Privacy Policy

1. General Information on Data Processing

We are very pleased about your interest in our offer. The protection of your personal data is important to us. Below we inform you about which data we collect when you use our website and within the scope of contractual relationships, for what purposes we process this data and what rights you have with regard to the processing.

2. Responsible Party and Data Protection Officer
Responsible for Data Processing is:

Theresa Vormbaum
Am Moosberg 3b
50997 Cologne
Germany
015221881612
theresa@mediation-vormbaum.com

A data protection officer has not been appointed, as this is not required by law.

3. Data Processing

3.1 Access Data and Server Log Files

When you access our website, information is automatically transmitted to the server and temporarily stored in so-called log files. This includes:

• IP address (anonymized),
• Date and time of access,
• visited page or file,
• Browser type and version,
• Operating system used,
• Referrer URL.

The processing of this data serves to ensure a smooth connection setup and system security.

Legal basis: Legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR
Storage period: maximum 14 days

3.2 Hosting by Strato

Our website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin
(hereinafter “Strato”). Strato processes the access data described in Section 3.1 within the
framework of the technical operation of our website.
Purpose of processing: Technical operation and delivery of the website, system security, error analysis, logging of security-relevant access.
Legal basis: Legitimate interest pursuant to Art. 6 Para. 1 lit. f GDPR in the secure and efficient
provision of our website. If tracking or cookie technologies are used, processing is also based on Art. 6 Para. 1 lit. a GDPR in conjunction with §
25 Para. 1 TDDDG.
Storage period: The log files are available for a period of up to 6 weeks. Personal data (in particular IP addresses) are usually anonymized after 7 days at the latest and
then no longer evaluated in relation to individuals.
Order processing: We have concluded a contract with Strato for order processing in accordance with Art. 28 GDPR
.

Further information can be found in Strato’s privacy policy:
https://www.strato.de/datenschutz/

3.3 Online Shop and Contract Processing

When you order or book products or services, we process the data required for contract processing, such as:

• Name, address, email address,
• if applicable, telephone number,
• ordered services or products,
• Payment and shipping information.
• Purpose of processing: Fulfillment of the contractual relationship,
• Communication,
• Invoicing

Legal basis: Contract fulfillment in accordance with Art. 6 Para. 1 lit. b GDPR
Storage period: The data will be deleted after the statutory retention period has expired.

3.4 Appointment Booking Tool

We use the Brevo tool from Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin for online appointment booking. The personal data you provide when making an appointment (e.g. name, email address, telephone number) is transmitted directly to Brevo and processed there.

Purpose of processing: The collection and management of your appointment bookings.
Legal basis: Contract fulfillment in accordance with Art. 6 Para. 1 lit. b GDPR.
Storage period: The data is only stored by Brevo for as long as this is necessary to fulfill the purpose or until you request deletion. Further details on data processing and
your rights can be found in Brevo’s privacy policy:
https://www.brevo.com/de/legal/privacypolicy/ .

3.5 Contact Form and Email Inquiries

If you contact us via contact form or email, your details including the contact details you provide will be stored by us for the purpose of processing your inquiry and in the event of follow-up questions.

Purpose of processing: Processing and answering your contact request and, if applicable, initiating or implementing a contractual relationship.
Legal basis: Art. 6 Para. 1 lit. b GDPR, provided your request is related to the fulfillment of a contract or to the implementation of pre-contractual measures, Art. 6 Para. 1 lit. f GDPR, for general inquiries (legitimate interest in the effective processing of inquiries). In the event of express consent (e.g. to be included in the newsletter distribution list): Art. 6 Para. 1 lit. a GDPR.

Collected data: Name, email address, message text and, if applicable, telephone number and other information you voluntarily provide.
Storage period: Your data will be deleted as soon as the purpose of processing no longer applies, e.g. if your request has been processed conclusively, unless there are statutory retention obligations or you have expressly consented to a longer storage period.
Recipient: A transfer to third parties does not take place in principle, unless this is necessary to process your request (e.g. forwarding to cooperation partners) or you have consented.

3.6 Shipping Service Provider

We use the shipping service provider DHL for the shipment of goods and packages. We pass on the following personal data to DHL:

• Name and address
• E-mail address
• Telephone number (if provided)

Purpose of processing: The forwarding of the shipping information to enable the delivery of your order.
Legal basis: Contract fulfillment in accordance with Art. 6 Para. 1 lit. b GDPR.
Storage period: The data is stored by DHL in accordance with the statutory requirements and to fulfill the shipping service. Further information on data processing at DHL can be found in their privacy policy: https://www.dhl.de/de/toolbar/footer/datenschutz.html .

3.7 Payment Service Provider and Credit Check

We use WooCommerce, operated by WooCommerce Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland, for payment processing. WooCommerce may carry out credit checks to avoid payment defaults.

Processed data: Personal data such as name, address, payment information and credit data, as far as necessary.
Purpose of processing: Ensuring payment processing and avoiding payment defaults.
Legal basis: Contract fulfillment in accordance with Art. 6 Para. 1 lit. b GDPR and legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR.
Storage period: The data is stored in accordance with the statutory retention periods.

3.8 Collection Service Provider

Should payment defaults occur, data may be passed on to collection service providers. The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest).

3.9 Advertising Measures (Email, Post, Telephone)

We use your personal data, in particular your email address, postal address and telephone number, to contact you as part of our advertising activities. This is done, for example, by sending newsletters, postal advertising or telephone offers.

Purpose of processing:
Information and advertising about our goods and services.
Legal basis: For sending newsletters and advertising emails, the processing is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR. For postal advertising, we rely on legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR, provided there is no consent. For telephone advertising to consumers, processing is carried out exclusively with your express consent in accordance with Art. 6 Para. 1 lit. a GDPR.

For telephone advertising to business customers, we rely on legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR, provided there is no consent. For advertising to existing customers without separate consent, processing is carried out on the basis of legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR, provided the legal requirements are met.

Consent: Granted consent can be revoked at any time with effect for the future.
Storage period: The personal data will be stored for as long as you wish to receive our advertising measures or until you revoke your consent.

3.10 Cookies and Tracking

Our website uses cookies and comparable technologies (e.g. pixels, tags or local storage) to technically enable the use of our website, to analyze it, to improve it and to display content and advertising on a user-based basis.

What are cookies?
Cookies are small text files that your browser automatically creates and that are stored on your end device when you visit our website. Cookies contain information that relates to the specific end device used. It is not possible to directly know your identity as a result.

Types of Cookies
• Necessary Cookies: These cookies are technically necessary for the operation of the website and enable e.g. page navigation or security-relevant functions (e.g. login, session cookies). Without these cookies, the website cannot function correctly.
• Statistics and Analysis Cookies: These cookies make it possible to analyze the behavior of users on the website. For example, page views, time spent or interactions are recorded. The evaluation helps us to make the offer more user-friendly.
• Marketing and Tracking Cookies: These cookies are used to track users across websites in order to display relevant advertising. They also support the measurement of the success of advertising campaigns and enable retargeting functions.

Consent and Revocation
The use of all cookies that are not technically necessary only takes place with your express consent via the cookie banner (§ 25 Para. 1 TTDSG, Art. 6 Para. 1 lit. a GDPR). This consent is voluntary, can be revoked at any time or adjusted in the cookie settings.

Tools and Services Used

Google Analytics
• Purpose: Analysis of user behavior (e.g. visit duration, page views, origin sources) to improve our offer.
• Functionality: Google uses cookies to collect IP addresses (shortened), device and usage data. We use Google Analytics exclusively with IP anonymization (anonymizeIP).
• Legal basis: Consent (Art. 6 Para. 1 lit. a GDPR, § 25 Para. 1 TTDSG)
• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Privacy Policy: https://policies.google.com/privacy

Google Ads (Conversion Tracking & Remarketing)
• Purpose: Analysis of which ads lead to a contact or purchase (conversion tracking); display of personalized ads (remarketing).
• Functionality: When you visit our site or after a conversion, a cookie is stored on your device. Google can thereby assign your visit to certain target groups and ads.
• Legal basis: Consent (Art. 6 Para. 1 lit. a GDPR, § 25 TTDSG)
• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Privacy Policy: https://policies.google.com/privacy

Facebook Pixel
• Purpose: Measuring the effectiveness of Facebook/Instagram advertising (conversion tracking), targeted advertising, creation of custom audiences.
• Functionality: The pixel collects information about your user behavior and sends it to Meta. This concerns, among other things, IP address, timestamp, page views and browser data.
• Legal basis: Consent (Art. 6 Para. 1 lit. a GDPR, § 25 TTDSG)
• Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
• Privacy Policy: https://www.facebook.com/policy.php

Storage period
The storage period of the cookies set depends on their purpose and type. Temporary cookies are deleted after closing the browser, persistent cookies remain stored until the expiration date or revocation of your consent. Details can be found in the cookie banner. You can deactivate the storage of cookies at any time via your browser or delete cookies that have already been set. Please note that if deactivated, possibly not all
Functions of the website can be used to their full extent.

3.11 Third-Party Tools and Plugins

We use various services and plugins from third-party providers on our website to improve the functionality, user-friendliness and reach of our offers. Personal data such as IP address, device information and usage behavior may be transmitted to the respective providers and processed there. The use of these technologies only takes place with your express consent in accordance with Art. 6 Para. 1 lit. a GDPR in conjunction with § 25 Para. 1 TTDSG. The consent is obtained via the cookie consent banner and can be revoked at any time.

Google Fonts
For the uniform display of fonts, we use Google Fonts, which are loaded via Google’s servers when you access our website. Your IP address is transmitted to Google.
• Provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
• Legal basis: Consent in accordance with Art. 6 Para. 1 lit. a GDPR, § 25 Para. 1 TTDSG
• Privacy Policy: https://policies.google.com/privacy

YouTube Videos
We embed videos via YouTube. When playing, a connection is established to the servers of YouTube. Personal data such as your IP address may be transmitted to Google.
• Provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
• Legal basis: Consent in accordance with Art. 6 Para. 1 lit. a GDPR, § 25 Para. 1 TTDSG
• Privacy Policy: https://policies.google.com/privacy

Instagram Plugins
Functions from Instagram are integrated on our website (e.g. for displaying images or linking to our profile). When interacting with the plugins, a connection to Meta servers can be established, whereby personal data can be transmitted.
• Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, D02 X525, Ireland
• Legal basis: Consent in accordance with Art. 6 Para. 1 lit. a GDPR, § 25 Para. 1 TTDSG
• Privacy Policy: https://privacycenter.instagram.com/policy

Social Media Profiles
We operate company pages with the following providers:
• Instagram
• YouTube
• LinkedIn

When visiting these pages, the data protection regulations of the respective platform apply. If you interact with our content there, personal data may be processed by the platform providers. We would like to point out that we only have limited influence on the data processing by the platform operators.
Further information can be found in the privacy policies of the providers:

• Instagram: https://privacycenter.instagram.com/policy
• YouTube (Google): https://policies.google.com/privacy
• LinkedIn: https://www.linkedin.com/legal/privacy-policy

Transparent Donation Display via Bcause
We work with the Bcause service to transparently display incoming donations (including our own donations as well as the amounts of other users). Personal data (such as name or donation amount) may be publicly visible, provided that this
has been approved by the user.

• Provider: Bcause GmbH, Schlesische Straße 26 10997 Berlin
• Purpose: Transparent display of donation activities
• Legal basis: Consent in accordance with Art. 6 Para. 1 lit. a GDPR
• Privacy Policy: https://bcause.com/agb-und-datenschutz?hsLang=de#agb

Complianz Consent Management
We use the consent management tool from Complianz to manage your consents and comply with data protection regulations.
Personal data such as your IP address and browser information may be transferred to Complianz and processed.
• Provider: Complianz B.V., Kalmarweg 14-5, 9723JG Groningen, Netherlands
• Legal basis: Consent in accordance with Art. 6 Para. 1 lit. a GDPR, § 25 Para. 1 TDDDG
• Data protection declaration: https://complianz.io/legal/privacy-statement/

3.12 Data Transfer to Third Countries

Some service providers (Google, Facebook, Brevo) process data outside the EU, e.g. in the USA. We only use legal bases such as adequacy decisions or standard contractual clauses (SCC) to ensure an adequate level of data protection.

4. Rights of Data Subjects

You have the right to:

• Information about your stored personal data (Art. 15 GDPR)
• Correction of incorrect data (Art. 16 GDPR)
• Deletion or restriction of processing (Art. 17, 18 GDPR)
• Objection to processing (Art. 21 GDPR)
• Data portability (Art. 20 GDPR)
• Revocation of granted consent without disadvantages (Art. 7 Para. 3 GDPR)

Please contact us using the contact details provided.

5. Withdrawal of Consent

You can withdraw your consent to data processing at any time with effect for the future. The lawfulness of the processing carried out until the revocation remains unaffected.

6. Automated Decision Making

Automated decision-making or profiling within the meaning of Art. 22 GDPR does not take place in our company.

7. Data Security

We use technical and organizational measures to protect your personal data from loss, misuse or unauthorized access.

8. Changes to this Data Protection Declaration

We reserve the right to adapt the data protection declaration if necessary. The current version can be found on our website at any time.