Privacy Policy
- Data Protection
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means any data by which you can be personally identified. Detailed information on data protection can be found in the privacy policy set out below.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the section “Information about the controller” in this privacy policy.
How do we collect your data?
Some of your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.
Other data is collected automatically by our IT systems, or after you have given your consent, when you visit the website. This primarily comprises technical data (e.g. internet browser, operating system or time the page was accessed). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour. Where contracts can be concluded or initiated through the website, the transmitted data is also processed for contract offers, orders or other enquiries.
What rights do you have regarding your data?
You have the right at any time to obtain information, free of charge, about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected or erased. If you have consented to data processing, you may withdraw this consent at any time with effect for the future. You also have the right, under certain circumstances, to request restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You may contact us at any time regarding this or any other questions concerning data protection.
Analytics tools and third-party tools
When you visit this website, your browsing behaviour may be statistically evaluated. This is primarily done using analytics programs.
Detailed information on these analytics programs can be found in the following privacy policy.
- Hosting
We host the content of our website with the following provider:
External hosting
This website is hosted externally. Personal data collected on this website is stored on the servers of the hosting provider(s). This may primarily include IP addresses, contact enquiries, metadata and communication data, contract data, contact details, names, website access data and other data generated via a website.
External hosting is used for the purpose of performing contracts with our prospective and existing customers (Art. 6(1)(b) GDPR) and in the interest of securely, quickly and efficiently providing our online services through a professional provider (Art. 6(1)(f) GDPR). Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.
Our hosting provider(s) will process your data only to the extent necessary to fulfil their service obligations and will follow our instructions with regard to this data.
We use the following hosting provider:
Hostserver GmbH
Biegenstr. 20
D-35037 Marburg
Germany
Processing on behalf of the controller
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is an agreement required under data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
- General Information and Mandatory Information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various types of personal data are collected. Personal data is data by which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.
Please note that data transmitted via the internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
Information about the controller
The controller responsible for data processing on this website is:
Kull & Weinzierl GmbH & Co. KG
Tal 11 Rückgebäude
80331 Munich
Germany
Telephone: +49 89 189 286 0
Email: info@kull-kg.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g. names, email addresses or similar information).
Retention period
Unless a more specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you submit a legitimate request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be erased once these grounds no longer apply.
General information on the legal bases for data processing on this website
Where you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR where special categories of data pursuant to Art. 9(1) GDPR are processed. Where express consent has been given to the transfer of personal data to third countries, data processing is also based on Art. 49(1)(a) GDPR. Where you have consented to the storage of cookies or access to information on your terminal device (e.g. through device fingerprinting), the processing is additionally based on section 25(1) TDDDG. Consent may be withdrawn at any time. Where your data is required for the performance of a contract or for taking steps prior to entering into a contract, we process your data on the basis of Art. 6(1)(b) GDPR. We also process your data where this is necessary to comply with a legal obligation on the basis of Art. 6(1)(c) GDPR. Data processing may furthermore be based on our legitimate interests pursuant to Art. 6(1)(f) GDPR. Information about the legal basis applicable in each individual case is provided in the following sections of this privacy policy.
Data Protection Officer
We have appointed a Data Protection Officer.
Data Protection Officer
Kull & Weinzierl GmbH & Co. KG
Tal 11 Rückgebäude
80331 Munich
Germany
Telephone: +40 (160) 7003010
Email: datenschutz@kull-kg.de
Recipients of personal data
As part of our business activities, we work with various external parties. In some cases, this also requires personal data to be transferred to these external parties. We disclose personal data to external parties only where this is necessary for the performance of a contract, where we are legally obliged to do so (e.g. disclosure to tax authorities), where we have a legitimate interest in disclosure pursuant to Art. 6(1)(f) GDPR, or where another legal basis permits disclosure. When using processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement. In the event of joint processing, an agreement on joint processing is concluded.
Withdrawal of your consent to data processing
Many data processing operations are possible only with your express consent. You may withdraw consent already given at any time. The lawfulness of data processing carried out prior to withdrawal remains unaffected by the withdrawal.
Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)
WHERE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RELEVANT LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
Right to data portability
You have the right to have data that we process by automated means on the basis of your consent or in performance of a contract provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will be done only insofar as it is technically feasible.
Access, rectification and erasure
Within the framework of the applicable statutory provisions, you have the right at any time to obtain information, free of charge, about your stored personal data, its origin and recipients and the purpose of data processing and, where applicable, a right to rectification or erasure of this data. You may contact us at any time regarding this or any other questions concerning personal data.
Right to restriction of processing
You have the right to request restriction of the processing of your personal data. You may contact us at any time for this purpose. The right to restriction of processing applies in the following cases:
If you dispute the accuracy of your personal data stored by us, we generally require time to verify this. For the duration of the verification, you have the right to request restriction of the processing of your personal data.
If the processing of your personal data was or is unlawful, you may request restriction of data processing instead of erasure.
If we no longer need your personal data, but you require it for the exercise, defence or establishment of legal claims, you have the right to request restriction of processing instead of erasure.
If you have lodged an objection pursuant to Art. 21(1) GDPR, your interests and our interests must be weighed against each other. Until it has been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.
Where you have restricted the processing of your personal data, such data may, apart from being stored, be processed only with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line in your browser changes from “http://” to “https://” and by the lock icon in your browser bar.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Objection to marketing emails
We hereby object to the use of contact details published as part of the legal notice obligation for the purpose of sending unsolicited advertising and information material. The website operators expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam emails.
- Data Collection on This Website
Cookies
Our websites use “cookies”. Cookies are small data packages and do not cause any damage to your terminal device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your terminal device. Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your terminal device until you delete them yourself or they are automatically deleted by your web browser.
Cookies may originate from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies enable certain services of third-party companies to be integrated into websites (e.g. cookies for processing payment services).
Cookies perform various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies may be used to evaluate user behaviour or for advertising purposes.
Cookies that are necessary to carry out electronic communications, to provide certain functions requested by you (e.g. the shopping basket function), or to optimise the website (e.g. cookies used to measure website audiences) are stored on the basis of Art. 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically correct and optimised provision of its services. Where consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6(1)(a) GDPR and section 25(1) TDDDG); consent may be withdrawn at any time.
You can configure your browser to notify you when cookies are set and to allow cookies only in individual cases, to exclude the acceptance of cookies in certain cases or generally, and to activate the automatic deletion of cookies when the browser is closed. Disabling cookies may limit the functionality of this website.
Where additional cookies and services are used on this website, details can be found in this privacy policy.
Consent using Borlabs Cookie
Our website uses the consent technology provided by Borlabs Cookie to obtain your consent to store certain cookies in your browser or to use certain technologies and to document this consent in compliance with data protection law. The provider of this technology is Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany (hereinafter “Borlabs”).
When you enter our website, a Borlabs cookie is stored in your browser in which the consents you have given or the withdrawal of these consents are stored. This data is not shared with the provider of Borlabs Cookie.
The collected data is stored until you request its deletion, delete the Borlabs cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected. Details regarding data processing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
Borlabs Cookie consent technology is used to obtain the consents for the use of cookies required by law. The legal basis for this is Art. 6(1)(c) GDPR.
Contact form
If you send us enquiries using the contact form, the information you provide in the form, including the contact details you enter there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not share this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry is related to the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in efficiently handling enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where this has been requested; consent may be withdrawn at any time.
The data you enter in the contact form will remain with us until you request its erasure, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g. after your enquiry has been fully processed). Mandatory statutory provisions, in particular retention periods, remain unaffected.
Enquiries by email, telephone or fax
If you contact us by email, telephone or fax, your enquiry, including all personal data arising from it (name, enquiry), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry is related to the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in efficiently handling enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where this has been requested; consent may be withdrawn at any time.
The data you send to us in connection with contact enquiries will remain with us until you request its erasure, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.
Online table reservations via OpenTable
On our website, we offer you the option of reserving a table in our restaurant online using the “OpenTable” service. The provider for users residing in Germany is OpenTable GmbH, Warschauer Platz 12, 10245 Berlin, Germany (hereinafter “OpenTable”).
The OpenTable reservation module is loaded only after you have expressly consented via our consent management system. Once you have given your consent, your browser establishes a connection to OpenTable’s servers. In particular, your IP address, date and time of access, the page accessed and referrer URL, browser, device and operating system information, usage and interaction data, cookie and device identifiers and, where applicable, information about your approximate location may be processed.
OpenTable uses cookies and similar technologies. In addition to technically necessary cookies, these include functional cookies, analytics cookies and, where you consent to them at OpenTable, cookies for personalised advertising. OpenTable may also use technologies provided by third parties.
The integration of the reservation module and the associated transfer of data to OpenTable are based on your consent pursuant to Art. 6(1)(a) GDPR. Where information is stored on your terminal device or information already stored there is accessed, this is additionally based on section 25(1) TDDDG.
Your consent is voluntary and may be withdrawn at any time with effect for the future via the settings of our consent management system. The lawfulness of processing carried out prior to withdrawal remains unaffected. Without your consent, the embedded OpenTable reservation module cannot be used. In this case, you can alternatively contact us by telephone or email to request a reservation.
Processing of the table reservation
If you make a table reservation via OpenTable, the reservation data you enter is transmitted to OpenTable and subsequently to us. Depending on the information you provide, this may include your first and last name, email address, telephone number, reservation date and time, number of guests, details of your OpenTable account, reservation and visit history, special requests and messages and, where applicable, payment information if this is required to secure or pay for a reservation.
We process the reservation data to handle and carry out your table reservation on the basis of Art. 6(1)(b) GDPR. Where statutory retention obligations apply, further storage is based on Art. 6(1)(c) GDPR. Data may also be processed on the basis of Art. 6(1)(f) GDPR where this is necessary for the establishment, exercise or defence of legal claims.
Please enter only information that is necessary for your reservation in free-text fields. Information about allergies, intolerances or dietary restrictions for health reasons may constitute health data within the meaning of Art. 9 GDPR. If you provide such information voluntarily, we process it on the basis of your express consent pursuant to Art. 9(2)(a) GDPR in order to take your wishes into account in connection with your reservation and restaurant visit. You may withdraw your consent at any time with effect for the future.
OpenTable generally processes the reservation and usage data collected through its platform as an independent controller. OpenTable may process the data in particular to provide and manage the reservation, communicate with you, secure and improve its services, prevent fraud and, within the limits of the applicable legal requirements and your settings, for analytics, personalisation and advertising purposes. OpenTable may also transfer personal data to affiliated companies within the Booking Holdings group, service providers, payment service providers and other business partners.
Transfers to third countries
In connection with the use of OpenTable, personal data may also be transferred to OpenTable, Inc., 1 Montgomery St., Suite 500, San Francisco, CA 94104, USA, and to other recipients outside the European Union or the European Economic Area.
OpenTable participates in the EU-US Data Privacy Framework. The European Commission has adopted an adequacy decision for appropriately certified US companies. Where data is transferred to other recipients in third countries, additional appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses, may be used.
Further information on data processing by OpenTable is available at:
https://www.opentable.de/c/legal/privacy-policy/
https://www.opentable.de/c/legal/cookie-policy/
https://www.opentable.de/c/legal/corporate-contact-information/
- Social Media
Instagram content via QuadLayers
Content from the Instagram social network is embedded on this website. For this purpose, we use the “Social Feed Gallery” WordPress plugin provided by QuadLayers. The plugin enables us to display posts, images, videos and other content from our Instagram profile on our website.
Instagram content is loaded only after you have expressly consented via our consent management system. No connection to Instagram or Meta servers is established before you give your consent.
After you have given your consent, your browser establishes a direct connection to Instagram’s servers so that the relevant content can be retrieved and displayed. In particular, your IP address, date and time of access, the page or URL accessed, referrer URL, browser and device information, operating system, any available cookie and login information, and information about your interaction with the embedded content may be transferred to Meta.
If you are logged in to Instagram at the same time, Meta may be able to associate your visit to our website with your Instagram account. Meta may also use the data collected for analytics, personalisation and advertising purposes in accordance with its own privacy terms. We have no influence over the nature, scope or duration of this processing by Meta.
The provider of Instagram for users in the European Union is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
Processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Where information is stored on your terminal device or information already stored there is accessed, this is additionally based on section 25(1) TDDDG.
Your consent is voluntary and may be withdrawn at any time with effect for the future via the settings of our consent management system. The lawfulness of processing carried out prior to withdrawal remains unaffected. Instagram content will not be displayed without your consent.
Meta may also transfer personal data to recipients in third countries, in particular the USA. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework. According to Meta, other appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses, may also be used.
The QuadLayers plugin we use is operated on our own WordPress installation. According to the provider, QuadLayers does not collect data from visitors to our website and does not itself place cookies on their terminal devices. However, the plugin uses the Instagram API to retrieve and display content. Data from the connected Instagram account and retrieved Instagram content may be cached in our website’s database. Independently of this, loading content from Instagram or Meta servers may result in personal data, in particular the IP address, being transferred to Meta.
Further information is available at:
https://privacycenter.instagram.com/policy/
https://quadlayers.com/documentation/instagram-feed-gallery/app-privacy/
https://quadlayers.com/legal/privacy-policy/
Our social media profiles
This privacy policy applies to the following social media profiles:
https://www.facebook.com/BuffetKull/
https://www.instagram.com/buffetkull/
https://www.linkedin.com/company/kull-&-weinzierl-gmbh/posts/?feedView=all
Data processing by social networks
We maintain publicly accessible profiles on social networks. The individual social networks we use are listed below.
Social networks such as Facebook, X and others can generally comprehensively analyse your user behaviour when you visit their website or a website with integrated social media content (e.g. Like buttons or advertising banners). Visiting our social media profiles triggers numerous processing operations relevant to data protection. In detail:
If you are logged into your social media account and visit our social media profile, the operator of the social media platform may associate this visit with your user account. In certain circumstances, your personal data may also be collected if you are not logged in or do not have an account with the respective social media platform. In this case, such data may be collected, for example, through cookies stored on your terminal device or by collecting your IP address.
Using the data collected in this way, the operators of social media platforms may create user profiles in which your preferences and interests are stored. This allows interest-based advertising to be displayed to you both within and outside the respective social media platform. If you have an account with the relevant social network, interest-based advertising may be displayed on all devices on which you are or have been logged in.
Please also note that we cannot trace all processing operations on social media platforms. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media platforms. For details, please refer to the terms of use and privacy policies of the respective social media platforms.
Legal basis
Our social media profiles are intended to ensure the broadest possible presence on the internet. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. The analytics processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6(1)(a) GDPR).
Controller and exercise of rights
When you visit one of our social media profiles (e.g. Facebook), we and the operator of the social media platform are jointly responsible for the data processing operations triggered by this visit. In principle, you may exercise your rights (access, rectification, erasure, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media platform (e.g. Facebook).
Please note that, despite joint controllership with the operators of social media platforms, we do not have full influence over the data processing operations performed by the social media platforms. Our options are largely determined by the corporate policy of the respective provider.
Retention period
Data collected directly by us through our social media profiles is erased from our systems as soon as you request its erasure, withdraw your consent to storage, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory statutory provisions, in particular retention periods, remain unaffected.
We have no influence over the retention period for data stored by the operators of the social networks for their own purposes. For details, please obtain information directly from the operators of the social networks (e.g. in their privacy policies; see below).
Your rights
You have the right at any time to obtain information, free of charge, about the origin, recipients and purpose of your stored personal data. You also have the right to object, the right to data portability and the right to lodge a complaint with the competent supervisory authority. In addition, you may request rectification, blocking, erasure and, under certain circumstances, restriction of the processing of your personal data.
Individual social networks
We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter “Meta”). According to Meta, the data collected is also transferred to the USA and other third countries.
We have entered into a joint processing agreement (Controller Addendum) with Meta. This agreement specifies which data processing operations are the responsibility of us or Meta when you visit our Facebook Page. You can view this agreement at: https://www.facebook.com/legal/terms/page_controller_addendum.
You can adjust your advertising settings yourself in your user account. To do so, click the following link and log in: https://www.facebook.com/settings?tab=ads.
Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details are available at https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
For details, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy/.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at https://www.dataprivacyframework.gov/participant/4452.
We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details are available at https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
Details of how Instagram handles your personal data can be found in Instagram’s privacy policy: https://privacycenter.instagram.com/policy/.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at https://www.dataprivacyframework.gov/participant/4452.
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you wish to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details are available at https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
Details of how LinkedIn handles your personal data can be found in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at https://www.dataprivacyframework.gov/participant/5448.
- Analytics Tools and Advertising
Google Analytics
This website uses functions of the Google Analytics web analytics service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, time spent on the website, operating systems used and the user’s origin. This data is combined under a user ID and assigned to the respective terminal device of the website visitor.
In addition, Google Analytics allows us, among other things, to record your mouse and scrolling movements and clicks. Google Analytics also uses various modelling approaches to supplement the collected data sets and uses machine-learning technologies for data analysis.
Google Analytics uses technologies that enable the user to be recognised for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). Information collected by Google about the use of this website is generally transferred to a Google server in the USA and stored there.
This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and section 25(1) TDDDG. Consent may be withdrawn at any time.
Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details are available at https://business.safety.google/adscontrollerterms/sccs/.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at https://www.dataprivacyframework.gov/participant/5780.
IP anonymisation
Google Analytics IP anonymisation is enabled. As a result, Google will truncate your IP address within Member States of the European Union or other states party to the Agreement on the European Economic Area before it is transferred to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide the website operator with other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=de.
More information on how Google Analytics handles user data can be found in Google’s privacy information at https://support.google.com/analytics/answer/6004245?hl=de.
Google Signals
We use Google Signals. When you visit our website, Google Analytics collects, among other things, your location, search history and YouTube history as well as demographic data (visitor data). This data may be used for personalised advertising with the help of Google Signals. If you have a Google account, Google Signals links the visitor data to your Google account and uses it for personalised advertising messages. The data is also used to compile anonymised statistics on the user behaviour of our users.
Processing on behalf of the controller
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Google Analytics e-commerce measurement
This website uses Google Analytics’ “e-commerce measurement” function. E-commerce measurement enables the website operator to analyse the purchasing behaviour of website visitors in order to improve its online marketing campaigns. This involves collecting information such as orders placed, average order values, shipping costs and the time from viewing to purchasing a product. Google may combine this data under a transaction ID assigned to the respective user or device.
- Newsletter
Newsletter data
If you wish to receive the newsletter offered on the website, we require an email address from you as well as information that enables us to verify that you are the owner of the email address provided and agree to receive the newsletter. No other data is collected, or it is collected only on a voluntary basis. We use newsletter service providers, as described below, to process newsletter distribution.
Rapidmail
This website uses Rapidmail to distribute newsletters. The provider is rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany.
Rapidmail is a service that can be used, among other things, to organise and analyse the distribution of newsletters. The data you enter for the purpose of receiving the newsletter is stored on Rapidmail’s servers in Germany.
Data analysis by Rapidmail
For analytics purposes, emails sent with Rapidmail contain a “tracking pixel” which connects to Rapidmail’s servers when the email is opened. This makes it possible to determine whether a newsletter message has been opened.
With the help of Rapidmail, we can also determine whether and which links in the newsletter message are clicked. All links in the email are tracking links that can be used to count your clicks. If you do not want analysis by Rapidmail, you must unsubscribe from the newsletter. We provide a corresponding link in every newsletter message.
Further details regarding Rapidmail’s analytics functions are available at https://www.rapidmail.de/hilfe/kategorie/statistiken.
Legal basis
Data processing is carried out on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw this consent at any time. The lawfulness of data processing operations already carried out remains unaffected by the withdrawal.
Retention period
The data you provide to us for the purpose of receiving the newsletter is stored by us or the newsletter service provider until you unsubscribe from the newsletter and is erased from the newsletter distribution list after you unsubscribe. Data stored by us for other purposes remains unaffected.
After you unsubscribe from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a suppression list where this is necessary to prevent future mailings. Data in the suppression list is used only for this purpose and is not combined with other data. This serves both your interest and our interest in complying with statutory requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Storage in the suppression list is not limited in time. You may object to the storage if your interests override our legitimate interest.
Further details can be found in Rapidmail’s data security information at https://www.rapidmail.de/datensicherheit.
Processing on behalf of the controller
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is an agreement required under data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Sending newsletters to existing customers
If you order goods or services from us and provide your email address, we may subsequently use this email address to send newsletters, provided that we inform you of this in advance. In such cases, the newsletter will contain only direct marketing for our own similar goods or services. You may unsubscribe from this newsletter at any time. A corresponding link is included in every newsletter. In this case, the legal basis for sending the newsletter is Art. 6(1)(f) GDPR in conjunction with section 7(3) UWG (German Unfair Competition Act).
After you unsubscribe from the newsletter distribution list, your email address may be stored by us in a suppression list to prevent future mailings. Data in the suppression list is used only for this purpose and is not combined with other data. This serves both your interest and our interest in complying with statutory requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Storage in the suppression list is not limited in time. You may object to the storage if your interests override our legitimate interest.
- Plugins and Tools
YouTube with enhanced privacy
This website embeds videos from YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our pages on which YouTube is embedded, a connection is established to YouTube’s servers. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube in enhanced privacy mode. According to YouTube, videos played in enhanced privacy mode are not used to personalise browsing on YouTube. Advertisements displayed in enhanced privacy mode are also not personalised. No cookies are set in enhanced privacy mode. Instead, local storage elements are stored in the user’s browser. These contain personal data in a similar way to cookies and may be used for recognition. Details regarding enhanced privacy mode are available at https://support.google.com/youtube/answer/171780.
Once a YouTube video has been activated, additional data processing operations over which we have no influence may be triggered.
YouTube is used in the interest of presenting our online services in an appealing manner. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.
Further information on data protection at YouTube can be found in its privacy policy at https://policies.google.com/privacy?hl=de.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at https://www.dataprivacyframework.gov/participant/5780.
Google Maps
This site uses the Google Maps map service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. This service allows us to embed map content on our website.
In order to use the functions of Google Maps, it is necessary to store your IP address. This information is generally transferred to a Google server in the USA and stored there. The provider of this site has no influence over this data transfer. If Google Maps is activated, Google may use Google Fonts for the uniform display of fonts. When Google Maps is accessed, your browser loads the required web fonts into its browser cache in order to display text and fonts correctly.
Google Maps is used in the interest of presenting our online services in an appealing manner and to make it easy to find the locations stated on our website. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.
Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details are available at https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
More information on how user data is handled can be found in Google’s privacy policy at https://policies.google.com/privacy?hl=de.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at https://www.dataprivacyframework.gov/participant/5780.
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to check whether data entered on this website (e.g. in a contact form) is entered by a human or by an automated program. To do this, reCAPTCHA analyses the website visitor’s behaviour based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, the time the website visitor spends on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.
In this context, Google acts solely as a processor within the meaning of Art. 28 GDPR and will not use the data collected in this way for its own purposes. The tool is used on the basis of a data processing agreement (DPA) with Google.
The storage and analysis of data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its online services against abusive automated scanning and spam. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at https://www.dataprivacyframework.gov/participant/5780.
Date: 18.08.2026
Sign up for our newsletter
Don’t want to miss any news in future? Sign up for our newsletter now!
