Privacy

1. Data Protection at a Glance

General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. For detailed information on data protection, please refer to our privacy policy provided below this text.

Data Collection on This Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the Responsible Party” in this privacy policy.

How Do We Collect Your Data?
Your data is collected partly when you provide it to us. This can include, for example, data you enter into a contact form.

Other data is collected automatically or with your consent when you visit the website through our IT systems. This mainly includes technical data (e.g., internet browser, operating system, or the time of your visit). This data is collected automatically as soon as you enter the website.

What Do We Use Your Data For?
Some of the data is collected to ensure the website is provided error-free. Other data may be used to analyse your user behaviour.

What Rights Do You Have Regarding Your Data?
You have the right at any time to obtain free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent for data processing, you may withdraw this consent at any time for the future. Furthermore, under certain circumstances, you have the right to request the restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.

For this or any other questions regarding data protection, you can contact us at any time.

Analysis Tools and Third-Party Tools
When you visit this website, your browsing behaviour may be statistically analysed. This is primarily done using so-called analysis programmes.

Detailed information about these analysis programmes can be found in the following privacy policy.

2. Hosting and Content Delivery Networks (CDN)

External Hosting
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact information, names, website visits, and other data generated through a website.

The use of the host is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of providing our online services securely, quickly, and efficiently through a professional provider (Art. 6 para. 1 lit. f GDPR). If consent has been obtained, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, as far as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be withdrawn at any time.

Our host will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions regarding these data.

We use the following host:

Closte, LLC
1603 Capitol Ave.
Suite 310 A546
Cheyenne, Wyoming 82001

Order Processing (Data Processing Agreement)
We have concluded a Data Processing Agreement (DPA) with the above provider. This is a contract required under data protection law, ensuring that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Google Cloud CDN
We use the Google Cloud CDN (Content Delivery Network). The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google provides a globally distributed content delivery network. Technically, this means that the transfer of information between your browser and our website is routed through Google’s network. This allows us to improve the worldwide availability and performance of our website.

The use of Google Cloud CDN is based on our legitimate interest in providing our web services as securely and error-free as possible (Art. 6 para. 1 lit. f GDPR).

Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: https://cloud.google.com/terms/eu-model-contract-clause.

Further information about Google Cloud CDN is available here: https://cloud.google.com/cdn/docs/overview?hl=de.

Data Processing Agreement (DPA)
We have concluded a Data Processing Agreement (DPA) with the above provider. This is a contract required under data protection law, ensuring that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General Information and Mandatory Information

Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.

When you use this website, various personal data is collected. Personal data is any information that can be used to personally identify you. This privacy policy explains which data we collect and how we use it. It also explains how and for what purposes this data is processed.

Please note that data transmission over the Internet (e.g., when communicating by e-mail) can have security vulnerabilities. Complete protection of the data from access by third parties is not possible.

Information on the Responsible Party
The responsible party for data processing on this website is:

Beate Lederer and Jürgen Wittmann
Krebsgasse 9A
93047 Regensburg

Phone: +49 941 30 78 79 80
E-Mail: info@agentursixsigma.de

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, e-mail addresses, or similar).

Storage Duration
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted, provided we do not have other legally permissible reasons to retain your personal data (e.g., tax or commercial retention periods); in the latter case, deletion will occur once these reasons no longer apply.

General Information on the Legal Basis for Data Processing on This Website

If you have given consent for data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data according to Art. 9(1) GDPR are processed. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing is also based on § 25(1) TTDSG. Consent can be withdrawn at any time.

If your data is required to fulfil a contract or to carry out pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data if it is necessary to comply with a legal obligation on the basis of Art. 6(1)(c) GDPR. Data processing may also be carried out on the basis of our legitimate interest according to Art. 6(1)(f) GDPR.

The specific legal basis applicable in each individual case is explained in the following sections of this privacy policy.

Data Protection Officer
We have appointed a data protection officer for our company:

Klaus Lang
Mittelweg 3c
D – 93170 Bernhardswald

Phone: +49 9407 813 5291
E-Mail: klaus.lang@conlution.de

Note on Data Transfer to the USA and Other Third Countries

We use, among others, tools from companies based in the USA or other countries that do not provide adequate data protection under EU law. When these tools are active, your personal data may be transferred to and processed in these countries. Please note that these countries do not guarantee a level of data protection comparable to that of the EU.

For example, companies in the USA are required to provide personal data to security authorities without you, as the data subject, being able to legally challenge this. It is therefore possible that US authorities (e.g., intelligence agencies) may process, analyse, and store your data on US servers for surveillance purposes. We have no influence over these processing activities.

Withdrawal of Your Consent to Data Processing

Many data processing activities are only possible with your explicit consent. You can withdraw consent you have previously given at any time. The lawfulness of the data processing carried out up to the point of withdrawal remains unaffected by the withdrawal.

Right to Object to Data Collection in Specific Cases and to Direct Marketing (Art. 21 GDPR)

If the data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right at any time, for reasons arising from your particular situation, to object to the processing of your personal data; this also applies to profiling based on these provisions. The specific legal basis on which processing is carried out can be found in this privacy policy.

If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims (objection under Art. 21(1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object, your personal data will no longer be used for direct marketing purposes (objection under Art. 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of their habitual residence, place of work, or the location of the alleged infringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data that we process automatically on the basis of your consent or to fulfil a contract, and to have it transmitted to yourself or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be carried out to the extent technically feasible.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator, this website uses SSL or TLS encryption. You can recognise a secure connection by the change in the browser address bar from “http://” to “https://” and by the padlock symbol in your browser’s address bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Access, Deletion, and Correction
Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin, recipients, and the purpose of processing, as well as, where applicable, the right to correct or delete this data. For this or any other questions regarding personal data, you can contact us at any time.

Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time to exercise this right. The right to restrict processing applies in the following cases:

• If you dispute the accuracy of your personal data stored with us, we generally need time to verify this. During the verification period, you have the right to request the restriction of the processing of your personal data.

• If the processing of your personal data is or was unlawful, you may request the restriction of processing instead of deletion.

• If we no longer need your personal data, but you require it for the exercise, defence, or assertion of legal claims, you have the right to request the restriction of processing instead of deletion.

  If you have lodged an objection under Art. 21(1) GDPR, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

  Once the processing of your personal data has been restricted, these data may – apart from their storage – only be processed with your consent, for the establishment, exercise, or defence of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

 

4. Data Collection on This Website

Cookies
Our website uses so-called “cookies.” Cookies are small text files and do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Persistent cookies remain on your device until you delete them yourself or they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your device when you visit our website (third-party cookies). These enable us or you to use certain services provided by the third party (e.g., cookies for processing payment services).

Cookies serve different functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or video display). Other cookies are used to analyse user behaviour or to display advertising.

Cookies that are required for the execution of the electronic communication process, to provide certain functions you request (e.g., for the shopping cart function), or to optimise the website (e.g., cookies for measuring web traffic) (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to provide its services in a technically error-free and optimised manner.

If consent for the storage of cookies and similar recognition technologies has been obtained, processing is carried out exclusively on the basis of this consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG); consent can be withdrawn at any time.

You can configure your browser to inform you when cookies are set and to allow cookies only on a case-by-case basis, to block the acceptance of cookies for specific cases or entirely, and to enable automatic deletion of cookies when closing the browser. Please note that disabling cookies may limit the functionality of this website.

If cookies from third-party companies or for analytical purposes are used, we will inform you separately about this in the context of this privacy policy and, where applicable, request your consent.

 

https://privacy.google.com/businesses/controllerterms/mccs/.

Hotjar

We use Hotjar to better understand the needs of our users and to optimise the offerings and experience on this website. Using Hotjar’s technology, we gain a better understanding of our users’ experiences (e.g., how much time users spend on which pages, which links they click, what they like and dislike, etc.), which helps us tailor our offerings based on user feedback.

Hotjar uses cookies and other technologies to collect data about user behaviour and their devices, including:

• IP address of the device (collected and stored in anonymised form only during your website use)

• Screen size

• Device type (Unique Device Identifiers)

• Information about the browser used

• Location (country only)

• Preferred language for displaying our website

Hotjar stores this information on our behalf in a pseudonymised user profile. It is contractually prohibited from selling the data collected on our behalf.

Further information can be found under the “About Hotjar” section on Hotjar’s help page.

IP Anonymisation
We have enabled the IP anonymisation feature on this website. As a result, your IP address is shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area before being transferred to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser in the context of Google Analytics will not be merged with other data from Google.

Ads
The website operator uses Google Ads, an online advertising program from Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display advertisements in the Google search engine or on third-party websites when users enter certain search terms on Google (keyword targeting). Additionally, targeted ads can be displayed based on user data available to Google (e.g., location data and interests) (audience targeting). As the website operator, we can quantitatively evaluate these data, for example, by analyzing which search terms triggered the display of our ads and how many clicks the ads received.

The use of Google Ads is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in marketing its products and services as effectively as possible.

Data transfer to the USA is based on the EU Standard Contractual Clauses. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

---

Google AdSense (Non-Personalized)
This website uses Google AdSense, a service for embedding advertisements. Provider: Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

We use Google AdSense in non-personalized mode. Unlike the personalized mode, ads are not based on your previous user behavior, and no user profile is created. Instead, “contextual information” is used to select ads. For example, ads are chosen based on your location, the content of the website you are visiting, or your current search terms. More information on the difference between personalized and non-personalized AdSense targeting can be found here: https://support.google.com/adsense/answer/9007336.

Please note that even in non-personalized mode, cookies or similar recognition technologies (e.g., device fingerprinting) may be used. According to Google, these are used to prevent fraud and abuse.

The use of AdSense is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in effectively marketing its website. If consent has been obtained, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, as far as consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting). Consent can be revoked at any time.

Data transfer to the USA is based on the EU Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

You may manage your advertising preferences directly in your Google account. To do so, please click the following link and sign in: https://adssettings.google.com/authenticated.

For more detailed information about Google’s advertising technologies and their use of data, please refer to: https://policies.google.com/technologies/ads and https://www.google.de/intl/de/policies/privacy/.

Google Remarketing
This website uses the features of Google Analytics Remarketing. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Remarketing analyses your behaviour on our website (e.g., clicks on specific products) in order to classify you into certain advertising target groups and subsequently display relevant online advertisements to you when visiting other websites (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Remarketing can be linked with Google’s cross-device capabilities. In this way, interest-based, personalised advertisements, which are tailored to you based on your previous usage and browsing behaviour on one device (e.g., mobile phone), can also be displayed on another of your devices (e.g., tablet or PC).

If you have a Google account, you can object to personalised advertising at the following link: https://www.google.com/settings/ads/onweb/.

The use of Google Remarketing is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in optimising the marketing of its products as effectively as possible. Where a corresponding consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be withdrawn at any time.

Further information and Google’s privacy policies can be found in Google’s privacy statement at: https://policies.google.com/technologies/ads?hl=de.

Audience creation using customer data
For audience creation, we use, among other things, Google Remarketing’s customer match. In this process, we provide Google with certain customer data (e.g., email addresses) from our customer lists. If the respective customers are Google users and logged into their Google account, they will be shown relevant advertising messages within the Google network (e.g., on YouTube, Gmail, or in the search engine).

Google Conversion Tracking
This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Conversion Tracking allows Google and us to recognise whether a user has completed certain actions. For example, we can analyse which buttons on our website are clicked most frequently and which products are viewed or purchased most often. This information is used to generate conversion statistics. We learn the total number of users who clicked on our ads and which actions they carried out. We do not receive any information that would allow us to personally identify the user. Google itself uses cookies or similar recognition technologies for identification purposes.

The use of Google Conversion Tracking is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour to optimise both its website offering and its advertising. Where appropriate consent has been obtained, processing occurs solely on the basis of Article 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) in accordance with TTDSG. Consent can be revoked at any time.

More information on Google Conversion Tracking can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

---

Facebook Pixel
This website uses Facebook Pixel to measure visitor conversions. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data collected may also be transferred to the USA and other third countries.

This allows the behaviour of website visitors to be tracked after they have been redirected to the website via a click on a Facebook advertisement. This makes it possible to evaluate the effectiveness of Facebook advertising for statistical and market research purposes and to optimise future advertising campaigns.

The data collected is anonymous for us as the website operator, and we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Facebook, allowing it to be linked to the respective user profile. Facebook may use the data for its own advertising purposes in accordance with the Facebook Data Use Policy. This enables Facebook to display advertisements both on Facebook and outside of Facebook. As the website operator, we have no influence over this use of data.

The use of the Facebook Pixel is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in effective advertising measures, including on social media. Where appropriate consent has been obtained, processing takes place solely on the basis of Article 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) in accordance with TTDSG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Where personal data is collected on our website using the tool described here and transmitted to Facebook, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Article 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transmission to Facebook. The processing carried out by Facebook after transmission is not part of the joint responsibility. The obligations incumbent upon us jointly have been set out in a joint processing agreement. The text of the agreement can be found here: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the privacy information when using the Facebook tool and for ensuring that the tool is implemented on our website in compliance with data protection regulations. Facebook is responsible for the security of Facebook products. Data subject rights (e.g., requests for information) concerning data processed by Facebook can be asserted directly with Facebook. If you assert your rights with us, we are obliged to forward them to Facebook.

Further information on how Facebook protects your privacy can be found in Facebook’s privacy policy: https://de-de.facebook.com/about/privacy/.

You can also disable the remarketing function “Custom Audiences” in the Ads Settings section at: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this.

If you do not have a Facebook account, you can opt out of usage-based advertising from Facebook on websites via the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

---

6. Plugins and Tools

Google Maps
This website uses the Google Maps service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

In order to use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The operator of this website has no influence over this data transfer. When Google Maps is activated, Google may use Google Web Fonts to ensure consistent font display. When accessing Google Maps, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.

The use of Google Maps is in the interest of providing an appealing presentation of our online offerings and making it easier to locate the places listed on our website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. Where appropriate consent has been obtained, processing takes place solely on the basis of Article 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) in accordance with TTDSG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

Further information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

---

ManageWP
We manage this website using the tool ManageWP. The provider is GoDaddy.com WP Europe, Trg republike 5, 11000 Belgrade, Serbia (hereinafter referred to as ManageWP).

With ManageWP, we can, among other things, monitor the security and performance of our website and create automated backups. ManageWP therefore has access to all content on the website, including our databases. ManageWP is hosted on the provider’s servers.

The use of ManageWP is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in operating their website(s) as efficiently and securely as possible. Where appropriate consent has been obtained, processing takes place solely on the basis of Article 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) in accordance with TTDSG. Consent can be revoked at any time.

---

Data Processing Agreement (DPA)
We have concluded a Data Processing Agreement (DPA) with the aforementioned provider. This is a legally required agreement that ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.