Privacy Policy

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. For detailed information on data protection, please refer to our full privacy policy listed below.

Data collection on this website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the responsible party” in this privacy policy.

How do we collect your data?

Some of your data is collected directly when you provide it to us – for example, when you fill out a contact form. Other data is automatically collected by our IT systems when you visit the website, either automatically or with your consent. This mainly includes technical data (e.g., internet browser, operating system, or the time of page access). This data is collected automatically as soon as you enter the website.

What do we use your data for?

Some of the data is collected to ensure the website functions correctly. Other data may be used to analyze user behavior. If contracts are concluded or initiated via the website, the submitted data will also be processed for contract proposals, orders, or other service requests.

What rights do you have regarding your data?

You have the right to request, free of charge, information about the origin, recipients, and purpose of your stored personal data at any time. You also have the right to request correction or deletion of this data. If you have given consent for data processing, you can revoke this consent at any time for the future. Furthermore, you have the right, under certain circumstances, to request the restriction of processing your personal data. You also have the right to lodge a complaint with the competent supervisory authority.

For any questions regarding data protection, you can contact us at any time.

Analytics tools and third-party tools

When you visit this website, your browsing behavior may be statistically analyzed. This is primarily done using so-called analytics programs.

Detailed information about these analytics programs can be found in the privacy policy below.

2. Hosting

We host the content of our website with the following provider:

Strato

The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (hereinafter “Strato”). When you visit our website, Strato records various log files, including your IP addresses.

For more information, please see Strato’s privacy policy: https://www.strato.de/datenschutz/.

The use of Strato is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in providing a reliable presentation of our website. If consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and §25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) in accordance with TDDDG. Consent can be revoked at any time.

Data processing agreement

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a legally required contract that ensures the service processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General information and mandatory notices

Data privacy

The operators of this website take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with the legal data protection regulations as well as this privacy policy. When you use this website, various personal data is collected. Personal data is any information that can be used to identify you personally. This privacy policy explains which data we collect and how we use it. It also explains how and for what purposes this is done. Please note that data transmission over the Internet (e.g., via email communication) can have security gaps. Complete protection of data from access by third parties is not possible.

Information on the responsible party

The responsible party for data processing on this website is:

Stephanie Roas

Bernöckerweg 20a

83703 Gmund am Tegernsee

Germany

Phone: +49 (0)151 1943 7454

Email: stephanie@kulturlogik.de

The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, or similar).

Storage duration

Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose of data processing no longer applies. If you exercise a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, provided we have no other legally permissible reasons to retain your personal data (e.g., tax or commercial retention periods). In the latter case, deletion occurs once these reasons no longer apply.

General information on the legal basis for data processing on this website

If you have given consent to data processing, we process your personal data based on Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, if special categories of data according to Article 9(1) GDPR are being processed. In the case of explicit consent for the transfer of personal data to third countries, data processing is also based on Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing also occurs on the basis of §25(1) TDDDG. Consent can be revoked at any time.

If your data is required for the performance of a contract or for pre-contractual measures, we process your data based on Article 6(1)(b) GDPR. Furthermore, we process your data when necessary to fulfill a legal obligation on the basis of Article 6(1)(c) GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. The specific legal basis applicable in each case is explained in the following sections of this privacy policy.

Note on data transfers to third countries with insufficient data protection and to US companies not certified under the DPF

We use, among others, tools from companies based in third countries that do not provide adequate data protection under EU law, as well as US-based tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in these countries. Please note that in such third countries, a level of data protection comparable to that of the EU cannot be guaranteed. We point out that the USA is generally considered a safe third country with a level of data protection comparable to the EU. Data transfers to the USA are permitted if the recipient holds certification under the “EU-US Data Privacy Framework” (DPF) or provides appropriate additional safeguards. Information on transfers to third countries, including data recipients, can be found in this privacy policy.

Recipients of personal data

In the course of our business activities, we work with various external parties. In some cases, this requires the transfer of personal data to these external parties. We only transfer personal data to external parties if it is necessary for the fulfillment of a contract, if we are legally obliged to do so (e.g., disclosure to tax authorities), if we have a legitimate interest under Article 6(1)(f) GDPR in the transfer, or if another legal basis permits the transfer.

Revocation of Your Consent to Data Processing

Many data processing activities are only possible with your explicit consent. You can revoke any consent you have given at any time. The legality of data processing carried out up to the point of revocation remains unaffected by the revocation.

Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE SPECIFIC LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of their habitual residence, their place of work, or the place of the alleged infringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in the performance of a contract, and to have it transmitted to yourself or to a third party in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will be carried out only to the extent technically feasible.

Right to access, rectification, and deletion

You have the right, within the framework of applicable legal provisions, to obtain free information about your stored personal data, their origin, recipients, and the purpose of data processing, and, where applicable, the right to request correction or deletion of this data. For this purpose, and for any further questions regarding personal data, you can contact us at any time.

Right to restrict processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time to exercise this right. The right to restrict processing applies in the following cases:

If you contest the accuracy of your personal data stored with us, we usually need time to verify this. During the verification period, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data is unlawful, you may request restriction instead of deletion.
If we no longer need your personal data, but you need it to assert, exercise, or defend legal claims, you have the right to request restriction instead of deletion.
If you have objected under Article 21(1) GDPR, a balance between your interests and ours must be made. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of processing of your personal data.

If you have restricted the processing of your personal data, such data may only be processed – aside from storage – with your consent, to assert, exercise, or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the change in the browser’s address line from “http://” to “https://” and by the padlock icon in your browser. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

4. Data collection on this website

Cookies

Our website uses so-called “cookies.” Cookies are small data files and do not cause any harm to your device. They are either temporarily stored for the duration of a session (session cookies) or permanently stored on your device (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain on your device until you delete them or your browser automatically removes them.

Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party providers within websites (e.g., cookies for processing payment services).

Cookies serve different purposes. Many cookies are technically necessary, as certain website functions would not work without them (e.g., shopping cart functions or video display). Other cookies may be used to analyze user behavior or for advertising purposes.

Cookies that are necessary for the execution of the electronic communication process, for providing certain functions requested by you (e.g., shopping cart functionality), or for optimizing the website (e.g., cookies to measure website traffic) are stored based on Article 6(1)(f) GDPR, unless another legal basis is indicated. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services. If consent has been requested for the storage of cookies and comparable recognition technologies, processing takes place exclusively on the basis of this consent (Art. 6(1)(a) GDPR and §25(1) TDDDG); consent can be revoked at any time.

You can set your browser to be informed about the placement of cookies and to allow cookies only on a case-by-case basis, to exclude the acceptance of cookies for certain cases or in general, and to enable the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Which cookies and services are used on this website can be found in this privacy policy.

Inquiries via email, telephone, or fax

If you contact us by email, telephone, or fax, your inquiry, including all personal data contained therein (e.g., name, inquiry), will be stored and processed by us for the purpose of handling your request. We will not share this data without your consent. The processing of this data is based on Article 6(1)(b) GDPR if your inquiry is related to the performance of a contract or required for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if obtained; consent can be revoked at any time. The data you send to us via contact inquiries will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been fully processed). Mandatory legal provisions—particularly statutory retention periods—remain unaffected.

5. Social Media

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Whenever a page of this website containing LinkedIn elements is accessed, a connection to LinkedIn’s servers is established. LinkedIn is informed that you have visited this website with your IP address. If you click the LinkedIn “Recommend” button and are logged into your LinkedIn account, LinkedIn can associate your visit to this website with your user account. Please note that as the provider of the website, we have no knowledge of the content of the data transmitted or its use by LinkedIn.

Use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and §25(1) TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: LinkedIn Data Transfer Information

Further information is available in LinkedIn’s privacy policy: LinkedIn Privacy Policy.

The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards in processing personal data in the USA. Every company certified under the DPF commits to adhering to these data protection standards. Further information is available from the provider here: DPF Participants.

6. Plugins and tools

Wordfence

We use Wordfence on this website. The provider is Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter “Wordfence”).

Wordfence protects our website from unauthorized access and malicious cyberattacks. To do this, our website maintains a continuous connection to Wordfence’s servers so that Wordfence can compare its databases with the access attempts made on our site and block them if necessary.

The use of Wordfence is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the most effective possible protection of its website against cyberattacks. If applicable consent has been obtained, processing occurs solely on the basis of Article 6(1)(a) GDPR and §25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: Wordfence GDPR Information.

Data processing agreement

We have concluded a Data Processing Agreement (DPA) for the use of the above-mentioned service. This is a legally required contract that ensures the service processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.