1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any data that can be used to identify you personally. For detailed information on data protection, please refer to our Privacy Policy listed below this text.

Data Collection on This Website

Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. You can find the operator’s contact information in the “Information on the Responsible Party” section of this Privacy Policy.

How do we collect your data?
Your data is collected, on the one hand, when you provide it to us. This may include, for example, data that you enter into a contact form. Other data is collected automatically or with your consent when you visit the website via our IT
systems. This primarily consists of technical data (e.g., internet browser, operating system, or the time the page was accessed). This data is collected automatically as soon as you access this website.

How do we use your data?

Some of the data is collected to ensure the website functions properly. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right at any time to receive, free of charge, information about the source, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time with future effect. In addition, you have the right, under certain circumstances, to request the restriction of the processing of your personal data.
Furthermore, you have the right to file a complaint with the competent supervisory authority.

You can contact us at any time regarding this matter or any other questions about data protection.

Analytics Tools and Third-Party Tools
When you visit this website, your browsing behavior may be statistically analyzed. This is done primarily using so-called analytics programs.
Detailed information about these analytics programs can be found in the following
privacy policy.

Hosting

The hosting services underlying this site are provided by Raidboxes GmbH (Hafenstrasse 32, 48153 Münster, Germany). Raidboxes GmbH offers Software as a Service (SaaS) as part of a cloud hosting solution.

Raidboxes GmbH automatically collects and stores server log files containing information that your browser transmits to us. This information includes:

Browser Type

Operating System

Referrer URL

Hostname

Raidboxes GmbH cannot associate this data with specific individuals. This data is not combined with other data sources. The data is deleted after statistical analysis, no later than 7 days. Further information can be found in Raidboxes GmbH’s privacy policy, which can be viewed here.

We have also entered into a data processing agreement (DPA). This agreement governs the scope, nature, and purpose of Raidboxes GmbH’s access to data. Access is limited solely to what is necessary to fulfill the hosting services.

3. General Information and Mandatory Disclosures

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws as well as this Privacy Policy.

When you use this website, various types of personal data are collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.

Please note that data transmission over the Internet (e.g., when communicating via email) may involve security vulnerabilities. It is not possible to completely protect data from access by third parties. Information on the Data Controller

The entity responsible for data processing on this website is:
Kathrin Kriesch
Mittenwalder Straße 2a
82467 Garmisch-Partenkirchen
Email: kontakt@kathrin-kriesch.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.)

Retention Period
Unless a more specific retention period is stated in this Privacy Policy,
we will retain your personal data until the purpose for which it was collected no longer applies. If you
submit a valid request for erasure or revoke your consent to data processing,
your data will be erased, provided we have no other legally permissible grounds for storing your
personal data (e.g., retention periods under tax or commercial law); in
the latter case, the data will be deleted once these grounds no longer apply.

General Information on the Legal Bases for Data Processing on this
Website

If you have consented to the processing of your data, we process your personal data on the
basis of Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, provided that special categories of data
as defined in Article 9(1) of the GDPR are being processed. In the event of explicit consent to the transfer
personal data to third countries, data processing is also based on Article
49(1)(a) of the GDPR. If you have consented to the storage of cookies or to access to information on
your device (e.g., via device fingerprinting), data processing is additionally
based on Section 25(1) of the TTDSG. Consent may be revoked at any time. If your data is required for
the performance of a contract or for the implementation of precontractual measures, we process your
data on the basis of Article 6(1)(b) of the GDPR. Furthermore, we process your data if it
is necessary to comply with a legal obligation on the basis of Article 6(1)(c) of the GDPR.
Data processing may also be based on our legitimate interest pursuant to Article 6(1)(f)
of the GDPR. Information regarding the applicable legal bases in each individual case is provided in the following
paragraphs of this Privacy Policy.
Recipients of Personal Data
As part of our business activities, we collaborate with various external parties. In doing so,
the transfer of personal data may also occur in some cases.

We disclose personal data to external parties only if this is necessary in connection with
the performance of a contract, if we are legally obligated to do so (e.g., disclosure of data
to tax authorities), if we have a legitimate interest in the disclosure pursuant to Art. 6(1)(f) of the GDPR,
or if another legal basis permits the disclosure of data. When using
data processors, we disclose our customers’ personal data only on the basis of a valid
data processing agreement. In the case of joint processing, a joint
processing agreement is concluded.
Withdrawal of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You may
withdraw consent you have already provided at any time. The lawfulness of the data processing carried out up to the time of withdrawal
remains unaffected by the withdrawal.
Right to Object to Data Collection in Specific Cases and to

Direct Marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(e) OR (f) OF THE GDPR
, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS RELATING TO YOUR PARTICULAR
SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA
; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
THE SPECIFIC LEGAL BASIS ON WHICH PROCESSING IS BASED
CAN BE FOUND IN THIS PRIVACY POLICY.

IF YOU OBJECT,
WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS
WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING
that override your interests, rights, and freedoms, or the
processing is necessary for the establishment, exercise, or defense of
legal claims (objection under Art. 21(1) of the GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES,
YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR
for the purposes of such marketing;
this also applies to profiling, to the extent that it is related to such direct marketing
. IF YOU OBJECT, YOUR PERSONAL DATA
WILL NO LONGER BE USED FOR THE PURPOSES OF DIRECT MARKETING (OBJECTION
PURSUANT TO ART. 21(2) OF THE GDPR).

Right to File a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to file a complaint with a
supervisory authority, in particular in the Member State of their habitual residence, their place of work,
or the location of the alleged violation. The right to file a complaint is without prejudice to other
administrative or judicial remedies.
Right to Data Portability
You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract,
either for yourself or for a third party, in a commonly used, machine-readable to have the data transferred. If you request the direct transfer of the data to another controller,
this will only take place to the extent that it is technically feasible.
Access, Rectification, and Erasure
Subject to applicable legal provisions, you have the right at any time to obtain, free of charge,
information about your stored personal data, its origin and recipients, and the

purpose of data processing, as well as, where applicable, the right to have this data rectified or erased. For this purpose, as well as
for any other questions regarding personal data, you may contact us at any time.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data.
You may contact us at any time regarding this matter. The right to restriction of processing applies in
the following cases:
If you dispute the accuracy of your personal data stored by us, we
generally need time to verify this. For the duration of the verification, you have the right to
request the restriction of processing of your personal data.
If the processing of your personal data was or is unlawful, you may
request the restriction of data processing instead of erasure.

If we no longer need your personal data, but you need it to exercise,
defend, or assert legal claims, you have the right to request the
restriction of the processing of your personal data instead of its erasure.
If you have lodged an objection pursuant to Article 21(1) of the GDPR, a balancing of
your interests against ours must be carried out. As long as it is not yet clear whose interests
prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data—apart from
its storage—may only be processed with your consent or for the purpose of asserting, exercising, or
defending legal claims, or to protect the rights of another natural or
legal person, or for reasons of a substantial public interest of the European Union or
a Member State.

SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as
orders or inquiries that you send to us as the website operator, this site uses SSL or TLS
encryption. You can recognize an encrypted connection by the fact that the address bar of your browser changes from
“http://” to “https://” and by the lock icon in your browser’s address bar.
When SSL or TLS encryption is enabled,

You can recognize an encrypted connection by the fact that the browser’s address bar changes from
“http://” to “https://” and by the padlock icon in your browser’s address bar.
When SSL or TLS encryption is enabled, the data you transmit to us cannot
be read by third parties.
4. Data Collection on This Website

Cookies
Our website uses so-called “cookies.” Cookies are small data packets and do not
cause any damage to your device. They are stored on your device either temporarily for the duration of a session
(session cookies) or permanently (persistent cookies). Session cookies
are automatically deleted at the end of your visit. Permanent cookies remain stored on your device
until you delete them yourself or your web browser deletes them automatically.
Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party
cookies). Third-party cookies enable the integration of certain services provided by
third-party companies within websites (e.g., cookies for processing payment services).
Cookies serve various functions. Many cookies are technically necessary, as certain
website functions would not work without them (e.g., the shopping cart function or the display
of videos). Other cookies may be used to analyze user behavior or for advertising purposes
.

Other cookies may be used to analyze user behavior or for advertising purposes
.
Cookies that are required to carry out the electronic communication process, to provide
certain functions you have requested (e.g., the shopping cart feature), or to optimize the
website (e.g., cookies for measuring web traffic) are stored
pursuant to Article 6(1)(f) of the GDPR, unless another legal basis is specified.
The website operator has a legitimate interest in storing necessary cookies to
ensure the technically flawless and optimized provision of its services. If consent to the
storage of cookies and similar recognition technologies has been requested, the
processing is based exclusively on this consent (Art. 6(1)(a) GDPR and § 25(1)
TTDSG); consent may be revoked at any time.
You can configure your browser to notify you when cookies are set and
only allow cookies on a case-by-case basis, exclude the acceptance of cookies for specific cases or in general,
and enable the automatic deletion of cookies when you close your browser. If you
disable cookies, the functionality of this website may be limited.
You can find information about which cookies and services are used on this website in this
Privacy Policy.

Contact Form
If you submit inquiries to us via the contact form, the information you provide in the
inquiry form—including the contact information you provide there—will be stored by us for the purpose of processing your inquiry
and in case of follow-up questions. We will not disclose this data without your
consent.
The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry is
related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the
effective handling of inquiries directed to us (Article 6(1)(f) of the GDPR) or on your
consent (Article 6(1)(a) of the GDPR), provided that consent was requested; consent may be
revoked at any time.
The data you enter in the contact form will remain with us until you request that we delete it,
withdraw your consent to its storage, or the purpose for storing the data no longer applies
(e.g., after your inquiry has been fully processed). Mandatory legal provisions—
in particular retention periods—remain unaffected.
Inquiries via Email, Phone, or Fax
If you contact us via email, phone, or fax, your inquiry—including all
personal data contained therein (name, inquiry)—will be stored and processed by us
for the purpose of handling your request. We do not disclose this data without your consent.
The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry is
related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the
effective handling of inquiries directed to us (Article 6(1)(f) of the GDPR) or on your
consent (Article 6(1)(a) of the GDPR), provided that consent was requested; consent may be
revoked at any time.
The data you send us via contact requests will remain with us until you request that we delete it,
withdraw your consent to its storage, or the purpose for storing the data no longer applies
(e.g., after your request has been fully processed). Mandatory legal provisions—
in particular statutory retention periods—remain unaffected.
Real Cookie Banner

Real Cookie Banner asks website visitors for consent to set cookies and process personal data. To this end, each website visitor is assigned a UUID (pseudonymous user identifier), which remains valid until the cookie used to store the consent expires. Cookies are used to test whether cookies can be set, to store a reference to the documented consent, and to record which services from which service groups the visitor has accessed.

Cookies are used to test whether cookies can be set, to store a reference to the documented consent, to record which services from which service groups the visitor has consented to, and, if consent is obtained in accordance with the Transparency & Consent Framework (TCF), to store the consents regarding TCF partners, purposes, specific purposes, features, and specific features. As part of the disclosure requirement under the GDPR, the consent obtained is fully documented. This includes not only the services and service groups to which the visitor has consented but also—if consent is obtained in accordance with the TCF standard—the TCF partners, purposes, and features the visitor has consented to, as well as all settings of the cookie banner at the time of consent, the technical circumstances (e.g., size of the visible area at the time of consent), and the user interactions (e.g., clicking buttons) that led to the consent. Consent is obtained once per language.

5. Analytics Tools and Advertising
Matomo

This website uses the open-source web analytics service Matomo.
With the help of Matomo, we are able to collect and analyze data about how
website visitors use our site. This allows us, among other things, to determine when specific
pages were viewed and from which region the visitors are coming. In addition, we collect various
log files (e.g., IP address, referrer, browsers and operating systems used) and can measure whether
our website visitors perform certain actions (e.g., clicks, purchases, etc.).
The use of this analytics tool is based on Article 6(1)(f) of the GDPR. The
website operator has a legitimate interest in analyzing user behavior in order to optimize both its
website and its advertising. If consent has been obtained
, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1)
of the TTDSG, provided that the consent covers the storage of cookies or access to information on the
user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be
withdrawn at any time.
IP Anonymization
We use IP anonymization when analyzing data with Matomo. This involves truncating your IP address prior to
analysis so that it can no longer be uniquely associated with you.
Cookie-Free Analysis
We have configured Matomo so that it does not store any cookies in your browser.

Hosting
We host Matomo exclusively on our own servers, so all analytics data remains with us
and is not shared with third parties.
Managing Contacts and Sending Messages

These types of services enable the management of a database containing email addresses, phone numbers, or any other contact information used to communicate with users.
These services may also collect data on the date and time a message was read by the user, as well as when the user interacts with incoming messages, for example, by clicking on links contained within them.
Brevo Email (Sendinblue GmbH)

Brevo is a service provided by Sendinblue GmbH for managing email addresses and sending messages.

Personal data collected: Cookies; email address; usage data.

Location of processing: Germany, France
Privacy Policy: https://www.brevo.com/de/legal/privacypolicy/

Management of user databases
These types of services allow the provider to create user profiles by first using the email address, name, or other information that the user has submitted to this application, as well as to track user activities through analytics features. This personal data may also be cross-referenced with publicly available information about the user (such as social media profiles) and used to build a personal profile.

Management of User Databases

These types of services allow the provider to create user profiles by initially using the email address, name, or other information that the user has submitted to this application, as well as to track user activities through analytical features. This personal data may also be cross-referenced with publicly available information about the user (such as social media profiles) and used to build a personalized profile that the provider can display and use to improve this application.

Some of these services may also allow for the sending of time-sensitive messages to the user, such as emails linking this application to specific actions.

Brevo Marketing Automation (Sendinblue GmbH, SendinBlue SAS)

Brevo is a user database management service; see the Brevo GDPR Privacy Policy.

Personal data collected: Cookies; email; usage data.

Location of processing: Germany, France

We have entered into an agreement with Brevo in which we require Brevo to protect our customers’ data and not to disclose it to third parties.

1. Data Protection at a Glance

Privacy Policy

Abgesichert durch: