Privacy Policy

1. Objective and responsibility

2. Basic information on data processing and legal basis

3. Security measures

4. Disclosure of data to third parties and third-party providers

5. Processing of data in the context of customer relations

6. Domain registrations

7. Collection of access data

8. Cookies & reach measurement

9. Online presence in social media

10. Google Analytics

11. Piwik PRO

12. Google AdSense

13. Facebook Social Plugins

14. Facebook marketing services (including Facebook Pixel and Custom Audiences)

15. Newsletter and contact

16. Integration of third-party services and content

17. Deletion of data

18. Rights of users

19. Right to object

20. Changes to the privacy policy

1.1 This privacy policy informs you about the nature, scope and purpose of the processing of personal data within our online offer and the websites, mobile applications and content connected to it (hereinafter collectively referred to as "online offer", or more specifically as "website" or "app"). The privacy policy applies regardless of the domains, systems, platforms and devices used (e.g. desktop or mobile. on which the online offer is executed.

1.2 Provider of the online offer and responsible under data protection law is webme GmbH, Straßburger Straße 55, 10405 Berlin, Germany, Managing Director: Sven Lubek, (hereinafter referred to as "provider", "we" or "us"). For further information about us as well as contact possibilities we refer to our imprint

2.1 The personal data of users processed within the scope of our online offer includes inventory data (e.g., names and addresses of customers), contract data (e.g., regarding the services used, names of clerks, payment information), usage data (e.g., the web pages visited on our online offer, interest in our products), meta/communication data (device IDs, IP addresses, location data) and content data (e.g., entries in the contact form, data processed within the scope of our contract performance).

2.2 The term "user" includes all categories of data subjects. They include our business partners, customers, interested parties and other visitors to our online offer. The terms used, such as "user", are to be understood as gender-neutral.

2.3 We process users' personal data only in compliance with the relevant data protection regulations. This means that the users' data will only be processed if a legal permission exists. I.e., in particular if the data processing is necessary for the provision of our contractual services (e.g. processing of orders) as well as online services, or is required by law, a consent of the users is available, as well as due to our legitimate interests (i.e. interest in the analysis, optimization and economic operation and security of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO, in particular in the case of range measurement, creation of profiles for advertising and marketing purposes, as well as collection of access data and use of third-party services.

2.4 With regard to the processing of personal data on the basis of the Data Protection Regulation (DSGVO), we point out that the legal basis for the consents Art. 6 para. 1 lit. a and Art. 7 DSGVO, the legal basis for the processing for the performance of our services and implementation of contractual measures Art. 6 (1) lit. b DSGVO, the legal basis for processing to fulfill our legal obligations is Art. 6 (1) lit. c DSGVO, and the legal basis for processing to protect our legitimate interests is Art. 6 (1) lit. f DSGVO.

3.1 We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are complied with and thus to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

3.2 The security measures include in particular the encrypted transmission of data between your browser and our server.

4.1 A transfer of data to third parties (i.e. in particular their transmission or disclosure. takes place only on the basis of legal permissions and within the framework of legal requirements. We only pass on users' data to third parties if this is necessary, for example, in order to fulfill our contractual obligations to users or if we make use of third-party services within the scope of our legitimate interests. Furthermore, data is transferred within the companies of our group of companies, in particular for the purpose of fulfilling administrative tasks, legal obligations or due to business interests.

4.2 If we use the services of third parties to provide our services, we take appropriate legal precautions as well as corresponding technical and organizational measures to ensure the protection of personal data in accordance with the relevant legal regulations.

4.3 If content, tools or other means from other providers (hereinafter collectively referred to as "third party providers") are used within the scope of this data protection declaration and their named registered office is located in a third country, it is to be assumed that a data transfer to the third party providers' countries of domicile takes place. Third countries are countries in which the GDPR is not directly applicable law, i.e. basically countries outside the EU or the European Economic Area.The transfer of data to third countries takes place either if there is an adequate level of data protection, user consent or otherwise legal permission.

5.1 We process inventory data (e.g., names and addresses as well as contact data of users) and contract data (e.g., services used, names of contact persons, payment information) of our customers and interested parties for the purpose of fulfilling our contractual obligations and services pursuant to Art. 6 para. 1 lit. b. DSGVO.

5.2 In the course of registration by users, the following mandatory data is collected:

• Domain name

• Email address

• Password (stored in encrypted form)

5.3 In addition to these aforementioned data, each user decides for himself/herself on further details, such as details on the individual web pages. Users can request the blocking of their accounts in their user profiles, e.g. if they cancel their account. The blocking allows the users to use their user profile with settings and content again at a later time. Furthermore, users have the right to delete their content in accordance with Art. 17 DSGVO or to restrict processing in accordance with Art. 18 DSGVO, which can be requested at the above-mentioned contact address. We store, even in the case of deletion of other content, the e-mail address of the user for the purpose of matching in the event of a new registration, in order to prevent renewed registrations under the e-mail address or the misuse of e-mail addresses. The processing of the e-mail address is limited only to the matching purposes. The e-mail addresses are irreversibly encrypted. It is the responsibility of the users to secure their data in case of cancellation before the end of the contract.

5.4 Furthermore, we process the data of our customers (e.g., the visited web pages of our online offer, as well as regarding the use of our services) on the basis of our legitimate interests in advertising and market research purposes pursuant to Art. 6 para. 1 lit. f. DSGVO, e.g. to offer customers services based on their previous contractual interests or to analyze the development of our business operations. Furthermore, we process the data insofar as we are legally obligated to do so, e.g. due to commercial and tax law obligations pursuant to Art. 6 para. 1 lit. c. DSGVO, are obligated.

5.5 When contacting us (via contact form or e-mail), the user's details are processed for handling the contact request and its processing and may be stored for these purposes in our customer relationship management system or comparable request organization.

6.1 Please note: In the case of domain registrations, we forward certain personal data to the registrars and registries on the basis of the 6 para. 1 lit. b. DSGVOfurther. This data is stored by the registries and published there in Whois databases that are generally accessible by anyone.

6.2 For the registration of a ".de" domain, for example, the name and address of the domain holder, the administrative and technical contact and the zone administrator, as well as the telephone and fax number and e-mail address of the technical contact and the zone administrator, are currently forwarded to DENIC e.G. and stored there. Name and address can be viewed at www.denic.de in the "Whois" query on the Internet. For example, in the case of .com, .net, .org domains, the telephone and fax number and e-mail address of the administrative contact are also forwarded and can be publicly accessed in the respective Whois databases.

6.3 The hosting of the domains is carried out by InterNetX GmbH, Johanna-Dachs-Str. 55, 93055 Regensburg, Germany (privacy policy: https://www.internetx.com/rechtliches/datenschutz/).

7.1 We collect on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO, we collect data about each access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

7.2 Log file information is stored for security reasons for a period of 14 days. After this period, the IP addresses are deleted or anonymized (by changing the last two numbers of the IP mail address) or the IP addresses are stored in encrypted form without the possibility of re-encryption (this only makes it possible to compare them with other IP addresses with the same encryption). These measures serve to detect any unauthorized access, behavior patterns of bots or insecure access sources, while at the same time safeguarding user rights. Data whose further retention is required for evidentiary purposes is excluded from deletion or anonymization until final clarification of the respective incident and for this purpose alone.

8.1 Cookies are information that is transmitted from our web server or third-party web servers to the users' web browsers and stored there for later retrieval. Cookies may be small files or other types of information storage. Unless explicitly stated in this privacy policy, we only use so-called "session cookies", which are only stored for the duration of the current visit to our website (e.g. to enable the storage of your login status). In a session cookie, a randomly generated unique identification number is stored, a so-called session ID. In addition, a cookie contains information about its origin and the storage period. These cookies cannot store any other data. Session cookies are deleted when you have finished using our online offer and log out or close the browser, for example.

8.2 Users are informed about the use of cookies in the context of pseudonymous reach measurement within the scope of this privacy policy.

8.3 If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.

8.4 You can object to the use of cookies that are used for reach measurement and advertising purposes via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and additionally the US website(http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

9.1 We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there.

9.2 We would like to point out that user data may be processed outside the European Union and the Swiss Confederation. This may result in risks for the users because, for example, it could make it more difficult to enforce the rights of the users. With regard to U.S. providers certified under the Privacy Shield, we point out that they thereby undertake to comply with the data protection standards of the EU and the Swiss Confederation.

9.3 Furthermore, user data is usually processed for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data may also be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).

9.4 The processing of the users' personal data is based on our legitimate interests in effectively informing users and communicating with users. If users are asked by the respective providers to consent to data processing (i.e., declare their consent, e.g., by checking a checkbox or confirming a button), the legal basis for processing is consent.

9.5 For a detailed description of the respective processing and the opt-out options, please refer to the information of the providers linked below.

9.6 In the case of requests for information and the assertion of user rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

9.7. Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland) - Datenschutzerklärung: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads und http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

9.8. Google/ YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland) - Datenschutzerklärung: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

10.1 We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin Ireland ("Google"), on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by the users is usually transmitted to a Google server in the USA and stored there.

10.2 Google is certified under the Privacy Shield Agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

10.3 Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services related to the use of this online offer and the internet. In doing so, pseudonymous usage profiles of the users can be created from the processed data.

10.4 We use Google Analytics to display the ads placed within Google's advertising services and those of its partners only to users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Google (so-called "Remarketing Audiences" or "Google Analytics Audiences"). With the help of Remarketing Audiences, we also want to ensure that our advertisements correspond to the potential interest of users and do not have a harassing effect.

10.5 We use Google Analytics only with IP anonymization enabled. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

10.6 The IP address transmitted by the user's browser will not be merged with other data from Google. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent the collection of the data generated by the cookie and related to their use of the online offer to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link:http://tools.google.com/dlpage/gaoptout?hl=de.

For more information about Google's use of data, settings and opt-out options, please visit Google's websites: https://www.google.com/intl/de/policies/privacy/partners ("Data use by Google when you use our partners' websites or apps"), http://www.google.com/policies/technologies/ads ("Data use for advertising purposes"), http://www.google.de/settings/ads ("Manage information Google uses to serve you ads").

We use Matomi, a web analytics service, on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f. DSGVO) Matomi, a web analytics service. Matomi does not process any personal data and does not set any cookies. For more information about the processing, please visit https://matomo.org/.

12.1 We use Google AdSense, a service of Google Ireland Limited, Gordon House, Barrack Street, Dublin Ireland, on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) Google AdSense, a service for embedding advertisements of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. ("Google"). Google AdSense uses so-called "cookies", text files that are stored on the user's computer and that enable an analysis of the use of the online offer. Google AdSense also uses so-called web beacons (invisible graphics). Through these web beacons, information such as visitor traffic on the pages of this offer can be evaluated.

12.2 Google is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

12.3 Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services related to the use of this online offer and the Internet. In doing so, pseudonymous usage profiles of the users can be created from the processed data.

12.4 The information generated by the use of Adsense will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the online service in relation to the advertisements, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may use the data to create user profiles.

12.5 Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate the IP address of users with any other data held by Google. Users can prevent the storage of cookies on the hard drive of users and the display of web beacons by selecting "Do not accept cookies" in your browser settings. However, we would like to point out that in this case it may not be possible to use all functions of this online offer to their full extent.

12.6 You can find out more information about Google's data use, setting options and objection options on Google's websites: https://www.google.com/intl/de/policies/privacy/partners ("Data use by Google when you use our partners' websites or apps"), http://www.google.com/policies/technologies/ads ("Data use for advertising purposes"), http://www.google.de/settings/ads ("Manage information Google uses to show you ads").

13.1 We use social plugins ("Plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd. DSGVO) social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and are recognizable by one of the Facebook logos (white "f" on blue tile, the terms "Like", "Like" or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and appearance of Facebook social plugins can be viewed here:https://developers.facebook.com/docs/plugins/.

13.2 Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

13.3 When a user calls up a function of this online offer that contains such a plugin, his or her device establishes a direct connection with Facebook's servers. In the process, user data concerning the visit and interests in our online offer as well as software and hardware used, the time of the visit and the IP address of the user are transmitted to Facebook. The processed data can be used to create user profiles and cookies with user profile data can be stored on the user's device. The user data processed by Facebook may be used for marketing purposes.

13.4 The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and settings options to protect the privacy of users, can be found in the privacy notices of Facebook:https://www.facebook.com/about/privacy/.

13.5 If a user is a Facebook member and does not want Facebook to collect data about him/her via this online offer and link it to his/her membership data stored on Facebook, he/she must log out of Facebook and delete his/her cookies before using our online offer. Further settings and objections to the use of data for advertising purposes, are possible within the Facebook profile settings:https://www.facebook.com/settings?tab=ads or via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

14.1 Within our online offer, the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are a resident of the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), is used due to our legitimate interests in the analysis, optimization and economic operation of our online offer and for these purposes.

14.2 Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

14.3 With the help of the Facebook pixel, it is possible for Facebook, on the one hand, to determine the visitors to our online offer as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. With the help of the Facebook pixel, we can also track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

14.4 The Facebook pixel is directly integrated by Facebook when you access our websites and can save a so-called cookie, i.e. a small file, on your device. If you subsequently log in to Facebook or visit Facebook while logged in, the visit to our online offer will be noted in your profile. The data collected about you is anonymous for us, so it does not offer us any conclusions about the identity of the user. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and can be used by Facebook and for its own market research and advertising purposes. If we should transmit data to Facebook for matching purposes, this data is encrypted locally in on the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of matching data that is also encrypted by Facebook.

14.5 Furthermore, we use the additional function "extended matching" when using the Facebook Pixel. In this case, inventory data such as telephone numbers, email addresses or Facebook IDs of the users are transmitted to Facebook in encrypted form for the creation of target groups for Facebook ads and only used for this purpose. Users agree to the processing of their personal information in the context of "advanced matching".

14.6 We use the "Custom Audiences from File" procedure of the social network Facebook, Inc. In this case, inventory data (telephone numbers, e-mail addresses, Facebook IDs) are transmitted to Facebook in encrypted form for the creation of target groups for Facebook ads and used only for this purpose. Users agree to the processing of their personal information as part of the "Custom Audiences from File" procedure.

14.7 The processing of data by Facebook takes place within the framework of Facebook's data usage policy. Accordingly, general information on the display of Facebook Ads, in Facebook's Data Usage Policy:https://www.facebook.com/policy.php. Specific information and details about the Facebook Pixel and how it works can be found in Facebook's help section: https://www.facebook.com/business/help/651294705016616.

14.8 You can object to the collection by the Facebook Pixel and use of your data to display Facebook Ads. To adjust which types of ads are displayed to you within Facebook, you can visit the page set up by Facebook and follow the instructions there for the settings of usage-based advertising:https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

15.1 The following information explains the contents of our newsletter and other types of business e-mails and electronic mail (in short "newsletter") as well as the registration, dispatch and statistical evaluation procedure and your rights of objection. By subscribing to our newsletter, you consent to receiving it and to the procedures described. The legal basis of your consent is Art. 6 para. 1 lit. a, Art. 7 DSGVO and § 7 para. 2 No. 3 UWG.

15.2 Newsletter content: We send newsletters, e-mails and other electronic notifications with promotional information (hereinafter "newsletter") only with the consent of the recipients or a legal permission. Insofar as the contents of the Newsletter are specifically described in the context of a registration, they are decisive for the consent of the users. Otherwise, our newsletters contain information about our services and our company.

15.3 Dispatch service provider: The newsletter is dispatched using "MailChimp", a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the shipping service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield agreement, thereby providing a guarantee of compliance with the European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active).

15.4 Double opt-in and logging: The registration for our newsletter takes place in a so-called double opt-in process. This means that after registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with other e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Likewise, changes to your data stored with the shipping service provider will be logged.

15.5 Furthermore, according to its own information, the shipping service provider may use this data in pseudonymous form, i.e. without assigning it to a user, to optimize or improve its own services, e.g. to technically optimize the shipping and display of the newsletter or for statistical purposes to determine which countries the recipients come from. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass them on to third parties.

15.6 Registration data: To sign up for the newsletter, we ask that you enter the email address as well as complete the optional information. We use this information to personally address our newsletter subscribers.

15.7 Statistical collection and analyses - The newsletters contain a so-called "web beacon", i.e. a pixel-sized file that is retrieved from the server of the dispatch service provider when the newsletter is opened. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of the retrieval are initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address. or the access times. Statistical surveys also include determining whether newsletters are opened, when they are opened and which links are clicked and when. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of the dispatch service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

15.8 The newsletter is sent on the basis of the consent of the recipients pursuant to 6 para. 1 lit. a, Art. 7 DSGVO and § 7 para. 2 No. 3 UWG. The statistical surveys and analyses are carried out on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO. Our interest is directed towards the use of a user-friendly as well as secure newsletter system that serves our business interests as well as meets the expectations of the users. The logging of the registration process takes place. according to Art. 6 para. 1 lit. c. DSGVO due to legal obligation to prove the consent of the newsletter recipients according to § 7 para. 2 no. 3 UWG as well as according to Art. 7 para. 1 DSGVO.

15.9 Cancellation/revocation - Newsletter recipients can cancel receipt of our newsletter at any time, i.e. revoke their consents. Newsletter recipients will find a link to cancel the newsletter at the end of each newsletter. Upon unsubscribing from newsletters, personal data will be deleted if they only concern the newsletter subscription, unless their retention is legally required or necessary for contractual reasons, in which case their processing will be limited to these exceptional purposes only.

16.1 We use content or service offers of third party providers within our online offer on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer in the sense of Art. 6 para. 1 lit. f. DSGVO). DSGVO)content or service offers of third-party providers in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content"). This always requires that the third-party providers of this content are aware of the IP address of the user, since without the IP address they could not send the content to their browser. The IP address is thus required for the display of this content. We endeavor to use only such content whose respective providers use the IP address only for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer as well as information about the location of the user, and may also be combined with such information from other sources to form user profiles.

16.2 The following presentation provides an overview of third-party providers and their content, along with links to their data protection declarations, which contain further information on the processing of data and, in part already mentioned here, objection options (so-called opt-out):

• The links/buttons to social networks and platforms (hereinafter referred to as "social media") used within our online offer do not establish direct contact between social networks and users. Their function corresponds to the mode of operation of a regular online link.

• Videos from the "YouTube" platform of the third-party provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

• Maps of the service "Google Maps" of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

• Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA, https://www.cloudflare.com/, a Content Delivery Network (CDN), with the help of which content of our service, especially large media files, such as graphics or scripts are delivered faster with the help of regionally distributed servers connected via the Internet. Privacy policy: https://www.cloudflare.com/security-policy/.

• Criteo, personalized ads/ remarketing, privacy policy: http://www.criteo.com/de/privacy/, opt-out: http://www.criteo.com/de/privacy/.

17.1 The data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations. If the user data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to user data that must be retained for reasons of commercial or tax law.

17.2 In accordance with legal requirements, data shall be retained for 6 years pursuant to Section 257 (1) of the German Commercial Code (commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years pursuant to Section 147 (1) of the German Fiscal Code (AO) (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).

Users have the right to obtain, upon request and free of charge, information about the personal data that we have stored about them. In addition, users have the right to correct inaccurate data, restrict processing and delete their personal data, if applicable, to assert their rights to data portability and, in the event of the assumption of unlawful data processing, to file a complaint with the competent supervisory authority.

18.1 Likewise, users may revoke consents, in principle with effect for the future.

Users may object to the future processing of their personal data in accordance with the legal requirements at any time. The objection can be made in particular against the processing for purposes of direct advertising.

20.1 We reserve the right to change the privacy policy in order to adapt it to changed legal situations or in case of changes of the service as well as the data processing. However, this only applies with regard to declarations on data processing. Insofar as user consent is required or components of the data protection declaration contain provisions of the contractual relationship with the users, the changes shall only be made with the consent of the users.

20.2 Users are requested to inform themselves regularly about the content of the data protection declaration.

Status: May 2023

The original version of this privacy policy can be found here: www.webme.com/de-de/datenschutzerklaerung