Protecting your data is very important to us. For transparent cooperation, we would like to inform you about significant processing activities and particulars.
Purpose and Legal Basis for Data Processing
Data processing by Deutsche Online Agentur GmbH is carried out for the purpose of contract fulfillment/technical proposal preparation and contract processing according to Art. 6 Para. 1 lit. b GDPR and, if there is no contractual basis for the claim, within the framework of balancing interests according to Art. 6 Para. 1 lit. f GDPR, where the legitimate interest is associated with:
As a company, we are subject to various legal obligations. To fulfill these obligations, processing of personal data may be necessary under Art. 6 Para. 1c GDPR for legal obligations or under Art. 6 Para. 1e GDPR in the public interest.
Controller according to Art. 4 Para. 7 EU General Data Protection Regulation (GDPR)
Deutsche Online Agentur GmbH
Hohenzollerndamm 3,
10717 Berlin
Andreas Spieß
Phone: 030 – 2000427 – 0
Email: datenschutz@bitskin.de
Appointed as external data protection officers:
Werk3 für Datenschutz GmbH Ms. Sandra Leist
Letteallee 3 in 13409 Berlin Email datenschutz-doa@datenschutz-werk.de
_____________
These privacy notices apply to the following offers:
Collection of Personal Data Upon Your Contact
When you write us an email, contact us by phone, or use the contact form, we collect, process, and store the following data from you and use it to respond to your inquiry.
Collection of Personal Data When Visiting Our Website
(1) In the case of merely informative use of the website, i.e., if you do not register or otherwise transmit information to us, we collect only the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR):
(2) We use cookies for our website.
Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the party that sets the cookie. Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.
This website uses the following types of cookies, whose scope and function are explained below:
Transient cookies are automatically deleted when you close the browser. This includes session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
Persistent cookies are automatically deleted after a specified duration, which can vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
You can configure your browser setting according to your wishes and refuse the acceptance of third-party cookies or all cookies. However, we would like to point out that you may not be able to use all functions of this website.
The legal basis for the use of cookies is Art. 6 Para. 1 S. 1 lit. f GDPR. If you have given us consent to set cookies, then Art. 6 Para. 1 S. 1 lit. a GDPR is an additional legal basis for the use of cookies.
(3) We use tracking technologies.
Google Analytics 4.0
As long as you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google LLC. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics uses cookies, which enable an analysis of your use of our websites. The information generated by the cookies about your use of this website is generally transmitted to a server of Google in the USA and stored there.
With Google Analytics 4, IP anonymization is activated by default. Due to the IP anonymization, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google in the USA and shortened there. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google according to Google.
During your website visit, your user behavior is recorded in the form of “events”. Events can be:
Also recorded:
The reports provided by Google Analytics serve to analyze the performance of our website.
Recipients of the data can/may be
It cannot be excluded that US authorities may access the data stored by Google.
Third-country transfer
Insofar as data is processed outside the EU/EEA and there is no data protection level corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an adequate level of data protection. The parent company of Google Ireland, Google LLC, is located in California, USA. Data transmission to the USA and access by US authorities to the data stored by Google cannot be excluded.
Duration of storage
The data sent by us and linked to cookies will be automatically deleted after two months. Data whose storage duration has been reached is automatically deleted once a month.
The use of Google Analytics is based on your consent according to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDSG. Data transfer to the USA is carried out according to Art. 45 Para. 1 GDPR based on the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
You can revoke your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. The legality of the processing carried out on the basis of the consent until the revocation is not affected by this.
You can also prevent the storage of cookies in the first place by setting your browser software accordingly. If you configure your browser to reject all cookies, however, you may experience limitations in functionality on this and other websites. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by not giving your consent to the setting of the cookie or by downloading and installing the browser add-on for deactivation of Google Analytics HERE.
Further information on the terms of use of Google Analytics and data protection at Google can be found at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.
Google Ads
We have integrated Google Ads on our website. Google Ads is a service by Google Ireland Limited, used to display targeted advertising to users. Google Ads uses cookies and other browser technologies to evaluate user behavior and recognize users.
Google Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Google Ads delivers targeted advertising based on behavioral profiles and geographic location. The provider is transmitted your IP address and other identifiers such as your user agent. If you are registered with a Google Ireland Limited service, Google Ads can assign the visit to your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider finds out and stores your IP address and other identifiers.
In this case, your data is transmitted to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The use of Google Ads is based on your consent according to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDSG. Data transfer to the USA is carried out according to Art. 45 Para. 1 GDPR based on the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
Google Tag Manager
We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and allows us to control the precise integration of services on our website.
This allows us to flexibly integrate additional services to evaluate user access to our website. Google Tag Manager is a solution that allows us to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain. The tool ensures the triggering of other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. The legal basis is according to Art. 6 Para. 1 lit f GDPR. No data transfer to the USA takes place since the hosting of the Tag Manager is local. Only when you have given your consent for Google Analytics does a forwarding take place according to Art. 45 Para. 1 GDPR based on the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
(4) No automated decision-making, the so-called profiling, takes place when visiting our website.
(5) We process your personal data only for the purpose specified here. Any further processing for other purposes requires your prior consent.
Transmission of Data
Our hosting provider, located in Germany with servers in Germany, and those departments and employees who need your data to fulfill contractual and legal obligations as well as legitimate interests, receive your data.
In addition, processors commissioned by us (esp. IT service providers) receive your data, insofar and to the extent that they need the data to fulfill their respective services. If legal obligations or legitimate interests exist, public bodies (e.g., courts, authorities) may be recipients of your personal data. Recipients can also be third parties to whom we transmit your data for the aforementioned purposes. Your data is only transmitted to third parties based on the legal bases mentioned above.
To secure it, we have concluded a data processing agreement with the hosting provider. This includes compliant handling of your personal data according to the EU General Data Protection Regulation.
Matomo
This website uses the web analysis service Matomo to analyze and regularly improve the use of our website. Through the statistics obtained, we can improve our offer and make it more interesting for you as a user. The legal basis for the use of Matomo is Art. 6 Para. 1 S. 1 lit. f GDPR. No cookies are stored on your computer for this evaluation.
This website uses Matomo with the extension “AnonymizeIP”. As a result, IP addresses are processed in shortened form, thus excluding direct personal reference. The IP address transmitted by your browser via Matomo is not merged with other data collected by us.
The program Matomo is an open-source project. Information from the third-party provider on data protection can be found at https://matomo.org/docs/privacy/.
Consent Management
For some data processing activities, we need your consent. To obtain and document your consent, we use the Cookie Consent Manager from “Borlabs GmbH” based in 22305 Hamburg, according to Art. 6 Para. 1 S. 1 lit. c. The Borlabs cookie only sets technically necessary cookies. When you enter our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the revocation of these consents are stored. This data is not passed on to the provider of Borlabs Cookie.
The collected data is stored until you ask us to delete it or the Borlabs cookie itself is deleted, or the purpose for data storage no longer applies. Mandatory statutory retention periods remain unaffected. Details on data processing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
We have concluded a data processing agreement (AVV) with the above-mentioned provider. This is a data protection agreement required by law that ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
Right to Withdraw Consent
In various cases, you have the opportunity to grant us consent for further processing in connection with the processing described below (possibly for part of the data). In this case, we will separately inform you about all modalities and the scope of the consent and about the purposes we pursue with these processing activities when you give the respective consent declaration. We inform you that revoking the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
Integration of jQuery
We have integrated jQuery on this website to make the page as appealing as possible for you. This is a fast, small, and feature-rich JavaScript library. When you access our website, animations or other files from the jQuery server are retrieved and stored in the cache of your browser to display our website. By integrating jQuery, we can make our website more interesting for you as a user. More information can be found at http://jquery.com/. The legal basis for the use of jQuery is Art. 6 Para. 1 S. 1 lit. f GDPR. Data transfer to the USA is carried out according to Art. 45 Para. 1 GDPR based on the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
The data listed under “Visit of Our Website” are transmitted to jQuery, and cookies are stored on your computer to enable recognition upon a return visit to our website. jQuery collects and stores usage data in pseudonymous profiles, according to its statements, which are stored on jQuery’s servers and protected from unauthorized third-party access and alterations.
You can prevent the processing by deleting existing cookies and preventing the storage of cookies. The prevention of cookie storage is possible by setting your browser accordingly. If you disable the storage of cookies, we point out that you may not be able to use this website to its full extent.
Provider information: jQuery is a project of various volunteers and part of the JS Foundation, Inc., Attn: Privacy Office, 1 Letterman Drive, San Francisco, CA 94129. More information can be found at https://js.foundation/. Further information from the provider on data protection can be found at https://js.foundation/about/governance/privacy-policy.
Video Conferences
For communication with our customers, we use various online conference tools. The specific tools we use are listed below. When you communicate with us via video or audio conference via the internet, your personal data are captured and processed by us and the provider of the respective conference tool.
The conference tools collect all data that you provide/use to use the tools (email address and/or your phone number). Furthermore, the conference tools process the duration of the conference, the start and end (time) of participation in the conference, number of participants, and other “context information” related to the communication process (metadata).
Furthermore, the provider of the tool processes all technical data required for handling online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection.
If content is exchanged, uploaded, or otherwise provided within the tool, it is also stored on the servers of the tool providers. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during the use of the service.
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 Para. 1 lit. b GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest in the sense of Art. 6 Para. 1 lit. f GDPR). If consent has been requested, the use of the respective tools is based on this consent; the consent can be revoked at any time with effect for the future.
The data directly collected by us via the video and conference tools are deleted from our systems as soon as you request us to delete them, you revoke your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your end device until you delete them. Mandatory statutory retention periods remain unaffected.
We have no influence on the storage duration of your data, which is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.
Zoom: Video conferences, web conferences, and webinars; Service provider: Zoom Video Communications, Inc., 55 Almaden Blvd., Suite 600, San Jose, CA 95113, USA; Website: https://zoom.us; Privacy notice: https://zoom.us/docs/de-de/privacy-and-legal.html; Standard contractual clauses (Ensuring data protection level during processing in third countries): https://zoom.us/docs/de-de/privacy-and-legal.html (Designated as Global DPA).
Google Meets: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com https://support.google.com/meet/answer/10382037?hl=de
Microsoft Teams: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA, https://www.microsoft.com/de-ch/microsoft-teams/security
Social Media
For another option for contact and publication of our current offers, we maintain a social media account. The legal basis is according to Art. 6 Para. 1 lit. f, the legitimate interest in customer communication in conjunction with Art. 26 GDPR of joint responsibility.
Jointly responsible for the operation of this Facebook page in the sense of the EU General Data Protection Regulation and other data protection regulations are:
Meta Ltd. (hereinafter “Facebook”), 4 Grand Canal Square, Grand Canal Harbour in Dublin 2 Ireland and Deutsche Online Agentur GmbH, Hohenzollerndamm 3 in 10717 Berlin.
We operate this page to draw attention to our services and products and to communicate with you as a visitor and user of this page and our website. We, as operators of the pages, have no interest in the collection and further processing of your individual personal data for analysis or marketing purposes.
The operation of these pages, including the processing of users’ personal data, is based on our legitimate interests in a contemporary and supportive information and interaction option for and with our users and visitors according to Art. 6 Para. 1 lit. f GDPR.
We are aware that Meta uses the data of users for advertising (analysis, creation of personalized advertising), for creating user profiles, and for market research.
Meta uses cookies to store and further process this information, i.e., small text files that are stored on the various devices of the users. If the user has a Facebook profile and is logged in to it, the storage and analysis are also cross-device. Facebook’s privacy notices contain further information on
Data processing:
https://www.facebook.com/about/privacy/
Opt-out options (so-called opt-out) can be set here:
https://www.facebook.com/settings?tab=ads and here http://www.youronlinechoices.com.
The transmission and further processing of users’ personal data in third countries, such as the USA, and the associated possible risks for users cannot be excluded by us as the operator of the page.
Statistical Data
Through the so-called “Insights” of the Facebook page, statistical data of different categories are available to me/us. These statistics are generated and provided by Facebook. We have no influence on the generation and display as the operator of the page.
We cannot turn off this function or prevent the generation and processing of the data. For a selectable period and for the categories fans, subscribers, reached persons, and interacting persons, Facebook provides us with the following data related to our Facebook page:
Total number of page views, “Likes”, page activities, post interactions, reach, video views, post reach, comments, shared content, responses, proportion of men and women, origin related to country and city, language, views, and clicks in the shop, clicks on route planner, clicks on phone numbers.
We use this data to make our posts and activities more attractive to users. For example, we use distributions by age and gender for a tailored approach and the preferred visiting times of users for a time-optimized planning of our posts.
Information about the type of end devices used by visitors helps us to visually adapt the posts accordingly. According to the Facebook terms of use, which every user has agreed to as part of the creation of an Instagram profile, we can identify the subscribers and fans of the page and view their profiles and further shared information from them.
Rights of Users
Since only Meta has full access to user data, we recommend that you contact Meta directly if you have information requests or other questions about your rights as a user (e.g., right to deletion).
The data protection officer can be contacted via the provided online contact form at https://www.facebook.com/help/contact/540977946302970.
Right to Object
If you no longer wish the data processing described here in the future, please use the functions “I no longer like this page” and/or “Unsubscribe from this page” to sever the connection of your user profile to our page.
Further Social Media Channel
For further contact options and publication of our current offers, we maintain a social media account. The legal basis is according to Art. 6 Para. 1 lit. f, the legitimate interest in customer communication in conjunction with Art. 26 GDPR of joint responsibility. Thus, LinkedIn has established a data processing agreement, which specifies the compliant handling of the GDPR. It can be read at: https://de.linkedin.com/legal/l/dpa
Provider is: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Privacy notice: https://www.linkedin.com/legal/privacy-policy; Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Since no adequacy decision by the European Commission exists (including the US companies that are not certified according to EU-U.S. DPF), we have agreed with the recipient of the data on other suitable guarantees within the meaning of Art. 44 et seq. GDPR. These are – unless otherwise indicated – standard contractual clauses of the EU Commission according to Implementing Decision (EU) 2021/914 of June 4, 2021. A copy of these standard contractual clauses can be viewed at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.
We point out that unknown risks (e.g., data processing by security authorities of the third country, the exact scope and consequences for you of which we do not know, over which we have no influence, and of which you may not become aware) may exist in the case of third-country transfers. The specific duration of the storage of the processed data is not under our control but is determined by LinkedIn Corporation. Further information can be found in the Privacy Notice for LinkedIn Ads: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.
Google Maps
On this website, we use the offer of Google Maps. This allows us to display interactive maps directly on the website and enable you to use the map function comfortably. The legal basis for the use of Google Maps is Art. 6 Para. 1 S. 1 lit. a GDPR. Data transfer to the USA is carried out according to Art. 45 Para. 1 GDPR based on the adequacy decision of the European Commission. The US company is certified according to the EU-U.S. Data Privacy Data Framework (EU-U.S. DPF). https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active
By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. Data is transmitted to Google in the process. This occurs regardless of whether Google provides a user account that you are logged in to, or if no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before visiting our website. Google stores your data as usage profiles and uses them for purposes of advertising, market research, and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for not logged-in users) to provide demand-oriented advertising. You have the right to object to the creation of these user profiles, and you must address this to Google.
Provider information Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policies. There you will also find further information on your rights and settings options for protecting your privacy: https://www.google.de/intl/de/policies/privacy.
No Obligation to Provide & Consequences of Non-Provision
The provision of personal data is not legally or contractually required, and you are not obliged to provide data. We inform you during the input process if the provision of personal data is required for the respective service (e.g., by designation as a “mandatory field”). If data are required, the non-provision means that the relevant service cannot be provided.
Duration of Storage of Your Data
We process your personal data, if necessary, for the duration of the business relationship, or as long as it is necessary for the stated purposes, and beyond that in accordance with the legal retention and documentation obligations, which arise in particular from the Tax Code and the Commercial Code and generally amount to 10 years. In addition, personal data can be stored and retained as long as the data are relevant for a pending judicial or administrative procedure in which the controller is a party.
Your Rights
(1) You have the following rights concerning the personal data concerning you:
(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. Please direct this complaint to the responsible supervisory authority at https://www.datenschutz-berlin.de/datenschutz/datenpanne/.
Objection
You have the right at any time to object to the processing of your personal data. Please address this in writing by email or by mail to the address mentioned above.
Since legal regulations can change, we ask you to regularly read these privacy notices. We will promptly incorporate changes to provide transparent information to you.
As of June 2024
Created with Werk3 for Datenschutz GmbH
Book an insight into the tool that will not only make your presentation work easier in the future, but will also demonstrably generate more orders for you.
