Data Protection

Thank you for your interest in our company. We take data protection seriously. You can use our website without providing any personal data. If a data subject wishes to use the services of our company via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we always obtain the consent of the data subject.

The processing of personal data (e.g., name, address, email address, or telephone number of a data subject) is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to us. In addition, we process - Contract data (e.g., subject matter of the contract, term, customer category). - Payment data (e.g., bank details, payment history) from our customers, interested parties, and business partners for the purpose of providing contractual services, customer care, marketing, advertising, and market research. We process data in the context of administrative tasks and the organization of our business, financial accounting, and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the context of providing our contractual services. The basis for processing is Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Customers, interested parties, business partners, and website visitors are affected by the processing. The purpose and our interest in the processing lies in administration, financial accounting, office organization, and data archiving, i.e., tasks that serve to maintain our business activities, perform our duties, and provide our services. The deletion of data with regard to contractual services and contractual communication corresponds to the information specified for these processing activities. In doing so, we disclose or transfer data to the tax authorities, consultants, such as tax advisors or auditors, as well as other fee collection agencies and payment service providers. Furthermore, based on our business interests, we store information about suppliers, event organizers, and other business partners, e.g., for the purpose of contacting them at a later date. We generally store this data, most of which is company-related, on a permanent basis.

With the following privacy policy, we would like to inform the public about the type, scope, and purpose of the personal data we collect, use, and process. This privacy policy also informs data subjects about their rights.

As the controller responsible for processing, we have implemented numerous technical and organizational measures to ensure the most complete protection possible for the personal data processed via our website. However, data transmissions over the Internet can generally contain security gaps. Therefore, 100% protection cannot be guaranteed. For this reason, any data subject can, of course, also provide us with personal data by telephone, for example.

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services, which we use for the purpose of operating this online offering. In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties, and visitors to this online offering on the basis of our legitimate interests in the efficient and secure provision of this online offering in accordance with Art. 6 (1) lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).

We, or our hosting provider, collect data about every access to the server on which this service is located (so-called server log files) on the basis of our legitimate interests within the meaning of Art. 6 (1) lit. f. GDPR. The access data includes the name of the website accessed, the file, the date and time of access, the amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider. Log file information is stored for security reasons (e.g. to investigate misuse or fraud) for a maximum of 7 days and then deleted. Data that must be retained for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.

1. Definitions

This privacy policy is based on the definitions used by the European directive and regulation maker when enacting the GDPR (Article 4 GDPR). This privacy policy should be both easy to read and easy to understand for everyone. To ensure this, we would first like to explain the terms used. This privacy policy uses the following definitions, among others:

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
"Data subject" means any identified or identifiable natural person whose personal data is processed by the controller.
"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution or otherwise making available, alignment or combination, restriction, erasure or destruction;
"Restriction of processing" means the marking of stored personal data with the aim of limiting their processing in the future;
"Profiling" means any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements;
"Controller" means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
"recipient" means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of such data by those authorities shall be carried out in accordance with applicable data protection rules for the purposes of processing;
"third party" means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data;
"Consent" of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2. Name and contact details of the controller

This privacy policy applies to data processing by netSTART GmbH.

Controller: netSTART GmbH, Prof. Dr. Tobias Kollmann, Am Rheinufer 17, 50999 Cologne, Germany, tobias . kollmann (at) netstart .de

3. Collection and storage of personal data and the nature and purpose of its use

a) When visiting the website

You can use our website without disclosing your identity. When you visit our website, the browser used on your device automatically sends information to our website's server. This information is temporarily stored in a log file. The following information is collected without your intervention and stored until it is automatically deleted:

IP address of the requesting computer,

date and time of access,

name and URL of the file accessed,

website from which access is made (referrer URL),

Browser used and, if applicable, the operating system of your computer and the name of your access provider.

We process the aforementioned data for the following purposes:

To ensure a smooth connection to the website,

To ensure convenient use of our website,

To evaluate system security and stability, and

For other administrative purposes.

The legal basis for data processing is Art. 6 (1) (f) GDPR. Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

In addition, we use cookies and analysis services when you visit our website. You can find more detailed information on this in sections 5 and 7 of this privacy policy.

b) When using our contact form

If you have any questions, we offer you the opportunity to contact us using a form provided on our website. It is necessary to provide a valid email address so that we know who the inquiry comes from and can respond to it. Further information can be provided voluntarily. It is your decision whether you wish to enter this data in the contact form.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1) (a) GDPR on the basis of your voluntary consent. The personal data collected by us for the use of the contact form will be automatically deleted after your request has been processed.

c) When placing orders/registering via our website

You can either place orders/register as a guest via our website without registering, or register as a customer in our shop for future orders. Registration has the advantage that, in the event of a future order/registration, you can log in to our shop directly with your email address and password without having to re-enter your contact details. Your personal data is entered into an input mask, transmitted to us, and stored. When you place an order via our website, we initially collect the following data, both in the case of a guest order/registration and in the case of registration in the shop:

Title, first name, last name,
a valid email address,
address,
phone number (landline and/or mobile)

This data is collected
to identify you as our customer;
to process, fulfill, and handle your order;
to correspond with you;
for invoicing;
to handle any liability claims that may arise, as well as to assert any claims against you;
to ensure the technical administration of our website;
to manage our customer data.

During the ordering/registration process, your consent to the processing of this data will be obtained. Data processing is carried out on the basis of your order/registration and/or sign-up and is necessary for the purposes mentioned in accordance with Art. 6 (1) (b) GDPR for the appropriate processing of your order and for the mutual fulfillment of obligations arising from the purchase contract. The personal data collected by us for the processing of your order/registration will be stored until the expiry of the statutory retention period and then deleted, unless we are obliged to store it for a longer period in accordance with Article 6 (1) (c) GDPR due to tax and commercial law retention and documentation obligations (from the German Commercial Code (HGB), Criminal Code (StGB) or Fiscal Code (AO)) or you have consented to further storage in accordance with Art. 6 (1) (a) GDPR.

When contacting us (e.g., via contact form, email, telephone, or social media), the user's details are processed for the purpose of handling the contact request and its processing in accordance with Art. 6 (1) (b) GDPR. User details may be stored in a customer relationship management system ("CRM system") or comparable inquiry organization system. We delete the inquiries if they are no longer required. We review the necessity every two years; furthermore, the statutory archiving obligations apply.

4. Disclosure of data

We only pass on your personal data to third parties who are involved in the execution of the contract, such as the logistics company responsible for delivery and the credit institution responsible for payment matters. In cases where your personal data is passed on to third parties, the scope of the data transmitted is limited to the minimum necessary.

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or "purchase on account" via PayPal, we will pass on your payment details to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") for the purpose of payment processing. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or "purchase on account" via PayPal. PayPal uses the result of the credit check in relation to the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, these are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values. Further information on data protection can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

If you choose a payment method from the payment service provider Stripe, payment processing will be handled by the payment service provider Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland, to whom we will pass on the information you provided during the ordering process together with the information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency, and transaction number) in accordance with Art. 6 (1) (b) GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. For more information on Stripe's data protection policy, please visit https://stripe.com/de/terms.

Your personal data will not be transferred to third parties for purposes other than those mentioned above.

We will only pass on your personal data to third parties if:

You have given your express consent in accordance with Art. 6 (1) (a) GDPR,

the transfer is necessary for the establishment, exercise, or defense of legal claims pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data, in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and

this is legally permissible and necessary for the performance of contractual relationships with you pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.

During the ordering process, your consent will be obtained for the disclosure of your data to third parties.

5. Use of cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans, or other malware. Information is stored in the cookie that is related to the specific device used. However, this does not mean that we immediately become aware of your identity. The use of cookies serves, on the one hand, to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site. In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a specific period of time. If you visit our site again to use our services, it will automatically recognize that you have already been with us and what entries and settings you have made so that you do not have to enter them again. On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you (see section 7). These cookies enable us to automatically recognize that you have already visited our site when you visit it again. These cookies are automatically deleted after a defined period of time. The data processed by cookies is necessary for the purposes mentioned above in order to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) (f) GDPR. Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

Please note that you can set your browser to notify you when cookies are set and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: https://help.opera.com/Windows/10.20/de/cookies.html

Due to the creation of this website with wix.com, the following cookies are used in all cases:

Cookie name, duration, content/purpose

svSession, permanent, creates activities and BI

hs, session, security

incap_ses_${proxy ID}_${site ID}, session, security

incap_visid_${proxy ID}_${site ID}, session, security

nlbi_{ID}, persistent cookie, security

XSRF-TOKEN, Persistent cookie, Security

smSession, Two weeks, Identify logged in site members

6. Links to third-party websites

The links published on our website are researched and compiled by us with the greatest possible care. However, we have no influence on the current and future design and content of the linked pages. We are not responsible for the content of the linked pages and expressly do not adopt the content of these pages as our own. The provider of the website to which reference is made is solely liable for illegal, incorrect, or incomplete content and for damage resulting from the use or non-use of the information. The liability of those who merely refer to the publication via a link is excluded. We are only responsible for third-party references if we have positive knowledge of them, i.e. also of any illegal or criminal content, and it is technically possible and reasonable for us to prevent their use.

7. Analysis and tracking tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6 (1) (f) GDPR. With the tracking measures used, we want to ensure a needs-based design and the ongoing optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision. The respective data processing purposes and data categories can be found in the corresponding tracking tools.

a) Google Analytics (1)

For the purpose of designing our pages in line with requirements and continuously optimizing them, we use Google Analytics, a web analysis service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymized usage profiles are created and cookies (see section 5) are used. The information generated by the cookie about your use of this website, such as

Browser type/version,

operating system used,

referrer URL (the previously visited page),

host name of the accessing computer (IP address),

time of the server request,

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage for the purposes of market research and the design of this website in line with user needs. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of Google. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that they cannot be assigned (IP masking).

You can prevent the installation of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on the link above. An opt-out cookie will be set to prevent future collection of your data when you visit our website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.

For more information about data protection in connection with Google Analytics, please visit the following link in the Google Analytics Help Center: https://support.google.com/analytics/answer/6004245?hl=de

b) Google Adwords Conversion Tracking

We also use Google Conversion Tracking to statistically record the use of our website and to evaluate it for the purpose of optimizing our website for you. Google Adwords places a cookie (see section 5) on your computer if you have accessed our website via a Google ad. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of the AdWords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page.

Each AdWords customer receives a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in the tracking process, you can also refuse the setting of a cookie required for this purpose, for example by means of a browser setting that generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com".

Google's privacy policy on conversion tracking can be found at the following link: https://services.google.com/sitestats/de.html

c) Google Web Fonts

External fonts, Google Fonts, are used on these web pages. When you visit our website, your browser loads the required web font into your browser cache. This is necessary so that your browser can display our texts in a visually improved form. If your browser does not support this function, a standard font from your computer will be used for display. Google Fonts is a service provided by Google Inc. ("Google"; http://www.google.com/webfonts/). These web fonts are integrated via a server call, usually a Google server in the USA. This transmits to the server which of our websites you have visited. Google also stores the IP address of the browser of the visitor's device.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq?hl=de-DE&csw=1 or https://www.google.com/fonts#AboutPlace:about General information on data protection at Google can be found at https://www.google.com/intl/de-DE/policies/privacy/

8. Social media plugins

On the basis of Art. 6 (1) (f) GDPR, we use social plugins from social networks (e.g. Facebook, Twitter, Google+) on our website to promote our company. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. The responsibility for data protection-compliant operation must be ensured by the respective providers. We integrate these plugins using the so-called two-click method in order to protect visitors to our website as best as possible.

a) Facebook

Our website uses social media plugins from Facebook to make its use more personal. For this purpose, we use the "LIKE" or "SHARE" button. This is a service offered by Facebook. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Facebook's servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the website. By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.

If you are logged into Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plugins, for example by clicking the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook for everyone to see. Facebook may use this information for advertising, market research, and the needs-based design of Facebook pages. For this purpose, Facebook creates usage, interest, and relationship profiles, e.g., to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide other services related to the use of Facebook.

If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting my website.

For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, please refer to the data protection information, in particular the data policy of Facebook, which you can view at the following link: https://www.facebook.com/about/privacy/

b) Twitter

Plugins from the short message network Twitter Inc. (Twitter) are integrated into our website. You can recognize the Twitter plugins (tweet button) by the Twitter logo on our site. An overview of tweet buttons can be found at this link on Twitter: https://dev.twitter.com/web/tweet-button

When you visit a page on our website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter thereby receives the information that you have visited our site with your IP address. If you click on the Twitter "tweet button" while you are logged into your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or how it is used by Twitter.

If you do not want Twitter to be able to assign your visit to our pages, please log out of your Twitter user account. Further information on this can be found in Twitter's privacy policy, which you can view here: https://twitter.com/de/privacy

This information is collected by the LinkedIn component and assigned by LinkedIn to the respective LinkedIn account of the person concerned. If the person concerned clicks on a LinkedIn button integrated into our website, LinkedIn assigns this information to the personal LinkedIn user account of the person concerned and stores this personal data.

c) Google "+1" button

Our website uses the "+1" button from the Google social network, which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA. The button is marked with a "+1". The "+1" button is a shortcut for "this is pretty cool" or "check this out." The button is not used to track your visits to the web.

If a page on our website contains the "+1" button, your internet browser will load this button from the Google server and display it. The website you are visiting on our website is automatically communicated to the Google server. When displaying a +1 button, Google does not permanently log your browsing history, but only for a period of up to two weeks. Google stores this data about your visit for this period for system maintenance and troubleshooting purposes. However, this data is not structured according to individual profiles, user names, or URLs. This information is also not accessible to website publishers or advertisers. This information is used only for maintenance and troubleshooting purposes in Google's internal systems. Google does not evaluate your visit to a page with a +1 button in any other way.

There is no further evaluation of your visit to a page on our website with a "+1" button. Giving a +1 is a public action, meaning that anyone who performs a Google search or views content on the web that you have given a +1 to can potentially see that you have given that content a +1. Therefore, only give a +1 if you are absolutely sure that you want to share this recommendation with the whole world.

Clicking on this +1 button serves as a recommendation for other users in Google's search results. You can publicly share that you like our website, that our website meets with your approval, or that you can recommend our website. If you have registered for Google+ and are logged in, the +1 button will turn blue when you click on it. In addition, the +1 will be added to the +1 tab in your Google profile. On this tab, you can manage your +1s and decide whether you want to make the +1 tab public. In order to save your +1 recommendation and make it publicly available, Google collects information about the URL you recommended, your IP address, and other browser-related information via your profile. If you withdraw your +1, this information will be deleted. All of your +1 recommendations are listed on the +1 tab in your profile.

Further information and Google's applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/. Further information from Google about the Google+1 button can be found at https://developers.google.com/+/web/buttons-policy.

d) LinkedIn

Components of LinkedIn Corporation are integrated into this website. LinkedIn is an Internet-based social network that enables users to connect with existing business contacts and establish new business contacts. LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible for data protection matters outside the USA. Each time our website, which is equipped with a LinkedIn component (LinkedIn plug-in), is accessed, this component causes the browser used by the data subject to download a corresponding representation of the LinkedIn component. Further information on LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins.

As part of this technical process, LinkedIn receives information about which specific subpage of our website is visited by the data subject. If the data subject is logged into LinkedIn at the same time, LinkedIn recognizes which specific subpage of our website the data subject visits each time the data subject accesses our website and for the entire duration of their stay on our website.

LinkedIn receives information via the LinkedIn component that the data subject has visited our website whenever the data subject is logged into LinkedIn at the same time as visiting our website; this occurs regardless of whether the data subject clicks on the LinkedIn component or not. If the person concerned does not want this information to be transmitted to LinkedIn, they can prevent the transmission by logging out of their LinkedIn account before visiting our website.

LinkedIn offers the option to unsubscribe from email messages, SMS messages, and targeted ads, as well as to manage ad settings, at https://www.linkedin.com/psettings/guest-controls. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame, which may set cookies. Such cookies can be rejected at https://www.linkedin.com/legal/cookie-policy.

LinkedIn's applicable privacy policy is available at https://www.linkedin.com/legal/privacy-policy. LinkedIn's cookie policy is available at https://www.linkedin.com/legal/cookie-policy.

e) YouTube videos

Simply opening websites with embedded YouTube content creates a connection to "Google Double-Click," even if the video is neither clicked nor played. To better protect your data, we have embedded all YouTube videos on our site in extended privacy mode (Share/Embed/Show more/Enable extended privacy mode): The link "www.youtube.com" becomes www.youtube-nocookie.com).

Our website is equipped with a YouTube plugin. As soon as you visit pages equipped with the YouTube plugin, a connection to a YouTube server is established. This server is informed which of our pages you have visited. If you are logged into your YouTube account at this point, you enable YouTube to assign your surfing behavior to your personal profile. You can prevent this by logging out of your YouTube account before visiting our pages. For more information on how YouTube handles your user data, please visit https://www.google.de/intl/de/policies/privacy/, Google Inc.'s privacy policy applicable to YouTube.

9. Blog/Comments

If users leave comments or other posts, their IP addresses may be stored for 7 days on the basis of our legitimate interests within the meaning of Art. 6 (1) lit. f. GDPR. This is done for our security in case someone leaves illegal content in comments and posts (insults, prohibited political propaganda, etc.). In this case, we ourselves can be prosecuted for the comment or post and are therefore interested in the identity of the author. Furthermore, we reserve the right to process user information for the purpose of spam detection based on our legitimate interests pursuant to Art. 6 (1) lit. f. GDPR.

Subsequent comments can be subscribed to by users with their consent in accordance with Art. 6 (1) (a) GDPR. Users will receive a confirmation email to verify that they are the owner of the email address entered. Users can unsubscribe from ongoing comment subscriptions at any time. The confirmation email will contain information on how to revoke consent. For the purpose of proving user consent, we store the time of registration and the user's IP address and delete this information when users unsubscribe. You can cancel your subscription to our newsletter at any time, i.e., revoke your consent. We may store the unsubscribed email addresses for up to three years based on our legitimate interests before deleting them in order to be able to prove that consent was previously given. The processing of this data is limited to the purpose of a possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed at the same time.

10. Rights of data subjects

You have the right:

pursuant to Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if it was not collected by me, and the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details; to request the immediate correction of inaccurate or incomplete personal data stored by us in accordance with Art. 16 GDPR; to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims; to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted and we no longer need the data, but you need it to assert, exercise or defend legal claims, or you have lodged an objection to the processing in accordance with Art. 21 GDPR; to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller in accordance with Art. 20 GDPR; to revoke your consent to us at any time in accordance with Art. 7 (3) GDPR. As a result, we will no longer be allowed to continue processing the data based on this consent in the future; and to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

11. Right to object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right of objection, which we will implement without you having to specify a particular situation.

If you wish to exercise your right of revocation or objection, simply send an email to: tobias.kollmann (at) netstart.de

12. Data security

When you visit our website, we use the widely used SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

13. Newsletter

If you would like to receive the newsletter offered on the website, we need your email address and information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. To ensure that the newsletter is sent with your consent, we use the so-called double opt-in procedure. In the course of this, the potential recipient is added to a distribution list. The user then receives a confirmation email giving them the opportunity to confirm their registration in a legally compliant manner. Only when confirmation has been received will the address be actively added to the distribution list.

We use this data exclusively for sending the requested information and offers.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) (a) GDPR. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you subscribe to the newsletter will be used exclusively for the purpose of advertising via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller named above. After you unsubscribe, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this statement.

If you provided us with your email address when contacting Prof. Dr. Tobias Kollmann during the period before the GDPR came into force, you are considered an "existing customer" and are also included in our newsletter offering. In accordance with Section 7 (3) UWG, we do not need to obtain your separate consent for this. Data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 (1) lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller named at the beginning. You will only incur transmission costs according to the basic rates for this. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

Newsletter2Go is used as newsletter software. Your data will be transmitted to Newsletter2Go GmbH. Newsletter2Go is prohibited from selling your data and using it for purposes other than sending newsletters. Newsletter2Go is a German, certified provider that has been selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act.

Further information can be found here: https://www.newsletter2go.de/informationen-newsletter-empfaenger/

You can revoke your consent to the storage of data, your email address, and its use for sending the newsletter at any time, for example, via the "Unsubscribe" link in the newsletter. Data protection measures are subject to technical innovations, which is why we ask you to inform yourself about our data protection measures at regular intervals by reviewing our privacy policy.

If you subscribe to our email newsletter, we will send you regular information about our offers.

14. Facebook fan pages

We offer fan pages on Facebook under the names "netSTART" and "netCAMPUS" (e-entrepreneurship). The following terms of use apply between the user and the operator of the fan page (hereinafter referred to as "provider") for the use of these Facebook fan pages. Use is only permitted if you as a user accept these terms of use.

a) Liability information regarding content on our Facebook fan page

The content of this Facebook fan page is created with the greatest possible care. However, the provider does not guarantee the accuracy, completeness, or timeliness of the content provided. Use of the content of the Facebook fan page is at the user's own risk. Contributions identified by name reflect the opinion of the respective author and not always the opinion of the provider.

b) External links on our Facebook fan page

This Facebook fan page contains links to third-party websites ("external links"). These websites are subject to the liability of their respective operators. When the external links were first created, the provider checked the third-party content for any legal violations. At that time, no legal violations were apparent. The provider has no influence whatsoever on the current and future design and content of the linked pages. The inclusion of external links does not mean that the provider endorses the content behind the reference or link. Constant monitoring of external links is not reasonable for the provider without concrete evidence of legal violations. However, if legal violations become known, such external links will be deleted immediately.

c) Obligations as a user of our Facebook fan page

(1) As a user, you agree not to publish any posts/comments on our Facebook fan page that violate these rules, morality, or otherwise violate applicable German law. In particular, you are prohibited from

publish offensive or untrue content;
use content protected by law, in particular by copyright and trademark law, without authorization;
engage in anti-competitive practices;
advertise on the Facebook fan page without the express written permission of the provider. This also applies to so-called surreptitious advertising, such as linking to your own fan page or website with or without accompanying text in comments or within posts.

(2) The provider has the right to delete posts and comments if they could contain a violation of the law

(3) As a user, you undertake to check your posts and comments before publishing them to ensure that they do not contain any information that you do not wish to publish. Your posts and topics may be indexed by search engines and thus become accessible worldwide. Any claim against the provider for the deletion or correction of such search engine entries is excluded.

(4) Should third parties or other users make claims against the provider for possible legal violations that a) result from the content you as a user have posted on the Facebook fan page and/or b) arise from your use of the provider's fan page as a user, you as a user undertake to indemnify the provider against any claims, including claims for damages, and to reimburse the provider for any costs incurred by the provider as a result of the possible infringement. In particular, the provider shall be indemnified against the costs of the necessary legal defense. The provider is entitled to demand a reasonable advance payment from you as a user for this purpose. As a user, you are obliged to support the provider in good faith with information and documents in the legal defense against third parties. All further rights and claims for damages of the provider remain unaffected. If you as a user are not responsible for the possible infringement, the aforementioned obligations do not apply.

d) Copyright and ancillary copyright

(1) The content published on this Facebook fan page is subject to German copyright and ancillary copyright law. Any use not permitted by German copyright and ancillary copyright law requires the prior written consent of the provider or the respective rights holder. This applies in particular to the duplication, editing, translation, storage, processing, or reproduction of content in databases or other electronic media and systems. Third-party content and rights are identified as such. The unauthorized reproduction or distribution of individual content or complete pages is not permitted and is punishable by law. Only the production of copies and downloads for personal, private, and non-commercial use is permitted.

(2) The display of this website in external frames is only permitted with written permission.

e) Data protection on Facebook / with the "Like" button

(1) The provider of this Facebook fan page uses plugins from the provider Facebook.com, which are provided by Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304 in the USA. Users of our website on which the Facebook plugin is installed are hereby informed that the plugin establishes a connection to Facebook, whereby a transmission is made to your browser so that the plugin appears on the website.

(2) Furthermore, when you use the plugin, data containing information about your visits to our website is forwarded to the Facebook servers. For logged-in Facebook users, this means that the usage data is assigned to their personal Facebook account. As soon as you actively use the Facebook plugin as a logged-in Facebook user (e.g., by clicking the "Like" button or using the comment function), this data is transferred to your Facebook account and published. You can only avoid this by logging out of your Facebook account beforehand.

(3) We do not know exactly what data Facebook stores and uses. As a user of the fan page, you must therefore expect that Facebook also stores your actions on the fan page in full.

(4) By clicking on the "Like" button, Facebook receives your IP address, processor type, and browser version. Using your IP address, Facebook could determine your identity and habits under this profile, together with other data and your real name, if you have provided this in your Facebook profile. If you always log in to Facebook via this user profile, Facebook could find out your preferences, contacts, and lifestyle in particular.

f) Other regulations

(1) In all other respects, the General Terms and Conditions of Use of Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland, apply at https://www.facebook.com/terms.php

(2) With regard to data protection on Facebook, please note the following data protection information from Facebook Ireland Limited: https://www.facebook.com/about/privacy/

15. Current status and changes to this privacy policy

This privacy policy is currently valid and was last updated in March 2018.

Due to the further development of our website and the offers made on it, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed at any time on our website at the following link: https://www.e-business-leader.de/datenschutz

___________________________________________________________________________

(1) Data protection authorities require the conclusion of a data processing agreement for the permissible use of Google Analytics. A corresponding template is provided by Google at https://www.google.com/analytics/terms/de.pdf.

Source: Sample privacy policy created by attorney Andreas Gerstel (https://www.anwaltblog24.de/)

Supplemented by Datenschutz-Generator.de by attorney Dr. Thomas Schwenke