Privacy Statement

1. Name and address of the person responsible

Marc Mültin
Scheffelstr. 56
76135 Karlsruhe, Germany

 

2. Information on data processing / definition

2.1 In the following we inform you about the processing of your personal data when using our website and inform you about your rights as a data subject. 

2.2 Only if we inform you below that the provision of personal data is required by law or contract or necessary for the conclusion of a contract and you as the person concerned are obliged to provide the personal data, these circumstances exist. Automated decision making or profiling in accordance with Article 22 paragraphs 1 and 4 shall only take place if we explicitly point this out. 

2.3 If you do not provide us with the data within the scope of the cases outlined below, this would mean that you cannot use the service / the corresponding function or that you cannot contact us. 

2.4 For the purposes of this Privacy Statement, we define Cookies as follows:
Cookies are small text files that are stored by your browser on your terminal device. Cookies are used to make our website more user-friendly and secure.

The cookies are stored on the user's terminal device and the cookie data is transmitted to us by the user. As a user you can control the use of cookies. By changing the settings in your browser, you can deactivate or restrict the transmission of cookies. You can delete cookies that have already been saved at any time - even automatically. 

However, if you deactivate cookies, it may no longer be possible to make full use of all the functions of the websites you are visiting or of various tools on the Internet.

2.5 In some cases, we use external service providers (contractors within the meaning of Art. 28 DSGVO) to process your data and to whom we may disclose personal data. These are carefully selected and commissioned by us, are bound by our instructions and are regularly checked. Otherwise, your data will only be disclosed to other recipients if we make separate reference to this in the following. 


3. Data processing via website


3.1 Encryption

To ensure that your personal data is processed in such a way that the data is protected against unauthorised or unlawful processing and against unintentional loss, destruction or damage, we use encryption (SSL or TLS) on our website and all sub-pages. 

3.2 Visiting our website

Every time you visit our website, our system automatically collects data and information from the computer system of the calling computer. This is the following data: 

- Name of the retrieved file
- Date and time of retrieval
- IP address
- Browser type
- Browser version and language
- Operating system and its interface
- Referrer URL

The data is stored in the log files of our hoster's IT system. 

Purpose: The processing of the above data is necessary to display the website and to ensure the security and stability of our information technology systems and the technology of our website. It is also processed to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyber attack.

Legal basis: We have a legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f DSGVO, whereby the legitimate interest arises from the aforementioned purpose. 

Storage period: The data will be deleted as soon as the data storage can no longer fulfil the purpose. The point in time is to be determined for the individual case, whereby the storage is to be terminated at the latest if any civil law claims according to § 199 BGB have lapsed or criminal prosecution is also no longer possible due to limitation of actions (§§ 78, 79 StGB). 


3.3 Contact - General

When you contact us (e.g. by e-mail), we will store the data you have provided, such as your name, your e-mail address and any other contact data you may have provided.

Purpose: The processing of the above data is necessary to respond to your contact.

Legal basis: The processing of data may be based on different legal bases depending on the request. In any case, however, the processing is necessary to safeguard our legitimate interests within the meaning of Art. 6 para. 1 lit. f DSGVO. The legitimate interest results from the fact that we want to fulfil the processing purpose. 

Storage period: The data will be deleted as soon as the data storage can no longer fulfil the purpose. The point in time is to be determined for the individual case, whereby the storage is to be terminated at the latest if any civil law claims according to § 199 BGB have lapsed or criminal prosecution is also no longer possible due to limitation of actions (§§ 78, 79 StGB). 

 

3.4 Google Analytics

We use the web analysis service Google Analytics on our website. Provider is Google Inc. (hereinafter "Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. 

Google Analytics is a web analysis service for collecting and evaluating data about the behaviour of website visitors. Google Analytics uses cookies, which transmit data to Google for the purpose of analysis when you visit our website.

As part of this process, the following data is usually transmitted to and stored by Google on servers: 

- Referrer URL
- Which subpage of the website is accessed
- How often and for how long a subpage is viewed
- IP address
- Access time
- Access location
- Frequency of visits to our website.

We have activated the addition "_gat._anonymizeIp" for this service. As a result, Google shortens and anonymizes the IP address of your Internet connection when you access our website from a member state of the European Union or from other signatory states to the Agreement on the European Economic Area. In exceptional cases, the full IP address is transmitted to a Google server in the USA and shortened there. 

Purpose: The purpose of the Google Analytics tool is to analyse the flow of visitors to our website. Google uses the data obtained to evaluate the use of the website and provides us with online reports showing the activities on our website. The use of Google Analytics enables us to optimize our website and perform a cost-benefit analysis of our Internet advertising. 

Legal basis: We only use cookies if you agree. In order to obtain your consent, we have placed a cookie layer on our website. By clicking on the button there you agree to the setting of cookies. Accordingly, Google Analytics is used on the legal basis of Art. 6 para. 1 lit. a DSGVO.

Storage period: Google stores the data collected by Google Analytics for a maximum of 14 months. 

Third country transfer:     The data is usually transferred to Google's servers in the USA and stored there.

Transfer to third parties: It is possible that Google will pass on the data obtained in the process to third parties. 

Furthermore, you have the option of generally objecting to and preventing the collection of data generated by Google Analytics relating to the use of this website and the processing of this data by Google. To do this, you must download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information on visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered a contradiction by Google. If you delete, format or reinstall the IT system at a later time, you must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or deactivated by you or another person within your control, you may reinstall or reactivate the browser add-on. We also offer you the option of deactivating the collection of website usage data for this website by clicking on the following link:    

Disable Google Analytics

Further information and Google's current privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html. Google Analytics will be explained in more detail under this link https://www.google.com/intl/de_en/analytics/.

 

3.5 Newsletter (ConvertKit)

We use the service "ConvertKit" of the company ConvertKit, 750 W Bannock St #761, Boise, Idaho 83701 for sending newsletters. ConvertKit is a service for the administration of e-mail addresses and the dispatch of messages. ConvertKit is a service that can be used, among other things, to organize and analyze the sending of newsletters. If you enter data for newsletter subscription purposes (e.g. e-mail address), it will be stored on ConvertKit's servers in the USA, where ConvertKit is certified according to the so-called "EU-US Privacy Shield". The "Privacy Shield" is an agreement between the European Union (EU) and the USA, which is intended to ensure compliance with European data protection standards in the USA.
 
When you open an e-mail sent with ConvertKit, a file contained in the e-mail (so-called web-beacon) connects to the servers of ConvertKit in the USA. In this way we can determine whether a newsletter message has been opened and which links have been clicked. In addition, technical information is collected (e.g. time of retrieval, IP address, browser type and operating system), whereby this information is used exclusively for statistical analysis of newsletter campaigns.

Purpose of processing: The analysis of newsletter campaigns enables us to better manage our newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of their recipients.

Legal basis: Legal basis for the processing of personal data based on your consent to Art. 6 para. 1 lit. a DS-GVO.

Storage period: We will delete your personal data at the latest as soon as storage is no longer necessary. The time is to be determined for the individual case, whereby the storage is to be terminated at the latest if any civil law claims according to § 199 BGB are statute-barred or criminal prosecution is also no longer possible due to statute of limitations (§§ 78, 79 StGB).

Transmission to third countries: If you use the service, data will be stored on servers of third parties. 
stored in the U.S.A.. ConvertKit is an American company that does have an EU-US Privacy Shield certification. The "Privacy Shield" is an agreement between the European Union (EU) and the USA that is intended to ensure compliance with European data protection standards in the USA.

Further information can be found under the following link: https://convertkit.com/privacy/

 

3.6 Registration on website for online courses (Teachable)

We use the Teachable course platform to host our online courses. The provider is Teachable Inc. (hereinafter "Teachable") 16 W. 22nd Street, New York, New York 10010. If you would like to participate in an online course, we will process registration data. Your IP address and the date and time of registration / log-in are also stored when you register / log on to an online course. Furthermore, we store the progress within a course, i.e. which videos of a course you have already watched. If you use certain functions, further data such as your comments and testimonials will be processed.

Purpose of processing: The registration data is processed so that you have access to the online course and can use additional functions as you wish. We then process this data in order to fulfil the contract concluded between you and us and use the data for billing purposes. If you wish to use further functions, the data you disclose will be used so that the functions (e.g. the comment function) can be made available to you. 

Legal basis: If you decide on an online course on Teachable, this is done first of all on the basis of your consent and thus on the legal basis of Art. 6 para. 1 lit. a DS-GVO. The data that we receive when registering for the online course will also be processed on the legal basis of Art. 6 Para. 1 lit. b DS-GVO to the extent that we need your data for the execution of the contract. In addition, Art. 6 para. 1 lit. c DS-GVO serves as a legal basis insofar as there is a legal obligation to retain data.
 
Storage period: The data will be deleted as soon as the data storage can no longer fulfil the purpose. The time must be determined for the individual case, whereby the storage must be terminated at the latest if any civil law claims according to § 199 BGB are statute-barred or criminal prosecution is also no longer possible due to statute of limitations (§§ 78, 79 StGB) and there are no longer any legal storage obligations.

Transfer to third countries: If you use the service, data will be stored on servers in the U.S.A.. Teachable Inc. is an American company that does not have an EU-US Privacy Shield certification. The "Privacy Shield" is an agreement between the European Union (EU) and the USA that is intended to ensure compliance with European data protection standards in the USA.

Further information can be found under the following link: https://teachable.com/privacy-policy

 

3.7 Intercom (Chatbox)

We use the messaging service Intercom. The provider is Intercom Inc. (hereinafter referred to as "Intercom"), San Francisco, 55 2nd Street, San Francisco, CA 94105. We process personal data as part of the communication process. This is in particular the case: 
- Your name
- Your contact details such as telephone number, e-mail address, etc.
- All contents of the conversation

Purpose of processing: We process the data in order to inform you about our offer and to fulfil any contractual obligations arising from any contract concluded between you and us.

Legal basis: If you decide to communicate with Intercom, this will initially be done on the basis of your consent and thus on the legal basis of Art. 6 Para. 1 lit. a DS-GVO. The data that we receive during the call will also be processed on the legal basis of Art. 6 Para. 1 lit. b DS-GVO to the extent that we need your data for the execution of the contract. In addition, Art. 6 para. 1 lit. c DS-GVO serves as a legal basis insofar as there is a legal obligation to retain data. 
 
Storage period: The data will be deleted as soon as the data storage can no longer fulfil the purpose. The time is to be determined for the individual case, whereby the storage is to be terminated at the latest if any civil law claims according to § 199 BGB are statute-barred or criminal prosecution is also no longer possible due to statute of limitations (§§ 78, 79 StGB) and there is no longer a legal obligation to store. 

Transfers to Third Countries: If you use the service, data will be transferred to servers is stored in the U.S.A.. Intercom Inc. is an American company that has a so-called "EU-US Privacy Shield Certification". The "Privacy Shield" is an agreement between the European Union (EU) and the USA that is intended to guarantee compliance with European data protection standards in the USA. Click on the link for more information about the certificate: https://www.privacyshield.gov/participant?id=a2zt0000000TNQvAAO&status=Active

Further information can be found under the following link: https://www.intercom.com/de/terms-and-policies

 

4. Other data processing mediated via the website

4.1 Vimeo

We have integrated the plugin for the video portal Vimeo on our website. The provider is Vimeo, Inc. 555 West 18th Street New York, New York 10011 (hereinafter "Vimeo").

When you visit our website, your browser establishes a direct connection to a Vimeo server in the USA. Vimeo then transmits the video content built into our website to your browser. 
In this way, Vimeo processes at least the following data: 
- Your IP address
- Referrer URL

Vimeo processes your data at its own risk. We are therefore not responsible for data processing in connection with this service. Nevertheless, we would like to inform you as far as possible about the data collection in connection with this service, based on Art. 13 DS-GVO.

Purpose: The above data will be used to display videos from the Vimeo platform on our website.

Legal basis: The legal basis for the use of this service is analogous to Art. 6 para. 1 lit. f DS-GVO. We have a justified interest in increasing the attractiveness of our website. 

Storage period: Because we have no control over Vimeo's further processing and use of the data, we cannot predict how long Vimeo stores the data. 

Data transmission:     Your data will be sent to Vimeo servers in the USA. It is not excluded that Vimeo transmits the data to third parties.

Further information:     The following link will take you to Vimeo's privacy policy: https://vimeo.com/privacy

 

4.2 Google Fonts

We use Google Fonts for the uniform representation of fonts on our website. 

The provider of Google Fonts is Google Inc. (hereinafter "Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. 

When you visit our website, your browser loads the embedded fonts into the cache of your browser. To do this, a direct connection is established between your browser and a Google server. We do not know which personal data Google processes as a result.

Google processes your data at its own risk. We are therefore not responsible for data processing in connection with this service. Nevertheless, we would like to inform you as far as possible about the data collection in connection with this service, based on Art. 13 DS-GVO.

Purpose of processing: The above-mentioned data is used so that we can make our website uniform and thus also attractive.

Legal basis: The legal basis for the use of this service is analogous to Art. 6 para. 1 lit. f DS-GVO. We have a justified interest in increasing the attractiveness of our website.  

Storage period: Since we have no influence on the further processing and use of the data by Google, we cannot make any statement as to how long Google will store the data. 

Data transmission:     Your data will be sent to Google servers in the USA. It is not excluded that Google transmits the data to third parties.

Further information:     The following link will take you to Google's privacy policy: https://policies.google.com/privacy?hl=en#infochoices

 

5. Payment service provider 

5.1 PayPal payment service 

You can make payments on our website via the payment provider PayPal. The provider is PayPal (Europe) S.à r. l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). 

PayPal processes your data at its own risk. However, as part of the payment process we receive certain data from PayPal. The personal data transmitted to PayPal is usually first name, last name, address, e-mail address, IP address, telephone number, mobile phone number or other data required for payment processing. Personal data in connection with the respective order are also necessary for the processing of the contract.

Purpose of processing: We process the data provided to us by PayPal in order to fulfil the contractual obligations arising from the contract concluded between you and us (e.g. the delivery address for sending goods or your billing address).

Legal basis: If you decide to pay with PayPal, this is initially based on your consent and thus on the legal basis of Art. 6 para. 1 lit. a DS-GVO. The legal basis for the processing of personal data required for the execution of the contract is based on Art. 6 para. 1 letter b DS-GVO.

Storage period: The data will be deleted at the latest as soon as the data storage can no longer fulfil the purpose. The point in time is to be determined for the individual case, whereby the storage is to be terminated at the latest if any civil law claims according to § 199 BGB have lapsed or criminal prosecution is also no longer possible due to limitation of actions (§§ 78, 79 StGB). 

 

5.2 Payment processing via Stripe 

You can make payments via Stripe on our website. The provider is Stripe Payments Europe, Ltd, C/O A&L Goodbody, Ifsc, North Wall Quay, Dublin 1 (hereinafter "Stripe"). 

We collect the following data for payment processing: 
- Your full name
- Your address
- Your account details or credit card details
- Your email address

The data is automatically transmitted to Stripe, which processes and stores the data on its own responsibility. Stripe forwards the data to bodies responsible for the transaction, such as credit institutions and banks.

Purpose: We use the data we collect during the payment process to fulfil our contractual obligations.

Legal basis: Legal basis for the processing of personal data required for the purchase transaction is based on Art. 6 para. 1 lit. b DS-GVO.

Storage period: The data available to us will be deleted as soon as the data storage can no longer fulfil the purpose. The point in time is to be determined for the individual case, whereby the storage is to be terminated at the latest if any civil law claims according to § 199 BGB have lapsed or criminal prosecution is also no longer possible due to limitation of actions (§§ 78, 79 StGB). 

Further information:     The following link will take you to Stripe's privacy policy: https://stripe.com/de/terms

 

6. Social media links

We have dispensed with embedding so-called Socia Media plug-ins on our website and instead link only to the pages of the companies listed below to protect your data: 

- Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
- LinkedIn Ireland Unlimited Company, Wilton Place,,, Dublin 2, Ireland
- XING SE, Dammtorstrasse 30, 20354 Hamburg, Germany

If you follow a link, you will be redirected to the respective website of the respective company. Any resulting processing of your personal data is then outside our area of responsibility. Nevertheless, we would like to comply with our duty to inform under Art. 13 DS-GVO as far as possible. 

Purpose: We set the links to make our website appealing. Furthermore, the links are set in order to promote the communicative character of the Internet and thus freedom of opinion. 

Legal basis: The legal basis for the setting of links is analogous to Art. 6 para. 1 lit. f DS-GVO. We have a justified interest in increasing the attractiveness of our website.  

Storage period: As we have no influence on the further processing and use of the data by the above-mentioned companies, we cannot make any statement as to how long the companies will store the data if you follow one of the links. 

Data transmission:     If you follow a link, your data will be sent to servers in third countries such as the USA, depending on the company. It is not excluded that the companies transmit the data to third parties.

Further information:     On the websites of the above-mentioned companies you will find further information on their respective data protection regulations. 

 

7. Information on the rights of the persons concerned

Due to the processing of your personal data, you are a data subject within the meaning of the DSGVO and you have the following rights towards us, whereby we are hereinafter referred to as "responsible person": 


- Right to information, Art. 15 DSGVO

You have the right to request information from the data controller as to whether he processes personal data relating to you. In the affirmative you have a right to information about the information listed in Art. 15 DSGVO.


- Right to correction of personal data, Art. 16 DSGVO

In accordance with Art. 16 DSGVO, you have the right to have the data controller correct or complete personal data concerning you if the personal data concerning you is incorrect or incomplete.


- Right to cancellation ("right to be forgotten"), Art. 17 DSGVO

In accordance with Art. 17 DSGVO, you have the right to demand that the person responsible delete personal data relating to you. 


- Right to limitation of processing, Art. 18 DSGVO

As a data subject, you have the right, under the conditions of Art. 18 DSGVO, to require the data controller to restrict processing. 


- Right to information, Art. 19 DSGVO

In accordance with Art. 19 DSGVO, you have the right to be informed of the recipients to whom the personal data concerning you have been disclosed and to whom the data controller has notified your assertion of rights to rectification, deletion or restriction of your data. 


- Right to data transferability, Art. 20 DSGVO

Under the conditions of Art. 20 DS-GVO you have the right to receive the personal data concerning you in a structured, common and machine-readable format. You have the right, under the conditions of Art. 20 DS-GVO, to transmit this data to another data controller without hindrance by the data controller to whom the personal data have been provided. You have the right to request that the personal data be transferred directly from one data controller to another data controller, insofar as this is technically feasible. 


- Right to object to processing, Art. 21 DSGVO

In accordance with Art. 21 DSGVO, you have the right to object at any time to the processing of personal data concerning you, which is based on Art. 6 para. 1 lit. e or lit f. This also applies to profiling based on these provisions. If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.


- Right not to be subject to an automated decision including profiling, Art. 22 DSGVO

As a data subject, you have the right under Article 22 DSGVO not to be subject to a decision based exclusively on automated processing - including profiling - which has a legal effect on you or similarly significantly affects you. 


- Right to revoke the data protection declaration of consent, Art. 7 DSGVO

According to Art. 7 DSGVO, you have the right to revoke your consent to the processing of personal data relating to you at any time. 


- Right of appeal to a data protection supervisory authority, Art. 77 DSGVO

Without prejudice to any other remedies, you have the right of appeal to a supervisory authority under Art. 77 DSGVO if you believe that the processing of your personal data by us is in breach of the DSGVO.