AGB und Datenschutz

Vorwort

We, Decanos GmbH, [hereinafter: "the company", "we" or "us"] take the protection of your personal data seriously and would like to inform you about data protection in our company.

As part of our responsibility under data protection law, the entry into force of the EU General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter: "GDPR") has imposed additional obligations on us to ensure the protection of personal data of the data subject (we will also refer to you as the data subject as "customer", "user", "you", "you" or "data subject").

A. Allgemeines

(1) Begriffsbestimmungen

Following the example of Art. 4 GDPR, this data protection notice is based on the following definitions:

"Personal data" (Article 4 No. 1 GDPR)

is all information relating to an identified or identifiable natural person ("data subject"). A person is identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an online identifier, location data or with the help of information about their physical, physiological, genetic, mental, economic, cultural or social identity characteristics. Identifiability can also be achieved by linking such information or other additional knowledge. The origin, form or embodiment of the information is irrelevant (photos, video or sound recordings can also contain personal data).

"Processing" (Article 4 No. 2 GDPR)

Processing is any operation which is carried out on personal data, whether or not by automated means (i.e., technology-based). This includes, in particular, the collection (i.e., acquisition), recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison, linking, restriction, erasure, or destruction of personal data, as well as the change of a purpose or objective on which the data processing was originally based.

"Controller" (Article 4 No. 7 GDPR)

is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

"Third party" (Article 4 No. 10 GDPR)

means any natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct authority of the controller or processor; this also includes other legal entities belonging to the group.

"Processor" (Article 4 No. 8 GDPR)

is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller, in particular in accordance with its instructions (e.g., IT service providers). In the context of data protection law, a processor is not a third party.

"Consent" (Article 4 No. 11 GDPR)

of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

(2) Name und Anschrift des Verantwortlichen

We are the responsible party for the processing of your personal data within the meaning of Art. 4 No. 7 GDPR:

Decanos GmbH

Alt-Moabit 73/73A

10555 Berlin

contact@decanos.com

For further information about our company, please see the imprint on our website.

(3) Kontaktdaten des Datenschutzbeauftragten

Our company data protection officer is available to answer any questions you may have and is available to assist you with data protection issues at any time. His contact details are:

Decanos GmbH

Alt-Moabit 73/73A

10555 Berlin

Email: dsb@cyber-curriculum.com

(4) Rechtsgrundlage fuer die Datenverarbeitung

By law, any processing of personal data is in principle prohibited and is only permitted if the data processing falls under one of the following justifications:

Art. 6 (1) (a) GDPR ("Consent"):
Where the data subject has freely indicated, in an informed and unambiguous manner, by a statement or by a clear affirmative action, his or her consent to the processing of personal data concerning him or her for one or more specific purposes;

Art. 6 Paragraph 1 Sentence 1 Letter b GDPR:
If processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

Art. 6 Paragraph 1 Sentence 1 Letter c GDPR:
If processing is necessary to fulfill a legal obligation to which the controller is subject (e.g. a statutory retention period);

Art. 6 Paragraph 1 Sentence 1 Letter d GDPR:
Where processing is necessary to protect the vital interests of the data subject or of another natural person;

Art. 6 Paragraph 1 Sentence 1 Letter e GDPR:
If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller or

Art. 6 (1) (f) GDPR ("Legitimate Interests"):
If processing is necessary to protect the legitimate interests (in particular legal or economic) of the controller or a third party, unless the interests or rights of the data subject override them (in particular if the data subject is a minor).

For each of the processing operations we carry out, we specify the applicable legal basis below. Processing may also be based on multiple legal bases.

(5) Datenloeschung und Speicherdauer

For each processing operation we perform, we specify below how long we store the data and when it will be deleted or blocked. Unless an explicit storage period is specified below, your personal data will be deleted or blocked as soon as the purpose or legal basis for storage no longer applies. Your data is generally stored only on our servers in Germany, subject to possible transfer in accordance with the provisions in A.(7) and A.(8).

However, storage may extend beyond the specified period in the event of an (impending) legal dispute with you or other legal proceedings, or if storage is required by legal regulations to which we as the controller are subject (e.g., Section 257 of the German Commercial Code (HGB), Section 147 of the German Fiscal Code (AO). If the storage period prescribed by law expires, the personal data will be blocked or deleted, unless further storage by us is necessary and there is a legal basis for doing so.

(6) Datensicherheit

We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties (e.g., TLS encryption for our website), taking into account the state of the art, implementation costs, and the nature, scope, context, and purpose of the processing, as well as the existing risks of a data breach (including its likelihood and impact) for the data subject. Our security measures are continuously improved in line with technological developments.

We will be happy to provide you with further information upon request. Please contact our data protection officer.

(7) Cooperation with processors

As with any larger company, we also use external domestic and foreign service providers to handle our business transactions (e.g., in the areas of IT, logistics, telecommunications, sales, and marketing). These providers only operate under our instructions and are contractually obligated to comply with data protection regulations within the meaning of Art. 28 GDPR.

(8) Conditions for the transfer of personal data to third countries

As part of our business relationships, your personal data may be transferred or disclosed to third parties. These companies may also be located outside the European Economic Area (EEA), i.e., in third countries. Such processing is carried out exclusively to fulfill contractual and business obligations and to maintain your business relationship with us. We will inform you about the respective details of the transfer below in the relevant sections.

The European Commission has certified that some third countries offer data protection comparable to the EEA standard through so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found at the European Commission website). However, in other third countries to which personal data may be transferred, a consistently high level of data protection may not exist due to a lack of legal provisions. Where this is the case, we ensure that data protection is adequately guaranteed. This is possible through binding corporate rules, standard contractual clauses of the European Commission for the protection of personal data, certificates, or recognized codes of conduct. Please contact our data protection officer (see A.(3)) if you would like further information on this.

(9) No automated decision-making (including profiling)

We do not intend to use any personal data collected from you for any automated decision-making process (including profiling).

(10) No obligation to provide personal data

We do not make the conclusion of contracts with us dependent on your prior provision of personal data. As a customer, you are generally under no legal or contractual obligation to provide us with your personal data. However, we may be unable to provide certain services to a limited extent or at all if you do not provide the necessary data. Should this exceptionally be the case within the scope of the products we offer presented below, you will be informed separately.

(11) Legal obligation to transmit certain data

We may, under certain circumstances, be subject to a specific statutory or legal obligation to make the lawfully processed personal data available to third parties, in particular public authorities (Article 6 (1) (c) GDPR).

(12) Your rights

You can assert your rights as a data subject regarding the processing of your personal data at any time by contacting us using the contact details provided above under A.(2). As a data subject, you have the right:

pursuant to Art. 15 GDPR to request information about your data processed by us. In particular, you can request information about the purposes of processing, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from us, as well as the existence of automated decision-making, including profiling, and, where applicable, meaningful information on its details.
pursuant to Art. 16 GDPR to immediately request the correction of any incorrect data or the completion of your data stored by us;
pursuant to Art. 17 GDPR to request the deletion of your data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
pursuant to Art. 18 GDPR to request the restriction of the processing of your data if you contest the accuracy of the data or if the processing is unlawful;
pursuant to Art. 20 GDPR to receive the data you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller ("data portability");
pursuant to Art. 21 GDPR to object to the processing if the processing is carried out on the basis of Art. 6 (1) (e) or (f) GDPR. This is particularly the case if the processing is not necessary to fulfil a contract with you. Unless it is an objection to direct advertising, when exercising such an objection we ask you to explain the reasons why we should not process your data as we do. If your objection is justified, we will examine the situation and will either stop or adapt the data processing or show you our compelling legitimate reasons on the basis of which we continue the processing;
pursuant to Art. 7 (3) GDPR to revoke your consent once given (even before the GDPR came into force, i.e. before 25 May 2018) at any time, if you have given such consent. This means that we may no longer continue the data processing based on this consent in the future and
pursuant to Art. 77 GDPR to complain to a data protection supervisory authority about the processing of your personal data in our company, for example to the data protection supervisory authority responsible for us:

Berlin Commissioner for Data Protection and Freedom of Information

Friedrichstrasse 219, 10969 Berlin

Email: mailbox@datenschutz-berlin.de

(13) Changes to the privacy policy

In the context of ongoing developments in data protection law and technological or organizational changes, our privacy policy is regularly reviewed for any need for adjustment or addition. You will be notified of any changes, particularly on our German website at www.cyber-curriculum.com. This privacy policy is current as of December 2022.

B. Visiting websites

(1) Explanation of the function

Information about our company and the services we offer can be found, in particular, at Cyber-Curriculum.com and its associated subpages (hereinafter collectively referred to as "websites"). When you visit our websites, your personal data may be processed.

(2) Personal data processed

When you use our website for informational purposes, we collect, store and process the following categories of personal data:

"Log data":

When you visit our website, a so-called log file (so-called server log files) is temporarily and anonymously stored on our web server. This consists of:

the page from which the page was requested (so-called referrer URL)
the name and URL of the requested page
the date and time of the call
the description of the type, language and version of the web browser used
the IP address of the requesting computer, which is shortened so that a personal reference can no longer be established
the amount of data transferred
the operating system
the message whether the call was successful (access status/Http status code)
the GMT time zone difference

"Contact form data":

When using contact forms, the data transmitted through them will be processed (e.g. gender, first and last name, address, company, email address, telephone number and the time of transmission).

(3) Purpose and legal basis of data processing

We process the personal data described above in accordance with the provisions of the GDPR and other relevant data protection regulations, and only to the extent necessary. To the extent that the processing of personal data is based on Art. 6 (1) (f) GDPR, the aforementioned purposes also represent our legitimate interests.

The processing of log data serves statistical purposes and to improve the quality of our website, in particular the stability and security of the connection (the legal basis is Art. 6 (1) (f) GDPR).

Contact form data is processed to process customer inquiries (the legal basis is Art. 6 (1) (b) or (f) GDPR).

(4) Duration of data processing

Your data will only be processed for as long as necessary to achieve the aforementioned processing purposes; the legal bases specified in the context of the processing purposes apply accordingly. Regarding the use and storage period of cookies, please refer to Section A.(5) and the Cookie Policy.

Third parties we use will store your data on their systems for as long as necessary to provide the services to us in accordance with the respective order. Further details on the storage period can be found under A.(5) and the Cookie Policy.

(5) Transfer of personal data to third parties; justification

The following categories of recipients, who are usually processors (see A.(7)), may have access to your personal data:

Service providers for the operation of our website and the processing of data stored or transmitted by the systems (e.g., for data center services, payment processing, IT security). The legal basis for the transfer is Art. 6 (1) (b) or (f) GDPR, unless they are contract processors.
Government agencies/authorities, insofar as this is necessary to fulfill a legal obligation. The legal basis for the transfer is then Art. 6 (1) (c) GDPR;
Persons employed to conduct our business operations (e.g., auditors, banks, insurance companies, legal advisors, regulatory authorities, participants in corporate acquisitions or the establishment of joint ventures). The legal basis for the transfer is Art. 6 (1) (b) or (f) GDPR.

For the guarantees of an adequate level of data protection when data are transferred to third countries, see A.(8).

Furthermore, we will only pass on your personal data to third parties if you have given your express consent to do so in accordance with Art. 6 (1) (a) GDPR.

(6) Use of cookies, plug-ins and other services on our website

Cookie

Cookies are small text files that are stored on your hard disk and associated with the browser you use, using a characteristic string of characters. These files allow certain information to be sent to the location that placed the cookies. Cookies cannot run programs or transmit viruses to your computer and therefore do not cause any damage. They are designed to make the internet more user-friendly and effective, and therefore more pleasant for you.

Cookies can contain data that makes it possible to recognize the device used. However, cookies sometimes only contain information about certain settings that are not personally identifiable. Cookies cannot directly identify a user.

A distinction is made between session cookies, which are deleted as soon as you close your browser, and persistent cookies, which are stored beyond the individual session. In terms of their function, cookies are further divided into:

Technical cookies: These are essential to navigate the website, use basic functions, and ensure website security; they do not collect information about you for marketing purposes, nor do they store which websites you have visited.
Performance cookies: These collect information about how you use our website, which pages you visit, and, for example, whether you experience any errors while using the website. They do not collect any information that could identify you; all information collected is anonymous and is only used to improve our website and to understand what interests our users.
Advertising cookies, targeting cookies: These are used to offer website users needs-based advertising on the website or offers from third parties and to measure the effectiveness of these offers. Advertising and targeting cookies are stored for a maximum of 13 months.
Sharing cookies: These are used to improve the interactivity of our website with other services (e.g., social networks); sharing cookies are stored for a maximum of 13 months.

Any use of cookies that is not strictly necessary for technical reasons constitutes data processing, which is only permitted with your express and active consent in accordance with Art. 6 (1) (a) GDPR. This applies in particular to the use of advertising, targeting, or sharing cookies. Furthermore, we will only share your personal data processed by cookies with third parties if you have given your express consent in accordance with Art. 6 (1) (a) GDPR.

Google Analytics 4

If you have given your consent, this website uses Google Analytics 4, a web analysis service provided by Google LLC. The controller for users in the EU, the EEA, and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Type and purpose of processing: Google Analytics uses cookies to analyze the use of our website. The information collected through cookies is usually transferred to and stored by Google on servers in the United States.

With the user ID, we can assign multiple sessions to a permanent ID and analyze user behavior across devices. Google collects additional data from users with personalized ads (interests, demographic data) for cross-device remarketing. IP addresses are anonymized by default in Google Analytics 4. Within the EU/EEA, your IP address is shortened; only in exceptional cases is processing carried out in the USA.

During your visit, Google collects, among other things:

Page views, click paths, scrolling behavior, interactions (e.g. with videos), downloads
Language settings, technical device information (browser, screen resolution), approximate region
Referrer URLs and visited pages

Purposes of processing: Google uses the collected data to compile pseudonymized reports on website activity and to help us optimize our website and marketing campaigns.

Recipient and third country transfer: Recipients: Google Ireland Limited, Google LLC, Alphabet Inc. Third-country transfer: Google is certified under the EU-US Privacy Framework. EU standard contractual clauses complement this security. Transfer to third countries such as Singapore cannot be ruled out.

Storage period: Collected data is deleted after 14 months. Cookies have a maximum lifespan of 2 years.

Legal basis: The processing is based on your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 TTDSG.

Revocation of consent: You can withdraw your consent at any time by adjusting your cookie settings. Alternatively, you can block Google Analytics cookies through your browser settings or the Google Analytics opt-out browser add-on.

SalesViewer®

On this website, data is collected and stored for marketing, market research and optimization purposes using SalesViewer® technology from SalesViewer® GmbH based on our legitimate interest (Art. 6 (1) (f) GDPR).

For this purpose, a JavaScript-based code is used to collect company-related data and its corresponding use. The data collected with this technology is encrypted using a non-reversible one-way function (so-called hashing). The data is immediately pseudonymized and not used to personally identify the visitor to this website.

You can opt out of data collection and storage at any time with future effect by visiting the SalesViewer opt-out page to prevent SalesViewer® from collecting data on this website in the future. An opt-out cookie for this website will be stored on your device. If you delete your cookies in this browser, you will need to opt out again. Salesviewer® GmbH is headquartered in Bochum, Germany.

Vimeo

We have embedded videos from Vimeo LLC, headquartered at 555 West 18th Street, New York, New York 10011.

Some of our websites contain videos from Vimeo. When you access such a page on our website, a connection is established to the Vimeo servers. This transmits to the Vimeo server which of our websites you have visited. If you are logged in as a Vimeo member, Vimeo assigns this information to your personal user account. When you click the start button of a video, this information can also be assigned to an existing user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding Vimeo cookies.

We use this service on our website based on a legitimate interest in analyzing, optimizing, and operating our website economically. The legal basis is Art. 6 (1) (f) GDPR.

In addition, Vimeo calls up the Google Analytics tracker via an iFrame in which the video is called. This is Vimeo's own tracking function, to which we have no access. You can prevent tracking by Google Analytics by using the deactivation tools that Google offers for some internet browsers. Users can also prevent Google from collecting the data generated by Google Analytics and related to their use of the website (including their IP address) and from processing this data by Google by downloading and installing the browser plug-in available from Google.

meetergo (make an appointment)

We have integrated meetergo into this website. The provider is meetergo GmbH, Hansaring 61, 50670 Cologne (hereinafter referred to as meetergo).

meetergo provides an online appointment scheduling tool. When you schedule an appointment with us online, the data you enter will be stored on meetergo's servers in Germany.

Furthermore, meetergo temporarily records your IP address, your referrer URL, the time of access, and can determine that you have submitted an inquiry to us. This data is used exclusively for the technical provision of the service and is then automatically deleted.

The use of meetergo is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in making appointment scheduling as uncomplicated as possible. If consent has been requested, processing will be carried out exclusively on the basis of Art. 6 (1) (a) GDPR or Art. 9 (1) (a); consent can be revoked at any time.

Cyber Curriculum Training: CopeCart and Memberspot

We integrate payment services from third-party companies on our website. If you make a purchase from us, your payment data (e.g., name, payment amount, bank details, credit card number) will be processed by the payment service provider for the purpose of processing the payment. The respective contractual and data protection provisions of the respective providers apply to these transactions. The use of the payment service providers is based on Art. 6 (1) (b) GDPR (contract processing) for booking our training program and in the interest of ensuring the payment process is as smooth, convenient, and secure as possible (Art. 6 (1) (f) GDPR). If your consent is requested for certain actions, Art. 6 (1) (a) GDPR forms the legal basis for data processing; consent can be revoked at any time for the future.

CopeCart: The provider of this payment service is CopeCart GmbH, Ufnaustrasse 10, 10553 Berlin (hereinafter "CopeCart").

Memberspot: To provide you with the best possible training experience, we use Memberspot to host and deliver video courses, including account and access management for the relevant training courses. We use Memberspot as a software-as-a-service (SaaS) to create and deliver member areas and online video formats for our training courses. "Memberspot" is a service provided by Memberspot GmbH, Rilkestr. 26, 71642 Ludwigsburg.

This requires the provision of personal data. This includes, in particular, your name, password, and email address, which will enable you to use the members' area.

The legal basis for the use of "Memberspot" is Art. 6 (1) (b) GDPR for the fulfillment of pre-contractual and contractual measures. You can delete your account at any time or request its deletion by the aforementioned controller. Once your account has been deleted, it will no longer be accessible.

Funnel cockpit

We use FunnelCockpit as marketing software to offer you attractive and functional landing pages. The provider is Just Viral GmbH & Co. KG, Reinholdstrasse 5, 21073 Hamburg. This is a German provider with servers located in Germany. Cookies and HTML5 local storage are used for this purpose. These are stored temporarily on your device via your browser as small text files. These include the session ID, language settings, log-in information, entered search terms, frequency of page views, origin of the page visit, use of website functions, referring pages (referrers), countdown times, split test URLs, and page visits. The data collected on our website is pseudonymized using technical precautions. It is therefore no longer possible to assign the data to you as a natural person.

The legal basis for the processing of your personal data using cookies and local storage is Art. 6 (1) (f) GDPR. The controller has a legitimate interest in using reliable and functional marketing software that enables attractive and functional landing pages.

(7) Social media presences

Decanos GmbH operates a presence on various social media platforms ("Social Media Presences") under the Cyber Curriculum® brand. Users can visit our social media presences and learn about us and our services, as well as use various functions (e.g., "liking" social media presences or communicating with us directly via messages).

When users visit our social media presences, they are on the respective social media platform. The respective provider of the social media platform is responsible for the operation of the social media platform within the meaning of Art. 4 No. 7 GDPR. We do not know in detail how your personal data is processed by the respective providers and we have no influence over this. Users can find more detailed information on the processing of personal data in the privacy policies of the respective providers.

However, some of this data is also processed on behalf of the providers. Furthermore, the respective social media platform may collect personal data about users, and we may receive statistical evaluations of the use of our social media presence based on the data collected in this way. We may be joint controllers with the operator of the social media platform for this data collection.

On some social media platforms, contact is possible via the provided messenger functions. We process the data collected via the messenger functions exclusively for the purposes of communicating with users, either for the fulfillment of a contract or for the implementation of pre-contractual measures (pursuant to Art. 6 (1) (b) GDPR) or based on a balancing of interests pursuant to Art. 6 (1) (f) GDPR for our legitimate interest in external communication.

If Decanos GmbH processes personal data under the Cyber Curriculum® brand, this data will only be stored for the purposes described above for as long as it is necessary for these purposes or as long as we are legally obliged to retain the data.

We currently have a presence on the following social media platforms:

Facebook, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Instagram, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin, Ireland
YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

(8) Special information about Facebook and Instagram

Facebook and Instagram are Meta services. Therefore, the following explanations refer to both services.

When users visit our Instagram channel or our Facebook fan page, Meta collects certain data about users and provides us with statistical evaluations of the use of our social media channels, so-called page insights.

With regard to the Facebook fan page, the European Court of Justice assumes that we are "joint controllers" with Meta, even if we only receive data in statistical form and cannot draw any conclusions about the users as natural persons.

Meta may also process users' personal data outside the European Union/European Economic Area. Standard contractual clauses exist between the Meta companies to provide appropriate safeguards for the transfer of personal data outside the European Union/European Economic Area in accordance with Articles 44 et seq. of the GDPR.

There is no data protection adequacy decision from the European Commission for the USA and a number of other countries outside the European Union/European Economic Area. Users are exposed to the risk that government agencies could access personal data without us and/or the users' knowledge.

The legal basis for the processing of personal data is a balancing of interests in accordance with Art. 6 (1) (f) GDPR (our legitimate interest is the needs-based design of our social media presence).

(9) YouTube with enhanced data protection

This website embeds videos from YouTube. The site is operated by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in enhanced privacy mode. According to YouTube, this mode prevents YouTube from storing any information about visitors to this website before they watch the video. However, enhanced privacy mode does not necessarily prevent data from being shared with YouTube partners. YouTube establishes a connection to the Google DoubleClick network, regardless of whether you watch a video.

As soon as you start a YouTube video on this website, a connection to YouTube's servers is established. This informs the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after starting a video, YouTube may store various cookies on your device or use similar recognition technologies (e.g., device fingerprinting). This allows YouTube to receive information about visitors to this website. This information is used, among other things, to collect video statistics, improve user-friendliness, and prevent fraud.

YouTube is used in the interest of providing an appealing presentation of our online offerings. This represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. If consent has been requested, processing will be carried out exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

(10) Minors

This website, as well as its offerings, are not directed at persons under the age of 18. They should only submit personal data with the consent of their parents or guardians.

(11) Changes to the privacy policy

Due to the continuous development of our website, our offerings, and technological advancements, we reserve the right to adapt our security and data protection measures at any time. Please therefore always refer to the most recent version of our privacy policy.