Register for free

Register for free and view interesting profiles.

Questions? Call us: 0049 (0)40 / 87976140 | Mon., Wed. + Fri. 10:00 - 14:00h, Tue. + Thu. 14:00 - 18:00h | info@granny-aupair.com

Privacy Policy

Privacy Policy

Privacy Policy

This Privacy Policy is issued by The Glimmer Community GmbH (hereinafter “we” or “us”) to inform you about the processing of your personal data (hereinafter also referred to as “Data”) when you visit our website (www.granny-aupair.com) and use our services.

You will also be informed of the rights available to you. Data protection is of great importance to us, and we naturally comply with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Our website and our services are not directed at children under the age of 16.

If you do not understand any of the terms used in this Privacy Policy, please refer to the explanations under “Glossary of Data Protection Terms” (Section V) below. If you have any questions about data protection, you are also welcome to contact us informally using the contact details set out below.

The party responsible for the data processing is:

Until 31 July 2026:

Granny Aupair Michaela Hansen e.K.
Osterstraße 58 (Haus der Zukunft)
20259 Hamburg
Email: info@granny-aupair.com

As of 1 August 2026:

The Glimmer Community GmbH
Bippener Straße 23
49626 Berge
Email: info@granny-aupair.com

Important Information Regarding the Change of Operator on 1 August 2026:

The agency operating the platform www.granny-aupair.com and the associated communication channels will be transferred by Granny Aupair Michaela Hansen e.K. to The Glimmer Community GmbH on 1 August 2026. The Glimmer Community GmbH will continue the existing contracts and services. To this end, it is necessary to transfer your existing user account, together with the personal data linked to it, to the new operator. The transfer will take place in strict compliance with all applicable data protection provisions. The legal bases for the transfer of data are as follows:

  • for all users with an existing contract: the necessity for the continued performance of the contract (Article 6(1)(b) GDPR).
  • for all other users: the legitimate interest of the previous and new operators in the uninterrupted and efficient continuation of Granny Aupair (Article 6(1)(f) GDPR).

in each case in conjunction with Article 9(2)(3) GDPR, insofar as special categories of personal data pursuant to Article 9(1) GDPR are affected (e.g. information on illnesses or disabilities).

You may object to the transfer of your data in writing until 31 July 2026, by clicking the corresponding link in the information email, or by email to info@granny-aupair.com. If you do not object, your account, together with the associated data, will be transferred to the new operator on the effective date and will continue to be available to you there as usual. In the event of an objection, your user account and the associated data will be deleted, unless a retention obligation applies.

I. Data Processing in Connection with Your Visit to Our Website

In connection with your visit to our website, we process personal data about you. This takes place for the purposes and to the extent described below. We only pass on your data to third parties as described below.

1. Provision of Our Website and Services

When you visit our website, we automatically collect and process data about you in order to provide our website and the services offered through it. In doing so, we collect and process the following data about you to provide our website:

  • Date and time of your access
  • Your IP address
  • The website from which you came to us
  • The websites you access from our site
  • Information about your internet browser (browser type and version)
  • The operating system of the device you use to access our website and services
  • Your internet service provider

For security reasons, we store this information in log files and delete it after 14 days; however, it remains in Host Europe’s backups for a further week. The data contained in the log files is stored separately from your other data.

Longer storage takes place only in individual cases (e.g. in the event of suspected misuse or fraud). In such cases, the relevant log files are retained until the matter has been clarified and any resulting necessary measures have been concluded.

In order to provide you with our website and the services offered through it, we engage service providers who process the data you provide under this Privacy Policy exclusively on our behalf and in accordance with our instructions (so-called processors within the meaning of Article 28 GDPR) and who have implemented appropriate technical and organisational measures to protect your rights. These include:

For hosting the website, including related services:

  • Host Europe GmbH, Hansestrasse 111, 51149 Cologne

The legal basis for processing your data for the provision of our website and services is a balancing of interests (Article 6(1)(f) GDPR). We have a legitimate interest in processing your data so that we can offer you our website and the services provided through it in a technically flawless and secure manner, tailored to your needs. Server log file data is stored separately from other data.

2. Use of Cookies and Similar Technologies

When you visit our website, we also collect and use data about you so that you can use our website and services more conveniently, and to measure and improve the effectiveness of our marketing activities. In doing so, we also use so-called cookies and cookie-like technologies such as pixel tags (i.e. small transparent graphics, also known as web beacons). Cookies are small text files stored on your device via your internet browser. Further information on the concept and functioning of cookies, as well as on other data protection and technical terms, can be found below under “Glossary of Data Protection Terms” (Section V).

We also permit our partners to use these technologies on our website in order to track your browsing behaviour. In doing so, we generally use the most privacy-friendly option available, for instance by pseudonymising or anonymising your data as early as possible.

The use of technically essential cookies (“essential cookies”) is based on Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). The storage of information on the user’s device, or access to information already stored, for analysis, statistics or marketing purposes (as described below in this Policy for individual services) takes place exclusively on the basis of your prior, active consent pursuant to Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR. You may adjust or fully withdraw any consent given, with effect for the future, at any time via our consent management tool (cookie banner) under “Privacy Settings” on our website.

You may also disable the use of cookies entirely in your browser settings. However, without the use of cookies, some functions of this website may not work, or may not work as intended, for you.

For more information on the use of cookies, please refer to the relevant section of this Privacy Policy where cookie use is discussed.

3. Use of Our Newsletter

On our website, you can subscribe to a free newsletter containing promotional information, provided you have expressly consented to receive it. To prevent misuse, you will first receive an email containing a confirmation link, which you must activate in order to receive the actual newsletter (so-called double opt-in procedure).

When registering for the newsletter, your email address, IP address, and the date and time of your registration are transmitted to us and stored and processed by us. Your data is used exclusively to document your consent to receive the newsletter and to send it. Your data is not disclosed to third parties.

The legal basis for processing your data is your consent pursuant to Article 6(1)(a) GDPR.

For sending our newsletter, we engage the following service provider, which processes your data exclusively on our behalf and in accordance with our instructions (so-called processor within the meaning of Article 28 GDPR) and which has implemented appropriate technical and organisational measures to protect your rights.

This is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. Its privacy policy is available here: https://www.cleverreach.com/de/datenschutz.

This service helps us determine, through the integration of pixel tags into the newsletter, on a pseudonymised basis, how many recipients have opened our newsletter and which links contained in it have been clicked. This takes place on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in analysing the opening behaviour of our newsletters in order to optimise our services and to operate them economically. If you do not agree with this, please do not open our newsletter in HTML format and do not click on any links contained within it.

Your data is stored for as long as we continue to send you the newsletter on a regular basis. Should we cease sending you the newsletter, we will delete your data no later than 2 months after the last newsletter was sent to you. Your IP address is deleted 7 days after registration.

Please note that you may unsubscribe from the newsletter at any time by sending us an email to redaktion@granny-aupair.com or by clicking the unsubscribe link contained in every newsletter.

4. Registration and Use of Our Granny-Aupair Community

To use our service (the Granny-Aupair Community), you have the option of creating a user account with us, setting up a profile, and using it.

Registration

As part of the free registration process, you are required to provide a username, an email address, and information regarding the purpose for which you are registering (as a Granny, as a Family, or as someone seeking a particular service).

Creating a Profile

After registering your user account, you have the option to create a profile. This allows you to be seen by other Granny-Aupair users and to see other users. In doing so, we collect and store various information about you. You may change your information in your user account at any time.

If you complete a profile as a Granny, the data requested includes in particular:

  • Name, address and contact details, and information about you (gender, date of birth, country of origin, telephone number, foreign language skills, occupation)
  • Information on previous activities, marital status, experience with children, driving licence, smoking habits, health restrictions, and information on your dietary habits
  • Information on your desired placement (start date and duration, family circumstances, expectations)
  • Information on payment and type of membership

If you complete a profile as a Family, the data requested includes in particular:

  • Name, address and contact details, and information about you (gender, date of birth, country of origin, telephone number, foreign language skills, occupation)
  • Information about your family (number and ages of children in the household, wish to have (more) children, information on childcare arrangements, marital status, information on the type and severity of any disabilities)
  • Information on your everyday life and that of your family (languages spoken, particular lifestyle circumstances, smoking habits, pets, household help, interests and hobbies, information on your daily routine)
  • Information about your home (country, city, information on your living situation)
  • Information on the kind of Granny you are looking for (start date and duration, expectations and offers to the Granny)
  • Information on payment and type of membership

As part of creating your profile, you also have the option of uploading a profile picture and specifying whether it is visible to other users or not.

Visibility to Other Users

All information you provide in your profile, with the exception of your contact details, is publicly visible to other registered users as soon as, and for as long as, you have activated your profile and taken out a paid membership. Your contact details (address, telephone, email) only become visible to other users once you have separately confirmed a contact request from another user.

Usage Data

We additionally collect and store your IP address and your usage activity for a period of 14 days in order to prevent misuse and unauthorised use of your user account.

Purposes and Legal Bases for Data Processing

We use all data you provide in connection with registering for and using our Granny-Aupair Community exclusively for the purpose of providing our matchmaking services.

The legal basis for processing data we collect from you as part of a query marked as a mandatory field is the performance of the contract existing between us, or the taking of pre-contractual measures (Article 6(1)(b) GDPR).

The legal basis for processing any information you may provide regarding racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as biometric data, health data, or data concerning sex life or sexual orientation, is your voluntary consent (Article 6(1)(a) and Article 9(2)(a) GDPR) and the fact that you have made this information public (Article 9(2)(e) GDPR). This information is not required in order to use our Granny-Aupair Community.

The legal basis for processing all other data you provide, in particular data not collected via a mandatory field, as well as your usage data, is a balancing of interests (Article 6(1)(f) GDPR). Our interest in this regard lies in enabling the most convenient, informative and secure use of the Granny-Aupair Community for you.

Deletion of Your Data

You may delete your user account, including your data, at any time. Data stored in connection with the registration and use of your user account will be deleted within 48 hours of you notifying us of your wish to delete your user account. This does not apply to data that must be retained for commercial or tax law reasons. We store such data on the basis of Article 6(1)(c) of the General Data Protection Regulation and delete it upon expiry of the statutory retention period.

Should you fail to log into your user account for more than 5 years, we will notify you of the impending deletion of your data due to inactivity and will delete the data unless you wish to keep your user account.

Use of Cookies

As part of registration and profile creation, we use session cookies to store your profile content and persistent cookies to store your login status.

5. Order Processing for Paid Memberships

If you decide to take out a paid membership, we also process your data in order to carry out order and payment processing.

In doing so, we process your name, your address and contact details, as well as contract-related and payment data you have provided (bank details, PayPal data). The legal basis for this is the performance of the contract existing between us, or the taking of pre-contractual measures (Article 6(1)(b) GDPR). Data is disclosed to third parties for payment processing purposes to payment service providers, as well as, to the extent legally permissible, to authorities and advisors.

Deletion takes place once this data is no longer required and the relevant retention obligations under commercial or tax law (six or ten years, as applicable) have been fulfilled. Until then, Article 6(1)(c) GDPR constitutes the legal basis for its storage.

6. Integration of Third-Party Content (“Comfort”)

We have integrated third-party content at various points on our website. This includes, for example, videos, map services, images or fonts. In connection with the integration of this content, it is technically necessary for your IP address to be disclosed to the third-party providers concerned so that the content can be displayed to you. We do not store your IP address in connection with the integration of third-party content.

Using your IP address and the use of cookies and other technologies (e.g. pixel tags, i.e. invisible graphics), third-party providers may be able to track your browsing behaviour and, in doing so, process further technical information alongside your IP address (including browser type/version, operating system used, the page you visited previously, the host name of the accessing device, and the time, as well as further information relating to the use of our online services).

You can activate this content via the “Comfort” category in the cookie banner settings. The legal basis for processing your data is your consent (Article 6(1)(a) GDPR).

For a more detailed description of whose content we embed and how your data is processed in doing so, please see the relevant description of the embedded content below:

Insofar as data is transferred to the USA in this context, such transfer is based on the EU-US Data Privacy Framework (DPF), as well as the EU Standard Contractual Clauses.

7. Use of Web Analytics Services (“Statistics”)

When you visit our website, we automatically collect and process data in order to determine and evaluate visitor behaviour on our website.

You can activate this analysis via the “Statistics” category in the cookie banner settings. The legal basis for processing your data is your consent (Article 6(1)(a) GDPR). This helps us in particular to optimise our website and to determine whether the online advertising we place achieves the results we intend.

Google Analytics

For analysis purposes, we use the web analytics service Google Analytics (with IP masking), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. As our processor pursuant to Article 28 GDPR, Google provides us with reports on a pseudonymised basis, which we use to display and evaluate activity on our website.

In doing so, provided you consent, Google Analytics cookies are stored on the device you use to visit our website. By calling up individual pages of this website, data is transmitted to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data relating to you, in particular information on browser type/version, operating system used, the page you visited previously, the host name of the accessing device, IP address, and the time of the request, which Google uses, among other things, to trace the origin of visitors and clicks. The legal basis for processing your data is your consent (Article 6(1)(a) GDPR). This data is not merged with any other data about you. In addition, we use the function whereby your internet connection’s IP address is automatically shortened by Google and thereby anonymised. In exceptional cases where personal data is nevertheless transferred to the USA, a country that does not have a level of data protection equivalent to the European standard, this takes place on the basis of the EU-US Data Privacy Framework (DPF), as well as, additionally, on the basis of the European Commission’s current Standard Contractual Clauses.

Any personal data held by Google Analytics is deleted after a period of 26 months.

Further information and Google’s applicable data protection provisions are available at https://marketingplatform.google.com/about/analytics/terms/de/.

8. Use of Social Plugins (“Comfort”)

When a page of our website containing such a social plugin is accessed, a direct connection is established between your internet browser and the systems of the social plugin provider, provided you have activated this via the “Statistics” category in the cookie banner settings. The legal basis for processing your data is your consent (Article 6(1)(a) GDPR).

The content of the social plugin is transmitted directly from the respective social plugin provider to your internet browser and integrated into our website. At the same time, the social plugins transmit to the respective social plugin providers the information that you have accessed the corresponding page of our online presence. This applies regardless of whether you have a profile with the social plugin provider, are logged in to the social plugin provider, or have actively used a social plugin (e.g. by clicking the “Like” button or by leaving a comment).

When actively using a social plugin, the relevant information is transmitted directly from your internet browser to the respective social plugin provider and stored there. As soon as you are simultaneously logged in to one of the social plugin providers, that provider can associate your visit to our website with your account there. We have no influence over the type and scope of the data collected and transmitted. Details on the scope and purpose of the data collection, processing and use can be found in the privacy notices of the social plugin providers. You can also view your rights and options for protecting your privacy there.

If you do not wish the social plugin providers to associate the data collected during your visit to our website with your account, we recommend that you log out of the social plugin providers before visiting our website.

Facebook

The social plugins of the Facebook social network are operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (www.facebook.com), and Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland (www.facebook.de) (“Facebook”). An overview of Facebook’s plugins is available at: http://developers.facebook.com/docs/plugins; information on data protection at Facebook is available at: www.facebook.com/policy.php

Insofar as personal data is transferred to the USA, this takes place on the basis of the EU-US Data Privacy Framework (DPF), as well as, additionally, on the basis of the European Commission’s current Standard Contractual Clauses.

If you wish to object to the collection of data by Facebook for the future, you can do so here: https://www.facebook.com/settings?tab=ads

II. Data Processing in Connection with Our Online Presences

In addition to our website, we also maintain a presence on online platforms and social networks. If you visit these online presences and communicate with us through them, the relevant terms of use and privacy policies (see below) apply, in addition to this Privacy Policy. In this respect, we may be jointly responsible with the provider under data protection law.

Your data may be processed for analysis and advertising purposes in this context. This occurs, for example, through the creation of usage profiles based on your usage behaviour and the interests derived from it. Cookies are typically used to store these usage profiles, enabling analysis of your usage behaviour and interests. Usage profiles are generally used to display advertisements, either through the relevant provider or elsewhere on the internet, that correspond to your interests. In addition, other data may also be stored in connection with usage profiles, particularly if you are a registered user of the relevant provider’s platform and are logged in there. For a detailed description of the processing carried out by the respective providers and the available opt-out options, please refer to the linked information provided by the providers below.

If you visit our online presence and communicate through it, the resulting data processing takes place on the basis of your consent (Article 6(1)(a) GDPR), provided you have given it. Otherwise, data processing, in particular communication with us, takes place on the basis of legitimate interests (Article 6(1)(f) GDPR). In this respect, our interest lies in being able to offer you an online presence that is as informative, tailored to you, and appealing as possible.

We will delete your data (in particular the content of our communications) once it is no longer required for the relevant purpose and to the extent this is possible for us. You have the rights set out under “Your Rights” (see below) both against us and against the provider. Since access to your data is in part only possible for the relevant provider, you should, in any case, also assert your rights against that provider.

Facebook

Facebook (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (www.facebook.com), and Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland (www.facebook.de)) enables us, on our fan pages, using the Facebook Insights function – which forms a non-waivable part of the terms of use – to obtain anonymised data about you. This data is collected using cookies, each of which contains a unique user code. The user code can be linked to your Facebook login details if you are registered with Facebook, and is collected and processed when the fan page is accessed.

Information on data protection at Facebook is available here: https://www.facebook.com/about/privacy/

If you wish to object to the collection of data by Facebook for the future, you can do so here: https://www.facebook.com/settings?tab=ads

Insofar as personal data is transferred to the USA, this takes place on the basis of the EU-US Data Privacy Framework (DPF), as well as, additionally, on the basis of the European Commission’s current Standard Contractual Clauses.

Instagram

Instagram (a service provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) enables us, on our Instagram business profile, using the “Instagram Insights” function, to obtain anonymised statistical data about visitors to our profile and their interactions with our content. This data is collected by Meta, among other things, using cookies. If you are registered and logged in to Instagram, Meta may associate the data collected with your personal user account.

We have entered into an agreement with Meta on joint controllership pursuant to Article 26 GDPR, which provides that Meta assumes primary responsibility for processing this Insights data and for fulfilling data subject rights.

Information on data protection at Instagram and Meta can be found in the privacy policy at: https://privacycenter.instagram.com/policy or https://instagram.com/about/legal/privacy/

If you wish to object to the collection of data by Meta for the future, or to adjust your advertising preferences, you can do so directly in your Instagram account settings, or by using the advertising settings at https://www.facebook.com/settings?tab=ads.

Insofar as data is transferred to the USA, this takes place on the basis of the EU-US Data Privacy Framework (DPF), as well as, additionally, on the basis of the European Commission’s current Standard Contractual Clauses.

III. Routine Erasure and Restriction of Data

As a general rule, we store your data only for as long as is necessary to achieve the purpose of storage, or as required by the European legislative and regulatory bodies or other legislators in laws or regulations to which we are subject. In Germany, this includes, in particular, a retention obligation of 6 years pursuant to Section 257(1) of the German Commercial Code (HGB) (in particular for commercial books, inventories, opening balance sheets, annual financial statements, business correspondence, and accounting vouchers), as well as 10 years pursuant to Section 147(1) of the German Fiscal Code (AO) (in particular for books, records, management reports, accounting vouchers, business and commercial correspondence, and documents relevant for taxation purposes). Once the storage purpose no longer applies, or a statutory retention period expires, your personal data is routinely blocked or deleted in accordance with statutory provisions. Please also note the specific provisions on individual retention and deletion periods set out elsewhere in this Privacy Policy.

IV. Your Rights

As a data subject (Article 4 No. 1 GDPR), you have numerous rights against us, about which we wish to inform you below. Further details can be found in Articles 15 to 21 GDPR, as well as Sections 32 to 37 of the German Federal Data Protection Act (BDSG) (as applicable from 25 May 2018).

To exercise your rights, please contact the party identified at the beginning of this Privacy Policy as responsible for the data processing (informal requests are also welcome).

1. Right of Access

You have the right to obtain confirmation from us as to whether, and which, data we process about you. This includes, among other things, information on how long and for what purpose we process the data, its origin, and the recipients or categories of recipients to whom we disclose it. You may also request a copy of this data from us.

2. Right to Rectification

You have the right to have us rectify without undue delay any information about you that is inaccurate or no longer accurate. You may also request the completion of any incomplete personal data. Where legally required, we will also inform any third parties to whom we have disclosed your data of such rectification.

3. Right to Erasure (“Right to be Forgotten”)

You have the right to request the immediate erasure of your personal data from us where one of the following grounds applies:

  • your data is no longer necessary for the purposes for which it was collected or otherwise processed, or the purpose has been achieved;
  • you withdraw your consent and there is no other legal basis for the processing;
  • you object to the processing and there are no overriding legitimate grounds for the processing; in the case of personal data processed for direct marketing purposes, a mere objection on your part is sufficient;
  • your personal data has been processed unlawfully;
  • erasure of your personal data is required to comply with a legal obligation under Union or Member State law to which we are subject.

Please note that your right to erasure may be restricted by statutory provisions. This applies in particular to the restrictions set out in Article 17 GDPR and Section 35 of the German Federal Data Protection Act (as applicable from 25 May 2018).

4. Right to Restriction of Processing (Blocking)

You have the right to request that we restrict the processing of your personal data where one of the following conditions applies:

  • you dispute the accuracy of your personal data, for a period enabling us to verify its accuracy;
  • the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
  • we no longer need your personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims; or
  • you have objected to the processing, pending verification of whether our legitimate grounds override yours.

If you have obtained a restriction of processing under the list above, we will inform you before the restriction is lifted.

5. Right to Withdraw Consent

You may withdraw any consent given to us at any time, with effect for the future. Such withdrawal may be made by informal notice to the contact addresses given above. This also applies to any consent given to us before the GDPR took effect (i.e. before 25 May 2018). If you withdraw your consent, this does not affect the lawfulness of processing carried out prior to the withdrawal. As a rule, the consequence of withdrawal is that you can no longer use, or can no longer fully use, the service in respect of which we requested your consent.

6. Right to Data Portability

You have the right to receive personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and to transmit that data to another party. Details and restrictions can be found in Article 20 GDPR. Exercising this right does not affect your right to erasure.

7. Right to Lodge a Complaint with a Supervisory Authority

If you believe that our processing of your data violates applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority, in particular the Hamburg Commissioner for Data Protection and Freedom of Information, or the Data Protection Commissioner of Lower Saxony, or the relevant supervisory authority in the Member State of your habitual residence, place of work, or place of the alleged infringement.

8. Right to Object Pursuant to Article 21 GDPR

Pursuant to Article 21 GDPR, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your data where we base such processing on a balancing of interests pursuant to Article 6(1)(f) GDPR. If you lodge an objection, we will no longer process your personal data, except in two cases:

we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms; or

the processing serves the establishment, exercise or defence of legal claims.

In particular, if we process your personal data for direct marketing purposes (e.g. in connection with our newsletter), you have the right to object at any time to the processing of your data for such marketing purposes. If you object to the processing of your data for direct marketing purposes, we will no longer use your personal data for that purpose.

V. Glossary of Data Protection Terms

In this Privacy Policy, we use certain terms that are also used by the legislator, in particular in the General Data Protection Regulation (GDPR). Because it is important to us that this Privacy Policy is comprehensible to you, we explain some key terms below in alphabetical order:

  1. Processor: A natural or legal person, public authority, agency or other body that processes personal data on behalf of a controller.
  2. Data Subject: Any identified or identifiable natural person whose personal data is processed by the controller.
  3. Browser: A program for displaying websites on the internet, for example Mozilla Firefox or Google Chrome.
  4. Cookies: Small text files containing a distinctive string of characters (cookie ID), which are stored on your device (e.g. smartphone or computer) via an internet browser, unless you prevent this through technical settings. Cookies enable the websites and servers visited to distinguish your particular browser from other internet browsers. A particular internet browser can thus be recognised and identified via its unique cookie ID. This makes it possible, for example, to facilitate your use of our website, since certain data only needs to be entered once. Where possible, we use cookies that are deleted when you close your browser (so-called session cookies). In addition, we also use cookies that remain stored on your computer for a longer period (so-called persistent cookies). Besides configuring your browser so that it does not accept cookies, you may delete cookies already set at any time via your internet browser or other programs. Please note, however, that not using cookies may mean that not all functions of our website or services can be used to their full extent.
  5. Third Party: A natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor, and the persons who, under the direct authority of the controller or the processor, are authorised to process personal data.
  6. Restriction of Processing: The marking of stored personal data with the aim of limiting its processing in the future (e.g. with regard to certain processing purposes).
  7. Consent: Any freely given, specific, informed and unambiguous indication of the data subject’s wishes, given in the form of a statement or other clear affirmative action, by which the data subject signifies agreement to the processing of personal data relating to them.
  8. Recipient: A natural or legal person, public authority, agency or other body to which personal data is disclosed, whether or not it is a third party.
  9. IP Address: An address assigned to your device (e.g. smartphone or computer) on the internet, enabling it to be addressed and reached there.
  10. Pixel Tags (Web Beacons): Small, typically invisible graphics embedded in websites and other services in order to carry out statistical evaluations, generally for marketing purposes.
  11. Personal Data: Any information relating to an identified or identifiable natural person (also referred to as a “data subject”). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.
  12. Profiling: Any form of automated processing of personal data consisting of using such data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
  13. Pseudonymisation: The processing of personal data in such a way that it can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data is not attributed to an identified or identifiable natural person without disproportionate effort.
  14. Processing: Any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  15. Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing personal data.

VI. Security

We employ technical and organisational security measures to protect your personal data against misuse, loss, destruction, or access by unauthorised persons. Our security measures reflect the current state of the art.

VII. Validity and Amendments to this Privacy Policy

This Privacy Policy is currently valid and dated 1 July 2026. Further development of our website or the implementation of new technologies may make it necessary to amend this Privacy Policy. We reserve the right to make corresponding changes at any time.