Data protection

We have integrated the open source shop system WooCommerce as a plugin on our website. This WooCommerce plugin is based on the WordPress content management system, which is a subsidiary of Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA). Through the implemented functions, data is sent to Automattic Inc., stored and processed. In this data protection declaration we inform you what data is involved, how the network uses this data and how you can manage or prevent data storage.

WooCommerce is an online shop system that has been part of the WordPress directory since 2011 and was developed specifically for WordPress websites. It is a customizable, open-source eCommerce platform based on WordPress and has also been integrated into our website as a WordPress plugin.

We use this practical online shop solution to be able to offer you our physical or digital products or services in the best possible way on our website. The aim is to give you simple and easy access to our offering so that you can get the products you want quickly and easily. With WooCommerce we have found a good plugin that meets our requirements for an online shop.

Information that you actively enter into a text field in our online shop can be collected and stored by WooCommerce or Automattic. So if you register with us or order a product, Automattic can collect, process and store this data. In addition to email address, name or address, this can also include credit card or billing information. Automattic can subsequently use this information for its own marketing campaigns.

There is also information that Automattic automatically collects from you in so-called server log files:

• IP address
• Browser information
• Default language setting
• Date and time of web access

WooCommerce also sets cookies in your browser and uses technologies such as pixel tags (web beacons), for example to clearly identify you as a user and possibly offer interest-based advertising. WooCommerce uses a number of different cookies that are set depending on user actions. This means that, for example, if you put a product in your shopping cart, a cookie will be set so that the product remains in your shopping cart if you leave our website and come back at a later time.

Here we show you an example list of possible cookies that can be set by WooCommerce:

Surname: woocommerce_items_in_cart
Value: 1
Purpose of use: The cookie helps WooCommerce determine when the content in the shopping cart changes.
Expiry Date: after the end of the meeting

Surname: woocommerce_cart_hash
Value: 447c84f810834056ab37cfe5ed27f204321177835-7
Purpose of use: This cookie is also used to recognize and save changes in your shopping cart.
Expiry Date: after the end of the meeting

Surname: wp_woocommerce_session_d9e29d251cf8a108a6482d9fe2ef34b6
Value: 1146%7C%7C1589034207%7C%7C95f8053ce0cea135bbce671043e740321177835-4aa
Purpose of use: This cookie contains a unique identifier for you so that the shopping cart data can be found in the database.
Expiry Date: after 2 days

Unless there is a legal obligation to retain data for a longer period of time, WooCommerce will delete the data when it is no longer needed for the purposes for which it was stored. For example, server log files containing technical data about your browser and your IP address are deleted after approximately 30 days. As long as Automattic uses the data to analyze the traffic on its own websites (e.g. all WordPress pages) and to fix possible problems. The data is stored on Automattic’s American servers.

You have the right to access your personal data at any time and to object to the use and processing of it. You can also file a complaint with a government supervisory authority at any time.

In your browser you also have the option of individually managing, deleting or deactivating cookies. However, please note that deactivated or deleted cookies may have negative effects on the functions of our WooCommerce online shop. Depending on which browser you use, managing cookies works slightly differently. Below you will see links to the instructions for the most common browsers:

Chrome: Delete, enable and manage cookies in Chrome

Safari: Manage cookies and site data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Deleting and managing cookies

Automattic is an active participant in the EU-US Privacy Shield Framework, which regulates the correct and secure transfer of personal data. You can find more information about this at https://www.privacyshield.gov/participant?id=a2zt0000000CbqcAAC.
You can find more details about the privacy policy and what data is collected by WooCommerce and how it is collected at https://automattic.com/privacy/ and general information about WooCommerce https://woocommerce.com/.

We have installed Instagram functions on our website. Instagram is a social media platform owned by Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. Instagram has been a subsidiary of Facebook Inc. since 2012 and is one of the Facebook products. Embedding Instagram content on our website is called embedding. This allows us to show you content such as buttons, photos or videos from Instagram directly on our website. If you access websites on our website that have an integrated Instagram function, data will be transmitted to Instagram, stored and processed. Instagram uses the same systems and technologies as Facebook. Your data will therefore be processed across all Facebook companies.

Below we want to give you a more detailed insight into why Instagram collects data, what data it is and how you can largely control data processing. Since Instagram belongs to Facebook Inc., we obtain our information from the Instagram guidelines on the one hand, but also from the Facebook data guidelines themselves on the other.

Instagram is one of the most famous social media networks worldwide. Instagram combines the advantages of a blog with the advantages of audiovisual platforms such as YouTube or Vimeo. You can upload photos and short videos to “Insta” (as many users casually call the platform), edit them with various filters and also distribute them on other social networks. And if you don't want to be active yourself, you can just follow other interesting users.

Instagram is the social media platform that has really taken off in recent years. And of course we also reacted to this boom. We want you to feel as comfortable as possible on our website. That's why it's a matter of course for us to prepare our content in a varied manner. The embedded Instagram functions allow us to enrich our content with helpful, funny or exciting content from the Instagram world. Since Instagram is a subsidiary of Facebook, the data collected can also be useful to us for personalized advertising on Facebook. This means our advertisements only reach people who are really interested in our products or services.

Instagram also uses the collected data for measurement and analysis purposes. We get summarized statistics and thus more insight into your wishes and interests. It is important to note that these reports do not identify you personally.

If you come across one of our pages that has built-in Instagram functions (such as Instagram images or plug-ins), your browser will automatically contact Instagram's servers. Data is sent to Instagram, stored and processed. Regardless of whether you have an Instagram account or not. This includes information about our website, about your computer, about purchases you make, about advertisements you see and how you use our services. The date and time of your interaction with Instagram are also stored. If you have an Instagram account or are logged in, Instagram stores significantly more data about you.

Facebook differentiates between customer data and event data. We assume that this is exactly the case with Instagram. Customer data includes, for example, name, address, telephone number and IP address. It is important to mention that this customer data is only transmitted to Instagram once it has been “hashed” beforehand. Hashing means turning a data set into a string. This allows you to encrypt the contact details. In addition, the above-mentioned “event data” is also transmitted. By “event data” Facebook – and consequently also Instagram – means data about your user behavior. It can also happen that contact data is combined with event data. The contact details collected are compared with the data that Instagram already has from you.

The collected data is transmitted to Facebook via small text files (cookies), which are usually set in your browser. Depending on the Instagram functions used and whether you have an Instagram account, different amounts of data are stored.

We assume that data processing on Instagram works in the same way as on Facebook. This means: if you have an Instagram account or www.instagram.com Instagram has at least set a cookie. If this is the case, your browser will send information to Instagram via the cookie as soon as you come into contact with an Instagram function. This data will be deleted or anonymized after 90 days at the latest (after comparison). Although we have looked intensively into Instagram's data processing, we cannot say exactly what data Instagram collects and stores.

Below we will show you the minimum cookies that are set in your browser when you click on an Instagram function (such as a button or an Insta picture). In our test, we assume that you don't have an Instagram account. If you are logged in to Instagram, significantly more cookies will of course be set in your browser.

These cookies were used in our test:

Surname: csrftoken
Value: “”
Purpose of use: This cookie is most likely set for security reasons to prevent fraudulent requests. However, we were unable to find out more precisely.
Expiry Date: after a year

Surname: mid
Value: “”
Purpose of use: Instagram sets this cookie to optimize its own services and offers on and outside of Instagram. The cookie sets a unique user ID.
Expiry Date: after the end of the session

Surname: fbsr_321177835124024
Value: not specified
Purpose of use: This cookie stores the log-in request for users of the Instagram app.
Expiry Date: after the end of the session

Surname: rur
Value: ATN
Purpose of use: This is an Instagram cookie that ensures functionality on Instagram.
Expiry Date: after the end of the session

Surname: urlgen
Value: “{\”194.96.75.33\”: 1901}:1iEtYv:Y833k2_UjKvXgYe321177835”
Purpose of use: This cookie is used for Instagram’s marketing purposes.
Expiry Date: after the end of the session

Annotation: We cannot claim completeness here. Which cookies are set in each individual case depends on the embedded functions and your use of Instagram.

Instagram shares the information it receives between Facebook companies, with external partners and with people you connect with around the world. Data processing takes place in compliance with our own data guidelines. Your data is distributed on Facebook servers around the world, among other things for security reasons. Most of these servers are located in the USA.

Thanks to the General Data Protection Regulation, you have the right to information, portability, correction and deletion of your data. You can manage your data in Instagram settings. If you want to completely delete your data on Instagram, you will need to permanently delete your Instagram account.

And this is how deleting your Instagram account works:

First open the Instagram app. On your profile page, go down and click on “Help Section.” Now you come to the company's website. On the website, click “Manage Account” and then click “Delete Your Account.”

If you delete your account entirely, Instagram will delete posts such as your photos and status updates. Information that other people have shared about you is not part of your account and will therefore not be deleted.

As mentioned above, Instagram stores your data primarily through cookies. You can manage, deactivate or delete these cookies in your browser. Depending on your browser, administration always works a little differently. Here we show you the instructions for the most important browsers.

Chrome: Delete, enable and manage cookies in Chrome

Safari: Manage cookies and site data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Deleting and managing cookies

You can also generally set up your browser so that you are always informed when a cookie is to be set. Then you can always decide individually whether you want to allow the cookie or not.

Instagram is a subsidiary of Facebook Inc. and Facebook is an active participant in the EU-US Privacy Shield Framework. This framework ensures correct data transfer between the USA and the European Union. Under https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC  find out more about it. We have tried to provide you with the most important information about data processing by Instagram. On https://help.instagram.com/519522125107875
You can take a closer look at Instagram's data policies.

We have integrated YouTube videos on our website. This means we can present you interesting videos directly on our site. YouTube is a video portal that has been a subsidiary of Google since 2006. The video portal is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you access a page on our website that has an embedded YouTube video, your browser automatically connects to the YouTube or Google servers. Various data is transferred (depending on the settings). Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all data processing in Europe.

Below we would like to explain to you in more detail what data is processed, why we have integrated YouTube videos and how you can manage or delete your data.

On YouTube, users can watch, rate, comment and upload videos for free. Over the last few years, YouTube has become one of the most important social media channels worldwide. So that we can display videos on our website, YouTube provides a code snippet that we have integrated into our site.

YouTube is the video platform with the most visitors and the best content. We strive to offer you the best possible user experience on our website. And of course interesting videos shouldn't be missing. With the help of our embedded videos, we provide you with other helpful content in addition to our texts and images. In addition, our website is easier to find on the Google search engine thanks to the embedded videos. Even if we place advertisements via Google Ads, thanks to the data collected, Google can only show these advertisements to people who are interested in our offers.

As soon as you visit one of our pages that has a YouTube video installed, YouTube sets at least one cookie that stores your IP address and our URL. If you are logged in to your YouTube account, YouTube can usually assign your interactions on our website to your profile using cookies. This includes data such as session duration, bounce rate, approximate location, technical information such as browser type, screen resolution or your internet provider. Other data may include contact details, any reviews, sharing content on social media or adding it to your favorites on YouTube.

If you are not signed in to a Google account or a YouTube account, Google stores data with a unique identifier associated with your device, browser or app. For example, your preferred language setting is retained. But much interaction data cannot be stored because fewer cookies are set.

In the following list we show cookies that were set in the browser in a test. On the one hand, we show cookies that are set without a logged in YouTube account. On the other hand, we show cookies that are set when the account is logged in. The list cannot claim to be complete because user data always depends on interactions on YouTube.

Surname: YSC
Value: b9-CV6ojI5Y321177835-1
Purpose of use: This cookie registers a unique ID to store statistics of the video viewed.
Expiry Date: after the end of the meeting

Surname: PREF
Value: f1=50000000
Purpose of use: This cookie also registers your unique ID. Google receives statistics about how you use YouTube videos on our website via PREF.
Expiry Date: after 8 months

Surname: GPS
Value: 1
Purpose of use: This cookie registers your unique ID on mobile devices to track GPS location.
Expiry Date: after 30 minutes

Surname: VISITOR_INFO1_LIVE
Value: 95Chz8bagyU
Purpose of use: This cookie tries to estimate the user's bandwidth on our websites (with built-in YouTube videos).
Expiry Date: after 8 months

Other cookies that are set when you are logged in to your YouTube account:

Surname: APISID
Value: zILLlvClZSkqGsSwI/AU1aZI6HY7321177835-
Purpose of use: This cookie is used to create a profile about your interests. The data is used for personalized advertisements.
Expiry Date: after 2 years

Surname: CONSENT
Value: YES+AT.de+20150628-20-0
Purpose of use: The cookie stores the status of a user's consent to the use of various Google services. CONSENT also serves security purposes to check users and protect user data from unauthorized attacks.
Expiry Date: after 19 years

Surname: HSID
Value: AcRwpgUik9Dveht0I
Purpose of use: This cookie is used to create a profile about your interests. This data helps to display personalized advertising.
Expiry Date: after 2 years

Surname: LOGIN_INFO
Value: AFmmF2swRQIhALLl6aL…
Purpose of use: This cookie stores information about your login data.
Expiry Date: after 2 years

Surname: SAPISID
Value: 7oaPxoG-pZsJuuF5/AnUdDUIsJ9iJz2vdM
Purpose of use: This cookie works by uniquely identifying your browser and device. It is used to create a profile about your interests.
Expiry Date: after 2 years

Surname: SID
Value: oQfNKjAsI321177835-
Purpose of use: This cookie stores your Google account ID and your last login time in a digitally signed and encrypted form.
Expiry Date: after 2 years

Surname: SIDCC
Value: AN0-TYuqub2JOcDTyL
Purpose of use: This cookie stores information about how you use the website and what advertising you may have seen before visiting our site.
Expiry Date: after 3 months

The data that YouTube receives and processes from you is stored on Google servers. Most of these servers are located in America. Under https://www.google.com/about/datacenters/inside/locations/?hl=de  see exactly where the Google data centers are located. Your data is distributed across the servers. This means that the data can be accessed more quickly and is better protected against manipulation.

Google stores the data collected for different lengths of time. You can delete some data at any time, others are automatically deleted after a limited period of time, and others are stored by Google for a longer period of time. Some data (such as My Activity items, photos or documents, products) stored in your Google Account remains stored until you delete it. Even if you're not signed in to a Google Account, you can delete some data associated with your device, browser, or app.

In principle, you can delete data in your Google account manually. With the automatic deletion function of location and activity data introduced in 2019, information is stored for either 3 or 18 months and then deleted, depending on your decision.

Regardless of whether you have a Google account or not, you can configure your browser to delete or deactivate Google cookies. Depending on which browser you use, this works in different ways. The following instructions show how to manage cookies in your browser:

Chrome: Delete, enable and manage cookies in Chrome

Safari: Manage cookies and site data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Deleting and managing cookies

Microsoft Edge: Deleting and managing cookies

If you generally do not want cookies, you can set your browser so that it always informs you when a cookie is to be set. This means you can decide for each individual cookie whether you allow it or not. Since YouTube is a subsidiary of Google, there is a common data protection declaration. If you would like to find out more about how your data is handled, we recommend the data protection declaration at https://policies.google.com/privacy?hl=de.