Privacy Policy
Limitation of liability for internal content
The content on our pages has been prepared with the greatest care. However, we cannot guarantee that the content is correct, complete, or up to date. Under applicable law, we are responsible for our own content on these pages. In this context, we note that we are not obliged to monitor transmitted or stored third-party information or to investigate circumstances that indicate unlawful activity. Obligations to remove or block the use of information under general law remain unaffected.
Limitation of liability for external links
The operators of external websites are solely responsible for the content of external links. No legal violations were apparent to us at the time the links were created. If we become aware of legal violations, we will remove the relevant link without delay.
Copyright
This website and its content are subject to German copyright law. Unless expressly permitted by law, any exploitation, reproduction, or editing of copyrighted works on this website requires our prior consent. Individual reproductions of a work are permitted only for private use and may not directly or indirectly serve commercial purposes. Unauthorized use of copyrighted works is punishable by law. All trademarks belong to their respective owners.
I. Introduction
The Grunwald team is happy to answer questions about the use of personal data in connection with our online offering. The relevant contact details can be found in the legal notice. Protecting your privacy and your data is important to us. We collect, store, and use your data only in accordance with Regulation (EU) 2016/679 (GDPR) and applicable national data protection laws. This privacy policy explains how, to what extent, and for what purposes personal data is processed when you use our online offering, insofar as we decide alone or jointly with third parties engaged by us on the purposes and means of processing.
II. What is personal data?
Personal data is information relating to an identified or identifiable person. This includes, in particular, information about your identity, such as your name, email address, or postal address. Information that cannot be linked to you personally, such as statistical values, is not personal data within the meaning of the GDPR. We store and process your data only to the extent required and permitted. Under Article 4 No. 2 GDPR, processing means any operation performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or another form of making available, alignment or combination, restriction, erasure, or destruction.
III. Legal bases for data processing
Where we obtain your consent to process personal data, Article 6(1)(a) GDPR serves as the legal basis. Where processing is necessary for the performance of a contract with you, Article 6(1)(b) GDPR serves as the legal basis. Where we process your data to comply with a legal obligation, Article 6(1)(c) GDPR applies. Reference is also made to the other legal bases in Article 6(1) GDPR. If processing is necessary to protect legitimate interests of the controller or a third party under Article 6(1)(f) GDPR, you have the right under Article 21 GDPR to object to further processing of the data concerning you.
IV. Processing of personal data
Storing and processing your data is necessary for the use of our online offering. This takes place exclusively on servers within the European Union. We have taken the necessary technical and organizational measures to protect your data against destruction, access, loss, alteration, or distribution by unauthorized third parties. This includes, in particular, encrypting your data during transmission over the internet using SSL. Only a limited group of authorized persons has access to your data. Nevertheless, we note that absolute protection is not possible and that data transmission over the internet always involves residual risk.
V. Disclosure of personal data to third parties
As a rule, we use your data solely to provide the service you request. In doing so, it may be necessary to disclose your data to third parties, such as financial service providers for transaction processing or analytics providers. Your data will not be disclosed without your explicit consent unless we are legally obliged to do so or required by an authority or court order.
VI. Deletion of your personal data
In accordance with our legal obligations, we generally delete your data as soon as the purpose for which it was stored no longer applies. Further storage may take place if we are subject to statutory retention or documentation obligations. In that case, your data will be deleted without delay once the relevant period has expired.
VII. Processing of server data
When you use our online offering, your internet browser transmits server log files to us or to our hosting provider. These contain, among other things, your IP address, operating system, browser type and version, the website from which you accessed our site, the pages visited, the date and time of access, and status and transferred data volume. Your IP address is stored only for the duration of use and is then deleted or anonymized. It is not combined with other personal data. Processing serves only technical purposes, in particular error analysis and optimization of our offering.
VIII. Use of cookies
When you use our online offering, cookies are used. Cookies are small text files stored on your device. They contain settings and data for exchange with our online offering. Information such as your IP address and browser may also be stored. These data can be used to create user profiles, for example to adapt our offering to your language settings. This improves usability and security. Session cookies are usually deleted when you close your browser, but some cookies may be stored for longer. We may also use third-party cookies for advertising, analytics, or functional purposes. You can prevent or restrict cookies, or delete cookies already stored, through your browser settings. Please note that disabling cookies may restrict website functionality.
IX. Third-party cookies and newsletter
Our online offering may also use third-party cookies. The third-party providers we use include Google Analytics, Google AdWords, Mapbox API, Mailchimp, and Hotjar.
Google Analytics is a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, which we use for statistical analysis. Information generated by cookies is generally transferred to and stored on Google servers in the United States. According to Google, your IP address is not combined with other data collected by Google. Further information on terms of use and privacy is available at google.com/analytics/terms.
Hotjar is an analytics service provided by Hotjar Ltd, 3 Elia Zammit Street, St Julian’s STJ 1000, Malta, which we use to analyze user behavior. Further information is available at hotjar.com/legal/policies/privacy.
Mailchimp is a newsletter and analytics service provided by The Rocket Science Group, LLC, Atlanta, GA, USA, which we use to send and analyze newsletters. The Rocket Science Group guarantees compliance with EU data protection requirements. Further information on privacy is available at mailchimp.com/legal/privacy. You receive our newsletter only if you register for it and explicitly consent. You can unsubscribe at any time.