You are using an outdated browser. For a faster, safer browsing experience, upgrade for free today.

Privacy
Statement

General
The responsible body as defined by current data protection laws, especially the EU General Data Protection Regulation (GDPR), is:
aheadware GmbH
Your rights
Addressing the stated contact information of our Data protection officer you may at any time exercise the following rights:

- You may obtain information regarding your personal data stored on our site as well as their processing. (Art. 15 GDPR),
- Correction of incorrect personal data (Art. 16 GDPR),
- Deletion of your personal data stored on our site (Art. 17 GDPR),
- Restriction of data-processing, provided we are, for the time being, unable to delete your personal data based on legal obligations (Art. 18 GDPR),
- File objection against the processing of your personal data on our site (Art. 21 GDPR)
and
- data portability provided you have complied with the processing of your personal data or entered into a contract with us (Art. 20 GDPR).

The compliance you have filed, can be rescinded with future effect at any time. You can file a complaint to the responsible supervisory authority (Art. 77 GDPR i.V.m. § 19 BDSG). A supervisory authority will be assigned according to the federal state of your residence, your workplace or the suspected infringement.
A list of supervisory authorities and their addresses (for the non-public sector) can be found here:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Collection of General Information on Visiting our Website
Extent and Purpose of the Collection:
On visiting our website, that is in case you are not registrating or otherwise transmitting information, general information will automatically be collected. This data (server log files) contains for example the type of web browser, the used operating system, the name of the domain of your internet provider, your IP address and the like. This contains exclusively that kind of information, which allows no conclusions regarding your person.

The collection serves the following purposes:

- Assurance of a smooth connection set-up with the website,
- Assurance of a seamless use of the website,
- Evaluation of the system’s security and stability,
- For further administrative purposes.

We do not use your data to draw conclusions regarding your person. Information of this kind might be statistically analysed to improve our website and the underlying technology.

Legal Basis:
The processing is subject to Art. 6 (1) of the GDPR based on our legitimate interest to improve the stability and functionality of our website.

Recipients:
Only the responsible body and if necessary technical service providers, responsible for the operation and maintenance of our website will receive this data.

Storage Period:
The data will be deleted, as soon as they are no longer required for the purpose of their collection. This is always the case concerning data, that aid the provision of the website, as soon as the session is ended.

Provision Required or Prescribed:
The provision of the aforementioned personal data is neither legally prescribed nor contractually required. However, without the IP address the service and functional capability of our website can not be assured. Furthermore, individual services may not be available or impaired. Therefore, objection shall be excluded.
Cookies
Extent and Purpose of the Processing:
Like many other websites we also use so called “cookies”. Cookies are small text files, that are transferred from a website server to your hard drive. Through this we automatically receive certain data, like i.e. your IP address, the used browser, operating system and your connection to the internet. Cookies can not be used to start programs or transmit viruses on a computer. With the information contained in the cookies, we can facilitate navigation and correct display on our website. On no account will we transmit the data, collected by us, to third parties or without your consent link them with personal data. You can view our website in general even without cookies. Internet browsers are commonly set to accept cookies. Basically, you can deactivate the use of cookies in the settings of your browser at any time. Please make use of the help function of your browser, to learn how to change those settings. Please take notice that individual services of our website might not work, once you have deactivated the use of cookies.

Storage Period and Used Cookies:
Insofar as you allow us to use cookies via your browser settings or compliance, the following cookies might be utilized on our websites:

- Cookies Disclaimer
- States of our interactive releases
- Google Analytics
- Google Adwords
- Facebook

We will inform you in the following sections wether these cookies (also) affect personal data.

Individual cookies or even the whole cookie inventory can be deleted via your browser settings. Furthermore, we would like to provide you with the information and instructions, how cookies can be deleted, or their storage can be blocked in advance. Depending on the provider of your browser, you can find the necessary information via the following links:

- Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
- Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorerdelete-manage-cookies
- Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
- Opera: http://www.opera.com/de/help
- Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE
Performance of Chargeable Services
Extent and Purpose of the Processing:
For the performance of chargeable services, we inquire further data, like i.e. payment information, to execute your order.

Legal Basis:
The data processing necessary for the conclusion of contract is based on Art. 6 (1) of the GDPR.

Recipients:
Only the responsible body and if necessary technical service providers, responsible for the operation and maintenance of our website will receive this data.

Storage Period:
We store the data until the legal retention periods expire. This usually takes 6 to 10 years due to reasons of proper accounting and fiscal requirements.

Provision Required or Prescribed:
The provision of your personal data is voluntary, based on your approval. Without the provision of your personal data, we can not grant access to our offered content and services.
Newsletter
Extent and Purpose of Processing:
Your data is solely used to deliver the subscribed newsletter via E-mail. We inquire your name to personally address and if necessary be able to identify you, provided you want to exercise your rights. The provision of your E-mail address is sufficient for the reception of the newsletter. The data you provide by subscription will solely be used for that purpose. Subscribers may be informed about circumstances relevant to the services or registration (i.e. changes of the newsletter or technical circumstances).

For an effective registration we require a valid E-mail address. To verify that a subscription is carried out by the owner of an E-mail address, we use the “double opt-in” process. For that purpose, we record the subscription of the newsletter, the dispatch of a confirmation mail and the reception of the thereby requested answer. Further data will not be generated. The data will only be used for the delivery of the newsletter and not be transmitted to third parties.

Legal Basis:
On the basis of your explicitly granted approval (Art. 6 (1) of the GDPR), we regularly send our newsletter or rather comparable information via E-mail to the indicated address. Your approval of storing your personal data and the use of the newsletter can be revoked at any time with effect for the future. Every newsletter contains an according link for that purpose. Furthermore, you can unsubscribe any time directly on our website or inform us of your revocation via the stated contact opportunity at the end of this privacy statement.

Recipients:
Only the responsible body and if necessary external processors will receive this data.

Storage Period:
In this context, the data will only be processed as long as we possess an explicit approval. Thereafter they will be deleted.

Provision Required or Prescribed:
The provision of your personal data is voluntary, based only on your explicit approval. Without approval, we unfortunately can not deliver our newsletter to you.
Contact Form
Extent and Purpose of Processing:
The data, provided by you, will be recorded for the purpose of individual communication. Therefore we require a valid E-mail address as well as your name. This is necessary for the allocation and the subsequent reply thereof. The provision of further data is optional.

Legal Basis:
The data processing provided via the contact form is based on a legitimate interest (Art. 6 (1) of the GDPR). By the provision of a contact form, we want to enable an effortless way to make contact. The information provided by you within the form will be recorded for the purpose of processing your request and possible follow-up questions. If you make contact to inquire offers, the processing of said data is carried out to serve pre-contract measures (Art. 6 (1) of the GDPR).

Recipients:
Only the responsible body and if necessary external processors will receive this data.

Storage Period:
This data will be deleted no later than 6 months after processing your request. Provided a contractual relationship comes about, they become subject to legal retention periods of the German commercial code (HGB) and will be deleted on expiry of the according period.

Provision Required or Prescribed:
The provision of your personal data is voluntary. However, we can only process your request as long as you inform us about your name, E-mail address and the purpose of said request.
Use of Google Analytics
Type and purpose of precessing:
This website uses Google Analytics, an advertising analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereafter: “Google”). Google Analytics uses so called “cookies”, text files, that are saved on your computer and enable an analysis of your use of the website. The thus generated information of your use of this website will generally be transmitted to and stored at a Google server in the US. Due to the activation of IP anonymisation on our websites, your IP address within member states of the EU or other contracting states of the European Economic Area will previously be truncated by Google. Only in exceptional cases, the full IP address will be transmitted to Google in the US to be truncated there. On behalf of the operator of this website Google will use this data to evaluate your use of the website, compile reports about your website activity and provide other services, related to your use of the website, to the operator. Your IP address transmitted by Google Analytics will not be matched with other data of Google. The Purpose of data processing is the evaluation of the use of the website and the compilation of reports about activity on the website.
On the basis of use of the website and the internet further related services shall be provided.

Legal Basis:
The data processing is based on an approval of the user (Art. 6 (1) of the GDPR).

Recipients:
Only the responsible body and Google as the external processor will receive the data. Therefore we have entered into an appropriate order management contract with Google.

Storage Period:
The data will be deleted, as soon as they are no longer required for the purpose of their collection.

Third Country Transfer:
Google processes the data in the US and is subject to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. Furthermore we have entered standard data protection clauses with Google for the use of Google Analytics.

Provision Required or Prescribed:
The provision of your personal data is voluntary, based on your approval. A denial of access may result in functional impairment of the website.

Revocation of Consent:
You can prevent the storage of cookies via according settings of the software of your browser; we suggest however, that in this case not all functions of the website can be used in full extent. Furthermore, you can prevent the the collection of your data, generated by said cookies or the use of the website (including your IP address), by Google through the download and installation of the browser plug-in available following this link: browser add-on to deactivate Google Analyitcs. Additionally, or as an alternative to the browser add-on, you can prevent the tracking of Google Analytics on our websites by clicking this link. Thereby you install an opt-out cookie on your device. This prevents the detection by Google Analytics on this website and for this browser for the future, as long as the cookie remains installed.

Profiling:
Using this tracking tool Google Analytics can evaluate the behaviour and interest of the visitors of this website. For this purpose we create a anonymous, pseudonymous user profile.
Use of script libraries (Google Webfonts)
Extent and Purpose of Processing:
To be able to display our content correctly and graphically appealing across different browsers, we use “Google Web Fonts” of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereafter: “Google”) for the display of writing. The privacy statement of the library operator Google can be found here:
https://www.google.com/policies/privacy/
Legal Basis:
The legal basis for the integration of Google Webfonts and the thereby related data transfer to Google is your approval (Art. 6 (1) of the GDPR).

Recipients:
The access of script or font libraries automatically establishes a connection to the operator of the library. In this process it is theoretically possible, for the moment however unclear if and for what purposes, the operator (Google) generates data.

Storage Period:
We do not generate personal data through the integration of Google Webfonts. Further information regarding Google Web Fonts can be found here:
https://developers.google.com/fonts/faq.
The privavy statement of Google can be accessed through the following link:
https://www.google.com/policies/privacy/.

Third Country Transfer:
Google processes the data in the US and is subject to the EU_US Privacy Shield
https://www.privacyshield.gov/EU-US-Framework.

Provision Required or Prescribed:
The provision of personal data is neither legally prescribed nor contractually required. However, the correct display of content can not be guaranteed without standard fonts.

Revocation of Consent:
The programming language JavaScript is regularly used to display content. You can revoke the data processing by deactivating the execution of JavaScript in your browser or install a JavaScript blocker. Please be advised that hereby impairment of the functions of the website may occur.
Embedded YouTube Videos
Extent and Purpose of Processing:
On some of our websites we embed YouTube videos. Operator of the Plugin is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereafter: „YouTube“). If you access a website containing the YouTube plugin a connection to the servers of YouTube will be established. In this process YouTube will be informed about which website you have accessed. If you are logged in to you YouTube account, YouTube can assign your browsing habits to your person. You can prevent this by previously logging out of your Youtube account. As soon as a video is played, YouTube will use cookies to collect information about user behaviour. Further information about the purpose and extent of the generation of data and the processing thereof by YouTube can be found in the privacy statement of the operator. These also contain further information regarding your respective rights and settings to protect your privacy ( https://policies.google.com/privacy ). Google processes the data in the US and is subject to the EU-US Privacy Shield
https://www.privacyshield.gov/EU-US-Framework.
Legal Basis:
The legal basis for the integration of YouTube and the thereby related data transfer to Google is your approval (Art. 6 (1) of the GDPR).

Recipients:
The access of YouTube automatically triggers a connection with Google.

Storage Period and withdrawal of consent:
Provided the storage of cookies of Google Ad software is deactivated, one will not have to expect cookies while watching YouTube videos. Still YouTube files non-personal user information in other cookies. If you wish to prevent that, you have to block the storage of cookies in your browser. Further information about data protection of “YouTube” can be found in the privacy statement of the operator:
https://www.google.de/intl/de/policies/privacy/.

Third Country Transfer:
Google processes the data in the US and is subject to the EU_US Privacy Shield
https://www.privacyshield.gov/EU-US-Framework.

Provision Required or Prescribed:
The provision of your personal data is voluntary, based on your approval. A denial of access may result in functional impairment of the website.
Social Plugins
Extent and Purpose of Processing:
We offer the opportunity to use so called “social media buttons” on our website. To protect your data we utilize the solution called “Shariff”. Hereby the buttons will merely be integrated as graphics, which are linked to the according website of the button operator. Clicking the graphic will redirect you to the services of the respective operator. Only then your data will be send to the operator. As long as you do not click on the graphic, no exchange between you and the operator of the social media buttons will take place. Information about the generation and processing of your data in the social network can be found in the according terms of use of the respective operator. More information regarding the Shariff-solution can be found here:
http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.

We have integrated social media buttons of the following companies on our website:
- Facebook.com
Google AdWords
Extent and Purpose of Processing:
Our website makes use of Google Conversion Tracking. Operating company of the services of Google AdWords is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Have you been redirected to our website from an advert, operated by Google, Google Adwords creates a cookie on your device. The cookie for conversion tracking will be created if a user clicks on an advert operated by Google. If the user accesses certain subpages of our website and the cookie has not expired yet, we and Google can recognise that the user has clicked on the advert and has been redirected to this page. Every Google AdWords client receives a different cookie. Thus Cookies can not be traced through the websites of AdWord clients. The data generated by the conversion cookie is used to create conversion statistics for AdWords clients, that have decided in favour of conversion tracking. The clients will be informed about the total number of users, that have clicked on their advert and have been redirected to a website provided with a conversion tracking tag. However, they will not receive any information, which can be used to personally identify users.

Legal Basis:
The legal basis for the integration of Google AdWorks and the thereby involved data transfer to Google is your approval (Art. 6 (1) of the GDPR).

Recipients:
With each access of our website personal data, including your IP address, will be transferred to Google in the US. This personal data will be stored by Google. Google might transmit this data trough the technical process of generating personal data.
Our company does not receive any information of Google, trough which the affected person could be identified.

Storage Period:
The aforementioned cookies expire after 30 days and do not serve the purpose of personal identification.

Third Country Transfer:
Google processes the data in the US and is subject to the EU_US Privacy Shield
https://www.privacyshield.gov/EU-US-Framework.
Revocation of Consent:
If you do not wish to partake in tracking, you can deny the creation of the required cookie – either via your browser settings, which deactivates the the automatic creation of cookies in general or by setting your browser only to block cookies of the domain “googleleadservices.com”. Please take notice, that you may not delete opt-out cookies, as long as you do not wish the collection of measurement data. Provided you have deleted all cookies of your browser, you have to create the respective opt-ut cookie again.

Provision Required or Prescribed:
The provision of your personal data is voluntary, based on your approval. A denial of access may result in functional impairment of the website.
Application of Google Remarketing
Extent and Purpose of Processing:
This website makes use of the reamarketing function of Google Inc. Operating company of the services of Google Remarketing is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereafter: “Google“). The function serves the purpose to provide visitors within the Google network needs-based advertising. A so called “cookie” is stored in the web browser of the visitor, allowing us to recognise him accessing websites within the Google network. On these websites, we can present advertising that relates to content previously accessed on websites that use the remarketing function.

Legal Basis:
The legal basis for the integration of Google Remarketing and the thereby resulting data transfer to Google is your approval (Art. 6 (1) of the GDPR).

Recipients:
With each access of our website personal data, including your IP address, will be transferred to Google in the US. This personal data will be stored by Google. Google might transmit this data trough the technical process of generating personal data. Our company does not receive any information of Google, trough which the affected person could be identified.

Revocation of Consent:
According to their own statements, Google does not generate personal data in this process. In case you still do not want to make use of the functions of Google Remarketing, you can deactivate them by adjusting the appropriate settings via this link: https://support.google.com/adwordspolicy/answer/143465. Alternatively you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions on this website: http://www.networkadvertising.org/managing/opt_out.asp.

Provision Required or Prescribed:
The provision of your personal data is voluntary, based on your approval. A denial of access may result in functional impairment of the website.
SSL encryption
We use the latest state-of-the-art encryption techniques (i.e. SSL) via HTTPS to protect the security of your data while transmission.
Changes to our privacy statement
We reserve the right to make changes to this privacy statement, in order to comply with the latest legal requirements or to implement changes of our services within the privacy statement, i.e. in case of implementing new services. Upon your next visit the new privacy statement will be in effect.
Questions to the data protection officer
In case you have questions regarding your data protection, write us via E-mail or directly contact the person assigned to data protection in our organisation:
privacy@backyart.com
 
This privacy statement was created using the privacy statement-generator of the activeMind AG (version of 2018-06-15).