Privacy policy

Below we explain how we handle your personal data

Details of the controller

The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Medicover Genetics GmbH
Teltowkanalstr. 1b,
12247 Berlin-Steglitz
Germany

Telephone: +49 30 77001-177
E-mail:

Details of the data protection officer (DPO)

We have appointed as data protection officer:

activeMind.legal Rechtsanwaltsgesellschaft m. b. H.
Potsdamer Straße 3
80802 München

E-Mail:

Rights of data subjects

Your rights as a data subject

You can exercise the following rights at any time using the contact details provided:

Information about your data stored by us and its processing activity (Art. 15 GDPR)
Rectification of inaccurate personal data (Art. 16 GDPR)
Deletion of your data stored by us (Art. 17 GDPR)
Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR)
Objection to the processing activity of your data with us (Art. 21 GDPR)
Data portability, provided that you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR)

If you have given us your consent, you can revoke it at any time with effect for the future. You can lodge a complaint with a supervisory authority at any time, e.g. with the competent supervisory authority in your place of residence or with the authority responsible for us as the controller.

You can find a list of supervisory authorities (for the non-public sector) with addresses at:

Processing activities

Contact form

Type and purpose of processing activity:
A contact form is available on our website, which can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.

The following data is also stored at the time the message is sent:

Date and time of the enquiry
Name and Surname
Email address
Phone
Country
Company/Institution
Message

It is also possible to contact us via the e-mail addresses provided on the website. In this case, the user’s personal data transmitted with the e-mail will be stored. This includes the date and time the e-mail was sent, e-mail address, IP addresses and information on the servers involved in the e-mail communication.

You can also contact us via the telephone number provided. In this case, we collect log data that includes your telephone number and the duration of the call.

Regardless of the type of communication selected, we collect the content of your enquiry. Your data will be stored for the purpose of personalised communication with you.

Legal basis:
The processing activity of the data entered in the contact form is based on a legitimate interest (Art. 6 (1) (f) GDPR). Our legitimate interest in the processing activity of your data is to enable you to contact us in an uncomplicated manner.

If you contact us to request a quote, the data entered in the contact form will be processed for the implementation of pre-contractual measures (Art. 6 (1) (b) GDPR).

Recipients:
Recipients of the data may be technical service providers who act as data processors for the operation and maintenance of our website.

In addition, the contact form on our website is technically connected to the Salesforce CRM system (Salesforce, Inc., Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA). Salesforce is used to manage and follow up on enquiries, leads, and customer communication. Data entered in the contact forms is automatically transferred to Salesforce for this purpose.

Legal basis: The processing activity is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in efficient enquiry and lead management, and – where enquiries relate to pre-contractual measures – on Art. 6 para. 1 lit. b GDPR.

Third country transfer: Data may be transferred to Salesforce servers in the USA. Salesforce has implemented EU Standard Contractual Clauses and Binding Corporate Rules to ensure an appropriate level of data protection.

Further information on Salesforce’s data protection practices can be found here:

Storage period:
Data will be deleted no later than 6 months after the enquiry has been processed.

If there is a contractual relationship, we are subject to the statutory retention periods. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

Mandatory or required provision:
The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with the required data and the reason for the enquiry.

Objection:
Please read the information on your right to object in accordance with Art. 21 GDPR below.

Use of ALTCHA Captcha

Nature and purpose of processing: To protect our forms against misuse and automated access, we use the open-source CAPTCHA solution ALTCHA (ALTCHA.org). The tool works without tracking or storing personal data. ALTCHA generates a small cryptographic challenge that your browser must solve before form submission. This ensures that the form is submitted by a human and not by a bot.

Legal basis: The use of ALTCHA is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in ensuring the security and stability of our website.

Recipients: No personal data is transferred to third parties.

Third country transfer: Does not take place.

Storage period: No personal data is stored.

Collection of general information when visiting our website (Server log files)

Type and purpose of processing:
When you access our website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar.

It is processed in particular for the following purposes:

Ensuring a smooth connection to the website
Ensuring the smooth use of our website
Ensuring and evaluating system security and stability, in particular for the detection of misuse
Ensuring the technically error-free presentation and optimisation of our website

We do not use your data to draw conclusions about your person. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

Legal basis and legitimate interest:
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website as well as ensuring system security and detecting misuse.

Recipients:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Third country transfer:
There is no data transfer to a third country.

Storage period:
Data is stored in server log files in a form that enables the identification of the data subjects for a maximum period of 7 days, unless a security-relevant event occurs (e.g. a DDoS attack). In the event of such an incident, server log files are stored until the security-relevant incident has been resolved and fully clarified.

Provision prescribed or required:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

Objection:
Please read the information on your right to object in accordance with Art. 21 GDPR below.

Tracking and analysis tools

A cookie is a small data record that is created when a website is visited and stored temporarily on the website user’s system. If the server of this website is called up again by the user of the website, the browser of the user of the website sends the previously received cookie back to the server. The server can analyse the information received through this process. In particular, cookies can make it easier to navigate a website.

Deleting cookies:
You can delete individual cookies or the entire cookie inventory. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you will find the necessary information under the following links:

Mozilla Firefox:
Internet Explorer:
Google Chrome:
Opera:
Safari:

You can also prevent scripts from loading by default. NoScript only allows JavaScript, Java and other plugins to be executed on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox: ).

Technically necessary cookies

Type and purpose of processing:
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.

An overview of the cookies used can be found below.

Legal basis and legitimate interest: In this respect, data processing is carried out solely on the basis of our legitimate interest in a user-friendly design of our website and in the documentation of consent in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with a balancing of interests in accordance with § 25 para. 2 TDDDG (German Telecommunications-Telemedia Data Protection Act).

Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

We use the consent management platform Consentmanager GmbH to obtain, manage and document your consent in accordance with the law. Further information on the processing of data by consentmanager GmbH can be found here:

Storage period: The data is deleted after 30 days.

Provision prescribed or required: The provision of the aforementioned personal data is not required by law or contract. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

Objection: Please read the information on your right to object under Art. 21 GDPR below.

Technically not necessary cookies

Type and purpose of processing: We also use cookies that enable us to analyse the surfing behaviour of users. These cookies are used to make the use of the website more efficient and attractive.

Detailed information on the subject of cookies and which cookies are used on this website (after consent) and information can be found in the cookie settings.

Legal basis: The storage of information on your end device or access to information that is already stored in the end device is voluntary, solely on the basis of your consent in accordance with Section 25 (1) TDDDG (German Telecommunications-Telemedia Data Protection Act). If personal data is also processed, the provision of your data is also voluntary, solely on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website. Further recipients can be found in the cookie settings.

Third country transfer: For information on this, please refer to the cookie settings.

Storage duration: Please refer to the cookie settings for information on this.

Mandatory or required provision: The provision of your data is voluntary, solely on the basis of your consent. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

Withdrawal of consent: You can revoke your consent for the future in the cookie settings.

Profiling: Web analysis tools can be used to evaluate the behaviour of visitors to the website and analyse their interests. We create a pseudonymised user profile for this purpose.

Use of Google Analytics 4

Nature and purpose of processing: If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Google Analytics uses cookies to help the website analyze how users use the site. The information collected is usually transferred to a Google server in the USA and stored there.

During your visit to our website, your user behavior is recorded in the form of so-called events, such as:

Page views
Start of a session
Length of stay
User engagement
First visit to a website
Scrolls (when a visitor scrolls 90% to the bottom of the page)
Clicks on external links
Ads viewed or clicked on
Internal searches
Interaction with video content
Downloads
Language settings

The following information is also recorded:

Your approximate location (region)
Your IP address (in abbreviated form)
Technical information such as browser, internet provider, end device and screen resolution
Source of origin (referrer URL) of your visit (i.e. via which website or advertising medium you came to us)

Further information on terms of use and data protection can be found at and at .

Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The data sent by us and linked to cookies, user identifiers (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month.

Legal basis: The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

Recipients: We use technical service providers for the operation and maintenance of our website and for the evaluation of cookies, who act as our processors. Other recipients of the data are Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.

Third country transfer: As Google’s headquarters are in the USA, it cannot be ruled out that the data will be processed on Google’s servers in the USA. As a result, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you having any legal recourse. To ensure an appropriate level of data protection, we have concluded EU standard contractual clauses with Google, which can be viewed here:

Storage duration: The recorded data is stored together with the randomly generated user ID to enable the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form indefinitely.

Withdrawal of consent: You can revoke your consent for the future at any time in the cookie settings.

You can also prevent tracking by Google Analytics on our website by opting out regarding the unnecessary cookies set by our website. This will prevent the collection by Google Analytics for this website and for this browser in the future as long as the cookie remains installed in your browser.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: Browser Add On to deactivate Google Analytics.

Google Tag Manager

This website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a solution that enables us to manage tags used for tracking and marketing via a single interface. It allows us to quickly deploy and update JavaScript and HTML tags on our website. The Google Tag Manager tool, which implements these tags, does not set any cookies and does not collect any personal data. Rather, it is only used to manage other services, such as Google Analytics. These services may themselves collect data.

You can find more information about this on the following website:

Microsoft Clarity

Nature and purpose of processing: On our website, we use the web analysis tool Microsoft Clarity from the American service provider Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. For the European region, the Irish company headquarters Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland is responsible for data protection aspects.

Microsoft Clarity is a tool with which we check the user-friendliness of our website based on a statistical behavioral analysis of the users of our website. Microsoft Clarity records selected user sessions for this purpose. The tool provides measured values that indicate possible problems with user-friendliness. This enables us to better understand user interaction, identify usability problems more quickly and improve the functionality of our website.

The data that Microsoft Clarity processes from the users of our website is as follows:

IP address
Your location
Browser information
Screen resolution
Language settings
Visited website/subpages
Date/time of access to the website
Clicks, scrolls, mouse movements

We have made appropriate masking settings so that the personal user data collected by Microsoft is pseudonymized, in particular in the form of IP masking. If you are logged in via a Microsoft account, the data collected can be linked to your account so that Microsoft also recognizes and stores your IP address, for example. You can prevent this by logging out of your Microsoft account before visiting our website.

Further information on data processing by Microsoft can be found in Microsoft’s privacy policy:

If you would like to find out more about Microsoft Clarity, please read the FAQs at:

Legal basis: The data is processed on the basis of the user’s consent, Art. 6 para. 1 lit. a GDPR.

Recipients: We have concluded an order processing contract with Microsoft Ireland Operations Limited as the recipient of your data, Art. 28 GDPR.

Third country transfer: Data processing in the USA as a third country is possible. In order to guarantee the level of data protection, Microsoft has concluded the EU standard contractual clauses. Further information about the standard contractual clauses at Microsoft can be found at:

Storage period: Please refer to the following link for the storage duration of cookies:

Provision prescribed or required: The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

Withdrawal of consent: You can withdraw your consent at any time with effect for the future. You can deactivate your consent for the relevant cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool.

Meta Ads Pixel

Nature and purpose of processing: Meta Ads Pixel processes personal data to track user behavior on websites and analyze their interactions with ads. It collects information such as page views, purchases, and form submissions to measure the effectiveness of advertising campaigns. This data is used to deliver targeted ads and increase ad relevance for individual users. Additionally, the processing serves to optimize campaigns and create audiences for remarketing purposes.

Legal basis: The data is processed on the basis of the user’s consent, Art. 6 para. 1 lit. a GDPR.

Recipients: The recipient of the data is Meta Platforms Ireland Limited. The parent company Meta Platforms Inc. is based in the USA, which means that a transfer to the USA cannot be ruled out.

Third country transfer: The data collected may be transferred to the following third countries: USA. The following data protection guarantees are in place: Adequacy decision.

Storage period: Data is only processed in this context for as long as the corresponding consent is available. After that, it will be deleted.

Google Ads Pixel

Nature and purpose of processing: Google Ads Pixel processes personal data to track user interactions on websites after they click on ads. It collects information such as page visits, purchases, and other conversions to measure the effectiveness of advertising campaigns. This data is used to optimize ad targeting, ensuring that ads are shown to relevant audiences. Additionally, the processing helps in creating custom audiences for remarketing and refining ad strategies based on user behavior.

Legal basis: The data is processed on the basis of the user’s consent, Art. 6 para. 1 lit. a GDPR.

Recipients: Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) is the recipient. Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.

Third country transfer: The data collected may be transferred to the following third countries: USA. The following data protection guarantees are in place: Adequacy decision.

Storage period: Data is only processed in this context for as long as the corresponding consent is available. After that, it will be deleted.

LinkedIn Insight Tag

Nature and purpose of processing: This website uses the “LinkedIn Insight Tag” from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The LinkedIn Insight Tag enables the collection of data about visits to our website, including the URL, referrer, IP address, device and browser characteristics, and timestamp. This data is used to track conversions, retarget website visitors, and gain additional insights into LinkedIn members’ interactions with our ads. All data is encrypted and anonymized within seven days. The anonymized data is deleted within 90 days.

Legal basis: The processing of data is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Recipients: The data may be transferred to LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA.

Third country transfer: A transfer to the USA cannot be excluded. LinkedIn uses EU Standard Contractual Clauses to ensure an adequate level of data protection.

Storage period: Personal data is pseudonymized within seven days and deleted within 90 days.

Withdrawal of consent: You can withdraw your consent at any time with effect for the future in the cookie settings. Further information on data processing by LinkedIn can be found here:

Social Media

Medicover Genetics is represented in various social networks. For information on the storage and use of your data as well as your rights and options for settings to protect your privacy, please refer to the data protection information of the respective network operator:

Facebook and Instagram

Medicover Genetics is represented on the social networks Facebook and Instagram. These platforms are provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. We maintain these Facebook/Instagram pages in order to inform users, interested parties and customers about our services.

We cannot rule out the possibility that a transfer to a third country, e.g. to servers located in the USA, may take place when our company pages are accessed on these social networks. We would also like to point out that, as the operator of a Facebook/Instagram fan page, we are jointly responsible with Meta for processing the personal data of visitors to the page (Art. 26 GDPR). We have concluded corresponding contracts with Meta for this purpose.

Meta recognizes the shared responsibility for the Insights data with the operators of the pages and assumes primary responsibility, here:

If you have a Facebook/Instagram profile and are logged in, Meta can, for example, analyze your usage behavior and create a usage profile corresponding to your usage behavior. This user data is regularly processed for market research and (personalized) advertising purposes.

The processing of the data is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

If you wish to assert requests for information or your user rights, you can assert these rights against us or Meta. Further information regarding the collection and use of data as well as your rights and protection options can be found under and .

Medicover Genetics maintains a corporate presence on LinkedIn. This is located on a platform operated by LinkedIn Unlimited Company, Wilton Place, Dublin 2, Ireland.

On our site, we provide information and offer users the opportunity to communicate. The company page is used for job applications and information/PR.

When you visit our LinkedIn company page, follow our page or engage with our page, LinkedIn processes personal data to provide us with statistics and insights in anonymized form. This gives us insights into the types of actions that visitors take on our site (so-called page insights). In particular, LinkedIn processes data that you have already provided to LinkedIn via the information in your profile. In addition, LinkedIn will process information about how you interact with our LinkedIn company page, e.g. whether you are a follower of our LinkedIn company page. Personal data is not transmitted to us by LinkedIn. It is also not possible for us to draw conclusions about individual members using the information from the page insights.

This processing of personal data in the context of Page Insights is carried out by LinkedIn and us as joint controllers. We have entered into an agreement with LinkedIn on processing as joint controllers, which sets out the distribution of data protection obligations between us and LinkedIn. The agreement is available at the following . Under this agreement, LinkedIn is responsible for responding to requests from data subjects. To do so, you can or reach LinkedIn using the contact details in the privacy policy.

The processing of the data is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which you have given to LinkedIn as part of your registration.

You can find more information on data processing by LinkedIn in .

We cannot rule out the possibility that a transfer to a third country, e.g. to servers located in the USA, may take place when you visit our LinkedIn page. Your visit to our website may therefore be tracked by LinkedIn.

We use the technical platform and the services of the social network Pinterest. The contact details of the platform provider are:

Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland,

We use Pinterest to promote our products/services and to engage with our customers. In this context, your personal data will be processed to personalize content, generate user statistics, and analyze the use of our pins.

The processing of your personal data is based on the legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Our legitimate interest exists exclusively for marketing purposes such as better accessibility of target groups, increasing visibility, image building, user information and employer branding.

We would like to point out that you use the Pinterest channel offered by us and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, commenting). We have no influence on the type and scope of the data processed by Pinterest.

Pinterest processes your voluntarily entered data and, if applicable, evaluates content shared or viewed by you. Information about what data is processed by Pinterest and for what purposes is available can be found in the Pinterest privacy policy:

Pinterest stores and processes certain data about you – so-called log data. This includes information about your browser, your IP address, the address of our website and the activities performed on it (e.g. when you click on the “Bookmark” or “Pin” button), search histories, date and time of the request, as well as cookie and device data. When you interact with an embedded Pinterest feature, cookies may also be set in your browser that store various data. In most cases, the log data mentioned above, default language settings, and clickstream data are stored in cookies. By clickstream data, Pinterest means information about your website behavior.

If you have a Pinterest account and are logged in, the data collected through our website may be added to your account and used for advertising purposes. When you interact with our embedded Pinterest features, you are usually redirected to the Pinterest page.

Your personal data will only be stored as long as necessary to fulfill the purposes outlined above or as required by statutory retention obligations.

Your data may be transmitted to Pinterest Inc. It cannot be ruled out that the data may also be transferred to countries outside the European Union. Pinterest has taken appropriate measures to ensure an adequate level of data protection.

TikTok

You can access our page on the international video portal for music videos and short video clips of the service provider “TikTok” via a simple link from our website. TikTok is operated by the Chinese company ByteDance. For the European region, TikTok is provided by TikTok Technology Limited (registered office 10 Earlsfort Terrace, Dublin, D02 T380, Ireland) and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom).

We maintain this site in order to inform users, interested parties and customers about our services.

We have no influence on data collection and further processing by TikTok. Furthermore, it is not clear to us to what extent, where and for how long the data is stored, to what extent TikTok complies with existing deletion obligations, which evaluations and links are made with the data and to whom the data is passed on.

If you have a TikTok profile and are logged in, TikTok may collect and process more information about you, e.g. analyze your usage behavior and create a usage profile corresponding to your usage behavior.

If you wish to assert requests for information or your user rights, you can assert these rights against us or TikTok.

Further information regarding the collection and use of data as well as your rights and protection options can be found at and .

Insofar as TikTok transfers data to third countries without an adequacy decision by the EU Commission, TikTok refers to the use of standard contractual clauses to ensure adequate protection of the data of EU citizens. We would like to point out that this data transfer may be associated with a risk for the data subjects, as they can neither influence the processing or storage of their personal data nor fully enforce the rights guaranteed in the GDPR as a data subject with regard to this data processing.

Further information on the transfer of personal data to third countries by TikTok can be found at:

You can obtain a copy of the standard contractual clauses and the further guarantees in the event of a third country transfer by contacting us using the contact details provided in the “Contact us” section below.

Your personal data will only be stored as long as necessary to fulfill the purposes outlined above or as required by statutory retention obligations.

The provision of your personal data is voluntary. However, if you do not provide certain data, the functionality of TikTok or specific services we offer through TikTok may be limited.

Please read the information on your right to object in accordance with Art. 21 GDPR in this privacy policy.

You can withdraw this consent at any time with effect for the future.

YouTube

We maintain a company profile on YouTube to provide videos. The operator is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “YouTube”). This is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). When you access YouTube, a connection to the YouTube or Google servers is established. Depending on the settings, various data is transmitted (e.g., your IP address). If a YouTube video is started, the provider sets cookies that store your IP address and URL, for example.

If you are logged into your Google or YouTube account, YouTube can assign your surfing behaviour to you personally. If you are not logged into a Google or YouTube account, less data will be stored. Nevertheless, Google stores data with a unique identifier that is linked to your device, browser, or app.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy.

The recipient of the data is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.

As Google is headquartered in the USA, it cannot be ruled out that the data will be processed on Google servers in the USA. There are standard contractual clauses of the European Commission with Google.

YouTube retains your personal data until you close your account. YouTube may also store certain data beyond this time in an anonymous form.

The provision of your personal data is neither legally nor contractually required. However, you will not be able to interact with us or our content on YouTube without providing your personal data.

Data security – TLS encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. TLS) via HTTPS.

Accessibility tool Eye-Able

Nature and purpose of processing: We use the accessibility tool Eye-Able®, developed by Web Inclusion GmbH, Am Bahndamm 1, 97342 Marktsteft, Germany. Eye-Able enables website visitors to adapt the design and presentation of the website according to their individual needs (e.g. larger font, higher contrast, text-to-speech). To provide these functions, Eye-Able stores user settings locally in the browser (local storage). No personal data is transmitted to the provider.

Legal basis: The processing is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in making our website accessible and user-friendly.

Recipients: None.

Third country transfer: Does not take place.

Storage period: Settings are stored locally in the browser until deleted by the user.

Information about your right to object in accordance with Art. 21 GDPR

Right to object on a case-by-case basis

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Art. 6 (1) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Recipients of an objection

The objection can be made informally with the subject “Objection”, stating your name, address or other identifying features, to:

E-Mail:

Changes to our privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions about data protection

If you have any questions about data protection, please send us an e-mail:

Version 1.0: 30.09.2025