Privacy Policy

1) Privacy at a glance

General

Below you will find a quick overview of what happens to your personal data when you visit this website. Personal data includes all information by which you can be personally identified. Detailed information can be found in the sections below.

How do we collect your data?

  • Actively provided: e.g., data from forms (contact, newsletter).
  • Automatically/with consent: technical data when the page is accessed (browser, operating system, time of access, etc.). Collection begins automatically when you enter the website.

What do we use your data for?

  • To provide the website correctly and securely.
  • To analyze user behavior (with consent) in order to improve our offering.

Your rights

You have, among other things, the right to access, rectification, erasure, restriction of processing, data portability, and to object to certain processing activities. You also have the right to lodge a complaint with the competent supervisory authority. Feel free to contact us at any time.

Analytics tools

When you visit the website, your browsing behavior may be statistically evaluated—particularly with analytics programs. Details can be found below (including Google Analytics, Meta/Facebook Pixel).

2) Controller, fundamentals & storage duration

Controller

Anton Haverkamp

Isenkamp 5, 26131 Oldenburg

Phone: +49 (0) 441 / 24927480

Email: [email protected]

Data protection principles

We treat your data confidentially and in accordance with statutory requirements (GDPR, TTDSG). Please note that data transmission over the internet (e.g., email communication) can have security gaps.

Storage duration

Unless otherwise specified below, we process personal data only as long as necessary for the respective purpose. After the purpose has been fulfilled, we delete the data unless statutory retention obligations prevent this. If you revoke consent or lodge a justified objection, we delete the data unless another legal basis applies.

Legal bases

  • Consent: Art. 6(1)(a) GDPR (where applicable Art. 9(2)(a) GDPR for special categories) in conjunction with Sec. 25(1) TTDSG.
  • Contract/initiation: Art. 6(1)(b) GDPR.
  • Legal obligation: Art. 6(1)(c) GDPR.
  • Legitimate interests: Art. 6(1)(f) GDPR.

The specific applicable basis is indicated in the respective sections.

Data transfers to third countries

If tools from providers in the USA/other third countries are used, data may—depending on the tool—be transferred to states with a potentially inadequate level of data protection. We do not have full control over this. Any risks are reduced—where possible—through contractual safeguards and your explicit consent.

3) Your rights

Withdrawal of consent

You may revoke consent you have given at any time with effect for the future.

Right to object (Art. 21 GDPR)

On grounds relating to your particular situation, you may object at any time to processing based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling. If processing is for direct marketing purposes, you have the right to object at any time; this also applies to profiling insofar as it is related to such direct marketing.

Other data subject rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to lodge a complaint with a supervisory authority (Art. 77).

4) Technical and organizational measures

SSL/TLS encryption

This site uses SSL/TLS encryption. You can recognize an encrypted connection by "https://" and the lock symbol in your browser. When encryption is active, data transmitted cannot be read by third parties.

5) Data collection on this website

Cookies & similar technologies

We use cookies/ comparable technologies.

  • Necessary cookies: for operation and security (Art. 6(1)(f) GDPR).
  • Comfort/statistics/marketing: only with consent (Art. 6(1)(a) GDPR, Sec. 25(1) TTDSG).

You can set your browser to inform you about cookies, allow them only in individual cases, exclude them generally, or delete them when closing the browser. Disabling cookies may restrict functionality. You can change your settings at any time in the cookie settings (revocation with effect for the future).

Contact form

We process inquiries submitted via the contact form to handle your request.

  • Legal bases: Art. 6(1)(b) GDPR (contractual/pre-contractual), otherwise Art. 6(1)(f) GDPR (legitimate interest in efficient communication) or Art. 6(1)(a) GDPR (consent).
  • Storage duration: until the purpose is fulfilled or revocation/deletion, subject to legal obligations.

Inquiries by email/phone/fax

The same applies to inquiries by email/phone/fax. No disclosure will take place without your consent. Legal bases/storage duration as above.

6) Newsletter

To send the newsletter, we need your email address and confirmation that you are the owner of the address and wish to receive the newsletter (double opt-in).

  • Legal basis: Art. 6(1)(a) GDPR (consent).
  • Withdrawal: at any time, e.g., via the unsubscribe link.
  • Data deletion: after unsubscribing/purpose no longer applies; a blacklist entry may be stored to prevent future mailings (Art. 6(1)(f) GDPR).

7) Analytics and marketing tools

7.1 Google Analytics (GA4)

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; possible transfer to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Purpose & function

Google Analytics enables us to analyze user behavior on our website. Cookies/ similar technologies are used. The following data may be processed, among others: truncated IP address, page views, interactions, approximate location data, device/browser information, referrer URL, timestamps.

IP anonymization

We use IP anonymization by default so your IP address is truncated before storage/transfer.

Legal basis

Art. 6(1)(a) GDPR in conjunction with Sec. 25(1) TTDSG (consent). Consent can be withdrawn at any time via the cookie settings.

Processing on our behalf & third-country transfer

We have a data processing agreement with Google (Art. 28 GDPR). Transfer to third countries (e.g., USA) is possible; risks of an inadequate level of protection may exist.

Opt-out

  • You can revoke your consent in the cookie settings.
  • Additionally, you can install a browser add-on to deactivate Google Analytics (tools.google.com/dlpage/gaoptout).

Storage duration

In GA4, usage/event data is stored for a limited period depending on configuration and then deleted/aggregated.

7.2 Meta (Facebook) Pixel

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; possible transfer to Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA.

Purpose & function

The Meta Pixel allows us to track user behavior after clicking our ads ("conversion tracking") and to create audiences for advertising ("Custom Audiences"). Cookies/similar technologies are used and the following data may be processed, among others: truncated IP address, user agent, referrer URL, pixel ID, pages visited, interactions, timestamps.

Legal basis

Art. 6(1)(a) GDPR in conjunction with Sec. 25(1) TTDSG (consent) for setting/reading cookies and subsequent processing. You can withdraw consent at any time via the cookie settings.

Joint controllership & processing on our behalf

Depending on use, there may be joint controllership between Meta and us (Art. 26 GDPR) and/or processing on our behalf (Art. 28 GDPR). Meta may also process data for its own purposes.

Third-country transfer

Transfer to third countries (e.g., USA) is possible; risks may result depending on the legal situation.

Opt-out/preferences

  • Withdrawal via the cookie settings.
  • You can also adjust ad settings in your Meta account (facebook.com/ads/preferences) and opt out at aboutads.info/choices.

8) Google reCAPTCHA

Provider: Google Ireland Limited (see above).

Purpose: Distinguishing whether inputs are made by a natural person or automated; protection against abuse/spam. reCAPTCHA analyzes, among other things, IP address, time spent on the page, mouse movements. The analysis starts automatically when the page is accessed and runs in the background.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting the website). Where cookies/ comparable technologies are used, additionally Art. 6(1)(a) GDPR in conjunction with Sec. 25(1) TTDSG (consent). Revocation possible at any time.

Further information: policies.google.com/privacy and policies.google.com/terms.

9) Security & server communication

Server communication/logs

When you access the website, technical information may be processed (e.g., browser type/version, operating system used, referrer URL, host name of the accessing computer, time of the server request, truncated IP address). Processing is carried out to ensure operation, security, and error analysis (Art. 6(1)(f) GDPR) and—where required—on the basis of legal obligations.

10) Note on third countries (in particular the USA)

If tools from U.S. or other non-EU providers are used, authorities in those countries may access personal data without EU legal remedies to the same extent. We minimize risks through contractual safeguards and privacy-friendly defaults; consent may still be required.

Contact & further questions

If you have questions about data protection, please contact: [email protected].