Logo
Data Protection

Privacy Policy


1. Introduction

The following information is intended to provide you, as a ‘data subject’, with an overview of how we process your personal data and your rights under data protection legislation. In principle, it is possible to use our website without providing any personal data. However, if you wish to make use of specific services offered by our company via our website, the processing of personal data may be necessary. Where the processing of personal data is necessary and there is no legal basis for such processing, we will generally seek your consent.

The processing of personal data, such as your name, address or email address, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to the “3C Gruppe”. The purpose of this privacy policy is to inform you about the scope and purpose of the personal data we collect, use and process.

As the data controller, we have implemented numerous technical and organisational measures to ensure the most comprehensive possible protection of the personal data processed via this website. Nevertheless, internet-based data transmissions may, in principle, be subject to security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, you are free to provide us with personal data via alternative channels, such as by telephone or post.


Information on other data processing activities 

As a company, we process personal data not only on our website but also in many other processes. In order to provide you, as a data subject, with as much detailed information as possible regarding these processing purposes, we have compiled the following information on the processing activities listed below, thereby fulfilling our statutory information obligations under Articles 13–14 of the GDPR: 

Data protection information on the handling of applicant data
Data protection information on video surveillance
Data protection information for contacts

Should you require further information that you cannot find here or in the detailed privacy policy below, please do not hesitate to contact our Data Protection Officer in confidence.  
 


2. Data controller

The data controller within the meaning of the GDPR is:

3C Holding GmbH
Am Jägerheim 1c
33378 Rheda-Wiedenbrück, Germany

Telephone: +49 5242 9309-910
Email: info@remove-this.3c-grupperemove-this..remove-this.de

Representatives of the data controller: Carl-Christoph Held, Markus Kemming
 


3. Data Protection Officer

You can contact the Data Protection Officer as follows:

Telephone: +49 5221 87292-0
Email: datenschutz-3c-gruppe@remove-this.audatisremove-this..remove-this.de

You may contact our Data Protection Officer directly at any time with any questions or suggestions regarding data protection.
 


4. Definitions

This privacy policy is based on the terminology used by the European legislators and regulators when enacting the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easy to read and understand for the general public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.

In this privacy policy, we use the following terms, amongst others:


1. Personal data

Personal data is any information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more specific characteristics that reflect the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.


2. Data subject

A data subject is any identified or identifiable natural person whose personal data is processed by the data controller (our company).


3. Processing

Processing means any operation or set of operations which is carried out on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution or any other form of making available, the matching or linking, the restriction, erasure or destruction.


4. Restriction of processing

Restriction of processing means the marking of stored personal data with the aim of restricting its future processing.


5. Profiling

Profiling is any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements of that natural person.


6. Pseudonymisation

Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures that ensure the personal data is not attributed to an identified or identifiable natural person.


7. Data processor

A data processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.


8. Recipient

A recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, irrespective of whether or not they are a third party. However, public authorities which may receive personal data in the course of a specific investigation mandate under Union law or the law of the Member States shall not be regarded as recipients.


9. Third party

A third party is a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor.


10. Consent

Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes, by a statement or by a clear affirmative action, by which the data subject indicates that they agree to the processing of personal data relating to them.
  
 

5. Legal basis for processing

Article 6(1)(a) of the GDPR (in conjunction with Section 25(1) of the TDDDG (formerly the TTDSG)) serves as the legal basis for our company’s processing operations where we obtain consent for a specific processing purpose. 

If the processing of personal data is necessary for the performance of a contract to which you are a party – as is the case, for example, with processing operations required for the delivery of goods or the provision of any other service or consideration – the processing is based on Article 6(1)(b) of the GDPR. The same applies to processing operations necessary for the implementation of pre-contractual measures, such as in the case of enquiries regarding our products or services.

Where our company is subject to a legal obligation which necessitates the processing of personal data, such as to fulfil tax obligations, the processing is based on Article 6(1)(c) of the GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were to be injured on our premises and their name, age, health insurance details or other vital information subsequently had to be disclosed to a doctor, a hospital or other third parties. In such cases, the processing would be based on Article 6(1)(d) of the GDPR.

Finally, processing operations may be based on Article 6(1)(f) of the GDPR. This legal basis applies to processing operations not covered by any of the aforementioned legal bases, where the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not take precedence. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this regard, the legislator took the view that a legitimate interest might be presumed if you are a customer of our company (Recital 47, second sentence, of the GDPR).

Our services are generally aimed at adults. Persons under the age of 16 must not provide us with any personal data without the consent of their parents or legal guardians. We do not request, collect or pass on any personal data from children or young people to third parties.
 

6. Contact and disclosure of data to third parties


6.1 Contact

Personal data is collected when you contact us (e.g. by email). This data is stored and used exclusively for the purpose of responding to your enquiry or for establishing contact and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) of the GDPR. If your enquiry is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. Your data will be deleted once your enquiry has been fully processed; this is the case when it is clear from the circumstances that the matter in question has been conclusively resolved and there are no statutory retention obligations preventing its deletion.


6.2 Transfer of data to third parties

Your personal data will not be transferred to third parties for purposes other than those listed below.

We will only disclose your personal data to third parties if:

1. you have given us your explicit consent to do so in accordance with Article 6(1)(a) of the GDPR,

2. the disclosure is permitted under Article 6(1)(f) of the GDPR to safeguard our legitimate interests and there is no reason to believe that you have an overriding legitimate interest in the non-disclosure of your data,

3. there is a legal obligation to disclose the data under Article 6(1)(c) of the GDPR, and

4. this is permitted by law and is necessary, in accordance with Article 6(1)(b) of the GDPR, for the performance of contractual relationships with you.

As part of the processing operations described in this privacy policy, personal data may be transferred to the USA. Companies in the USA are deemed to provide an adequate level of data protection only if they have obtained certification under the EU-US Data Privacy Framework and the EU Commission’s adequacy decision pursuant to Article 45 of the GDPR therefore applies. We have explicitly stated this in the privacy policy for the service providers concerned. To protect your data in all other cases, we have entered into data processing agreements based on the European Commission’s Standard Contractual Clauses. Where the Standard Contractual Clauses are insufficient to ensure an adequate level of security, your consent pursuant to Article 49(1)(a) of the GDPR may serve as the legal basis for the transfer to third countries. This does not apply, however, to data transfers to third countries for which the European Commission has issued an adequacy decision in accordance with Article 45 of the GDPR.
 


7. Technology


7.1 SSL/TLS encryption

This website uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login details or contact enquiries, which you send to us as the operator. You can recognise an encrypted connection by the fact that the browser’s address bar displays “https://” instead of “http://”, and by the padlock icon in your browser’s address bar.

We use this technology to protect the data you send to us.


7.2 Data collection when visiting the website

When you use our website purely for information purposes – i.e. without registering or otherwise transmitting information to us – we only collect the data that your browser transmits to our server (in so-called “server log files”). Our website collects a range of general data and information each time you or an automated system accesses a page. This general data and information is stored in the server’s log files. The following may be collected:

1. the browser types and versions used,

2. the operating system used by the accessing system,

3. the website from which an accessing system reaches our website (known as a ‘referrer’),

4. the sub-pages on our website accessed via an accessing system,

5. the date and time of access to the website,

6. an Internet Protocol address (IP address) and,

7. the internet service provider of the accessing system.
 

We do not draw any conclusions about your identity from the use of this general data and information. Rather, this information is required in order to

1. deliver the content of our website correctly,

2. optimise the content of our website and the advertising displayed on it,

3. ensure the continued functionality of our IT systems and the technology underpinning our website, and

4. to provide law enforcement agencies with the information necessary for criminal prosecution in the event of a cyber attack.
 

We therefore analyse this collected data and information, on the one hand, for statistical purposes and, on the other, with the aim of enhancing data protection and data security within our organisation, ultimately to ensure an optimal level of protection for the personal data we process. The data from the server log files is stored separately from any personal data provided by a data subject.

The legal basis for data processing is Article 6(1), first sentence, point (f) of the GDPR. Our legitimate interest arises from the purposes of data collection listed above.
 


7.3 Hosting by Hetzner

We host our website with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (hereinafter referred to as ‘Hetzner’).

When you visit our website, your personal data (e.g. IP addresses in log files) is processed on Hetzner’s servers.

The use of Hetzner is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in ensuring that our website is displayed, provided and secured as reliably as possible.

We have entered into a data processing agreement (DPA) with Hetzner in accordance with Article 28 of the GDPR. This is a contract required under data protection law, which ensures that Hetzner processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Further information on Hetzner’s data protection policy can be found at: https://www.hetzner.com/de/rechtliches/datenschutz
 


8. Cookies


8.1 General information on cookies

Cookies are small files that your browser creates automatically and which are stored on your IT system (laptop, tablet, smartphone, etc.) when you visit our website.

The cookie stores information relating to the specific device you are using. However, this does not mean that we thereby gain direct knowledge of your identity.

The use of cookies serves to make your experience of our website more convenient. For example, we use so-called session cookies to recognise that you have already visited individual pages on our website. These are automatically deleted when you leave our site.

In addition, to optimise user-friendliness, we also use temporary cookies which are stored on your device for a specific, predetermined period. If you visit our site again to use our services, the system will automatically recognise that you have previously visited us and recall the details and settings you have entered, so that you do not have to enter them again.

We also use cookies to collect statistical data on the use of our website and to analyse our offering for the purpose of optimisation. These cookies enable us to automatically recognise that you have previously visited our website when you return. The cookies set in this way are automatically deleted after a defined period. The respective storage periods for the cookies can be found in the settings of the consent tool used.
 

8.2 Legal basis for the use of cookies

The data processed by the cookies, which is required for the website to function properly, is therefore necessary to safeguard our legitimate interests and those of third parties in accordance with Article 6(1)(f) of the GDPR.

For all other cookies, you have given your consent via our opt-in cookie banner in accordance with Article 6(1)(a) of the GDPR.
 

8.3 Cookiebot (Consent Management Tool) 

We use the ‘Cookiebot’ consent management tool provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. This service enables us to obtain and manage website visitors’ consent to data processing. 

Cookiebot collects data generated by end users who use our website. When an end user gives their consent via the cookie consent tool, Cookiebot automatically logs the following data: 

  • The end user’s IP address in anonymised form (the last three digits are set to 0)
  • The date and time of consent.
  • The user agent of the end user’s browser.
  • The URL from which the consent was sent.
  • An anonymous, random and encrypted key.
  • The end user’s consent status, which serves as proof of consent. 
     

The key and consent status are also stored in the end user’s browser in the ‘CookieConsent’ cookie, so that the website can automatically read and honour the end user’s consent for all subsequent page requests and future end-user sessions for up to 12 months. The key is used to provide proof of consent and to verify whether the consent status stored in the end user’s browser remains unchanged compared to the original consent submitted to Cybot. 

The functionality of the website cannot be guaranteed without this processing. The “CookieConsent” cookie set by Cookiebot is classified as necessary. 

Cybot is the recipient of your personal data and acts as a data processor on our behalf. 

Detailed information on the use of Cookiebot can be found at: https://www.cookiebot.com/de/privacy-policy/.
 

9. Our activities on social media

To enable us to communicate with you on social media and keep you informed about our services, we maintain our own pages on these platforms. When you visit one of our social media pages, we are jointly responsible with the provider of the respective social media platform for the processing operations triggered thereby, within the meaning of Article 26 of the GDPR.

We are not the original provider of these pages, but merely use them within the scope of the options offered to us by the respective providers.

We therefore wish to point out, as a precaution, that your data may also be processed outside the European Union or the European Economic Area. Using these platforms may therefore entail data protection risks for you, as it may be difficult to safeguard your rights – for example, to access, erasure, objection, etc., may be more difficult, and processing on social networks is often carried out directly by the providers for advertising purposes or to analyse user behaviour, without us being able to influence this. Where the provider creates user profiles, cookies are often used, or your usage behaviour is linked to the member profile you have created on the social media platforms.

The processing of personal data described above is carried out in accordance with Article 6(1)(f) of the GDPR, based on our legitimate interest and the legitimate interest of the respective provider, in order to be able to communicate with you in a contemporary manner or to inform you about our services. If, as a user, you are required to give your consent to data processing with the respective providers, the legal basis is Article 6(1)(a) of the GDPR in conjunction with Article 7 of the GDPR.

As we do not have access to the providers’ data sets, we would like to point out that the best way to exercise your rights (e.g. the right to access, rectification, erasure, etc.) is to contact the relevant provider directly. We have provided further information on the processing of your data on social media platforms below, for each social media provider we use:

9.1 Facebook

(Joint) data controller in Europe:

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Privacy Policy (Data Policy):

https://www.facebook.com/about/privacy
 

9.2 Instagram

(Joint) data controller in Germany:

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Privacy Policy (Data Policy):

https://instagram.com/legal/privacy/
 

9.3 Pinterest

(Joint) data controller:

Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA.

Privacy Policy:

https://policy.pinterest.com/de/privacy-policy  
 

9.4 YouTube

(Joint) data controller in Europe:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Privacy Policy:

https://policies.google.com/privacy
 

10. Web analytics

10.1 Meta Pixel (formerly Facebook Pixel)

This website uses the “Facebook Pixel” provided by Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Meta”). Where express consent has been given, this allows the behaviour of users to be tracked after they have viewed or clicked on a Facebook advert. This process is used to evaluate the effectiveness of Facebook adverts for statistical and market research purposes and may help to optimise future advertising campaigns.

The data collected is anonymous to us and therefore does not allow us to draw any conclusions about the identity of users. However, the data is stored and processed by Meta, meaning a link to the relevant user profile is possible and Meta may use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy (https://www.facebook.com/about/privacy/). This enables Meta and its partners to display adverts on and off Facebook. A cookie may also be stored on your computer for these purposes.

These processing operations take place exclusively upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

This US company is certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 of the GDPR is therefore in place, meaning that personal data may be transferred even without further safeguards or additional measures.
 

10.2 Google Analytics 4 (GA4)

On our websites, we use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

In this context, pseudonymised user profiles are created and cookies (see the section on ‘Cookies’) are used. The information generated by the cookie regarding your use of this website may include, amongst other things:

  • temporary recording of the IP address without permanent storage
  • location data
  • browser type/version
  • operating system used
  • Referrer URL (previously visited page)
  • Time of the server request
     

The pseudonymised data may be transferred by Google to a server in the USA and stored there.

The information is used to analyse the use of the website, to compile reports on website activity and to provide other services relating to website and internet usage for the purposes of market research and the needs-based design of these web pages. This information may also be transferred to third parties where required by law or where third parties process this data on Google’s behalf. Under no circumstances will your IP address be merged with other data held by Google.

These processing operations take place exclusively upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

The parent company, Google LLC, is a US company certified under the EU-US Data Privacy Framework. An adequacy decision in accordance with Article 45 of the GDPR is in place, meaning that personal data may be transferred even without further safeguards or additional measures.

Further information on data protection when using GA4 can be found at: https://support.google.com/analytics/answer/12017362?hl=de.
 

10.3 Google Analytics 4 (GA4) – Additional information on Consent Mode, simple implementation 

Under the Digital Markets Act, Google is obliged to obtain users’ consent before processing user data for personalised advertising. Google complies with this requirement through ‘Consent Mode’. Users are obliged to implement this and thereby demonstrate that they have obtained the consent of website visitors. 

Google offers two implementation modes: the simple and the advanced implementation. 

We use the simple implementation method of Google Consent Mode. Only if you give your consent to the use of Google Analytics (see above) will a connection to Google be established, a Google code be executed and the processing described above be carried out. If you refuse to give your consent, Google will simply receive a notification that consent has not been given. The Google code will not be executed and no Google Analytics cookies will be set.
 

10.4 Pinterest Tag

This website uses the Pinterest tag operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

The Pinterest tag is a piece of code that has been embedded on our website. The use of the Pinterest tag enables Pinterest to track visitors’ behaviour on our website and collect data about their activities. This data may be used to carry out targeted advertising campaigns on Pinterest. We also collect information about conversions. This means that Pinterest provides us with data on how many visitors actually visit our website as a result of our Pinterest adverts.

Upon giving your explicit consent, cookies are set via the Pinterest tag and information is transmitted to Pinterest in hashed form. The tag collects information such as:

  • device information,
  • operating system,
  • IP address,
  • behaviour on the relevant website.
     

In the case of conversions, we do not normally process any personal data, as we are unable to link the hashed version of your Pinterest ID to you as an individual; only Pinterest can do this. Nor do we receive any information about you, such as your name, age, etc.

These processing operations take place exclusively upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

Further information on Pinterest’s privacy policy can be found at: https://policy.pinterest.com/de/privacy-policy.
 

11. Advertising

11.1 Cooperation with our subsidiaries for advertising purposes

In order to pursue the legitimate interests of the 3C Gruppe in accordance with Article 6(1)(f) of the GDPR, in optimising the advertising and sales presence of our head office and our subsidiaries, it may be necessary for us to share certain personal data within the 3C Gruppe. This applies in particular to contact details, information about your interests and your customer profile, as well as your use of our products and services.
 

12. Partner and affiliate programmes

12.1 DoubleClick

On sub-pages where YouTube videos are embedded, components from DoubleClick by Google are also loaded. DoubleClick is a brand of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), under which specialised online marketing solutions are marketed to advertising agencies and publishers.

DoubleClick by Google transmits data to the DoubleClick server with every impression, as well as with clicks or other activities. Each of these data transmissions triggers a cookie request to your browser. If the browser accepts this request, DoubleClick sets a cookie on your IT system. The purpose of the cookie is to optimise and display advertising. Among other things, the cookie is used to serve and display adverts relevant to the user, as well as to generate reports on advertising campaigns or to improve them. Furthermore, the cookie serves to prevent the same advert from being displayed multiple times.

DoubleClick uses a cookie ID, which is required to carry out the technical process. The cookie ID is needed, for example, to display an advert in a browser. DoubleClick can also use the cookie ID to track which adverts have already been displayed in a browser, in order to prevent duplicate displays. Furthermore, the cookie ID enables DoubleClick to track conversions.

A DoubleClick cookie does not contain any personal data. However, a DoubleClick cookie may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns with which you have already come into contact.

Each time you visit one of the individual pages of this website, which is operated by us and on which a DoubleClick component has been integrated, the internet browser on your IT system is prompted by the respective DoubleClick component to transmit data to Google for the purposes of online advertising.  Among other things, Google can track which specific links you have clicked on our website.

These processing operations take place exclusively upon the granting of express consent in accordance with Article 6(1)(a) of the GDPR.

The parent company, Google LLC, is a US company certified under the EU-US Data Privacy Framework. An adequacy decision in accordance with Article 45 of the GDPR is therefore in place, meaning that personal data may be transferred even without further safeguards or additional measures.

You can view the privacy policy for DoubleClick by Google at: https://www.google.com/intl/de/policies/.
 

13. Plugins and other services

13.1 Google Maps 

We use Google Maps (API) on our website. Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies, headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps is a web service for displaying interactive (land) maps to present geographical information visually. By using this service, for example, our location can be displayed and it may be easier for you to find your way here. 

As soon as you access any subpages on which the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to Google’s servers in the USA and stored there, provided you have given your consent within the meaning of Article 6(1)(a) of the GDPR. In addition, Google Maps loads Google Web Fonts, Google Photos and Google Stats. These services are also provided by Google Ireland Limited. When you visit a page that embeds Google Maps, your browser loads the web fonts and photos required to display Google Maps into your browser cache. For this purpose, too, the browser you are using establishes a connection to Google’s servers. As a result, Google becomes aware that our website has been accessed via your IP address. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish your data to be associated with your Google profile, you must log out of your Google user account. Google stores your data (even for users who are not logged in) as usage profiles and analyses them. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google. 

If you do not consent to your data being transmitted to Google in future when using Google Maps, you also have the option of completely disabling the Google Maps web service by disabling JavaScript in your browser. Google Maps, and consequently the map display on this website, will then no longer be available for use. 

These processing operations take place exclusively upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR. 

You can view Google’s Terms of Service at https://www.google.de/intl/de/policies/terms/regional.html; the additional Terms of Service for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html.  

The parent company, Google LLC, is a US company certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 of the GDPR is in place, meaning that personal data may be transferred even without further safeguards or additional measures. 

You can view the Google Maps privacy policy at: (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/.   
 

13.2 Google Tag Manager

We use the Google Tag Manager service on this website. The operator of Google Tag Manager is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies, headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This tool allows ‘website tags’ (i.e. keywords embedded in HTML elements) to be implemented and managed via a user interface. By using Google Tag Manager, we can automatically track which button, link or personalised image you have actively clicked on and can then determine which content on our website is of particular interest to you.

The tool also triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If you have disabled tracking at domain or cookie level, this setting will apply to all tracking tags implemented using Google Tag Manager.

These processing operations take place exclusively upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

The parent company, Google LLC, is a US company certified under the EU-US Data Privacy Framework. An adequacy decision in accordance with Article 45 of the GDPR is therefore in place, meaning that personal data may be transferred even without further safeguards or additional measures.

Further information on Google Tag Manager and Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.
 

13.3 YouTube (videos)

We have integrated YouTube components into this website. YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

YouTube is an online video portal that enables video publishers to upload video clips free of charge and allows other users to view, rate and comment on them, also free of charge. YouTube permits the publication of all types of videos, which is why complete films and television programmes, as well as music videos, trailers and user-generated videos, are available via the internet portal. Each time a user accesses one of the individual pages of this website, which is operated by us and on which a YouTube component (YouTube video) has been integrated, the web browser on your IT system is automatically prompted by the respective YouTube component to download a representation of the relevant YouTube component from YouTube. In addition, the services Google WebFonts, Google Video, YouTube Images and Google Photos may be loaded from YouTube. Further information on YouTube can be found at https://www.youtube.com/howyoutubeworks/. As part of this technical process, YouTube and Google are informed of which specific subpage of our website you are visiting.

If you are logged in to YouTube at the same time, YouTube will recognise which specific subpage of our website you are visiting when you access a subpage containing a YouTube video. This information is collected by YouTube and Google and associated with your YouTube account.

YouTube and Google always receive information via the YouTube component that you have visited our website whenever you are logged into YouTube at the same time as accessing our website; this occurs regardless of whether you click on a YouTube video or not. If you do not wish for this information to be transmitted to YouTube and Google, you can prevent this by logging out of your YouTube account before visiting our website.

These processing operations take place exclusively upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

The parent company, Google LLC, is a US company certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 of the GDPR is in place, meaning that personal data may be transferred without the need for further safeguards or additional measures.

You can view YouTube’s privacy policy at https://www.google.de/intl/de/policies/privacy/.
 

14. Your rights as a data subject

14.1 Right to confirmation

You have the right to request confirmation from us as to whether personal data relating to you is being processed.
 

14.2 Right of access – Article 15 of the GDPR

You have the right to obtain from us, free of charge, information at any time regarding the personal data we hold about you, as well as a copy of this data in accordance with the statutory provisions.
 

14.3 Right to rectification (Article 16 of the GDPR)

You have the right to request the rectification of any inaccurate personal data concerning you. Furthermore, you have the right to request the completion of any incomplete personal data, taking into account the purposes of the processing.
 

14.4 Erasure (Article 17 of the GDPR)

You have the right to request that we erase personal data concerning you without undue delay, provided that one of the grounds laid down by law applies and in so far as the processing or storage is not necessary.
 

14.5 Restriction of processing (Article 18 of the GDPR)

You have the right to request that we restrict the processing of your personal data if one of the legal conditions is met.
 

14.6 Data portability (Article 20 of the GDPR)

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller to whom the personal data has been provided, without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you have the right to have the personal data transmitted directly from one controller to another, provided this is technically feasible and does not adversely affect the rights and freedoms of others.
 

14.7 Objection – Article 21 of the GDPR

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) (data processing in the public interest) or (f) (data processing based on a balancing of interests) of the GDPR.

This also applies to profiling based on these provisions within the meaning of Article 4(4) of the GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves to establish, exercise or defend legal claims.

In certain cases, we process personal data for the purposes of direct marketing. You may object at any time to the processing of your personal data for the purposes of such marketing. This also applies to profiling insofar as it is related to such direct marketing. If you object to us processing your personal data for direct marketing purposes, we will no longer process your personal data for these purposes.

Furthermore, you have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you which we carry out for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

You are free, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.
 

14.8 Withdrawal of consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time with future effect.
 

14.9 Lodging a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority responsible for data protection regarding our processing of personal data.
 

15. Routine storage, erasure and blocking of personal data

We process and store your personal data only for the period necessary to fulfil the purpose of storage or insofar as this is required by the legal provisions to which our company is subject.

If the purpose of storage ceases to apply or a prescribed retention period expires, the personal data will be blocked or deleted routinely and in accordance with statutory provisions.
 

16. Duration of storage of personal data

The criterion for the duration of the storage of personal data is the relevant statutory retention period. Once this period has expired, the relevant data is routinely deleted, provided it is no longer required for the performance of a contract or for entering into a contract.
 

17. Validity and amendments to the privacy policy

This Privacy Policy is currently valid and is dated December 2024.

Due to the ongoing development of our website and services, or as a result of changes to statutory or regulatory requirements, it may become necessary to amend this Privacy Policy. You can access and print the current version of the Privacy Policy at any time from our website at https://www.3c-gruppe.de/datenschutz//.

This privacy policy was created with the assistance of the data protection software: audatis MANAGER.


 

Privacy settings

We use cookies and other technologies on our website.

These are stored on your device or in your browser and read, amongst other things, personal data such as your IP address or other unique identifiers.

Strictly necessary cookies and similar technologies (hereinafter collectively referred to as “cookies”) ensure the basic functions of the website and are used without consent. All other cookies are optional. By clicking on ‘Accept All’, you give your consent to the categories ‘Functional’, ‘Marketing’, ‘Facebook’ and ‘Pinterest’ and thereby also consent to the processing of your data.

You can find further information about the use of your data by clicking on ‘Customise’ in this cookie banner.

You can give your consent to entire categories or, by clicking on “Settings”, view further information and select only specific cookies.

You can adjust your settings at any time and withdraw your consent by clicking on ‘Cookie Settings’ in the website footer.

Here you will find our Privacy Policy and Legal Notice
 
Cookies are small text files used by websites to make the user experience more efficient. 

By law, we are permitted to store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we require your permission. 

This site uses various types of cookies. Some cookies are set by third parties that appear on our pages.

You can change or withdraw your consent at any time via the cookie policy on our website.

Find out more in our privacy policy about who we are, how you can contact us and how we process personal data.

 

Cookie Consent Manager CCM19

Cookies: ccm_consent
Used to store cookie consent – specifying which cookies may be set. The status of your cookie settings can be set on your behalf. The data is stored in categories.
 

Pinterest   

Pinterest Inc.    

Cookies: _pinterest_cm, _pinterest_sess, _pin_unauth, _pinterest_ct_ua, sessionFunnelEventLogged, _routing_id, _derived_epik, _epik, _pinterest_ct_rt, _pinterest_ct und _pinterest_ct_rt,

_pinterest_ct_rt is created when a user visits an advertiser’s website on which the Pinterest tag has been installed. This is the only conditional cookie. For ‘ct.pinterest.com’ to generate the ‘_pinterest_ct_rt’ cookie, the ‘_pinterest_sess’ cookie must be present.



Meta Pixel    

Meta Platforms Ireland Ltd.    

Cookies: _fbp, act, c_user, datr, fr, m_pixel_ration, pl, presence, sb, spin, wd, xs, AA003, ATN, lastExternalReferrer, lastExternalReferrerTime,

This is a tracking technology provided by Facebook and also used by other Facebook services. It is used to track visitors’ interactions with the website (‘events’) after they have clicked on adverts displayed on Facebook or other services offered by Meta (‘conversions’).



Google Analytics

Google Ireland Limited
    
Cookies: _ga, _gid, _gat_gtag_*, _gac_*, _gat*, _dc_gtm_*, IDE, AMP_TOKEN, __utma, __utmt*, __utmb, __utmc, __utmz, __utmv, __utmx, __utm*, _swag_ga_ga*, __utmd, __utmo, __gads, _gd*, _ga_*, _gcl_gb,

Google Analytics is a web analytics tool that helps website owners understand and analyse user interactions on their website. It collects data on website visits, including information on how users arrive at a website (e.g. via search engines, social media or directly), how they navigate the website, which pages they visit and how long they spend on those pages. This information is then presented in various reports that provide insights into user behaviour and enable website operators to optimise their website and improve the user experience. The data is also used for personalisation and the effective targeting of adverts.


YouTube Video

Google Ireland Limited

This cookie stores your preferences and other information, including your preferred language, the number of search results you wish to display on the page, and whether you wish to enable Google’s SafeSearch filter.

Cookies: PREF, VISITOR_INFO1_LIVE, use_hitbox, YSC, yt-remote-cast-available, yt-remote-cast-installed, yt-remote-connected-devices, yt-remote-device-id, yt-remote-fast-check-period, yt-remote-session-app, yt-remote-session-name, VISITOR_PRIVACY_METADATA, __Secure-ROLLOUT_TOKEN, #-#, iU5q-!O9@$, LAST_RESULT_ENTRY_KEY, nextId, yt.innertube::nextId, requests, TESTCOOKIESENABLED, yt.innertube::requests, ytidb::LAST_RESULT_ENTRY_KEY, YtIdbMeta#databases, remote_sid, ServiceWorkerLogsDatabase#SWHealthLog, __sak, yt-player-bandaid-host, yt-player-bandwith, yt-player-headers-readable, DEVICE_INFO, _Secure-YEC, __Secure-YNID