Copyright
Information obligations according to §5 E-Commerce Act, §14 Commercial Code, §63 Trade Regulation Act, and disclosure obligations according to §25 Media Act.
Beauty Code e.U.
Liliia Patierkina
Leopold-Böhm-Straße 6/1/01A,
1030 Vienna,
Austria
Business Purpose: Cosmetics (Beauty Care), limited to Permanent Make-Up and Microblading
Commercial Register Number: FN 544865y
Tel.: +43 676 4841167
E-mail: beautycodewien@gmail.com
Member of: WKO
Professional Regulations: Trade Regulation Act: www.ris.bka.gv.at
Supervisory Authority/Trade Authority: Magistrat der Stadt Wien
Professional Title: Cosmetics (Beauty Care), limited to Permanent Make-Up and Microblading
Country of Award: Austria
Contact Information for Data Protection Officer
If you have questions regarding data protection, you can find the contact information for the responsible person or entity below:
Beauty Code e.U.
Leopold-Böhm-Straße 6/1/01A, 1030 Vienna
E-mail Address: beautycodewien@gmail.com
Phone: +43 676 4841167
EU Online Dispute Resolution
According to the Regulation on Online Dispute Resolution in Consumer Matters (ODR Regulation), we would like to inform you about the Online Dispute Resolution platform (ODR platform).
Consumers have the opportunity to address complaints via the Online Dispute Resolution platform of the European Commission at http://ec.europa.eu/odr?tid=121875105. The necessary contact information can be found above in our Impressum.
However, we would like to point out that we are not willing or obliged to participate in dispute resolution proceedings before a consumer arbitration board.
Liability for the Contents of this Website
We continuously develop the content of this website and strive to provide accurate and up-to-date information. Unfortunately, we cannot assume liability for the correctness of all content on this website, especially for those provided by third parties. As a service provider, we are not obliged to monitor the information you transmit or store or to investigate circumstances that indicate unlawful activity.
Our obligations to remove or block the use of information under general law remain unaffected, even in the event of our non-responsibility.
If you notice problematic or unlawful content, please contact us immediately so we can remove the unlawful content. You can find the contact details in the Impressum.
Liability for Links on this Website
Our website contains links to other websites whose content we are not responsible for. Liability for linked websites does not exist for us because we have no knowledge of unlawful activities and have not noticed any such activities, and we would remove links immediately if we became aware of unlawful activities.
If you notice unlawful links on our website, please contact us. You can find the contact details in the Impressum.
Copyright Notice
All content on this website (images, photos, texts, videos) is subject to copyright. Please ask us before distributing, reproducing, or using the content of this website, such as re-publishing on other websites. If necessary, we will legally pursue the unauthorized use of parts of our content.
If you find content on this website that violates copyright, please contact us.
Image Attribution
The images, photos, and graphics on this website are protected by copyright.
All texts are protected by copyright.
Privacy Policy of Contents
• Introduction and Overview
• Scope of Application
• Legal Foundations
• Contact Information for the Data Controller
• Storage Period
• Rights under the General Data Protection Regulation
• Web Hosting
• Web Analytics
• E-Mail Marketing
• Messenger & Communication
• Social Media
• Audio & Video
Introduction and Overview
We have prepared this data protection declaration (version 11.11.2021-111875105) in order to inform you in accordance with the provisions of the and applicable national laws about the personal data (referred to as "data" for short) we process as data controllers, as well as the data processing carried out by our data processors (e.g., providers), what data we will process in the future, and what legal rights you have. The terms used are gender-neutral.
In short: We provide comprehensive information about the data we process about you.
Data protection declarations usually sound very technical and use legal jargon. This data protection declaration, on the other hand, is designed to describe the most important things to you as simply and transparently as possible. To the extent that it is conducive to transparency, technical terms are explained in a reader-friendly manner, links to further information are provided, and graphics are used. In clear and simple language, we inform you that we only process personal data as part of our business activities when there is a legal basis for doing so. This is not possible if one provides concise, unclear, and legally technical explanations, as is often standard on the Internet when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps there is some information that you were not aware of.
If you still have questions, we would like to ask you to contact the responsible entity mentioned below or in the Impressum, to follow the links provided, and to seek further information on third-party websites. You can, of course, also find our contact details in the Impressum.
Scope of Application
This data protection declaration applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (data processors). By personal data, we mean information as defined in Article 4(1) of the GDPR, such as a person's name, email address, and postal address. The processing of personal data enables us to offer and bill our services and products, whether online or offline. The scope of this data protection declaration includes:

• All online presences (websites, online shops) operated by us.
• Social media presence and email communication.
• Mobile apps for smartphones and other devices.

In short, the data protection declaration applies to all areas in which personal data is processed in a structured manner within the company through the mentioned channels. If we enter into legal relationships with you outside of these channels, we will inform you separately.

Legal Foundations

In the following data protection declaration, we provide you with transparent information on the legal principles and regulations, that is, the legal foundations of the General Data Protection Regulation that allow us to process personal data. As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can read this EU General Data Protection Regulation online on EUR-Lex, the access to EU law, at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32016R0679.

We process your data only when at least one of the following conditions applies:

1. Consent (Article 6(1)(a) of the GDPR): You have given us your consent to process data for a specific purpose. An example would be the storage of the information you entered into a contact form.

2. Contract (Article 6(1)(b) of the GDPR): To fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we enter into a purchase agreement with you, we need your personal information in advance.

3. Legal obligation (Article 6(1)(c) of the GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally obligated to keep invoices for accounting purposes. These invoices typically contain personal data.

4. Legitimate interests (Article 6(1)(f) of the GDPR): In the case of legitimate interests that do not infringe on your fundamental rights, we reserve the right to process personal data. For instance, we may need to process certain data to operate our website securely and with economic efficiency. This processing constitutes a legitimate interest.

Additional conditions such as the performance of tasks carried out in the public interest or in the exercise of official authority and the protection of vital interests do not typically apply to us. If such a legal basis were to be relevant, it would be specified in the corresponding section.

In addition to the EU Regulation, national laws also apply:

• In Austria, this is the Federal Act for the Protection of Natural Persons with regard to the Processing of Personal Data (Data Protection Act), abbreviated as DSG.
• In Germany, the Federal Data Protection Act, abbreviated as BDSG, applies.

If additional regional or national laws are applicable, we will inform you in the following sections.

Contact Information for the Data Controller

If you have questions about data protection, you can find the contact details of the responsible person or entity below:

Beauty Code e.U.
Leopold-Böhm-Straße 6/1/01A, 1030, Vienna
Email: beautycodewien@gmail.com
Phone: +43 676 4841167

Storage Period

The general criterion we follow is that we store personal data only as long as it is strictly necessary for providing our services and products. This means that we delete personal data when the purpose of data processing is no longer applicable. In some cases, we are legally obliged to store certain data even after the original purpose has ended, such as for accounting purposes.

If you wish to have your data deleted or withdraw your consent for data processing, the data will be deleted as soon as possible, provided there is no obligation to store it.

We will provide you with specific information about the duration of data processing in the respective sections if we have additional information.

Rights under the General Data Protection Regulation

According to Article 13 of the GDPR, you have the following rights to ensure fair and transparent data processing:

• According to Article 15 of the GDPR, you have the right to know whether we process your data. If so, you have the right to receive a copy of the data and learn the following information:
- The purpose of data processing.
- The categories or types of data being processed.
- Who receives this data, and if the data is transferred to third countries, how its security is guaranteed?
- How long the data is stored.
- The right to rectification, erasure, or restriction of processing, as well as the right to object to processing.
- The right to lodge a complaint with a supervisory authority (links to these authorities can be found below).
- The origin of the data, if it was not collected from you.
- Whether profiling is carried out, meaning if data is automatically evaluated to create a personal profile of you.

• According to Article 16 of the GDPR, you have the right to rectify data, which means we must correct data if you find errors.

• According to Article 17 of the GDPR, you have the right to erasure ("right to be forgotten"), which means you can request the deletion of your data.

• According to Article 18 of the GDPR, you have the right to restrict processing, meaning that we can only store the data but not use it further.

• According to Article 19 of the GDPR, you have the right to data portability, meaning we will provide your data in a common format upon request.

• According to Article 21 of the GDPR, you have the right to object to processing, which, if enforced, results in a change in processing.

• If the processing of your data is based on Article 6(1)(e) (public interest, exercise of official authority) or Article 6(1)(f) (legitimate interest), you can object to the processing. We will then promptly examine whether we can legally comply with this objection.

• If data is used for direct marketing, you can object to this type of data processing at any time. After your objection, we may no longer use your data for direct marketing.

• If data is used for profiling, you can object to this type of data processing at any time. After your objection, we may no longer use your data for profiling.

• According to Article 22 of the GDPR, you may have the right, under certain circumstances, not to be subject to a decision based solely on automated processing (for example, profiling).

In short, you have rights – do not hesitate to contact the responsible entity listed above!

If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can file a complaint with the supervisory authority. In Austria, this is the Data Protection Authority, whose website you can find at https://www.dsb.gv.at/. In Germany, there is a data protection officer for each federal state. For more information, you can contact the

Federal Commissioner for Data Protection and Freedom of Information (BfDI). The following local data protection authority is responsible for our company:

Web Hosting

Web Hosting Summary
Data subjects: Website visitors
Purpose: Professional hosting of the website and ensuring its operation
Processed data: IP address, time of website visit, browser used, and other data. For more details, please see below or. At the respective web hosting provider.
Storage period: Depending on the respective provider, but typically 2 weeks.
⚖️ Legal basis: Art. 6 para. 1 lit.f GDPR (Legitimate interests)
What is Web Hosting?
When you visit websites nowadays, certain information, including personal data, is automatically generated and stored, on this website. This data should be processed as sparingly as possible and only with justification. By website, we mean the entirety of all web pages on a domain, from the homepage to the very last subpage, like this one. By domain, we mean, for example, example.com or sampleexample.com.
To view a website on a screen, you use a program called a web browser. You're probably familiar with some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari.
This web browser must connect to another computer where the website's code is stored: the web server. Operating a web server is a complex and resource-intensive task, which is typically handled by professional providers, known as hosting providers. They offer web hosting and thus ensure the reliable and error-free storage of website data.
When your browser connects to the web server on your computer (desktop, laptop, smartphone) and during data transmission to and from the web server, personal data may be processed. Your computer stores data and the web server must also store data for a certain period to ensure proper operation.
To illustrate:
Why do we process personal data?
The purposes of data processing are as follows:

1. Professional hosting of the website and ensuring its operation.
2. Maintaining operational and IT security.
3. Anonymous analysis of access behavior to improve our offerings and, if necessary, for law enforcement or pursuing claims.
What data is processed?
Even as you visit our website right now, our web server, which is the computer where this website is stored, automatically stores data such as:

• The complete internet address (URL) of the visited webpage (e.g., https://www.examplewebsite.com/samplepage.html?tid=111875105).
• Browser and browser version (e.g., Chrome 87).
• The operating system used (e.g., Windows 10).
• The address (URL) of the previously visited page (referrer URL) (e.g., https://www.examplesourcepage.com/igotfromthere.html/).
• The hostname and IP address of the device from which the access is made (e.g., COMPUTERNAME and 194.23.43.121).
• Date and time.
• In files, the so-called web server log files.
How long are data stored?
In general, the data mentioned above is stored for two weeks and then automatically deleted. We do not share this data, but we cannot exclude the possibility that authorities may access this data in case of unlawful behavior.
In short: Your visit is logged by our hosting provider (the company that runs our website on special computers or servers), but we do not share your data without consent!
Legal Basis
The legality of processing personal data in the context of web hosting is based on Art. 6 para. 1 lit. f GDPR (legitimate interests). The use of professional hosting with a provider is necessary to present the company safely and user-friendly on the internet and to be able to track attacks and claims.

Usually, we have a contract with the hosting provider for order processing according to Art. 28 et seq. GDPR, which ensures compliance with data protection and guarantees data security.
Web Analytics
Web Analytics Data Protection Declaration Summary
Data subjects: Website visitors
Purpose: Evaluation of visitor information for web offer optimization.
Processed data: Access statistics containing data such as access locations, device data, access duration and time, navigation behavior, click behavior, and IP addresses. More details are available with the respective web analytics tool used.
Storage period: Depends on the web analytics tool used.
⚖️ Legal basis: Art. 6 para. 1 lit. a GDPR (Consent), Art. 6 para. 1 lit. f GDPR (Legitimate interests)
What is Web Analytics?
We use software on our website to evaluate the behavior of website visitors, known as web analytics or web analysis. Data is collected, stored, managed, and processed by the respective analytics tool provider (also called tracking tool). Data collected is used to create analyses of user behavior on our website, which are then made available to us as website operators. Most tools also offer various testing possibilities, so we can test which offers or content are most popular with our visitors. For these test procedures, user profiles can also be created, and data can be stored in cookies.
Why do we conduct Web Analytics?
With our website, we have a clear goal: we aim to provide the best web offering in our industry. To achieve this goal, we want to provide the best and most interesting offering and ensure that you feel comfortable on our website. With web analysis tools, we can scrutinize the behavior of our website visitors more closely and then improve our web offering for you and us accordingly. For instance, we can determine the average age of our visitors, where they come from, when our website is most frequently visited, or which content or products are particularly popular. All this information helps us optimize the website to tailor it to your needs, interests, and wishes.
What data is processed?
The specific data stored depends on the analysis tools used. Generally, data such as what content you view on our website, which buttons or links you click, when you access a page, what browser you use, what device (PC, tablet, smartphone, etc.) you use to visit the website, and what computer system you use are stored. If you agree to the collection of location data, this data may also be processed by the web analytics tool provider.
Furthermore, your IP address is also stored. According to the General Data Protection Regulation (GDPR), IP addresses are considered personal data. However, IP addresses are generally stored in a pseudonymized (rendered unrecognizable and shortened) form. For testing purposes, web analysis, and web optimization, no direct data such as your name, age, address, or email address are typically stored. If such data is collected, it is pseudonymized. This means that you cannot be identified as an individual.
The following example schematically shows how Google Analytics functions as an example of client-based web tracking with JavaScript code.
The duration of data processing depends on the provider. Some cookies store data for a few minutes or until you leave the website, while others can store data for several years.
Duration of Data Processing
We will inform you about the duration of data processing below if we have more information. In general, we process personal data only as long as it is absolutely necessary for providing our services and products. If legally required, such as in the case of accounting, this storage period may be exceeded.
Right to Object
You also have the right and the opportunity to revoke your consent to the use of cookies or third parties at any time. This can be done either through our cookie management tool or through other opt-out features. For example, you can prevent data collection by cookies by managing, deactivating, or deleting cookies in your browser.
Legal Basis
The use of web analytics requires your consent, which we have obtained with our cookie popup. According to Art. 6 para. 1 lit. a GDPR (Consent), this consent serves as the legal basis for processing personal data

that may occur when using web analytics tools.
In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors to technically and economically improve our offering. With the help of web analytics, we identify website errors, identify attacks, and improve efficiency. The legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate Interests). However, we only use these tools when you have granted consent.

As cookies are used with web analytics tools, we also recommend reading our general cookie privacy policy to find out exactly what data is stored and processed about you. Information about specific web analytics tools, if available, is provided in the following sections.

Email Marketing
Email Marketing Summary
Concerned Parties: Newsletter Subscribers
Purpose: Direct email marketing, notification of system-relevant events
Processed Data: Information provided during registration, at least the email address. For more details, please refer to the specific Email Marketing Tool in use.
Storage Duration: Duration of the subscription
⚖️ Legal Basis: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate Interests)

What is Email Marketing?
To keep you informed, we also utilize the option of email marketing. If you have agreed to receive our emails or newsletters, your data is processed and stored for this purpose. Email marketing is a subset of online marketing that involves sending news or general information about a company, products, or services via email to a specific group of people who are interested in them.

To participate in our email marketing (usually through newsletters), you typically need to register with your email address. You fill out an online form and submit it. Sometimes, we may request your salutation and name for personalization.

Registration for newsletters usually follows the "Double-Opt-In" procedure. After signing up for our newsletter on our website, you will receive an email to confirm your newsletter subscription. This ensures that the email address belongs to you and that no one has subscribed with a different email address. We or the notification tool we use will log each registration, recording the time of registration, the time of confirmation, and your IP address. Any changes you make to your stored data are also logged.

Why Do We Use Email Marketing?
We want to stay in contact with you and provide essential updates about our company. We often use email marketing, commonly referred to as newsletters, as a significant part of our online marketing. We send newsletters, system emails, or other notifications via email if you agree or it is legally permitted. In this text, when we refer to "newsletters," we primarily mean regularly sent emails. We aim to provide relevant and interesting content, never intending to inconvenience you. Through our newsletters, you can learn more about our company, services, or products, including news and special promotions. If we engage a professional email marketing provider, it is to offer you quick and secure newsletters. The primary purpose of our email marketing is to inform you about new offers and get closer to our business goals.

What Data Is Processed?
When you become a subscriber to our newsletter via our website, you confirm your membership in an email list by email. Your email address and IP address may be stored, and additional data such as salutation, name, address, and phone number can be stored, but only if you consent to this data storage. The marked data is necessary for your participation in the service, and providing this information is voluntary. Failure to provide the data will prevent you from using the service. Information about your device or your preferred content on our website may also be stored. More information on data storage when visiting a website can be found in the "Automatic Data Storage" section. We record your consent to ensure that it complies with the law.

Data Processing Duration
If you unsubscribe from our email or newsletter distribution list, we may store your email address for up to three years based on our legitimate interests, allowing us to prove your previous consent if necessary. We can process this data only if we need to defend against any claims.

However, if you confirm your consent to a newsletter subscription, you can request an individual deletion at any time. If you permanently object to the consent, we reserve the right to store your email address in a suppression list. As long as you voluntarily subscribe to our newsletter, we will keep your email address.

Right to Object
You have the right to unsubscribe from the newsletter at any time. You can do this by revoking your consent to subscribe to the newsletter, which usually takes just a few seconds or a click. Most emails typically contain a link to unsubscribe at the end of the message. If you can't find the unsubscribe link in the newsletter, please contact us via email, and we will promptly unsubscribe you.

Legal Basis
The sending of our newsletter is based on your consent (Article 6(1)(a) GDPR). We can only send you a newsletter if you have actively subscribed to it. In some cases, we may also send promotional messages under Section 7(3) of the German Unfair Competition Act (UWG) if you have become our customer and have not objected to the use of your email address for direct marketing.

For information about specific email marketing services and how they process personal data, please see the following sections, if available.

Messenger & Communication
Messenger & Communication Data Privacy Statement Summary
Concerned Parties: Website Visitors
Purpose: Contact inquiries and general communication between us and you
Processed Data: Information such as name, address, email address, phone number, general content data, and potential IP address
For more details, please refer to the specific tools in use.
Storage Duration: Depends on the messenger and communication features used
⚖️ Legal Basis: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate Interests), Art. 6(1)(b) GDPR (Contractual or Pre-contractual Obligations)

What Are Messenger & Communication Features?
We provide various ways on our website to communicate with us, including messenger and chat features, online forms, email, phone, and social media. Your data is processed and stored as necessary to answer your inquiries and for our subsequent actions.

In addition to traditional communication methods such as email, contact forms, or phone calls, we also offer chats and messengers. WhatsApp is the most commonly used messenger function, but there are various providers offering messenger features designed for websites. The privacy texts or privacy policies of the respective providers indicate whether the content is end-to-end encrypted. End-to-end encryption means that the provider cannot view the content of a message. However, information about your device, location settings, and other technical data can still be processed and stored.

Why Do We Use Messenger & Communication Features?
Effective communication with you is essential. We want to interact with you and provide the best possible answers to your questions about our services. Functional communication is a critical part of our service. Our practical messenger and communication features allow you to choose the method you prefer. In some cases, we may not be able to answer certain questions via chat or messenger, such as those related to internal contractual matters. In such cases, we recommend using other means of communication, such as email or phone.

We typically assume that we remain responsible for data protection even when we use the services of a social media platform. However, the European Court of Justice has ruled that, in certain cases, the operator of the social media platform may jointly be responsible with us, within the meaning of Article 26 of the GDPR. When this occurs, we will make a specific note of it and work based on an agreement. The essential part of the agreement is provided below for the affected platform.

Please note that when using our embedded elements, data about you may be processed outside the European Union, as many providers, such as Facebook Messenger or WhatsApp, are American companies. Consequently, you may find it more challenging to assert your rights regarding your personal data.

What Data Is Processed?
The specific data that is stored and processed depends on the provider of the messenger and communication features. In general, this includes data such as your name, address, phone number, email address, and content data, such as all the information you enter into a contact form. Additionally, information about your device and IP address is usually stored. Data collected through messenger and communication features is also stored on the providers' servers.

If you want to know exactly what data is stored and processed by specific providers and how you can object to data processing, please carefully read the respective company's privacy policy.

Data Storage Duration
The duration of data processing and storage primarily depends on the tools we use. Below, you will find more information about the data processing by individual tools. Typically, personal data is processed only for as long as it is necessary to provide our services. The storage duration of data stored in cookies can vary significantly. Data may be deleted immediately after leaving a website or remain stored for several years. Therefore, if you want to learn more about data storage, you should examine the details of each cookie. The privacy policies of individual providers typically offer information about specific cookies.

**Right to Object**
You also have the right and the possibility to revoke your consent for the use of cookies or third-party services at any time. This can be done either through our Cookie Management Tool or other opt-out functions. For example, you can prevent data collection through cookies by managing, disabling, or deleting cookies in your browser. For further information, please refer to the section on consent.
Since cookies may be used in messenger and communication functions, we also recommend our general privacy policy regarding cookies. To find out exactly which data is stored and processed by you, you should read the privacy policies of the respective tools.

**Legal Basis**
If you have consented to the processing and storage of your data through integrated messenger and communication functions, this consent serves as the legal basis for data processing (Art. 6(1)(a) GDPR). We process your inquiries and manage your data within the framework of contractual or pre-contractual relationships to fulfill our pre-contractual and contractual obligations or to respond to inquiries. The legal basis for this is Art. 6(1) Sentence 1 lit. b. GDPR. In principle, your data will also be stored and processed based on our legitimate interests (Art. 6(1)(f) GDPR) in fast and efficient communication with you or other customers and business partners when consent is given.

**Social Media**
*Summary of Social Media Privacy Policy*
*Affected Parties:* Visitors to the website
*Purpose:* Presentation and optimization of our services, contacting visitors, interested parties, and advertising
*Processed Data:* Data such as telephone numbers, email addresses, contact details, user behavior data, information about your device, and your IP address.
*More details can be found with the respective social media tools.*
*Storage Duration:* Depends on the social media platforms used
*Legal Basis:* Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate Interests)

**What is Social Media?**
In addition to our website, we are also active on various social media platforms. Data may be processed to allow us to target users who are interested in our services through social networks. Furthermore, elements of a social media platform may be directly embedded in our website. For example, this occurs when you click on a so-called social button on our website and are redirected to our social media presence. Social media refers to websites and apps where registered members produce content, exchange content openly or in specific groups, and connect with other members.

**Why Do We Use Social Media?**
For years, social media platforms have been the place where people communicate and connect online. With our social media presence, we can bring our products and services closer to interested parties. Social media elements integrated into our website make it easy and uncomplicated for you to switch to our social media content. The data stored and processed through your use of a social media channel primarily serves the purpose of conducting web analyses. The goal of these analyses is to develop more accurate and personalized marketing and advertising strategies. Depending on your behavior on a social media platform, the evaluated data can provide insights into your interests and create user profiles. For this purpose, cookies are often set in your browser to store data about your usage behavior.

We generally assume that we remain responsible for data protection even when using the services of a social media platform. However, the European Court of Justice has decided that in certain cases, the operator of the social media platform can be jointly responsible with us under Article 26 of the GDPR. If this is the case, we will inform you separately and work based on an agreement regarding this matter. The essential part of the agreement is provided below with the relevant platform.

Please note that when using social media platforms or our embedded elements, data about you may be processed outside of the European Union since many social media channels, such as Facebook or Twitter, are American companies. As a result, you may have a more challenging time asserting your rights regarding your personal data.

**What Data Is Processed?**
The data stored and processed depends on the respective provider of the social media platform. However, it typically includes data such as telephone numbers, email addresses, data entered into a contact form, user data like which buttons you click, whom you like or follow, when you visit certain pages, information about your device, and your IP address. Most of this data is stored in cookies. Especially if you have a profile on the visited social media channel and are logged in, data can be linked to your profile.

All data collected through a social media platform is also stored on the provider's servers. Therefore, only the providers have access to the data and can provide you with relevant information or make changes.

If you want to know exactly what data is stored and processed by social media providers and how you can object to data processing, we recommend that you carefully read the respective company's privacy policy. If you have questions about data storage and data processing or wish to assert your rights in this regard, we recommend that you contact the provider directly.

**Duration of Data Processing**
We will inform you about the duration of data processing below if we have further information. For example, the social media platform Facebook stores data until it is no longer needed for its own purposes. Customer data that is compared to your user data is deleted within two days. In general, we process personal data only as long as it is absolutely necessary for providing our services and products. If, as in the case of accounting, it is legally required, this storage period can be exceeded.

**Right to Object**
You also have the right and the possibility to revoke your consent for the use of cookies, including embedded social media elements, at any time. This can be done either through our Cookie Management Tool or other opt-out functions. For example, you can prevent data collection through cookies by managing, disabling, or deleting cookies in your browser. The legality of the processing until revocation remains unaffected.

Since cookies are often used with embedded audio and video features on our site, you should also read our general privacy policy regarding cookies. In the privacy policies of the respective third-party providers, you can find more details about how data is handled and stored.

**Legal Basis**
If you have consented to the processing and storage of your data through embedded audio and video elements, this consent serves as the legal basis for data processing (Art. 6(1)(a) GDPR). In general, your data is also stored and processed based on our legitimate interests (Art. 6(1)(f) GDPR) in fast and efficient communication with you or other customers and business partners when consent is given. However, we only use the embedded audio and video elements if you have given your consent.

All texts are protected by copyright.