
According to the General Data Protection Regulation (GDPR), as website operators, we are obliged to comprehensively inform our visitors and users about the collection, transmission, processing, or use of personal data. We use a Facebook Pixel on our website for tracking. This is a service from Facebook Inc. that enables us to analyze the usage of our website and display targeted advertising. Personal data such as IP address, browser information, time of visit, and usage behavior may be collected. Data transmission is encrypted and anonymized so that no conclusions about individual users are possible. Further information on data protection at Facebook and the protection of your data can be found in Facebook’s privacy policy.

(1) We have various profiles on so-called social media platforms. We operate the profiles with the following providers:

Facebook - Meta Platforms Inc., 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/claimback.org/ Privacy Policy: www.facebook.com/about/privacy.
Instagram - Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; https://www.instagram.com/claimback_org/ Privacy Policy: https://help.instagram.com/519522125107875/?helpref=hc_fnav
Whatsapp - WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Privacy Policy: https://www.whatsapp.com/legal/privacy-policy-eea
Youtube - Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; https://www.youtube.com/channel/UC-uIQJUrJYQ_wXpjKtg652w Privacy Policy: https://policies.google.com/privacy?hl=de
Pinterest - Pinterest Inc., 505 Brannan Street, San Francisco, CA 94107, United States; https://www.pinterest.de/claimbackorg/ Privacy Policy: https://policy.pinterest.com/de/privacy-policy
LinkedIn - LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; https://de.linkedin.com/company/claimback/ Privacy Policy: https://de.linkedin.com/legal/privacy-policy

(2) For these information services, we use the technical platform and services of the providers. We point out that you use our social media profiles and their functions at your own responsibility. This applies especially to the use of interactive functions (e.g., commenting, sharing, rating). When visiting our profiles, the providers of the social media platforms collect, among other things, your IP address as well as other information stored in the form of cookies on your device. These information are used to provide us as account operators with statistical information about interactions with us.

(3) The data collected about you in this context is processed by the platforms and may be transferred to countries outside the European Union, especially the USA. According to their own statements, all the aforementioned providers comply with an adequate level of data protection equivalent to the former EU-US Privacy Shield, and we have concluded the standard data protection clauses with these companies. We do not know how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored, or if data is shared with third parties. Data processing may differ depending on whether you are registered and logged in to the social network or visit the page as an unregistered and/or logged-out user. When accessing a post or the account, the IP address assigned to your device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your device can track how you have moved through the web. Via buttons embedded in websites, the platforms can record your visits to these websites and assign them to your respective profile. Based on this data, content or advertising can be tailored to you. If you want to avoid this, you should log out or deactivate the “stay logged in” function, delete the cookies stored on your device, and restart your browser.

(4) As the provider of the information service, we only process data from your use of our service that you provide us and that requires interaction. For example, if you ask a question that we can only answer by email, we will store your information according to the general principles of our data processing described in this privacy policy. The legal basis for processing your data on the social media platform is Art. 6 para. 1 sentence 1 lit. f GDPR.

(5) To exercise your data subject rights, you can contact either us or the social media platform provider. If one party is not responsible for answering or the information must be obtained from the other party, we or the provider will forward your request to the respective partner. Please contact the operator of the social media platform directly for questions about profiling and processing your data when using the website. For questions about the processing of your interactions with us on our page, write to the contact details provided above.

(6) What information the social media platform receives and how it is used is described by the providers in their privacy policies (links see the table above). There you will also find information about contact options and settings for advertising. Further information on social networks and how you can protect your data can also be found at www.youngdata.de.

(1) We have embedded YouTube videos into our online offer, which are stored on http://www.YouTube.com and can be played directly from our website. All videos are embedded in the "enhanced privacy mode," meaning no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transmission.

(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in § 3 of this declaration are transmitted. This happens regardless of whether YouTube provides a user account that you are logged into or if no user account exists. If you are logged into Google, your data will be directly assigned to your account. If you do not want the data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as user profiles and uses them for advertising, market research, and/or the demand-oriented design of its website. Such an evaluation is carried out especially (even for users not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must address YouTube directly to exercise this right.

(3) Further information on the purpose and scope of data collection and processing by YouTube can be found in the privacy policy. There you will also find additional information about your rights and settings to protect your privacy: https://www.google.de/intl/de/policies/privacy. In cases where personal data are transferred to the USA, Google states that it has committed to a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws for international data transfers. We have also concluded so-called standard contractual clauses with Google, which are intended to ensure an adequate level of data protection in the third country.

WhatsApp is a service provided by WhatsApp Inc., which is part of Facebook, Inc. We use this external application as a service channel. We are in no way responsible for the content and data shared, uploaded, and processed via WhatsApp outside of our own network. The WhatsApp privacy policies apply here.

Please read WhatsApp’s privacy policy (https://www.whatsapp.com/legal/) carefully before using WhatsApp. By using WhatsApp, you automatically agree to these policies. When you send us a message via WhatsApp, you provide us with your phone number. We also contact you via WhatsApp to inform you about the status of your interests. We use your WhatsApp number to assign you to the data records in our system.

Please note the WhatsApp terms of use, which we have no influence over: When you install and use WhatsApp on your phone, you agree to WhatsApp’s terms of use.

WhatsApp, Inc. receives personal data (especially metadata of communication) which is also processed on servers in countries outside the EU (e.g., USA). WhatsApp shares this data with other companies inside and outside the Facebook corporate group. Further information is contained in WhatsApp’s privacy policy (https://www.whatsapp.com/legal/#privacy-policy). We have no detailed knowledge of or influence on data processing by WhatsApp, Inc. WhatsApp is certified under the Privacy Shield agreement (https://www.privacyshield.gov/participant?id=a2zt00000011sfnAAA&status=Active) and thereby provides a guarantee to comply with European data protection law.

We use a custom-made Perspective Funnel in our advertisements to facilitate an easier registration process for our users. The funnel is used to collect information from users and categorize them based on their provided data. The collected data is used exclusively for internal purposes and is not shared with third parties. By using the Perspective Funnel, you consent to the use of your data for the described purposes. If you do not agree, you can opt out of using the funnel and instead use the regular registration through our website. Further information on handling user data can be found in other sections of our privacy policy.

Web Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies,” text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other parties to the Agreement on the European Economic Area prior to transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. This website has made use of the data location selection option. According to the setting made, Google will process data exclusively within the European Union, as far as service-specific conditions allow.

(2) The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google.

(3) You can prevent the storage of cookies by adjusting the settings of your browser software accordingly; however, we point out that in this case you may not be able to use all the functions of this website to their full extent. Furthermore, you can prevent Google from collecting data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension “anonymizeIp()”. This means IP addresses are processed in truncated form, making personal identification impossible. If the data collected about you can be related to a person, this relation is immediately excluded and the personal data is deleted immediately.

(5) We use Google Analytics to analyze the use of our website and to improve user-friendliness and our offer. In cases where personal data is transferred to the USA, Google has committed to a standard of protection equivalent to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in international data transfers. We have also concluded so-called standard contractual clauses with Google, the purpose of which is to ensure an adequate level of data protection in third countries.

(6) Information about the third party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001, Terms of use: http://www.google.com/analytics/terms/de.html and the privacy policy: http://www.google.de/intl/de/policies/privacy.

(7) This website also uses Google Analytics for cross-device analysis of visitor flows, which is conducted using a User-ID.

As part of our online offering, we use Google Tag Manager to analyze and improve user behavior on our website. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Tag Manager allows us to implement various tracking tags on our website without having to change the source code of our website. Through Google Tag Manager, we can, for example, analyze user behavior on our website and display personalized advertising. In this process, data such as IP address, browser information, visited subpages, time of visit, and click behavior are collected and transmitted to Google. Further information on data processing by Google within the scope of Google Tag Manager can be found in Google's privacy policy at: policies.google.com/privacy.

We use the tracking tool Oliro to measure the effectiveness of our affiliate program. Oliro allows us to generate and track affiliate links when users click on these links and purchase products. The information collected by the tool includes IP addresses, browser type and version, operating system, device type, visited pages, referrer URL, and timestamp. These data are used solely to measure and improve the effectiveness of our affiliate marketing strategy. Oliro uses cookies to collect and store this information. The collected data is not shared with third parties and is used only for internal purposes. By using our website, you agree to the use of Oliro. If you do not want Oliro to collect data about you, you can disable cookies in your browser or choose not to use our website.

Cookies and Processing by ad pright and Other Partners
On our website, so-called cookies are used to enable advertising campaigns by our service provider, ad pright GmbH, Gredinger Str. 24a, 90453 Nuremberg, Germany. This requires prior consent to the use of cookies for the respective marketing purposes. ad pright uses the ad serving technology of lead alliance GmbH, Nuremberg, for this purpose.

After you have given your consent, a cookie with a unique identifier (cookie ID) is stored in the browser on your device by the technology integrated by ad pright. Cookies are small text files. If a cookie stored in your browser with this identifier is read on our or a partner’s site, your device can be recognized again.

This recognition allows us to trace whether the display of advertising on another website has led to a success — for example, a contract conclusion. The subsequent billing of the success of the displayed advertising medium is done using pseudonymous data. No conclusions can be drawn about a specific person.

The processing of the above-mentioned data based on your consent and the further use of the cookies used for this purpose can be terminated by exercising your right of revocation or objection at the following link: oliro opt-out

ad pright and the other integrated partners use the following cookies.

Domain	Name	Storage Duration	Function
oliro.net	ppXXXX (XXXX stands for 4 digits)	30 days	Contains data about website operators, advertising media, contact time, and advertisers. Information about the device is collected to improve the service.

Hotjar is used on our website. This is a tracking technology that allows us to analyze user behavior on our website and optimize our offerings. Only anonymized data is collected and stored. Your data is not shared with third parties. If you still have concerns about the use of Hotjar, you can disable it at any time. Please note, however, that this may result in limitations when using our website. Further information about the use of tracking technologies can be found in our privacy policy.

Online Advertising

(1) We use the Google Ads service to draw attention to our attractive offers on external websites using advertising media (so-called Google Ads). We can determine the success of individual advertising measures in relation to the data from the advertising campaigns. Our aim is to show you advertisements that are of interest to you, to make our website more attractive for you, and to achieve fair calculation of advertising costs.

(2) These advertising media are delivered by Google via so-called "Ad Servers." If you reach our website via a Google ad, a cookie is stored on your PC. These cookies generally expire after 30 days and are not intended to personally identify you. Usually, the cookie stores analysis values such as the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions), and opt-out information (marking that the user no longer wishes to be addressed).

(3) Cookies allow Google to recognize your internet browser. If a user visits certain pages on the website of an ads customer and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. Each ads customer is assigned a different cookie. Thus, cookies cannot be tracked across ads customers’ websites. We ourselves do not collect or process any personal data in the mentioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which advertising measures are particularly effective. We do not receive any further data from the use of the advertising media, and in particular, we cannot identify users based on this information.

(4) Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the scope and further use of the data collected by Google through this tool and therefore inform you according to our knowledge: By embedding Ads Conversion, Google receives the information that you have accessed the corresponding part of our internet presence or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your Google account. Even if you are not registered with Google or are not logged in, it is possible that the provider obtains and stores your IP address.

(5) You can prevent participation in this tracking procedure in various ways: a) by adjusting your browser settings, in particular blocking third-party cookies will prevent you from receiving ads from third-party providers; b) by disabling cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com" at https://www.google.de/settings/ads, noting that this setting is deleted if you clear your cookies; c) by disabling interest-based ads from providers who are part of the self-regulation campaign "About Ads" via the link http://www.aboutads.info/choices, noting that this setting is deleted if you clear your cookies; d) by permanent deactivation in your browsers Firefox, Internet Explorer, or Google Chrome via the link http://www.google.com/settings/ads/plugin. Please note that in this case, you may not be able to use all functions of this offer fully.

(6) The legal basis for processing your data is Article 6(1) sentence 1 lit. f GDPR. Further information about data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org. In cases where personal data is transferred to the USA, Google has declared it has committed to a standard equivalent to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws for international data transfers. We have also agreed on so-called standard contractual clauses with Google, which aim to ensure an adequate level of data protection in third countries.

(1) In addition to Google Ads, we use the application Google Remarketing. This is a procedure with which we want to address you again. Through this application, after visiting our website, our ads may be displayed to you during your further internet use, especially on other websites in the so-called "Google Display Network." This is done using cookies stored in your browser, through which your usage behavior when visiting various websites is recorded and evaluated by Google. This way, Google can determine your previous visit to our website. According to Google, the data collected as part of remarketing is not merged with your personal data that may be stored by Google. In particular, Google states that pseudonymization is used in remarketing. You can object to Google Remarketing or edit your settings in the Google Ads Settings Manager at https://adssettings.google.com/anonymous?hl=de&sig= ACi0TChw0_ZZngvRFbxNYiQoRkKODXcYGdmXhXmtWAyfrapY-ipF2ucxZXIpBTxfzsXJSDoXaG RWVpZ2AZMWG6JrizvQ3scmepXgEGD2eqJLy88OQ74TRJ8. Alternatively, you can prevent remarketing by disabling cookies in your browser settings.

(2) The legal basis for processing your data is Art. 6(1) sentence 1 lit. a, f GDPR. Further information about data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org. In cases where personal data is transferred to the USA, Google has declared that it follows a standard equivalent to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws for international data transfers. We have also agreed on so-called standard contractual clauses with Google, which aim to ensure an adequate level of data protection in third countries.

(1) Furthermore, the website uses the remarketing function “Custom Audiences” of Meta Platforms Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter also “Facebook”). This allows users of the website to be shown interest-based advertisements (“Facebook Ads”) within the social network Facebook or other websites that also use this procedure (especially the social network “Instagram,” which is also operated by Facebook). Our aim is to show you advertisements that are of interest to you, in order to make our website more attractive for you.

(2) Due to the marketing tools used, your browser automatically establishes a direct connection to Facebook’s server. We have no influence on the scope and further use of the data collected by Facebook through this tool and therefore inform you according to our knowledge: By embedding Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding webpage of our internet presence or clicked on one of our ads. If you are registered with a Facebook service, Facebook can associate the visit with your Facebook account. Even if you are not registered with Facebook or are not logged in, it is possible that the provider obtains and stores your IP address and other identifying features.

(3) The deactivation of the “Facebook Custom Audiences” function is possible for logged-in users at https://www.facebook.com/settings/?tab=ads#_.

(4) The legal basis for processing your data is Art. 6(1) sentence 1 lit. f GDPR. Further information about data processing by Facebook can be found at https://www.facebook.com/about/privacy.

(5) We use the “Conversion Pixel” or visitor action pixel of Facebook Inc. By calling this pixel from your browser, Facebook can subsequently recognize whether a Facebook ad was successful, e.g., led to a contract conclusion. We only receive statistical data from Facebook without reference to any specific person. Thus, we can record the effectiveness of Facebook ads for statistical and market research purposes. Especially if you are logged into Facebook, we refer you to their privacy information at https://www.facebook.com/about/privacy/. Please visit www.facebook.com/settings?tab=ads if you wish to revoke your consent to the conversion pixel.

(1) Our website uses the conversion tracking technology service (“Twitter Ads”) from Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, to draw attention to our offers on external websites. For this purpose, we use cookies through which certain parameters for measuring success, such as ad impressions or user clicks, can be recorded. If you arrive at our website via a Twitter ad, a cookie is stored on your device by “Twitter Ads.” These cookies typically expire after 30 days unless you manually delete them earlier or use appropriate browser settings, and they are not intended to personally identify you. Usually, the following analytical values are stored with this cookie: unique cookie ID, number of ad impressions per placement, last impression (relevant for post-view conversions), and opt-out information.

(2) These cookies allow Twitter to recognize your internet browser. If a user visits certain pages of a Twitter Ads customer and the cookie stored on their device has not yet expired, Twitter and the customer can recognize that the user clicked on the ad and was redirected to that page.

(3) We only receive statistical evaluations from Twitter and do not collect any personal data ourselves in this regard. Based on these evaluations, we can determine which of the advertising measures used are effective.

(4) Your browser automatically establishes a direct connection to Twitter’s server. We have no influence on the scope and further use of the data collected by Twitter. Therefore, we inform you according to our knowledge: By embedding Twitter Ads, Twitter receives information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Twitter service, Twitter can associate the visit with your account. Even if you are not registered or logged in with Twitter, it is possible that the provider obtains and stores your IP address.

(5) The storage of the aforementioned data is based on the legal basis Art. 6(1) lit. f GDPR. Further information about data processing by Twitter can be found at https://twitter.com/de/privacy. You can block the use of cookies by adjusting your browser settings accordingly. Please refer to your browser software instructions for guidance.

This website uses the retargeting technology “AdRoll” from AdRoll Inc., 972 Mission St, 3rd Floor, San Francisco, CA 94103, United States. This technology allows targeted advertising to users who have already shown interest in our offer. The display of advertisements is based on a cookie-based analysis of previous user behavior. The storage of data is based on the legal basis Art. 6(1) lit. f GDPR. Further information about data processing by AdRoll can be found at https://www.nextroll.com/privacy. You can block the use of cookies by adjusting your browser settings accordingly. Please refer to your browser software instructions for guidance.

This website uses the service “Outbrain” from Outbrain Inc., 39 West 13th Street, New York, NY 10011, USA. This service allows targeted advertising to internet users who have already shown interest in our offer. The technology relies on a cookie-based analysis of user behavior. The advertisements appear only on Outbrain ad placements, either on advertising spaces from Outbrain Engage or the Outbrain Extended Network. If you do not want to receive interest-based advertising, you can disable this function in your browser settings. More information about Outbrain can be found at https://www.outbrain.com/de/about/company.

(1) Our website uses the service "LinkedIn Ads" from LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn Ads stores and processes information about your user behavior on our website. LinkedIn Ads uses cookies, among other things—small text files stored locally in the cache of your web browser on your device—that enable an analysis of your use of our website.

(2) We use LinkedIn Ads for marketing and optimization purposes, in particular to analyze the use of our website and to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of usage, we can improve our offer and make it more interesting for users. This is our legitimate interest in processing the above data in accordance with Art. 6(1) sentence 1 lit. f GDPR.

(3) You can prevent the installation of cookies by deleting existing cookies and disabling the storage of cookies in your web browser settings. Please note that in this case you may not be able to use all functions of our website to their full extent. You can also prevent the collection of the above information by LinkedIn by setting an opt-out cookie on one of the following linked websites: https://www.linkedin.com/psettings/guest-controls, http://optout.aboutads.info/?c=2#!/, http://www.youronlinechoices.com/de/praferenzmanagement/.

(4) Please note that this setting is deleted when you delete your cookies. You can object to the collection and transmission of personal data or prevent the processing of this data by disabling JavaScript execution in your browser. Additionally, you can prevent the execution of JavaScript code altogether by installing a JavaScript blocker (e.g., https://noscript.net/ or https://www.ghostery.com). Please note that in this case you may not be able to use all functions of our website to their full extent.

(5) In cases where personal data is transferred to the USA, LinkedIn has reportedly imposed a standard that corresponds to the former EU-US Privacy Shield and has committed to comply with applicable data protection laws in international data transfers. We have also concluded so-called standard contractual clauses with Google, the purpose of which is to ensure an adequate level of data protection in third countries.

(6) Further information about LinkedIn and data protection can be found at the following website: https://www.linkedin.com/legal/privacy-policy

(1) This website also conducts analyses of user behavior through so-called A/B testing. In this process, we can display our website to you with slightly varied content depending on an assigned profile. This allows us to analyze our offering, continuously improve it, and make it more interesting for you as a user. The legal basis for A/B testing is Art. 6(1) sentence 1 lit. f GDPR.

(2) For this evaluation, cookies (for more details see § 3) are stored on your computer. The information collected in this way is stored exclusively by the data controller on their server in [Germany]. You can prevent the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, please note that you may not be able to use our website fully. Preventing the storage of cookies is possible by adjusting your browser settings.

Miscellaneous

The processing of personal data takes place only as long as it is necessary to achieve the processing purpose or data processing (in particular storage) is legally required.

If the processing purpose ceases to apply or the statutory storage period expires, personal data will be deleted or blocked in accordance with legal regulations.

In case of data protection violations, the affected person has the right to file a complaint with the competent supervisory authority. The supervisory authority is the Data Protection Officer of the federal state of Hesse. You can find the contact details at www.datenschutz.hessen.de.