Privacy Policy

We are pleased to welcome you to our blog. Below, we would like to inform you about how we handle your data in accordance with Article 13 of the General Data Protection Regulation (GDPR).

Data Controller

The entity named in the imprint is responsible for the data processing described below.

Usage Data

When you visit our website, so-called usage data is temporarily logged on our web server for statistical purposes, in order to improve the quality of our website. This data set consists of

  • the name and address of the requested content,
  • the date and time of the request,
  • the amount of data transferred,
  • the access status (content transferred, content not found),
  • a description of the web browser and operating system used,
  • the referral link indicating the page from which you accessed our site,
  • the IP address of the requesting computer, which is truncated so that it can no longer be linked to a specific individual.
     

The aforementioned log data is evaluated only in anonymised form.

Storage of IP Addresses for Security Purposes

This website has a login area for authors. If incorrect login details are entered several times in succession, the full IP address from which the failed login attempts were made is logged for security purposes. We require this information in order to block the relevant IP address for a certain period of time, or permanently if necessary, and to be able to respond appropriately to unauthorised access attempts. The legal basis for this is Article 6 para. 1 lit. f GDPR. The processing is carried out in the interests of securing our blog.

Data Security

We take technical and organisational measures to protect your data as comprehensively as possible against unauthorised access. We use an encryption method on our websites. Your data is transmitted from your computer to our server and vice versa via the internet using TLS encryption. You can usually recognise this by the fact that the padlock symbol in your browser’s status bar is closed and the address bar begins with https://.

Anonymous Visitor Tracking

We carry out anonymous visitor tracking on our websites. To do this, we analyse the web server’s log data and the truncated IP address. It is not possible to identify you personally from this data.

Links to Third-Party Websites

Our website contains links to third-party websites. We have clearly marked these links. We have no control over whether these providers comply with data protection regulations. You should therefore always check the privacy policies of these other providers.

Social Plugins

We enable you to use social plugins. However, for data protection reasons, we only embed the social plugins we use in a deactivated form. This means that no data is transmitted to social media services when you visit our websites.


You do, however, have the option to activate and use the social plugins embedded on our websites. To do this, we use a solution whereby, in a first step, all data and functions required to display the social plugin are provided by our web server. Only when you decide to activate the respective social plugin and click on the corresponding preview image or icon will your browser, in a second step, establish a connection to the servers of the operator of the respective social media service.

When you activate a plugin, the social media service will receive your IP address and will be made aware that you have visited our website, amongst other things. This happens regardless of whether you have an account with the social media service in question. If you are logged in, the data may be directly linked to your social media profile.

Overall, we have no control over whether, or to what extent, the relevant social media service processes personal data once it has been activated. However, it is likely that the social media service will create usage profiles based on your data and use these for the purpose of personalised advertising. In addition, your data will be used to inform other users of the social media service about your activities on our websites.

DThe embedding is based on your consent in accordance with Article 6 para. 1 lit. a of the GDPR, provided that you have given your consent by clicking on the preview image. Please note that the embedding of many social plugins means that your data will be processed outside the EU or the EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without you being informed or being able to seek legal redress. Where we use providers in non-EU countries and you give your consent, the transfer to a non-EU country is based on Article 49 para. 1 lit. a of the GDPR.

If you no longer wish your personal data to be processed via the activated social plugins, you can prevent this by no longer clicking on the thumbnail or icon of the relevant social plugin.

Provider Adequate Data Protection Level Withdrawal of Consent
X (USA) For transfers to the USA, an adequate level of data protection is ensured by the provider’s certification under the adequacy decision (EU-US Data Privacy Framework). Wenn Sie ein Vorschaubild angeklickt haben, werden die Inhalte des Drittanbieters sofort nachgeladen. Wenn Sie ein solches Nachladen auf anderen Seiten nicht wünschen, klicken Sie bitte die Vorschaubilder nicht mehr an.
Meta (USA) For transfers to the USA, an adequate level of data protection is ensured by the provider’s certification under the adequacy decision (EU-US Data Privacy Framework). Wenn Sie ein Vorschaubild angeklickt haben, werden die Inhalte des Drittanbieters sofort nachgeladen. Wenn Sie ein solches Nachladen auf anderen Seiten nicht wünschen, klicken Sie bitte die Vorschaubilder nicht mehr an.
Xing (DE) EU/EEA (Where processing takes place in a country without an adequate level of data protection, the transfer is made on the basis of Article 49(1)(a) of the GDPR). Wenn Sie ein Vorschaubild angeklickt haben, werden die Inhalte des Drittanbieters sofort nachgeladen. Wenn Sie ein solches Nachladen auf anderen Seiten nicht wünschen, klicken Sie bitte die Vorschaubilder nicht mehr an.
LinkedIn (USA) For transfers to the USA, an adequate level of data protection is ensured by the provider’s certification under the adequacy decision (EU-US Data Privacy Framework). Wenn Sie ein Vorschaubild angeklickt haben, werden die Inhalte des Drittanbieters sofort nachgeladen. Wenn Sie ein solches Nachladen auf anderen Seiten nicht wünschen, klicken Sie bitte die Vorschaubilder nicht mehr an.

Embedded Videos

We embed videos on our websites that are not stored on our servers. To ensure that visiting our websites with embedded videos does not automatically result in content from the third-party provider being loaded, we initially display only locally stored preview images of the videos. This means that the third-party provider does not receive any information.

Only after you click on the thumbnail is the third-party content loaded. This provides the third party with the information that you have visited our site, as well as the usage data technically required for this purpose. Furthermore, the third party is then able to implement tracking technologies. We have no influence over the further processing of data by the third-party provider. By clicking on the thumbnail, you give us your consent to load the third-party provider’s content.

The embedding is based on your consent in accordance with Article 6 para. 1 lit. a GDPR, provided that you have given your consent by clicking on the thumbnail. Please note that embedding many videos means that your data will be processed outside the EU or the EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without you being informed or being able to seek legal redress. Where we use providers in non-EU countries and you give your consent, the transfer to a non-EU country is based on Article 49 para. 1 lit. GDPR. 

Provider Adequate Data Protection Level Withdrawal of Consent
Youtube For transfers to the USA, an adequate level of data protection is ensured by the provider’s certification under the adequacy decision (EU-US Data Privacy Framework). Once you have clicked on a thumbnail, the third-party content will be loaded immediately. If you do not wish for this to happen on other pages, please do not click on the thumbnails.

Comment Function

You can comment on our posts. To do so, please provide the following details:

  • Name (optional)
  • Comment text

Your comment will be published on our website under the relevant post. Please note that we approve comments manually before publication, which may mean that your comment is published with a delay, particularly at weekends and on public holidays. We would ask you to keep your comments factual and to always relate them to the topic of the blog post. Furthermore, for data protection reasons, comments containing email addresses or telephone numbers will not be published. We also do not approve comments with clearly promotional content for publication. We take note of comments relating to readability or gender-neutral language, but will not publish them, as our priority is to facilitate a professional discussion.

If you provide a name – which may be a pseudonym – it will be published alongside your comment. If you do not enter a name, ‘Anonymous’ will automatically appear as the name next to your comment.

The legal basis for the processing of your comments is Article 6 para. 1 lit. f of the GDPR. Our interest is to facilitate an exchange of views. The processing of your name is based on your voluntary consent, Article 6 para. 1 lit. a GDPR.

If you have any questions regarding the comment function, or if you wish to object to or withdraw your consent to the processing of the data you have submitted via the comment function at a later date, please contact us at the email address provided in the legal notice.

Newsletter Subscription and Dispatch

You can subscribe to our newsletter on our website. Please note that we require certain data (at least your email address) for you to subscribe to the newsletter.

The newsletter will only be sent if you have given us your explicit consent in accordance with Article 6 para. 1 lit. a of the GDPR. Once you have subscribed on our website, you will receive a confirmation email at the email address you provided (known as a double opt-in). You may withdraw your consent at any time. An easy way to do so is via the unsubscribe link included in every newsletter.

When you subscribe to the newsletter, we store additional data beyond that already mentioned, insofar as this is necessary to enable us to prove that you have subscribed to our newsletter. This may include storing the full IP address at the time of subscription or confirmation of the newsletter, as well as a copy of the confirmation email sent by us. The relevant data processing is carried out on the basis of Article 6 para. 1 lit. f of the GDPR and is carried out in the interest of being able to account for the lawfulness of the newsletter dispatch.

Contacting Us

You can contact us directly by email. We process any data you provide solely for the purpose of handling your enquiry, in accordance with Article 6 para. 1 lit. f GDPR. Your data will only be processed to respond to your enquiry. We will delete your data once it is no longer required and provided there are no legal obligations to retain it. You also have the right to object. To do so, please contact us at the email address provided in the imprint.

When you contact us by email, depending on the configuration of your mail server, this may take place without transport encryption. If you wish to send us confidential data, we recommend that you encrypt it beforehand and provide us with the relevant password via a different communication channel.

Retention Period

Unless we have already provided specific information regarding the retention period, we will erase personal data once it is no longer required for the aforementioned processing purposes and provided that no statutory retention obligations prevent such erasure.

Other Data Processors

We share your data with service providers who assist us in operating our websites and managing related processes, in accordance with Article 28 of the GDPR. These include, for example, hosting providers. Our service providers are strictly bound by our instructions and are contractually obliged to comply with them.

Your Rights as a Data Subject

When your personal data is processed, the GDPR grants you, as a data subject, certain rights:

Right of Access (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to access this personal data and to the information specified in detail in Article 15 of the GDPR.

Right to Rectification (Art. 16 GDPR)

You have the right to request the rectification of inaccurate personal data concerning you without undue delay and, where necessary, the completion of incomplete data.

Right to Erasure (Article 17 GDPR)

You have the right to request that personal data concerning you be erased without delay, provided that one of the grounds set out in detail in Article 17 of the GDPR applies.

Right to Restriction of Processing (Article 18 GDPR)

You have the right to request that processing be restricted if any of the conditions set out in Article 18 of the GDPR apply, for example if you have objected to the processing, for the duration of the controller’s review.

Right to Data Portability (Article 20 GDPR)

In certain cases, as set out in detail in Article 20 of the GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format, or to request that this data be transferred to a third party.

Right to withdraw consent (Article 7 GDPR)

Where data is processed on the basis of your consent, you are entitled, under Article 7 para. 3 of the GDPR, to withdraw your consent to the use of your personal data at any time. Please note that the withdrawal of consent only applies to future processing. Processing carried out prior to the withdrawal is not affected.

Right to Object (Article 21 GDPR)

If data is collected on the basis of Article 6 para. 1 lit. f of the GDPR (data processing to safeguard legitimate interests) or on the basis of Article 6 para. 1 lit. e of the GDPR (data processing to safeguard the public interest or in the exercise of official authority), you have the right, on grounds relating to your particular situation, object to the processing at any time. We will then no longer process the personal data unless there are demonstrable compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Right to Lodge a Complaint with a Supervisory Authority (Article 77 GDPR)

Under Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes data protection regulations. In particular, you may exercise this right to lodge a complaint with a supervisory authority in the Member State of your habitual residence, your place of work or the place where the alleged infringement occurred.

Exercising your rights

Unless otherwise stated above, please contact the body named in the imprint to exercise your rights as a data subject.

Contact Details of the Data Protection Officer

Our data protection officer (DPO) is happy to assist you with any enquiries or suggestions regarding data protection:

Florian Wallrapp
DPO of DSN GROUP
Wörthstraße 15
97082 Würzburg

Email: dsb@re-move-this.dsn-group.de
Phone: +49 (0) 931 30 49 76-0