Privacy Policy

With this privacy policy, we would like to inform you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as "data"). Personal data includes all data that has a personal reference to you, such as name, address, email address, or your user behavior. The privacy policy applies to all data processing operations carried out by us, both within the scope of our core activities and for the online media we provide.

Who is responsible for data processing with us

Responsible for data processing is:
Sole proprietorship - brandoz.eu
Jörg Allmannsberger
Südtsr. 116 53175 Bonn
Germany
Phone: +49 228 61967990
Email: support@brandoz.de

Processing of your data within the core activities of our company

If you are our user, the nature, scope, and purpose of processing your data depend on the contractual or pre-contractual relationships between us. In this sense, the data processed by us include all those data that are provided or have been provided by you for the purpose of using the contractual or pre-contractual services and which are necessary for the processing of your request or the contract concluded between us. Unless otherwise stated in the further information in this privacy policy, the processing and disclosure of your data to third parties are limited to those data that are necessary and appropriate for answering your inquiries and/or fulfilling the contract concluded between you and us, for protecting our rights, and for fulfilling legal obligations. We will inform you about which data is required for this purpose before or during the data collection process. If we use third-party providers to provide our services, the data protection notices of the respective third-party providers apply.

Affected data:

• Master data (e.g., names, addresses)
• Payment data (e.g., bank account details, invoices)
• Contact data (e.g., email address, telephone number, postal address)
• Contract data (e.g., subject matter of the contract, contract duration)

Affected persons: Customers, interested parties, business and contractual partners

Purpose of processing: Execution of contractual services, communication and response to contact inquiries, office and organizational procedures Legal basis: Performance of a contract and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Your rights under the GDPR

Under the GDPR, you have the following rights, which you can exercise at any time with the data controller mentioned in paragraph 1 of this privacy policy:

• Right to information: You have the right to request information from us about whether and which data we process about you. • Right to rectification: You have the right to request the correction of incorrect or incomplete data. • Right to erasure: You have the right to request the deletion of your data. • Right to restriction: You have the right in certain cases to request that we only process your data to a limited extent. • Right to data portability: You have the right to request that we transfer your data to yourself or another controller in a structured, commonly used, and machine-readable format. • Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible is the supervisory authority at your usual place of residence, your place of work, or our company headquarters.

Right of withdrawal

You have the right to withdraw your consent to data processing at any time.

Right to object

You have the right to object at any time to the processing of your data, which we base on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR. If you exercise your right to object, we ask you to state the reasons. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing serves the assertion, exercise, or defense of legal claims. Regardless of the foregoing, you have the right at any time to object to the processing of your personal data for purposes of advertising and data analysis. Please address your objection to the contact address of the data controller provided above.

When do we delete your data?

We delete your data when we no longer need it or when you instruct us to do so. This means that, unless otherwise stated in the individual data protection notices of this privacy policy, we delete your data,

• when the purpose of data processing has ceased to apply and thus the respective legal basis mentioned in the individual data protection notices no longer exists, for example,
• after termination of the contractual or membership relationships between us (Art. 6 para. 1 lit. a GDPR) or
• after the cessation of our legitimate interest in further processing or storage of your data (Art. 6 para. 1 lit. f GDPR),
• when you exercise your right of withdrawal and there is no other legal basis for processing within the meaning of Art. 6 para. 1 lit. b-f GDPR,
• when you exercise your right of objection and there are no compelling legitimate grounds for processing that override your interests (Art. 6 para. 1 lit. f GDPR).

However, if we (certain parts of) your data still need to be retained for other purposes, for example, because this is required by tax retention periods (usually 6 years for business correspondence or 10 years for booking documents) or for the assertion, exercise, or defense of legal claims arising from contractual relationships (up to four years), or if the data is needed to protect the rights of another natural or legal person, we will only delete (part of) your data after expiry of these periods. Until these deadlines expire, we will limit the processing of this data to these purposes (fulfillment of retention obligations).

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are stored on the end device you use. Cookies primarily serve to exchange information between the end device you use and our website. This includes, among other things, language settings on a website, login status, or the point at which a video was watched. When you visit our websites, two types of cookies are used:

• Temporary cookies (session cookies): These store a so-called session ID, which can be used to assign various requests from your browser to the common session. The session cookies are deleted when you log out or close your browser.
• Permanent cookies: Permanent cookies remain stored even after you close your browser. This allows our website to recognize your computer when you return to our website. These cookies store, for example, information about language settings or login information. In addition, your surfing behavior can be documented and stored with these cookies. This data can be used for statistical, marketing, and personalization purposes.

In addition to the above classification, cookies can also be distinguished according to their purpose of use:

• Necessary cookies: These are cookies that are absolutely necessary for the operation of our website, for example, to store logins or shopping baskets for the duration of your session, or cookies that are set for security reasons.
• Statistics, marketing, and personalization cookies: These are cookies that are used for analysis purposes or for measuring reach. Such "tracking" cookies can store information about entered search terms or the frequency of page views, for example. In addition, the surfing behavior of an individual user (e.g., viewing certain content, using functions, etc.) can be stored in a user profile. Such profiles are used to display users content that corresponds to their potential interests. If we use services through which cookies are stored on your end device for statistical, marketing, and personalization purposes, we will inform you separately about this in the following sections of our privacy policy or as part of obtaining your consent.

Affected data:

• Usage data (e.g., access times, clicked websites)
•

Communication data (e.g., information about the device used, IP address).

Affected persons: Users of our online offerings

Purpose of processing: Serving our web pages, ensuring the operation of our websites, improving our online offering, communication, and marketing

Legal basis: Legitimate interest, Art. 6 para. 1 lit. f GDPR If we do not obtain your consent to set cookies, we base the processing of your data on our legitimate interest in improving the quality and user-friendliness of our website, especially its content and functions. You have the option to object to the use of cookies set by us within the security settings of your browser. There you can specify whether you do not accept any cookies at all or only accept them on request, or specify that cookies are deleted after each time you close your browser. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Consent, Art. 6 para. 1 lit. a GDPR

If we ask you for your consent to set certain cookies on your device before you visit our website, and you consent to this, the legal basis is to be seen in the consent you have given. We will inform you as part of the consent about which cookies we set in detail. If you do not give this consent, only the so-called technically necessary cookies that are required for the proper operation of our websites and their display in your browser will be set. If you have consented to the setting of cookies, you have the option to revoke the consent you have given us at any time.

Web hosting

We use a provider to host our websites, on whose server our websites are stored and made available for access on the Internet (hosting). In this context, the provider may process all data transmitted by you via the browser you use when using our websites. This includes, in particular, your IP address, which the provider needs to deliver our online offering to the browser you use, as well as all inputs made by you via our website. In addition, the provider may

• the date and time of access to our website
• time zone difference to Greenwich Mean Time (GMT)
• access status (HTTP status)
• the amount of data transferred
• the Internet service provider of the accessing system
• the type and version of browser you use
• the operating system you use
• the website from which you may have accessed our website
• the pages or subpages you visit on our website.

collect. The aforementioned data is stored as log files on the servers of our provider. This is necessary to ensure the stability and security of the operation of our website.

Affected data:

• Content data (e.g., posts, photos, videos)
• Usage data (e.g., access times, clicked websites)
• Communication data (e.g., information about the device used, IP address)

Affected persons: Users of our website

Purpose of processing: Serving our web pages, ensuring the operation of our websites Legal basis: Legitimate interest, Art. 6 para. 1 lit. f GDPR

Web hoster commissioned by us:

IONOS – 1 & 1 AG

Service provider: IONOS SE Elgendorfer Str. 57 56410 Montabaur
Website: https://www.ionos.de/
Privacy Policy: https://www.ionos.de/terms-gtc/datenschutzerklaerung/

Contact

If you contact us via email, social media, telephone, fax, post, our contact form, or otherwise and provide us with personal data such as your name, telephone number, or email address or provide further information about yourself or your concern, we process this data to respond to your inquiry within the framework of the pre-contractual or contractual relationship between us. Affected data:

• Master data (e.g., names, addresses)
• Contact data (e.g., email address, telephone number, postal address)
• Content data (texts, photos, videos)
• Contract data (e.g., subject matter of the contract, contract duration)

Affected persons: Interested parties, customers, business and contractual partners

Purpose of processing: Communication and response to contact inquiries, office and organizational procedures

Legal basis: Performance of a contract and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Information about third-party providers used by us:

Fluent Forms
Service provider: WPManageNinja based at 2035 Sunset Lake Road, Suite B-2, Newark, 19702, USA
Website :https://fluentforms.com/
Privacy Policy: https://wpmanageninja.com/privacy/

Newsletter

We regularly send out a newsletter to inform our customers, business partners, and interested parties about our offers and related news. You have the option to subscribe to our newsletter on our website and consent to receiving the newsletter as part of the registration. When you subscribe to our newsletter, providing your email address is mandatory. We store the email address to be able to send you the newsletter. Once you subscribe to our newsletter, you will receive a confirmation email to the email address provided during registration, using the double opt-in procedure. This email contains a link. By clicking on this link, you confirm that you wish to receive the newsletter. This ensures that your email address provided during registration is not being abused by a third party. For the same reason, we store the date and time of registration as well as the IP address assigned to you during registration. We do not pass on the aforementioned data to third parties.

Affected Data:

• Content data (e.g., posts, photos, videos)
• Usage data (e.g., access times, clicked websites)
• Communication data (e.g., information about the device used, IP address)

Affected Persons: Users of our website

Purpose of processing: Playing out our websites, ensuring the operation of our websites

Legal basis: Consent, Art. 6 para. 1 lit. a GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Deletion: The deletion of the email address occurs either if you have not clicked on the confirmation link one month after sending the confirmation email in the double opt-in procedure or immediately after you have unsubscribed from our newsletter.

Revocation: You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter subscription. We offer the following options for you to declare your revocation:

Mailchimp

Service provider: "Mailchimp" - Rocket Science Group LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA
Website: https://mailchimp.com
Privacy Policy: https://mailchimp.com/legal/privacy/

Affiliate Programs and Affiliate Links

We use affiliate links and/or other types of affiliate references, such as search masks, widgets, or discount codes, on our website. These links and references lead you to offers and services from third-party providers. If you click on one of these links or use one of these offers, we receive a commission or other benefit from the respective third-party provider. In order for us to receive our commission, the respective third-party providers must be informed that you have used an affiliate link on our website. For this purpose, the affiliate links used must be tracked back and assigned to the respective transactions or other actions, such as purchases. This process is necessary to settle our commission with the third-party provider. The data collected by us as part of this process is stored until the final settlement. In order to ensure assignment between affiliate link, transaction, and you as a user, the affiliate links used by us may be supplemented with certain information. This information can be stored in the link itself or in a cookie. This information may include the referring website (referrer), the online identification of our website, an online identification of the respective offer, the type of affiliate link used, the type of offer, an online identification of the respective user, as well as the time of use of the link.

Affected Data:

• User data (e.g., previously visited websites, usage times, interest in content),
• Transaction data (e.g., term, customer category, subject of contract),
• Communication and metadata (e.g., IP address, information about the device or computer system)

Purpose of processing: Recording which affiliate links, integrated on our website, were used by our visitors

Legal basis: Consent, Art. 6 para. 1 lit. a GDPR, performance of a contract and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Revocation options: There is the possibility to deactivate interest-based advertising by adjusting it under the following link http://www.aboutads.info/choices. Furthermore, you can prevent the storage of cookies by adjusting this in your browser. Already set cookies can be deleted by you at any time.

We use the following affiliate service providers:

Web analysis and statistics

To capture and statistically evaluate visitor flows on our website, we use web analytics services. Such services collect data about, among other things, which website you came to our website from (referrer), which pages of our website you accessed, how long you visited our pages, and what interactions you made there. In addition, data about the browser, computer system, and type of device you used is collected. Moreover, demographic information such as age or gender may be collected as pseudonymous values via such a service. If you have consented to the collection of your location data, these may also be processed, depending on the provider. In order to collect and store this data, the web analytics service used by us generally sets a cookie on the end device used by you, with which your assigned IP address is also collected. However, this is shortened using a method called IP masking, so that the IP address can no longer be assigned to your visit to our website. Furthermore, no clear data such as names or email addresses are stored. Neither we nor the service used by us know the identity of the visitors to our websites. We would like to point out that depending on the country of residence of the service provider named below, the data collected via the service may be transferred and processed outside the European Union. In this case, there is a risk that the level of data protection prescribed by the GDPR will not be observed and the enforcement of your rights may be made more difficult or impossible.

Affected Data:

• Usage data (e.g., access times, clicked websites)
• Communication data (e.g., information about the device used, IP address).

Affected Persons: Users of our online offerings

Purpose of processing: Reach measurement, success control of campaigns, remarketing as well as interest- and behavior-based marketing Legal basis: If we have asked for your consent before using the respective service, this constitutes the legal basis, Art. 6 para. 1 lit. a GDPR. Otherwise, we use the respective service based on our legitimate interest in analyzing the visitor flows of our websites in order to continuously improve the functions, offers, and user experience, Art. 6 para. 1 lit. f GDPR.

We use the following web analytics services:

Google Analytics

Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA EU headquarters: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Website: https://marketingplatform.google.com/intl/de/about/analytics/

Privacy Policy: https://policies.google.com/privacy?hl=de

Opt-Out Option: If you do not want your data to be used by Google Analytics. you can install a so-called Opt-Out Plugin, which will prevent data from being collected from you on our website in the future.

You can get this plugin here: https://tools.google.com/dlpage/gaoptout?hl=de

Content Services

We use certain services to play out specific content or graphics (videos, images, music, fonts, maps) on our website. The services we use process the IP address assigned to you at the time of your visit to our websites, as only then can the respective content be displayed in the browser you are using. In addition, the providers of these services may set additional cookies on your device through which information about your usage behavior, interests, the device and browser you used, as well as the time and duration of your session, can be collected. These data are regularly used by the providers for analysis, statistics, and marketing purposes. Furthermore, this information may also be combined with information from other sources. This is particularly the case if you maintain an account with the service provider yourself and are logged in there at the time of the session. We would like to point out that depending on the country of residence of the service provider named below, the data named below may be transferred and processed on servers outside the European Union. In this case, there is a risk that the level of data protection prescribed by the GDPR will not be observed and the enforcement of your rights may be made more difficult or impossible.

Affected Data:

• Usage data (e.g., access times, clicked websites)
• Communication data (e.g., information about the device used, IP address)

Affected Persons: Users of our website

Purpose of processing: Playing out our websites, offering content, ensuring the operation of our websites

Legal basis: Consent via cookie consent banner, Art. 6 para. 1 lit. a GDPR, legitimate interests, Art. 6 para. 1 lit. f GDPR

We use the following content services:

Google Maps

We use Google Maps on our website. Google collects and processes the visitor's IP address. When you visit a website on which Google Maps is integrated, your IP address and, if you are logged into your Google account, your location data (usually not without your consent) will be transmitted to Google regardless of whether Google Maps is actually used or not. Your IP address is associated with your Google account if you are logged in when visiting our website.

Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA EU headquarters: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Website: https://www.google.de/maps
Privacy Policy: https://policies.google.com/privacy
Opt-Out Option: https://tools.google.com/dlpage/gaoptout?hl=de

Google Web Fonts

With Google Web Fonts, we can integrate fonts (web fonts) into the design of our website and display them correctly in your browser when displaying our websites. These web fonts are integrated by making a server call to Google. From there, the fonts are compressed and passed on to your browser, where they are unpacked. This server is regularly located in the USA. When you visit one of our pages on which we integrate Google Fonts, Google is informed which of our Internet pages you have visited.

Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA EU headquarters: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Website: https://fonts.google.com/
Privacy Policy: https://policies.google.com/privacy

YouTube

We use components from YouTube on this website to embed videos on our web pages so that they can be played back through your internet browser when you visit our web pages. During your visit to our web pages, both YouTube and Google are informed about which page or subpage you have accessed by transmitting your IP address to Google's external servers in the USA. This information transfer takes place regardless of whether the videos displayed are actually viewed or clicked on or whether you are logged into your YouTube or Google account. This information is collected and assigned to your Google account if you are logged in there when you visit our website.

Service provider: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA
Website: https://www.youtube.com/
Privacy Policy: https://policies.google.com/privacy
Opt-Out Option: https://tools.google.com/dlpage/gaoptout?hl=de

Security Measures

Furthermore, we take technical and organizational security measures in accordance with the state of the art to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties.

Currency and Modification of this Privacy Policy

This privacy policy is currently valid and has the status of April 2024. Due to changed legal or official requirements, it may become necessary to adapt this privacy policy. This privacy policy was created with the help of the data protection generator from SOS Recht. SOS Recht is an offer of Mueller.legal Rechtsanwälte Partnerschaft based in Berlin.