Privacy policy
Personal data (hereinafter mostly referred to as ‘data’) is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
According to Article 4(1) of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as ‘GDPR’), ‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
In the following Privacy Policy, we inform you in particular about the nature, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we determine the purposes and means of such processing either independently or jointly with others. The use of cookies and comparable technologies on users’ devices is additionally governed by Section 25 of the German Telecommunications and Telemedia Data Protection Act (TTDSG).
Furthermore, we provide information below about the third-party components we use to optimize our website and improve the user experience, insofar as these components involve third parties processing data under their own responsibility.
Our privacy policy is structured as follows:
I. Information About Us as the Data Controller
II. Rights of Users and Data Subjects
III. Information on Data Processing
I Information about us as the controller
The responsible provider of this website in terms of data protection law is:
Anton Knoll GmbH & Co. KG
Dorfstraße 1
49744 Geeste-Bramhar
Telephone: 05963 / 98292-11
Fax: 05963 / 98292-15
Email: [email protected]
The provider’s Data Protection Officer is:
Markus Jackstädt
Telefon: 05963 / 98292-45
Telefax: 05963 / 98292-15
E-Mail: [email protected]
II Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right to
- to confirmation as to whether data concerning them is being processed, to information about the processed data, to further information about the data processing and to copies of the data (cf. also Art. 15 GDPR);
- to rectification or completion of incorrect or incomplete data (see also Art. 16 GDPR);
- to the immediate erasure of the data concerning them (see also Art. 17 GDPR) or, alternatively, if further processing is required pursuant to Art. 17 (3) GDPR, to the restriction of processing in accordance with Art. 18 GDPR;
- to receive the data concerning them and provided by them and to transfer this data to other providers/controllers (cf. also Art. 20 GDPR);
- to lodge a complaint with the supervisory authority if they are of the opinion that the data concerning them is being processed by the provider in breach of data protection regulations (see also Art. 77 GDPR).
The supervisory authority responsible for us is:
The State Commissioner for Data Protection of Lower Saxony Prinzenstraße 5, 30159 Hannover www.lfd.niedersachsen.de
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any correction or deletion of data or the restriction of processing that takes place on the basis of Articles 16, 17 para. 1, 18 GDPR. However, this obligation does not apply if this notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.
Pursuant to Article 21 of the GDPR, users and data subjects also have the right to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Article 6(1)(f) of the GDPR. In particular, an objection to data processing for the purpose of direct marketing is permissible.
III Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of the storage no longer applies, the deletion of the data does not conflict with any statutory retention obligations and no other information is provided below on individual processing procedures.
Cookie Manager
To obtain consent for the use of technically non-essential cookies and comparable technologies on the website, the provider uses a cookie consent manager. Technically non-essential services (e.g. Google Analytics, Facebook Pixel, Google Fonts, Google Tag Manager, Google reCAPTCHA, Adobe Typekit) are only loaded after you have given your explicit consent. The legal basis for this is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TTDSG.
When the website is called up, a cookie with the setting information is stored on the user’s end device so that the request for consent does not have to be made on a subsequent visit.
The cookie is required to obtain the user’s legally compliant consent.
The user can prevent or stop the installation of cookies by changing the settings in their browser.
Cookies
a) Session-Cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies that are placed and stored on your end device by the Internet browser you use. These cookies process certain information from you, such as your browser or location data or your IP address, to an individual extent.
This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our website in different languages or the offer of a shopping basket function.
The legal basis for this processing is Art. 6 para. 1 lit. b.) GDPR, insofar as these cookies process data for contract initiation or contract fulfilment.
If the processing does not serve to initiate or fulfil a contract, our legitimate interest lies in improving the functionality of our website. The legal basis in this case is Art. 6 para. 1 lit. f) GDPR.
These session cookies are deleted when you close your Internet browser.
b) Third-party provider Cookies
Our website may also use cookies from partner companies with whom we work for advertising, analytics, or website functionality purposes. These cookies are only set after you have given your prior consent via the cookie consent manager.
Please refer to the following information for details, in particular the purposes and legal basis for processing such third-party cookies.
c) Possibility of elimination
You can prevent or restrict the installation of cookies by changing the settings in your Internet browser. You can also delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you are using. If you have any questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.
However, if you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be used to their full extent.
Prize Draw
We offer you the opportunity to participate in prize draws through our website. If you participate in one of our prize draws, the data you provide when entering will be processed without requiring any further consent from you, but solely for the purpose of conducting and administering the respective prize draw.
As part of administering the prize draw, we will disclose your data to the transport company responsible for delivering the prize or to a financial service provider, insofar as such disclosure is necessary for the delivery or payment of your prize. If your data is to be published in the event of a win, you will be informed of this in the consent declaration.
The legal basis for the disclosure of data in this case is Art. 6(1)(b) GDPR.
You may withdraw your consent to the processing of your data for participation in our prize draws at any time with effect for the future in accordance with Art. 7(3) GDPR. To do so, you simply need to inform us of your withdrawal of consent.
Contact enquiries / contact option
If you contact us by contact form or e-mail, the data you provide will be used to process your enquiry. The provision of the data is necessary for processing and answering your enquiry – without it we cannot answer your enquiry or can only answer it to a limited extent.
The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR.
Your data will be deleted if your enquiry has been conclusively answered and the deletion does not conflict with any statutory retention obligations, such as in the case of any subsequent contract processing.
Online job applications / publication of job adverts
We offer you the opportunity to apply to us via our website. For these digital applications, we collect and process your applicant and application data electronically to handle the application process.
The legal basis for this processing is Section 26 (1) sentence 1 BDSG in conjunction with Art. 88 para. 1 GDPR.
If an employment contract is concluded after the application process, we will store the data you submitted in your application in your personnel file for the purpose of the usual organisational and administrative process – naturally in compliance with further legal obligations.
The legal basis for this processing is also Section 26 para. 1 sentence 1 BDSG in conjunction with Art. 88 para. 1 GDPR. Art. 88 para. 1 GDPR.
If an application is rejected, we automatically delete the data transmitted to us two months after notification of the rejection. However, the data will not be deleted if the data requires longer storage of up to four months or until the conclusion of legal proceedings due to legal provisions, e.g. due to the burden of proof under the AGG.
The legal basis in this case is Art. 6 para. 1 lit. f) GDPR and Section 24 para. 1 no. 2 BDSG. Our legitimate interest lies in legal defence and enforcement.
If you expressly consent to a longer storage of your data, e.g. for your inclusion in a database of applicants or interested parties, the data will be processed further on the basis of your consent. The legal basis is then Art. 6 para. 1 lit. a) GDPR. However, you can of course revoke your consent at any time in accordance with Art. 7 para. 3 GDPR by making a declaration to us with effect for the future.
Server data
For technical reasons, in particular to ensure a secure and stable Internet presence, data is transmitted to us or to our web space provider by your Internet browser. With these so-called server log files, the type and version of your Internet browser, the operating system, the website from which you have switched to our Internet presence (referrer URL), the website(s) of our Internet presence that you visit, the date and time of the respective access and the IP address of the Internet connection from which the use of our Internet presence takes place are collected, among other things.
The data collected in this way is stored temporarily, but not together with other data from you.
This storage takes place on the legal basis of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
The data will be deleted after seven days at the latest, unless further storage is required for evidence purposes. Otherwise, all or part of the data is excluded from deletion until the incident has been finally clarified.
To promote our products and services and communicate with prospective and existing customers, we maintain a company presence on the Facebook platform.
On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Facebook’s Data Protection Officer can be contacted via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have established an agreement governing our respective obligations under the GDPR in relation to our joint responsibility for data processing. This agreement, which sets out the respective obligations of both parties, is available at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting processing of personal data, as described below, is Art. 6(1)(f) GDPR. Our legitimate interest lies in analysing user interactions, communicating with customers and prospective customers, and promoting and selling our products and services.
The legal basis may also be the user’s consent given to the platform operator in accordance with Art. 6(1)(a) GDPR. Pursuant to Art. 7(3) GDPR, the user may withdraw this consent at any time with effect for the future by notifying the platform operator.
When you access our online presence on the Facebook platform, Meta Platforms Ireland Limited, as the operator of the platform in the EU, processes user data (e.g. personal information, IP address, etc.).
This user data is used to generate statistical information about the use of our company presence on Facebook. Meta Platforms Ireland Limited uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Meta Platforms Ireland Limited can, for example, display interest-based advertising to users both on and outside Facebook. If the user is logged into their Facebook account when accessing our page, Meta Platforms Ireland Limited may also link this data to the respective user account.
If a user contacts us via Facebook, the personal data provided by the user in this context will be used to process the enquiry. We will delete the user’s data once the enquiry has been fully addressed, provided that no statutory retention obligations, such as those arising from subsequent contractual transactions, prevent deletion.
Meta Platforms Ireland Limited may also use cookies to process the data.
If the user does not consent to this processing, they may prevent the installation of cookies by adjusting their browser settings accordingly. Cookies that have already been stored can also be deleted at any time. The settings for this depend on the specific browser. For Flash cookies, processing cannot be prevented through browser settings but rather by adjusting the settings in the Flash Player. If the user prevents or restricts the installation of cookies, this may result in not all Facebook features being fully available.
For more information about data processing activities, how to prevent them, and how to delete data processed by Facebook, please see Facebook’s Privacy Policy:
https://www.facebook.com/privacy/explanation
It cannot be ruled out that Meta Platforms Ireland Limited may also process data through Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, in the United States.
To promote our products and services and to communicate with prospective customers and clients, we maintain a company account on Instagram.
On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
You can contact Instagram’s Data Protection Officer via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have established an agreement governing our respective obligations under the GDPR in relation to our joint responsibility for data processing. This agreement, which sets out the respective obligations of both parties, is available at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting processing of personal data, as described below, is Art. 6(1)(f) GDPR. Our legitimate interest lies in analysing user interactions, communicating with customers and prospective customers, and promoting and selling our products and services.
The legal basis may also be the user’s consent given to the platform operator in accordance with Art. 6(1)(a) GDPR. Pursuant to Art. 7(3) GDPR, the user may withdraw this consent at any time with effect for the future by notifying the platform operator.
When you visit our online presence on the Instagram platform, Meta Platforms Ireland Limited—as the platform operator in the EU—processes user data (e.g., personal information, IP address, etc.).
This user data is used to gather statistical information about the usage of our company’s Instagram page. Meta Platforms Ireland Limited uses this data for market research and advertising purposes, as well as to create user profiles. Based on these profiles, Meta Platforms Ireland Limited can, for example, serve users interest-based ads both on and off Instagram. If the user is logged into their Instagram account at the time of visiting the page, Meta Platforms Ireland Limited can also link the data to the respective user account.
If a user contacts us via Instagram, the user’s personal data provided on that occasion will be used to process the inquiry. We will delete the user’s data once the user’s inquiry has been fully resolved, provided that there are no legal retention requirements—such as those related to subsequent contract fulfillment—that prevent us from doing so.
Meta Platforms Ireland Limited may also use cookies to process the data.
If the user does not consent to this processing, they may prevent the installation of cookies by adjusting their browser settings accordingly. Cookies that have already been stored can also be deleted at any time. The settings for this depend on the specific browser. For Flash cookies, processing cannot be prevented through browser settings but rather by adjusting the settings in the Flash Player. If the user prevents or restricts the installation of cookies, this may result in not all Facebook features being fully available.
For more information about data processing activities, how to opt out, and how to delete the data processed by Instagram, please see Instagram’s Privacy Policy:
https://help.instagram.com/519522125107875
It cannot be ruled out that Meta Platforms Ireland Limited may also process data through Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, in the United States.
TikTok
We maintain an online presence on TikTok to showcase our company, products, and services, and to communicate with customers, prospective customers, and other users.
The provider of the platform for users in the European Economic Area is:
TikTok Technology Limited
10 Earlsfort Terrace
Dublin, D02 T380
Ireland
When our TikTok profile is accessed, TikTok, as an independent data controller, processes users’ personal data. This may include, in particular, the IP address, device and browser information, location data, usage and interaction data, as well as, where applicable, account, content, and communication data. If the user is logged into TikTok, TikTok may associate the collected data with the respective user account. We have no influence over the nature, scope, or purpose of this processing by TikTok; TikTok is solely responsible for this.
To the extent that users interact with our TikTok profile through comments, direct messages, or in any other way, we process the data provided to us or visible to us in order to handle the respective inquiry, for communication purposes, and for public relations and the promotion of our company. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in promoting our company’s public image and in communicating with customers and prospective clients. To the extent that the communication serves to initiate or fulfill a contractual relationship, the legal basis is Article 6(1)(b) of the GDPR.
TikTok may provide us with statistical reports on the usage and reach of our profile and content. These reports may include, in particular, information on views, interactions, and the composition of the target audiences reached. To the extent that we are provided exclusively with aggregated, anonymized statistics, we cannot identify individual users based on this information.
The data we process directly (in particular, comments and message content) will be deleted as soon as the purpose for which it was processed no longer applies and there are no legal retention requirements or other legitimate reasons for further storage. We generally have no influence over TikTok’s own further processing or retention periods; more detailed information on this can be found in TikTok’s Privacy Policy.
Data Transfer to Third Countries
TikTok also processes users’ personal data outside the European Economic Area, including through group companies in the United States, Malaysia, and Singapore, as well as—according to TikTok’s own statements—possibly in China. For transfers to countries for which there is no adequacy decision by the European Commission, TikTok states that it relies on Standard Contractual Clauses (SCCs) pursuant to Article 46(2)(c) of the GDPR. TikTok itself—unlike Google or Meta, for example—is not certified under the EU-U.S. Data Privacy Framework.
We expressly note that the Irish Data Protection Commission, in a decision dated May 2025, imposed a fine of 530 million euros on TikTok, because, in the Commission’s view, TikTok was unable to sufficiently demonstrate that the standard contractual clauses and supplementary measures it employed ensure a level of protection substantially equivalent to that of the EU when transferring EEA user data to China. Therefore, a residual risk related to access by foreign authorities to transferred data cannot be ruled out. As the operator of the TikTok page, we have no influence over this processing or the protective measures taken.
For more information on the processing of personal data, as well as users’ rights and settings options, please see TikTok’s Privacy Policy: https://www.tiktok.com/legal/page/eea/privacy-policy/de
Information about TikTok’s international data transfers: https://www.tiktok.com/legal/page/eea/transferee-countries/en
Privacy-related inquiries to TikTok can be submitted using the following form: https://www.tiktok.com/legal/report/privacy
We maintain an online presence on LinkedIn to showcase our company and our services and to communicate with customers and prospective clients. LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.
In this regard, we would like to point out that there is a possibility that user data may be processed outside the European Union, particularly in the United States. This may pose increased risks to users in that, for example, it may become more difficult to access user data at a later date. Furthermore, we do not have access to this user data. Access to this data is exclusively controlled by LinkedIn.
You can find LinkedIn’s privacy policy at
https://www.linkedin.com/legal/privacy-policy
X
Wir unterhalten bei X eine Onlinepräsenz um unser Unternehmen sowie unsere Leistungen zu präsentieren und mit Kunden/Interessenten zu kommunizieren. X ist ein Service der Twitter International Unlimited Company , One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. Insofern weisen wir darauf hin, dass die Möglichkeit besteht, dass Daten der Nutzer außerhalb der Europäischen Union, insbesondere in den USA, verarbeitet werden. Hierdurch können gesteigerte Risiken für die Nutzer insofern bestehen, als dass z.B. der spätere Zugriff auf die Nutzerdaten erschwert werden kann. Auch haben wir keinen Zugriff auf diese Nutzerdaten. Die Zugriffsmöglichkeit liegt ausschließlich bei Twitter.
You can find X’s privacy policy at
YouTube
We maintain a YouTube channel to showcase our company and our services and to communicate with customers and prospective clients. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
In this regard, we would like to point out that there is a possibility that user data may be processed outside the European Union, particularly in the United States. This may pose increased risks to users in that, for example, subsequent access to user data may be made more difficult. Furthermore, we do not have access to this user data. Access to this data is exclusively controlled by YouTube.
You can find YouTube’s privacy policy at
https://policies.google.com/privacy
General Links to Profiles on Third-Party Sites
The provider includes links on the website to the social networks listed below.
Rechtsgrundlage ist hierbei Art. 6 Abs. 1 lit. f DSGVO. Das berechtigte Interesse des Anbieters besteht an der Verbesserung der Nutzungsqualität der Website.
The plugins are integrated via a linked image. Only when the user clicks on the corresponding image is he or she redirected to the respective social network’s service.
After the customer is redirected, the respective network collects information about the user. This initially includes data such as the IP address, date, time, and page visited. If the user is logged into their account on the respective network at that time, the network operator may be able to associate the information collected during the user’s specific visit with the user’s personal account. If the user interacts with a “Share” button on the respective network, this information may be stored in the user’s personal account and, if applicable, published. If the user wishes to prevent the collected information from being directly associated with their user account, they must log out before clicking the button. In addition, it is possible to configure the respective user account accordingly.
The provider has links to the following social networks:
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland.
Privacy Policy: https://www.facebook.com/policy.php
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland.
Privacy Policy: https://help.instagram.com/519522125107875
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
X
Twitter International Unlimited Company , One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. Datenschutzerklärung: https://x.com/de/privacy
YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy Policy: https://policies.google.com/privacy
Website Analytics and Newsletter via Emarsys
a) Registration
If the user subscribes to the provider’s free newsletter, the data requested in the input form (email address) will be processed by a service provider—see “Distribution” below. In addition, the IP address and the date and time of registration are stored. As part of the registration process, the user’s consent is obtained and the content is specifically described. At the same time, reference is made to this privacy policy.
b) Shipping
Zum Versand von Newslettern setzt der Anbieter „Emarsys“ ein. Bei „Emarsys“ handelt es sich um eine Dienstleistung der Firma Emarsys eMarketing Systems AG, München.
For more information on data protection at Emarsys:
https://www.emarsys.com/de/datenschutzrichtlinie/.
c) Visitor and Newsletter Analysis
The newsletters sent by the provider via “Emarsys” contain technologies that allow the provider to determine, through analytics, whether and when an email was opened, as well as which links in the newsletter the user clicked on.
Emarsys also uses cookies. These cookies are used to recognize users so that their activity on the provider’s website can be tracked and the success of certain marketing campaigns can be measured.
The newsletters sent by the provider via “Emarsys” also contain technologies that allow the provider to determine, through analytics, whether and when an email was opened, as well as which links in the newsletter the user clicked on.
The provider stores this analytical data along with technical data (system data and IP address) so that the newsletters can be tailored as effectively as possible to the user’s preferences and interests. Accordingly, the data collected in this way is used to continuously improve the quality of the newsletters.
d) Legal Basis
The legal basis for sending the newsletter and conducting the analysis is Article 6(1)(a) of the GDPR.
e) Revocation
Pursuant to Article 7(3) of the GDPR, the user may revoke consent to the processing of data provided upon subscribing to the newsletter at any time, with future effect, by notifying the provider or by using the unsubscribe link included in the newsletter.
In accordance with Article 7(3) of the GDPR, the user may revoke their consent regarding analytics cookies at any time through the settings in the cookie management section, effective for the future.
Matomo
This website uses the web analytics software Matomo to (www.matomo.org) Data is collected and stored for marketing and optimization purposes. This data is used to create usage profiles under a pseudonym; cookies are used for this purpose. Cookies are small text files that are stored locally in the cache of the site visitor’s web browser. The cookies enable the recognition of the web browser. The data collected using Matomo technology (including your anonymized IP address) is transmitted to our server and stored for usage analysis purposes, which helps us optimize the website. The information generated by the cookie in the pseudonymous user profile is not used to personally identify visitors to this website and is not combined with personal data about the person behind the pseudonym. You can prevent the use of cookies—and thus participation in tracking—by adjusting your browser settings accordingly; however, in this case, you may not be able to use all features of this website to their full extent.
The legal basis for the processing of users’ personal data is Article 6(1)(a) of the GDPR.
Processing users’ personal data allows us to analyze their browsing behavior. By evaluating the data collected, we are able to compile information about the use of the website’s individual components. This helps us continuously improve the website and its user-friendliness. Data is collected and stored only with express consent in accordance with Article 6(1)(a) of the GDPR.
Cookies are stored on the user’s computer and transmitted from there to our website. Therefore, you have full control over the use of cookies. By changing the settings in your web browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, you may no longer be able to use all of the website’s features to their full extent. For more information on the privacy settings of the Matomo software, please visit the following link: https://matomo.org/docs/privacy/.
Facebook Pixel -Conversion Tracking
On our website, we use the Facebook Visitor Action Pixel, a web analytics and conversion tracking service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA, hereinafter “Facebook.”
The Facebook Visitor Action Pixel helps us analyze user behavior on our website and promote our services on the Facebook platform. The legal basis for this is Article 6(1)(a) of the GDPR. In accordance with Article 7(3) of the GDPR, users may revoke their consent to this use at any time with future effect via the Consent Manager settings (“Cookie Settings”) on our website.
The visitor tracking pixel establishes a connection to Facebook’s servers in the United States. In the process, Facebook collects the user’s IP address and information about the user’s browser. Additionally, a unique pixel ID, along with the user’s associated website activities, is stored.
Meta Platforms Inc. is part of the “Data Privacy Framework,” for which the European Commission has adopted an adequacy decision pursuant to Article 45 of the GDPR:
https://www.dataprivacyframework.gov/list
Thanks to this data processing, Facebook can show users personalized ads from us on Facebook or on third-party websites. Conversion tracking also allows us to analyze and evaluate user behavior after they click on a Facebook ad and are subsequently redirected to our website, in order to increase the effectiveness of our Facebook ads.
In this context, we are joint controllers with Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, within the meaning of Article 26 of the GDPR.
The joint controllers have set forth their respective obligations under the GDPR in an agreement. This agreement can be viewed at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
You can contact the Data Protection Officer at Meta Platforms Ireland Limited via a contact form:
https://www.facebook.com/help/contact/540977946302970
Detailed information about Facebook’s data processing practices, as well as users’ rights and options for protecting their data, is described in Facebook’s Privacy Policy:
https://www.facebook.com/policy.php
Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter referred to as “Google.”
Google Analytics helps us analyze website usage and measure the effectiveness of our marketing campaigns. The legal basis for this is Article 6(1)(a) of the GDPR. The user may revoke their consent to the use of Google Analytics at any time with future effect via the “Cookie Settings” on our website, in accordance with Article 7(3) of the GDPR.
Information such as the time, location, and frequency of website visits, as well as interactions with the website (e.g., click paths, ads viewed or clicked, clicks on links), including the user’s IP address, is transmitted to a Google server in the United States and stored there for a maximum of 2 months.
Google LLC is part of the “Data Privacy Framework,” for which the European Commission has adopted an adequacy decision pursuant to Article 45 of the GDPR:
https://www.dataprivacyframework.gov/list
Google also collects “demographic information” and can generate statistics that provide insights into the age, gender, and interests of website visitors. This is done through the automated analysis of advertisements and information from third-party providers.
If the user has enabled personalized ads in their Google Account and consents to Google Analytics, Google can analyze usage behavior across devices—that is, across all devices the user has linked to their Google Account. In doing so, Google creates models for cross-device conversions; we receive only anonymous statistics for this purpose, not any personally identifiable information.
If the user wishes to disable this cross-device analysis, they can turn off the “Personalized Ads” feature in their Google Account settings at the following link:
https://support.google.com/ads/answer/2662922?hl=de
Wir setzen Google Analytics mit einer Anonymisierungsfunktion ein. Dadurch wird die IP-Adresse des Nutzers von Google innerhalb der EU-Mitgliedstaaten oder in anderen Vertragsstaaten des EWR-Abkommens gekürzt.
Google uses the collected data to analyze the user’s visit to the website and to compile reports for us on website activity. The data is also used to provide additional services related to website and Internet usage. Google may share this information with third parties if required by law or if third parties process this data on Google’s behalf.
According to Google, it will under no circumstances link the user’s IP address to other data held by Google. Google provides further information and options for preventing this data collection here:
https://www.google.com/intl/de/policies/privacy/partners
If the user does not consent to the collection of data, they can also prevent it by installing the browser add-on to disable Google Analytics once.
Google Tag Manager
We use Google Tag Manager to integrate various features on our website. This product is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter referred to as “Google.”
Google Tag Manager is used solely to integrate specific content into our website and to enable the management of these features via an interface provided by Google.
When the website is accessed, the relevant features are loaded from a Google server, which may be located in the United States. The user’s IP address is processed in order to provide these features.
The functions used are exhaustively listed in our Privacy Policy. Any consent not granted by the user for specific functions will also be respected when Google Tag Manager is used.
The legal basis for the use of Google Tag Manager as a technical management tool is Art. 6(1)(f) GDPR (legitimate interest in optimizing and efficiently operating our website). Non-essential services loaded through Google Tag Manager (e.g. Analytics, Pixel) each require separate consent in accordance with Art. 6(1)(a) GDPR.
Google LLC also participates in the EU–US Data Privacy Framework, for which the European Commission has adopted an adequacy decision pursuant to Art. 45 GDPR:
https://www.dataprivacyframework.gov/list
The legal basis for its use is Art. 6(1)(f) GDPR. Our legitimate interest lies in optimizing and efficiently operating our website.
Adobe Typekit
External fonts provided by “Adobe Typekit”, a service of Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland, hereinafter referred to as “Adobe”, are used to display the website’s typography.
When you access the provider’s website, a connection is established to Adobe’s servers to enable or update the display of fonts. In this process, data may be transferred to servers in the USA.
_____________________
As a connection to Adobe’s servers is established when you access the website and your IP address is transferred to servers in the USA, we only load Adobe Fonts after you have given your consent via the cookie consent manager. The legal basis is Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
According to data protection supervisory authorities, the USA does not currently provide an adequate level of data protection in all circumstances. Standard Contractual Clauses (https://www.adobe.com/de/privacy/eudatatransfers.html) are in place between us and Adobe for the transfer of data to third countries. However, these are private contractual agreements that have no direct effect on the access rights of US authorities.
https://www.adobe.com/de/privacy/eudatatransfers.html
Jedoch sind dies privatrechtliche Vereinbarungen und haben daher keine direkte Auswirkung auf die Zugriffsmöglichkeiten der Behörden in den USA.
_____________________
The legal basis in this case is Art. 6(1)(f) GDPR. The provider’s legitimate interest lies in optimizing and efficiently operating the website.
Through this connection, Adobe can identify the website from which a request is sent and the IP address to which the font is delivered for display.
Adobe provides further information, particularly regarding options for preventing the use of data, at the following links:
https://www.adobe.com/de/privacy.html
https://www.adobe.com/de/privacy/policies/adobe-fonts.html
Google Fonts
We use Google Fonts on our website to display external fonts. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
To enable the display of certain fonts on our website, a connection is established to Google’s servers in the USA when you access our website.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in optimizing and efficiently operating our website.
Through the connection established with Google when you access our website, Google can determine which website your request originated from and the IP address to which the font must be transmitted for display.
Google provides information at
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
further information, particularly regarding options for preventing the use of data.
When you access our website, a connection is established to a Google server in the USA, through which Google receives your IP address. As this is not technically necessary, we only integrate Google Fonts after you have given your consent via the cookie consent manager. The legal basis is Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future. Alternatively, where possible, we host essential fonts locally to avoid establishing a connection to Google when the website is first accessed.
Google reCAPTCHA
We use Google reCAPTCHA on our website to detect and prevent interactions with our website through automated access, such as by so-called bots. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
Through this service, Google can determine which website a request originates from and the IP address from which you use the reCAPTCHA input box. In addition to your IP address, Google may collect further information necessary to provide and ensure the functionality of this service.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the security of our website and preventing unwanted automated access, such as spam or similar activities.
reCAPTCHA is only loaded on pages containing forms where it is necessary to protect against abusive automated access. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the security of our website and preventing spam and automated attacks. If reCAPTCHA is used on other pages, this will only occur after you have given your consent via the cookie consent manager (Art. 6(1)(a) GDPR).
Google provides information at
https://policies.google.com/privacy
further information on the general handling of your user data.
Google-Maps
We use Google Maps on our website to display our location and provide directions. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
If you access the Google Maps component integrated into our website, Google stores a cookie on your device via your web browser. Your user settings and data are processed to display our location and provide directions. We cannot rule out the possibility that Google uses servers in the USA for this purpose.
If you have given your consent to this processing, the legal basis is Art. 6(1)(a) GDPR. The legal basis may also be Art. 6(1)(f) GDPR. Our legitimate interest lies in optimizing the functionality of our website.
Through the connection established with Google in this way, Google can determine which website your request originated from and the IP address to which the directions are to be transmitted.
If you do not agree to this processing, you can prevent the installation of cookies by adjusting the relevant settings in your web browser. Further details can be found in the “Cookies” section above.
Furthermore, the use of Google Maps and the information obtained through Google Maps is subject to the Google Terms of Service and the Google Maps Terms of Service.
Furthermore, Google provides information at
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
further information.
Until you give your consent, we display only a static preview screenshot with a link to Google Maps instead of an active map. The interactive map, including the connection to Google’s servers, is only loaded when you click on the relevant notice or give your consent via the cookie consent manager. The legal basis is exclusively Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
Contact via WhatsApp
To facilitate contact, the provider offers customers the option of contacting them via the WhatsApp messaging service, among other methods. WhatsApp is a service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “WhatsApp”), a subsidiary of Facebook.
Durch die Kommunikation des Nutzers mit dem Anbieter über WhatsApp erhält sowohl der Anbieter, als auch WhatsApp die Mobilrufnummer des Nutzers und die Information, dass der Nutzer den Anbieter kontaktiert hat.
WhatsApp also transfers the aforementioned data to Facebook’s servers in the United States, where it is processed by WhatsApp and Facebook in accordance with the WhatsApp Privacy Policy, which includes processing for their own purposes, such as improving the WhatsApp service.
According to data protection supervisory authorities, the United States does not currently provide an adequate level of data protection across the board. So-called https://faq.whatsapp.com/general/about-standard-contractual-clauses exist; however, these are private-law agreements that have no direct impact on the access rights of U.S. authorities.
https://faq.whatsapp.com/general/about-standard-contractual-clauses
However, these are agreements under private law and therefore have no direct impact on the access rights of U.S. authorities.
_____________________
Further information on the purpose and scope of data collection and the subsequent processing of this data by WhatsApp and Facebook, as well as your rights and privacy protection settings in this regard, can be found in WhatsApp’s Privacy Policy:
https://www.whatsapp.com/legal/#privacy-policy.
The legal basis for this processing and the transfer of data to WhatsApp is Art. 6(1), first sentence, point (b) GDPR, insofar as the contact relates to an existing contractual relationship or serves to initiate such a relationship. If contact is made for purposes other than those stated above, the legal basis is Art. 6(1)(f) GDPR. The provider’s legitimate interest lies in improving the quality of its services.
Sample data protection declaration of the law firm Weiß & Partner
Last updated: August 2026