Introduction

Magh und Boppert GmbH, Paderborn (hereinafter: “We”), as the operator of the website, is the data controller for processing website users’ personal data. Our contact details can be found under the legal notice on the website; the contact persons for questions regarding the processing of personal data are named directly in this Privacy Policy.
We take the protection of your privacy and your private data very seriously. We collect, store and use your personal data only in accordance with the content of our Privacy Policy and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and the national data protection regulations.
With this Privacy Policy, we inform you about the extent and for what purposes that personal data is processed in connection with the use of the website.

Personal data

Personal data is information about an identified or identifiable natural person. This includes any information about your identity, such as your name, email address or postal address. Information that cannot be linked to your identity (such as statistical data on the number of website users) is not considered personal data.

As a matter of principle, you can use our website without disclosing your identity and without providing personal data. We will then only record general information about visits to our website. However, personal data is collected from you for some of the services offered. This data will then only be processed by us for the purpose of using this website, in particular for providing the requested information. When collecting personal data, it is only mandatory to provide data that is absolutely necessary. It may also be possible to provide further information, in which case this is voluntary. We indicate in each case whether the information is mandatory or voluntary. We will then provide information on the specific details in the relevant section of this Privacy Policy.

No automated decision-making based on your personal data takes place in connection with the use of our online services.

Processing of personal information

Your messages will be stored by us on particularly secure servers within the European Union. These are protected by technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons. Only a few authorised persons have access to your data. They are responsible for providing technical, commercial or editorial support for the servers. However, despite regular checks, complete protection against all risks is not possible.

Your personal data is transmitted over the internet in an encrypted form. We use TLS/SSL encryption (Transport Layer Security/Secure Socket Layer) for data transmission.

Disclosure of personal data to third parties

We will only use your personal information to provide the services you have requested. Insofar as external service providers are used by us within the scope of provision of services, their access to data also takes place exclusively for the purpose of providing services. By adopting technical and organisational measures, we ensure compliance with the data protection requirements and also oblige our external service providers to do so.

Furthermore, we do not pass on data to third parties without your express consent, in particular not for advertising purposes. Your personal data will only be passed on if you yourself have consented to data being passed on or if we are entitled or obliged to do so on the basis of statutory provisions and/or official directives or court orders. In particular, this may involve providing information for the purposes of criminal prosecution, the prevention of danger or the enforcement of intellectual property rights.

Insofar as we transfer your personal data ourselves or through service providers to countries outside the European Union, we comply with the special provisions of Art. 44 et seq. GDPR and also oblige our service providers to comply with these regulations. We will therefore only transfer your data to countries outside the European Union subject to the level of protection guaranteed by the GDPR. This level of protection is ensured in particular by an adequacy decision of the EU Commission or by appropriate safeguards pursuant to Art. 46 GDPR.

Legal basis for data processing

Insofar as we obtain consent for processing your personal data, Art. 6(1)(a) GDPR is the legal basis for data processing.

Insofar as we process your personal data because it is necessary for the fulfilment of a contract or in the context of a relationship with you similar to a contract, Art. 6(1)(b) GDPR constitutes the legal basis for data processing.

Insofar as we process your personal data for the fulfilment of a legal obligation, Art. 6(1)(c) GDPR is the legal basis for data processing.
Furthermore, Art. 6(1)(f) GDPR can be considered as the legal basis for data processing if the processing of your personal data is necessary to protect a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not require the protection of personal data.

Within the framework of this Privacy Policy, we always indicate the legal basis on which we base the processing of your personal data.

Data deletion and storage period

We always delete or block your personal data when the purpose for storing it no longer applies. However, storage may take place beyond this if this is stipulated by legal requirements to which we are subject, for example with regard to statutory storage and documentation obligations. In such a case, we will delete or block your personal data after the relevant requirements come to an end.

Use of our online services

Information about your computer

Each time you access our website, we collect the following information about your computer, regardless of your registration: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred are recorded as part of this request. We also collect product and version information about the browser used as well as the computer’s operating system. Furthermore, we record the website from which our online services were accessed. The IP address of your computer is only stored for the time of use of the website and then deleted or anonymised by shortening. The remaining data is stored for a limited period of time.

We use this data to operate our online services, in particular to detect and remove errors, to determine how the website is used and to make adjustments or improvements. These purposes are also our legitimate interest for data processing according to Art. 6(1)(f) GDPR.

Use of cookies

Cookies are used for our online services, as is the case on many websites. Cookies are small text files that are stored on your computer and save certain settings as well as data for exchange with our online services via your browser. A cookie usually contains the name of the domain from which the cookie file was sent, information about the age of the cookie and an alphanumeric identifier.

Cookies allow us to recognise your computer and make any preferences and settings immediately available. As far as possible, the cookies we use are so-called ‘session cookies’, which are automatically deleted after the end of the browsing session. Occasionally, cookies with a longer storage period can also be used, so that your settings and preferences can also be taken into account the next time you visit our website.

Most browsers are configured to accept cookies automatically. However, you can deactivate the storage of cookies or configure your browser to notify you as soon as cookies are sent. It is also possible to delete cookies that have already been stored manually via the browser settings. Please note that you may only be able to use our online services to a limited extent or not at all if you reject the storage of cookies or delete necessary cookies.

If cookies are not required for our online services, we will ask for your consent to the use of cookies when you access our website for the first time. With regard to non-essential cookies from third-party providers, you will find a more detailed description of the services from these third-party providers used by us below. The legal basis for the associated data processing, including any data transfer, is in each case your consent within the meaning of Art 6(1)(a) GDPR. Once given, consent can be revoked at any time with effect for the future, in particular by changing the selected settings.

The legal basis for the use of necessary cookies is our legitimate interest in the proper provision of our online services within the meaning of Art. 6(1)(F) GDPR and – insofar as contracts are concluded or fulfilled via our online services – the fulfilment of the contract within the meaning of Art. 6(1)(b) GDPR.

Registration

You can register to use our online services. To do this, you must provide the data requested during registration, for example name, address and email address. We also record the date and time of registration and the IP address. You have the advantage that you do not have to re-enter this data every time you use the services or place an order.

The legal basis for processing data for registration is Art. 6(1)(a) GDPR in the case of consent. Additionally, if you register with us for the purpose of fulfilling or initiating a contract, the legal basis for processing the data is Art. 6(1)(b) GDPR.

The information requested as a mandatory field during registration is required for the performance or initiation of a contract with us for certain services. However, you can use the basic functions of our online services (with the exception of the Academy) without registering. When you register, a user account is created for you. The data in the user account is stored by us for as long as there is an active user relationship. If no activity can be detected over a period of three years, the status of the user relationship is set to inactive. You can request the deletion of your user account at any time. When using the Avendoo Academy, your activities are recorded in your user account, in particular the content accessed. If you publish your own content, this will also be added to the user account. The purpose of the user account is to manage the content you access and to display the correct content in each case. The legal basis for processing the data is therefore Art. 6(1)(b) GDPR.

Integration of third-party services

For some functions of our online services, we rely on services from third-party providers. The corresponding services are mainly optional functions that must be explicitly selected or used by you. We have concluded contractual agreements with the respective providers for the provision or integration of their services and are committed, as far as we can, to ensuring that the third-party providers also provide transparent information about the scope of the processing of personal data and comply with the provisions of data protection law.

Google Tag Manager

We use the Google Tag Manager provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter: “Google”) for our online services. Google Tag Manager is a tag management system (TMS) that can be used to manage tags, i.e. tracking codes and associated code fragments, on our website. Google services can be integrated into a website via the Google Tag Manager.

When using the Google Tag Manager, a connection to Google’s servers is established. This means that the IP address of the browser on the terminal device used by the visitor to these web pages is stored by Google. It cannot be ruled out that data will be transmitted to Google in the USA in this context and that US security authorities may be able to access the data under certain circumstances. However, cookies are not set up in connection with the use of the Google Tag Manager.

You can find more information about the Google Tag Manager and data processing by Google here:

https://support.google.com/tagmanager/answer/6102821?hl=de

https://www.google.com/policies/privacy/

Our legal basis for using Google Tag Manager is our legitimate interest according to Art. 6(1)(f) GDPR. Our legitimate interest is to manage the tracking codes in our online services, which enable us to analyse the use of our website and to improve and personalise our services.

Google Analytics

We use Google Analytics for statistical evaluations. Google Analytics is a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, Ireland (hereinafter: “Google”).

Within the framework of Google Analytics, Google uses cookies, among other things, for evaluations. The type and scope of the use and evaluation of cookies are specified by Google. The information generated by the cookies about your use of online services is transmitted to a Google server and stored there. It cannot be ruled out that data will be transmitted to the USA and that government agencies may be able to access this data. However, in the event that IP anonymisation is activated on this website, your IP address will be shortened by Google beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there.

On our behalf, Google uses this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to us as the website operator. In addition, Google may use the data for its own purposes. Within the scope of these purposes, Google may, for example, create a profile of user behaviour or link the data with other data, for example with an existing Google account. We have no influence over these data processing operations. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other data that Google collects or already has. For more information, please refer to Google’s Privacy Policy, a link to which is provided below.

You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link http://tools.google.com/dlpage/gaoptout?hl=de. For more information, please visit http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). We would like to point out that on our internet pages Google Analytics has been extended by the “anonymizeIp();” code in order to anonymise IP addresses, whereby the last octet is deleted.

Use of YouTube

YouTube videos are integrated in our online services; to play these we use a plugin for the YouTube service operated by Google (hereinafter: “YouTube”).
We use the YouTube service in extended data protection mode to protect your privacy as much as possible. If you open a web page in which a YouTube video is embedded through our website, Google initially only receives the information necessary for the integration and no cookies are set up for usage analysis. Google receives further information only once you play the embedded video; in the process, Google may also set up cookies to analyse your user behaviour. When you play the video, Google’s YouTube servers are told, for example, which page of our website you are using to play the video.

If you are logged into your Google account, you enable Google or YouTube to assign your surfing behaviour directly to your personal Google profile. We therefore recommend that you only play embedded YouTube videos if you agree to the associated data processing by Google. You can prevent the data allocation to your Google profile by logging out of your YouTube account. Further information on the handling of user data can be found in Google’s Privacy Policy at https://www.google.de/intl/de/policies/privacy/, which also applies to YouTube.

We use YouTube so that we can show you videos and thus better inform you about us and our services. The legal basis for integrating the videos is our legitimate interest within the meaning of Art. 6(1)(f) GDPR; however, playing videos and the associated further data processing are only carried out on the basis of your consent within the meaning of Art. 6(1)(a) GDPR.

Communication with us

You can contact us in various ways, including via the contact form on our website. We are also happy to keep you regularly updated by sending our newsletter by email.

Contact form

If you wish to use the contact form on our website, we collect the personal data that you enter in the contact form, in particular your name and email address. We also store the IP address and the date and time of the request. We process the data transmitted via the contact form exclusively for the purpose of being able to answer your enquiry or request.

You can decide for yourself what information you send us via the contact form. The legal basis for processing your data is your consent according to Art. 6(1)(a) GDPR.

After we have processed the issue, the data will initially be stored in case of any queries. Deletion of the data can be requested at any time, otherwise we will delete the data after complete settlement of the matter; statutory retention obligations remain unaffected in both cases.

Newsletter

When you subscribe to our newsletter, your email address will be used for our own advertising purposes until you unsubscribe. You will receive regular information by email on current topics as well as emails on special occasions, such as special promotions. The emails may be personalised and customised based on our information about you.

To register for our newsletter, unless you have given us your consent in writing, we use the ‘double opt-in’ procedure, i.e. we will only send you a newsletter by email if you have previously expressly confirmed that you want us to activate the newsletter dispatch. We will then send you a notification email and ask you to confirm that you would like to receive our newsletter by clicking on a link contained in this email.

The legal basis for processing your data is your consent according to Art. 6(1)(a) GDPR, if you have expressly registered for the newsletter. Within the framework of the legal requirements, it may also be possible that you receive our newsletter from us without express consent because you have ordered goods or services from us, we have received your email address in this context and you have not objected to receiving information by email. In this case, the legal basis is our legitimate interest in transmitting direct advertising in accordance with Art. 6(1)(f) GDPR.

If you no longer wish to receive newsletters from us, you can revoke your consent at any time with effect for the future or object to further receipt of the newsletter without incurring any costs other than the transmission costs according to the basic rates. Simply use the unsubscribe link included in every newsletter or send a message to us or our data protection officer.

Comments and comment subscriptions

You have the option to comment on our contributions in our online services. To do this, you must give your name, although you can also use a pseudonym. You must also provide your email address. The provision of your email address is necessary, so that we can contact you in the event of complaints about your comments and ask you to make a statement about them; we also store the IP address. Without this information, you will not be able to post comments. However, when a comment is published, only the name or pseudonym you have selected will be displayed. The legal basis for processing your data is your consent according to Art. 6(1)(a) GDPR. When using the comment function, you can also choose to be informed of any comments on your posts by email. In this case, you will receive corresponding notifications after confirming your email address, which can be cancelled at any time. The legal basis for sending the corresponding email is your consent in accordance with Art. 6(1)(a) GDPR.

Social Media

In addition to our online services, we also use various social media channels to transmit information and communicate, to which you will find links on our website or in which you will find links to our website. Specifically, we use the social network Facebook and the career network Xing. You can recognise the links by the providers’ respective logos.

Clicking on the links opens the corresponding social media pages, for which this Privacy Policy does not apply. Details of the provisions and data protection notices pertaining to the respective providers apply there in principle. Below we have summarised for you an overview of the respective information provided by the providers.

Facebook: https://www.facebook.com/policy.php
Xing: https://www.xing.com/privacy

No personal information is transmitted to the respective providers before the corresponding links are opened. At the same time, your access to the linked page is the basis for data processing by the respective providers.

The following information on the associated processing of your personal data also applies to our use of Facebook.

Facebook fan page

In addition to our own website, we also operate a fan page on the social network Facebook. Via the fan page we provide updates on our activities and offer a channel for communication. The social network Facebook is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: “Facebook”).

Delimitation of responsibility

Within the scope of the options for Facebook, we try to ensure the protection of your privacy and your private data. Insofar as your personal data is processed by us in connection with your visit to the fan page, the explanations in this Privacy Policy apply without restriction. Due to the integration of the fan page into the Facebook service, it should also be noted that personal data is processed by Facebook at the same time. We have no influence on data processing by Facebook; in particular, Facebook does not act as a processor for us under our responsibility. For data processing by Facebook, the Facebook guidelines apply – at least according to Facebook – which can be found at https://de-de.facebook.com/policy.php.

From a data protection perspective, it can be assumed that we and Facebook are jointly responsible for operating the fan page and evaluating user data when visiting the fan page. In accordance with the requirements of data protection law, we have reached an agreement with Facebook on the delimitation of responsibility.

Facebook Insights

Facebook offers the operators of fan pages the option of obtaining an overview of the use of the fan page and its users via the Page Insights functions. Page Insights can be used to retrieve and evaluate statistical data in particular. We use the data from Page Insights to make the fan page as attractive and efficient as possible. For this purpose, Facebook provides us with data that Facebook itself has generated. Facebook provides further information on the functionality and responsibility for the Page Insights function at https://www.facebook.com/legal/terms/page_controller_addendum.

Messenger

Facebook offers users who are registered with Facebook the option of immediate communication via Facebook Messenger. If you contact us via Messenger, the data transmitted will be stored and used by us exclusively for the purpose of answering your enquiry. The legal basis for processing your data is your consent within the meaning of Art. 6(1)(a) GDPR and our legitimate interest within the meaning of Art. 6(1)(f) GDPR. Our legitimate interest lies in recording and processing customer enquiries, evaluating customer enquiries and controlling abuse.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For your personal data, this is the case when the respective conversation has ended. We consider the conversation to have ended when it is clear from the circumstances that the matter in question has been conclusively clarified. You have the option to revoke your consent to the processing of personal data at any time; in this case, the data will be deleted by us immediately if there is no basis for further storage.

Further information on Facebook

If you have any questions about our use of personal data in connection with the use of the fan page on Facebook, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels for this are given in our Privacy Policy. If you have any questions about data protection at Facebook, please contact Facebook directly. General information on the safe use of social networks is also provided by the Federal Office for Information Security [Bundesamt für die Sicherheit in der Informationstechnologie (BSI)] on its website at https://www.bsi-fuer-buerger.de/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/sozialeNetze_node.html.

Your rights and contact

We attach great importance to explaining how your personal data is processed as transparently as possible and also to informing you of the rights to which you are entitled. If you would like more information or would like to exercise the rights to which you are entitled, you can contact us at any time, so that we can deal with your request.

Data subject rights

You have extensive rights with regard to the processing of your personal data. First of all, you have a comprehensive right to information and, if necessary, you can demand the correction and/or deletion or blocking of your personal data. You can also request to restrict processing and have the right to object to processing. You also have a right to data portability with respect to the personal data you provide to us.

If you would like to exercise any of your rights and/or would like to receive more information about them, please contact our Customer Services Team. Alternatively, you can also contact our data protection officer.

Revocation of consent and objection

Once you have given your consent, you may freely revoke it at any time with future effect. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent up until the point of revocation. The contact persons for this are also our customer service team and our.

If the processing of your personal data is not based on consent but on another legal basis, you can object to this data processing. Your objection leads to a review and, if necessary, termination of the data processing. You will be informed about the result of the review and , if the data processing is nevertheless to be continued , you will receive more detailed information from us as to why the data processing is permissible.

Data Protection Officer and Contact

We have appointed an external data protection officer who supports us in data protection issues and whom you can also contact directly. If you have any questions regarding our handling of personal data or require further information on data protection issues, please do not hesitate to contact our data protection officer and his team:

Dr Sebastian Meyer, Lawyer, LL.M.
c/o BRANDI Attorneys at Law
Adenauerplatz 1, 33602 Bielefeld, Germany
Phone: +49 521 96535812
Email: datenschutz@brandi.net

If you would like to contact our data protection officer personally by email, you can also reach him at sebastian.meyer@brandi.net.

Complaints

If you believe that the processing of your personal data by us is not being carried out in accordance with this Privacy Policy or the applicable data protection regulations, you have the right to lodge a complaint with the supervisory authority. You can also complain to our data protection officer. Our data protection officer will then review the matter and inform you of the outcome of the review.

Further information and changes

Links to other websites

Our online services may contain links to other websites. These links are usually marked as such. We have no influence on the extent to which the applicable data protection regulations are observed on the linked websites. We therefore recommend that you also read the respective Privacy Policies for the other websites.

Changes to this Privacy Policy

The date on which this Privacy Policy was last revised is indicated by the date (below). We reserve the right to change this Privacy Policy at any time with future effect. In particular, a change is made in the event of technical adjustments to our online services or changes to data protection requirements. The current version of the Privacy Policy can always be accessed directly via the website. We recommend that you regularly check for changes to this Privacy Policy.

Latest review date for this Privacy Policy: September 2021