With this privacy policy, we would like to inform you about the collection of personal data and the storage and access of information on your end device when using our website and related services. This privacy policy applies to all websites or services that refer to this privacy policy.
Personal data within the meaning of Art. 4 of the EU General Data Protection Regulation (GDPR) is any information relating to an identified or identifiable natural person, e.g. name, address, email addresses, user behavior, etc.
1.2 Responsible company
The company responsible for the processing of personal data within the meaning of Art. 4 para. 7 GDPR is:
CASHY Austria GmbH
Ared Straße 13/HO 16/3/96,
2544 Leobersdorf,
Austria
E-mail: support@cashy.at
If you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we collect the personal data that your browser transmits to our server and that is technically necessary for us to display our website and ensure stability and security. This data is temporarily stored in log files. The following information, which is technically necessary for us, is collected and stored until it is automatically deleted:
Name of the website or file accessed
Date and time of retrieval
Description of the type of web browser used
IP address
A personal evaluation of the server log files does not take place. This data cannot be assigned to a specific person at any time. This data is not merged with other data sources.
Recipients
We may also use third parties or external service providers (e.g. hosting providers, content management system providers) as data processors or processors for data processing. The transfer for processing takes place in accordance with the necessary purposes (e.g. to display the website and to create the content).
Legal basis
Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest is to ensure the delivery of the website and to combat misuse and troubleshooting.
Storage period
The log files are deleted as soon as they are no longer required for the purposes mentioned, at the latest after 30 days.
2.2 Contact
Purpose / information:
When communicating and/or cooperating with us, e.g. by e-mail, telephone or letter, the data you provide (your e-mail address, your name and telephone number if applicable or the personal data provided in the communication) will be stored by us, e.g. in order to answer your questions or to comply with the communication required for our business purposes.
When processing the data that arises in the context of communication, we have a legitimate interest in processing the data in accordance with the legal requirements for internal review or in accordance with the respective communication concern.
We pass on the data collected for processing to the respective internal departments or to external service providers, contract processors (e.g. hosting, service providers) in accordance with the necessary purposes (for establishing contact, business-related communication and customer care). hosting, service providers) in accordance with the required purposes (for establishing contact, business-related communication and customer care).
Deletion:
We delete the data collected in this context after the storage is no longer required in connection with the communication matter, unless there are statutory retention obligations or limitation periods must be observed.
Legal basis
Art. 6 para. 1 lit. b GDPR (processing in connection with a contract).
Art. 6 para. 1 lit. f GDPR (legitimate interest). CASHY may have a legitimate interest, for
example, in combating fraud or enforcing/defending legal claims.
2.3 Registration and login
Processing / purpose
The following data is collected for registration on our platform:
First and last name
Date of birth
Email address
(Mobile) phone number
Password for login (cryptographically encrypted)
If you log in with your access data, CASHY saves the IP address, login information and the date and time of access each time a user accesses the site. This data is used to defend against or investigate attacks on CASHY.
Recipients
Unless a contract is concluded, we do not pass on your data to third parties. In individual cases, this data is forwarded to investigating authorities (in particular the police and public prosecutor's office) for the investigation of criminal offenses. The data is stored in the system for 30 days for these purposes.
Legal basis
Art. 6 para. 1 lit. b GDPR (contract initiation).
Storage period
We delete the data arising in this context after the storage is no longer required in connection with the communication request, unless there are statutory retention obligations or limitation periods must be observed.
2.4 Conclusion of contract
In the event of the conclusion of a contract, we will collect the following data in addition to your registration data:
Address (if required for delivery)
Bank account details or PayPal address (if no cash payment is paid out in the store)
Photo of the identity card
Business history
If a contract is concluded for a car pawn, we also collect the following data:
Registration form
Vehicle documents
Recipients
Personal data will only be passed on to third parties if this is necessary for the fulfillment of the contract. Any further transfer of personal data to third parties will only take place if CASHY is legally obliged to do so and to combat cases of fraud and abuse. CASHY passes on the data to the following third parties for the fulfillment of the contract:
Deliverer (for collection and delivery of the pledged item)
Bank (for processing the payment services)
External accounting
Auctioneer (to realize the pledge in the event of forfeiture)
Debt collection agency (only if the loan is not repaid)
Providers who check your creditworthiness
Legal basis
Art. 6 para. 1 lit. b GDPR (processing in connection with a contract).
Storage duration
Your data will only be used for as long as is necessary for the existing contractual relationship. Irrespective of this, we are obliged by commercial and tax law to store your address, payment and order data for a period of seven years.
Certain data such as name, address, loan amount including ancillary costs and date of conclusion are also stored until the expiry of civil law enrichment claims (30 years). Data processing is carried out on the basis of the statutory provisions of Section 96 (3) TKG and Article 6 (1) (a) (consent) and/or (b) (necessary for the performance of the contract) of the GDPR.
As a data subject, you have the following rights with regard to the personal data concerning you in accordance with the statutory provisions:
Right to information about the personal data stored by CASHY
Right to rectification or erasure
Right to restriction of processing
Right to object to the processing
Right to data portability
the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal (where the processing is based on Art. 6 (1) (a) or Art. 9 (2) (a) GDPR);
Please send your request to assert your rights as a data subject to support@cashy.at
The personal data processed by us will be deleted in accordance with the legal requirements as soon as the consents permitting the processing are revoked or other permissions cease to apply (e.g. if the purpose of processing this personal data no longer applies or it is not required for the purpose).
If the personal data are not deleted because they are required for other and legally permissible purposes, their processing is restricted to these purposes. This means that the personal data will be blocked for the purposes that no longer apply and will no longer be processed for these purposes. This applies, for example, to personal data that must be stored for commercial or tax law reasons or whose storage is necessary for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person.
As part of our privacy policy, we also inform you about the deletion and storage of personal data that apply specifically to the respective processing operations.
When registering, access to the profile is only possible after entering a personal password. CASHY uses suitable technical and organizational security measures to protect the stored personal data against manipulation, partial or complete loss and against unauthorized access by third parties. CASHY's security measures are continuously improved in line with technological developments. Please note that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities.
CASHY takes internal data protection very seriously. The employees and the service companies commissioned by CASHY have been obliged by CASHY to maintain confidentiality and to comply with data protection regulations.
Information / Purposes
In addition to the aforementioned data, cookies or similar technologies (hereinafter generally referred to as "cookies") are used when you use and visit our website. Cookies are small text files that are stored by your browser on your end device to store certain information. During your visit to the website or the next time you visit our website with the same device, the information stored in cookies is either sent back to our website ("first party cookie") or to another third-party website to which the cookie belongs ("third party cookie").
The information stored and sent back enables the respective website to recognize that you have already accessed and visited it with the browser of your device. Some cookies also enable us to recognize individual users by means of pseudonyms, e.g. individual or random IDs, so that we can offer individual services. Other technologies, such as local storage or device fingerprinting, may also be used to read information from the device you use to visit our website and use it to recognize you.
This website uses the following types of cookies
Required cookies: These are technically necessary cookies
Performance cookies: These cookies analyze your user behavior
Marketing cookies: These cookies enable us to display personalized advertising and measure the success of our advertising campaigns
The cookies are set by our website or the external services in order to maintain the full functionality of our website, to improve user-friendliness and to optimize our website or to pursue the purpose stated in your consent.
We will inform you whether and how cookies are set and used for the tools we use in the respective sections of the privacy policy. If a cookie management platform is used on this website, you can also find further information there.
Legal basis(s)
The use of cookies and any further storage of personal data will only take place with your express consent or if this is absolutely necessary in order to be able to use the service offered and accessed by you accordingly. The legal bases are Art. 6 para. 1 lit. f GDPR (legitimate interest) or Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR (consent). Consent pursuant to Art. 6 para. 1 lit. a GDPR also constitutes consent within the meaning of Section 25 para. 1 TTDSG for the setting of cookies on the user's terminal device. Insofar as another legal basis according to the GDPR is mentioned, the storage or setting of the cookie is based on the exception according to § 25 para. 2 no. 2 TTDSG.
In the case of cookies that are collected on the basis of a legitimate interest, it generally applies that our legitimate interest is to ensure the functionality of our website and the services integrated on it (necessary cookies). In addition, the cookies may increase user-friendliness and enable an optimized design of our website. Here we have weighed up your interests against our interests.
We can only identify, analyze and track you with the help of cookies if you have consented to the use of the cookie and your personal data in accordance with Art. 6 para. 1 lit. a GDPR.
The relevant legal basis for the respective cookies is explained to you below in the respective sections on the tools used.
Deletion of cookies/objection
In addition to cookies that are only used during a session and deleted after the website visit ('session cookies'), cookies can also be used to store user settings and other information for a certain period of time (e.g. two years) ('permanent cookies'). Details on the deletion periods are listed with the respective tool.
However, you usually have the option of setting your browser to prevent cookies from being stored on your device. Cookies that have already been set can be deleted at any time via browser settings. You can find instructions on how to do this in the help function of your browser.
A general objection to cookies used for online advertising can be declared for a large number of services used on websites within the framework of developed self-regulation programs, e.g. via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. We would like to point out that the setting you have made will be deleted if you delete your cookies
We would like to point out that the exclusion of cookies can lead to functional limitations of the website.
Information / Purposes
We use necessary cookies on our website to ensure technical functions without which you cannot use our websites as intended and expected. These cookies only collect and store pseudonymized information so that they cannot track your movements on other websites. These cookies are used exclusively by us and are therefore first party cookies. This means that all information stored in the cookies is sent back to our website.
Necessary cookies are used, for example, to ensure that you as a registered user remain logged in when accessing various subpages of our website and therefore do not have to re-enter your login data each time you access a new page or that a language option once selected can be taken into account.
The use of required cookies on our website is possible without your consent. For this reason, required cookies cannot be individually deactivated or activated. However, you can deactivate cookies in your browser at any time (see above). These cookies are automatically deleted after a period of time defined by us. The following required cookies are used on our website:
Cookie nameProviderPurposeStorage durationTokenFirst-PartyAuthentication of the logged-in user2 daysCookie-2First-PartyProvision of so-called "sticky sessions" so that all subsequent requests from the same user are answered by the same serverSession
Recipient:
We pass on the cookie information to external service providers (e.g. hosting and support providers) and to the respective named external cookie provider in accordance with the stated necessary purposes.
Legal basis(s)
Art. 6 para. 1 lit. f GDPR (legitimate interest) Our legitimate interest is the provision of a secure and appealing website.
On our website, we use various services of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The responsible company in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter collectively referred to as "Google").
In exceptional cases, the information collected by Google about the use of this website is transferred to a Google server in the USA and stored there.
The data transfer to the USA is based on standard contractual clauses concluded with Google in accordance with Art. 46 GDPR. You can also find information on data transmission under this link:
You can find more information about Google services here.
Information / Purpose
We use Google Analytics, a web analysis service, on our website.
Google Analytics uses technologies on our behalf that enable the recognition of the user for the purpose of analyzing the pseudonymous use of the website by you (e.g. cookies or device fingerprinting).
We receive various usage data about your website visit, such as page views, length of stay, interaction with the website. We also record your approximate location (region), your IP address (shortened), technical information from your browser and the referrer URL. If a contract is concluded, we also record the amount of the loan taken out. Google will use this information on our behalf to evaluate your use of our website, to compile reports on the activities within the website and to provide us with further services associated with the use of the website. Pseudonymous user profiles can be created from the processed data.
We have adapted the configuration of Google Analytics so that only the website analysis function is used unless separate consent has been given for the advertising functions.
With Google Analytics, the anonymization of IP addresses is activated by default. This means that the IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by the user's browser will not be merged with other Google data.
We use Google Analytics to analyze the use of our website, to compile reports on the website activities of our users and to obtain further statistical evaluations associated with the use of the website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user of our website. We also receive information about the functionality of our website (e.g. to identify navigation problems).
Receiver
Recipients of the data are/may be
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
It cannot be ruled out that US authorities will access the data stored by Google.
When configuring Google Analytics, care was taken to ensure that Google receives this data as a processor and is therefore not permitted to use this data for its own purposes. The configuration of the "Google Analytics advertising functions" is independent of this and is described separately in the corresponding sections, insofar as these are also used on this website.
Storage duration
The deletion of analytics data is set to 24 months.
Statutory cookies are stored for up to 2 years.
Legal basis(s)
Art. 6 para. 1 lit. a GDPR (consent)
Revocation / Deletion
You can revoke this consent to cookies at any time with effect for the future in the cookie settings.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at this link.
Information / Purpose
We use the Google Ads Conversion advertising service on our website.
Google Ads enables us to draw attention to our offers with the help of advertising material (so-called Google Ads) on external websites. We can determine how successful the individual advertising measures are in relation to the advertising campaign data. We are interested in showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
These advertisements are delivered by Google via so-called "ad servers". We use so-called ad server cookies for this purpose, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Ads will store a cookie on your device. The following information is usually stored as analysis values for this cookie: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user no longer wishes to be addressed).
These cookies enable Google to recognize your web browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their device has not yet expired, Google and the website operator can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each website operator. Cookies can therefore not be tracked across the websites of different website operators.
We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations of the aforementioned data from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify you on the basis of this information. Due to the use of Google Ads, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of Google Ads. To the best of our knowledge, Google receives the information that you have accessed the relevant part of our website or clicked on one of our ads. If you have a user account with Google and are registered, Google can assign the visit to your user account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will find out your IP address and store it.
We use Google Ads for marketing and optimization purposes, in particular to display ads that are relevant and interesting to you, to improve campaign performance reports and to achieve a fair calculation of advertising costs.
Receiver
Recipients of the data are/may be
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
It cannot be ruled out that US authorities will access the data stored by Google.
There is joint responsibility for data processing in connection with Google Ads Conversion between Google and us in accordance with Art. 26 GDPR. We have agreed with Google that we assume primary responsibility under the GDPR for the processing of the data and fulfill all obligations under the GDPR with regard to the processing of the data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR).
Storage duration
The cookies set generally lose their validity after 30 days. They are not intended to identify you personally
Legal basis(s)
Art. 6 para. 1 lit. a GDPR (consent)
Revocation / Deletion
You can revoke this consent to cookies at any time with effect for the future in the cookie settings.
You can also prevent the storage of cookies by setting your web browser to block cookies from the domain"www.googleadservices.com". You can make this setting at https://www.google.de/settings/ads. You can also deactivate interest-based ads via the link http://optout.aboutads.info. Please note that these settings will be deleted if you delete your cookies in the browser settings.
Information / Purpose
We use the remarketing function of the Google Ads service on the website.
With the remarketing function, we can present users of our website with advertisements based on their interests on other websites within the Google advertising network (in Google Search or on YouTube, so-called "Google Ads" or on other websites). For this purpose, Google stores cookies on the end devices of users who visit certain Google services or websites in the Google Display Network. These cookies are used to record the visits of these users. The cookies are used to uniquely identify a web browser on a specific end device and not to identify a person. Google Ads Remarketing uses the data collected by the cookie to analyze your user behavior on our website (e.g. clicks on certain products) in order to classify you into certain advertising target groups and then display suitable advertising messages to you when you visit other online offers (remarketing or retargeting).
We use Google Ads with Remarketing for marketing and optimization purposes, in particular to display ads that are relevant and interesting to you
Receiver
Recipients of the data are/may be
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
It cannot be ruled out that US authorities will access the data stored by Google.
There is joint responsibility for data processing in connection with Google Ads Remarketing between Google and us in accordance with Art. 26 GDPR. We have agreed with Google that we assume primary responsibility under the GDPR for the processing of the data and fulfill all obligations under the GDPR with regard to the processing of the data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR).
Storage duration
The cookies set via our website generally lose their validity after 180 days. They are not intended to identify you personally
Legal basis(s)
Art. 6 para. 1 lit. a GDPR (consent)
Revocation / Deletion
You can revoke this consent to cookies at any time with effect for the future in the cookie settings.
If you have a Google account, you can deactivate personalized advertising at this link. Or you can prevent the tracking function by permanently deactivating it in your Firefox, Internet Explorer or Google Chrome browsers by clicking on this link.
Information / Purpose
We use the 'Google Tag Manager' on our website.
Google Tag Manager enables us to manage website tags via an interface. The Google Tag Manager tool, which implements the tags, is a cookie-free domain and does not itself collect any personal data. Google Tag Manager triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
Receiver
The recipient of the data is Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.
Further information on data protection can be found on the following Google websites:
Terms of use Google Tag Manager
Legal basis(s)
Art. 6 (1) f GDPR (legitimate interest)
Our legitimate interest lies in the simple integration of various tools on the website.
If consent is requested for the integration of the Google Tag Manager, the processing takes place exclusively on the
Legal basis
Art. 6 para. 1 lit. a GDPR.
Revocation / Deletion
You can revoke this consent to cookies at any time with effect for the future in the cookie settings.
Information / Purpose
We integrate maps from the map service "Google Maps" on our website.
Google Maps enables us to show you an interactive map on our website that shows you how to get to our locations.
In order to provide the map function, Google Maps generally collects the following data: technical information of the browser used, type of device used, IP address, crash reports, system activity, date, time and referrer URL, interaction with the website
Further information on data protection can be found on the following Google websites:
Receiver
Recipients of the data are/may be
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
It cannot be ruled out that US authorities will access the data stored by Google.
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent)
Revocation / Deletion
You can revoke this consent to cookies at any time with effect for the future in the cookie settings.
In order to target our marketing activities, data is collected and stored on our website using Microsoft Bing Ads technologies, from which pseudonymized user profiles are created. This is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service enables us to track the activities of users on our website if they have reached our website via ads from Bing Ads. If you reach our website via such an ad, a cookie is placed on your computer. Our website contains a Bing UET tag, which is a code that is used in conjunction with the cookie to store non-personal data about the use of the website. Information about your identity is not collected.
The information collected is transferred to Microsoft servers in the USA and stored there for a maximum of 180 days. You can prevent the collection of data generated by the cookie and related to your use of the website as well as the processing of this data by deactivating the setting of cookies. However, this may limit the functionality of the website under certain circumstances.
Microsoft may be able to track your usage behavior across multiple electronic devices through so-called cross-device tracking and is therefore able to display personalized advertising on or in Microsoft websites and apps. You can deactivate this behavior at http://choice.microsoft.com/de-de/opt-out.
You can find more information about Bing's analytics services on the Bing Ads website(https://help.bingads.microsoft.com/#apex/3/de/53056/2).
You can find more information on data protection at Microsoft and Bing in Microsoft's privacy policy(https://privacy.microsoft.com/de-de/privacystatement).
We use the "Meta Pixel" service of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, D02x525, Ireland (hereinafter "Meta").
Meta Pixel enables us to track and analyze user activities on our website using a code. This allows us to evaluate the effectiveness of our advertising campaigns and optimize them for the future.
Meta collects the following data for this purpose: IP address, technical information of the browser used, referrer URL, data on the person using the website, assignment of a pixel ID or use of the website (e.g. click on certain products or links).
Through the use of Meta Pixel, third parties, including Facebook, may use cookies, web beacons and other storage technologies to collect or receive information from our website and elsewhere on the Internet, and then use that information to provide measurement solutions and ad targeting.
Storage duration
The pixels set via our website lose their validity as soon as you close your browser. The cookies set by Meta on our website lose their validity after one year at the latest.
Receiver
Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Meta Platforms Inc, 1601 Willow Rd, Menlo Park, California, 94025-1452
Data is transferred to the USA on the basis of the EU-US data protection framework and the associated adequacy decision of the European Commission. You can also find information on data transfer here.
It cannot be ruled out that US authorities may access the data stored by Meta Platforms Inc.
We use the "TikTok Pixel" service provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (hereinafter "TikTok").
TikTok Pixel enables us to track and analyze user activities on our website using a code. This allows us to evaluate the effectiveness of our advertising campaigns and optimize them for the future.
TikTok collects the following data for this purpose: IP address, technical information of the browser used, referrer URL, data on the person using the website, assignment of a pixel ID or use of the website (e.g. click on certain products or links).
Through the use of TikTok Pixel, third parties, including TikTok, may use cookies, web beacons and other storage technologies to collect or receive information from our website and elsewhere on the Internet, and then use that information to provide measurement solutions and ad targeting.
Storage duration
The pixels set via our website lose their validity as soon as you close your browser. The cookies set by TikTok on our website lose their validity after one year at the latest.
Receiver
TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
To contact TikTok Technology Limited's Data Protection Officer by email: https://www.tiktok.com/legal/report/DPO.
The privacy policy of TikTok Technology Limited: https://www.tiktok.com/legal/privacy-policy-eea?lang=de.
Information / Purposes
We may also process the data you provide when concluding a contract in order to send you individual recommendations by email based on the contracts you have concluded. This is a special form of direct marketing in which we have a legitimate interest in order to intensify customer loyalty by suggesting suitable and interesting information. Also on the basis of our legitimate interest, we may send you technical or other factual information in connection with the conclusion of your contract.
Legal basis
In this respect, data processing is carried out solely on the basis of our legitimate interest in contract-related direct advertising in accordance with Art. 6 para. 1 lit. f GDPR.
Objection / deletion
You can object to the receipt of information by sending us a text to the contact details stated in Section 1.2 or by using the unsubscribe link contained in every e-mail message.
We use the chat software "Live Chat" from the third-party provider Text, Inc. 101 Arch Street, 8th Floor, Boston MA 02110, USA on our website. Live Chat offers a simple and user-friendly way to communicate with you directly via the website. The data that you share with us voluntarily (i.e. on the basis of your consent within the meaning of Art. 6 para. 1 lit. a GDPR) via the software is processed. The servers of Text, Inc. are located in the USA; the company is certified according to the EU-US data protection framework. You can view the privacy policy of Text, Inc. at the following link https://www.livechat.com/legal/privacy-policy/ Information on data security can be found here: https://www.livechat.com/help/livechat-security-and-data-storage/
Information / Purposes
We maintain a publicly accessible profile (so-called "fan page") in the social network "Facebook" and "Instagram". The provider of Facebook is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: Meta).
When you visit our fan pages, Meta generally analyzes your user behavior. Meta also collects your device information. This happens regardless of whether you are logged in to Facebook. Meta provides us with so-called "Page Insights" through which we receive an evaluation of the analysis of interactions with our fan page. Further information can be found in Meta's privacy policy.
We are jointly responsible for data processing with Meta. To this end, we have concluded a joint data processing agreement with Meta. This agreement specifies who is responsible for which data processing operations when you visit our fan pages. You can view this agreement between us and Facebook here.
We provide the fan pages to give you an appealing and up-to-date online presence.
Legal basis
Art. 6(1) f (legitimate interest)
Please note that Meta may base its data processing operations on a different legal basis. Further information can be found in the privacy policy and the joint processing agreement.
Deletion
We delete the data arising in this context after storage is no longer necessary, unless there are statutory retention obligations or limitation periods must be observed.
Assertion of your rights
As we are jointly responsible for data processing with Facebook, you can assert your rights both against us and against Facebook. However, please note that, depending on the processing procedure, we do not have full influence on the data processing, as this is mainly carried out by Facebook.
Information / Purposes
We maintain a publicly accessible profile (so-called "fan page") in the social network "Linkedin". The provider of Linkedin is LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland.
When you visit our fan pages, Linkedin generally analyzes your user behavior. Linkedin also records your device information. Linkedin provides us with so-called "Page Insights" through which we receive the evaluation of the analysis of interactions with our fan page. Further information can be found in Linkedin's privacy policy.
We are jointly responsible for data processing with Linkedin. To this end, we have concluded an agreement with Linkedin on joint data processing. This agreement specifies who is responsible for which data processing operations when you visit our fan page. You can view this agreement between us and Facebook here.
We provide the fan pages to give you an appealing and up-to-date online presence.
Legal basis
Art. 6(1) f (legitimate interest)
Please note that Linkedin may base its data processing operations on a different legal basis. Further information can be found in the privacy policy and the joint processing agreement.
Deletion
We delete the data arising in this context after storage is no longer necessary, unless there are statutory retention obligations or limitation periods must be observed.
Assertion of your rights
As we are jointly responsible for data processing with Linkedin, you can assert your rights against both us and Linkedin. Please note, however, that depending on the processing operation, we do not have full influence on the data processing, as this is mainly carried out by Linkedin.
If you have given your consent to the processing of your personal data, you can withdraw this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us. This does not affect the lawfulness of the processing based on your consent until you withdraw it.
Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. Our legitimate interests are presented by us in each case in the description of data processing When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling legitimate grounds on the basis of which we will continue the processing.
You can object to the processing of your personal data for the purposes of direct advertising and associated profiling at any time without giving reasons. Your personal data will then no longer be processed for these purposes.
You can inform us of your withdrawal of consent or objection using the contact details provided in section 1.2 "Responsible company" or by using the technical functions described in this privacy policy.