Data protection (in accordance with GDPR)

Privacy Policy

1. Introduction

The protection of your personal data is of utmost importance to us. This privacy policy explains the nature, scope, and purpose of the processing of personal data (hereinafter referred to as "data") in connection with our online services. This includes the associated website, its functions and content, as well as external online presences, such as social media profiles (hereinafter collectively referred to as "online services"). Your personal data will be treated confidentially, and we will strictly adhere to the statutory data protection regulations and the provisions of this privacy policy.


General information

This privacy policy provides you with a comprehensive overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. For detailed information on data protection, please refer to this full privacy policy.


Responsible body

Data processing on this website is carried out by the website operator. The contact details of the data controller can be found in the "Data Controller" section of this privacy policy.


Collection of your data

Personal data is collected in two ways: firstly, when you actively provide it, for example, by filling out a contact form; and secondly, automatically or with your consent when you visit the website, through the IT systems of the data controller. This primarily involves technical data (e.g., internet browser, operating system, or time of page access). This data collection occurs automatically as soon as you access the website.


Use of your data

Some data is collected to ensure the website functions correctly. Other data may be used to analyze your user behavior in order to optimize the service and tailor it to your needs.


Data transfer to external bodies

In the course of the controller's business activities, it may be necessary to transfer personal data to external parties. This transfer only occurs under specific conditions: if the transfer is necessary for the performance of a contract, if there is a legal obligation, for example, to tax authorities, if there is a legitimate interest pursuant to Article 6(1)(f) GDPR, or if another legal basis permits the data transfer. When using external service providers for data processing, the transfer of personal data only takes place on the basis of a valid data processing agreement pursuant to Article 28 GDPR. If joint processing of the data with other parties takes place, a joint processing agreement pursuant to Article 26 GDPR is concluded.


Revocation of consent to data processing

Certain data processing activities can only take place with your explicit consent. This consent can be revoked at any time. The lawfulness of the data processing carried out up to the point of revocation remains unaffected by the revocation.


Right to object to specific data processing and advertising measures (Art. 21 GDPR)

If your personal data is processed on the basis of Article 6(1)(e) or (f) GDPR, you have the right to object to this processing at any time, provided you have grounds relating to your particular situation. This also applies to profiling based on these provisions. The specific legal basis for data processing can be found in this privacy policy. If you object, the controller will no longer process your personal data unless compelling legitimate grounds for the processing can be demonstrated which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims (objection pursuant to Article 21(1) GDPR).

If your personal data is used for direct marketing purposes, you have the right to object to this processing at any time. This also applies to profiling insofar as it is related to direct marketing. After your objection, the data controller will no longer use your personal data for these marketing purposes (objection pursuant to Article 21(2) GDPR).


Rights under the General Data Protection Regulation

You have the right to lodge a complaint with a competent supervisory authority if you believe there have been violations of the GDPR. This right can be exercised in particular in the Member State where you have your habitual residence, your place of work, or the place of the alleged infringement. This does not affect any other administrative or judicial remedies.

Personal data that is processed automatically based on consent or for the performance of a contract can be requested in a structured, commonly used, and machine-readable format. Upon request, this data can also be transmitted directly to another controller, provided this is technically feasible.

Every data subject has the right to obtain, free of charge, information about their stored personal data, its origin, recipients, and the purpose of the data processing. Furthermore, there is a right to rectification or erasure of this data, provided that legal provisions permit this. For further questions or concerns regarding personal data, the data controller can be contacted at any time.

You have the right to request the restriction of the processing of your personal data if the accuracy of the data is contested and a verification is pending. In cases of unlawful processing, you can also request the restriction of data processing instead of erasure. Furthermore, you can request restriction if the data is no longer needed but is required for the establishment, exercise, or defense of legal claims. You also have the right to restriction of processing if you object to processing pursuant to Article 21(1) GDPR, pending clarification of whose interests prevail.

If the processing of personal data is restricted, apart from storage, it may only be processed with the consent of the data subject or for the establishment, exercise or defence of legal claims, for the protection of the rights of other natural or legal persons or for reasons of important public interest of the EU or of a Member State.


2. Responsible person

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Company: EPEX
Represented by: Mr.
Address: Gutenbergstrasse 12
Website: www.epex.de
Email: mail@epex-info.de
Telephone: +49 (0) 172 7000 940


3. Data Protection Officer

The data protection officer is available to answer all your questions and serve as your contact person on data protection matters:

Name: Andreas Schlootz
Address: Gutenbergstraße 12, 73760 Ostfildern
Email: mail@epex-info.de
Telephone: +49 (0) 172 7000 940


4. Data processors

We collaborate with various data processors who process data on our behalf. These service providers are contractually obligated to treat the data confidentially and to use it exclusively within the scope of their respective services. Furthermore, there are cases where responsibility for data processing is shared with other parties. In such cases, responsibilities are clearly defined and documented to ensure compliance with data protection requirements.


5. Definitions

To ensure the transparency of this privacy policy and make it understandable for everyone, this policy primarily uses terms that are also defined in the General Data Protection Regulation (GDPR). The complete legal definitions can be found in Article 4 of the GDPR. The most important terms related to this privacy policy are explained below:

Personal data: This includes all information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). A person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., a cookie), or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

Processing: This term encompasses any operation or set of operations performed on personal data, whether or not by automated means. This includes collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Controller: This is the natural or legal person, public authority, agency or other body which, alone or jointly with others, decides on the purposes and means of processing personal data.

Data processor: A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Consent: Any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Website: The term "website" refers to the entire online presence provided by the data controller under a specific URL. This includes all content, information, functions, and services published by the data controller and made accessible to users via this URL. The website serves as a digital platform for providing information and services and for interaction between the data controller and users.

Terminal device: A terminal device is an electronic device capable of accessing the internet and loading web pages. This includes, among other things, computers, laptops, tablets, and smartphones.

These definitions help to better understand the privacy policy and to comprehend the meaning of the terms used.


6. Hosting

This website is hosted on the servers of an external service provider to ensure reliable and secure use of this online service.

Data processing by the hosting provider is carried out in accordance with Article 6(1)(f) GDPR, as the controller has a legitimate interest in providing a stable and secure website. Should it be necessary to obtain the user's consent (for example, for the use of certain cookies or tracking technologies), the data processing is based on the user's consent in accordance with Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TTDSG). You can withdraw your consent at any time with effect for the future.

The hosting provider is:

STRATO AG
Otto-Ostrowski-Straße 7, 10249 Berlin, Germany

Details regarding data processing and data protection can be found in the hosting provider's privacy policy. You can find it here: https://www.strato.de/datenschutz/

To ensure that your data is processed in accordance with applicable data protection regulations, a data processing agreement (DPA) has been concluded with the hosting provider. This agreement obligates the hosting provider to process the personal data of website visitors exclusively according to the instructions of the data controller and in compliance with the GDPR. The hosting provider guarantees comprehensive protection of your data through technical and organizational measures.


7. Legal basis for data processing

Your personal data is processed in accordance with the General Data Protection Regulation (GDPR) and other relevant legal provisions. Different legal bases apply depending on the purpose of the data processing.

If you have consented to the processing of your personal data, this processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. This applies in particular to the processing of special categories of personal data pursuant to Art. 9 para. 2 lit. a GDPR and to the transfer of personal data to third countries pursuant to Art. 49 para. 1 lit. a GDPR. You can withdraw your consent at any time.

The processing of your data may be necessary for the performance of a contract or for taking steps prior to entering into a contract, in which case it is based on Article 6(1)(b) GDPR. Furthermore, processing may be necessary to comply with legal obligations, in which case it is based on Article 6(1)(c) GDPR.

In certain cases, processing is carried out to protect the legitimate interests of the controller or a third party, unless your interests or fundamental rights and freedoms override those interests. This processing is based on Article 6(1)(f) GDPR.

For certain processing activities, national regulations may also apply, such as Section 25 of the German Telecommunications and Telemedia Data Protection Act (TTDSG) regarding the storage of cookies or access to information on your device. The applicable legal bases are explained in detail in the specific sections of this privacy policy.

If your data is required for the performance of a contract or for taking steps prior to entering into a contract, your data will be processed on the basis of Article 6(1)(b) GDPR. For compliance with a legal obligation, data processing is based on Article 6(1)(c) GDPR. Furthermore, data processing may be based on legitimate interests pursuant to Article 6(1)(f) GDPR. The specific legal bases in each case are explained in the following sections of this privacy policy.


8. Data transfer to insecure third countries and non-DPF-certified US companies

If this website uses tools from companies located in countries with inadequate data protection laws, or US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF), your personal data may be transferred to and processed in these countries. Please note that a level of data protection equivalent to that of the EU cannot be guaranteed in countries with inadequate data protection laws. For the USA, as a third country with inadequate data protection laws, a level of data protection comparable to that of the EU is generally not guaranteed. Data transfers to the USA are therefore only permitted if the recipient is either certified under the EU-US Data Privacy Framework (DPF) or has appropriate additional safeguards in place. Detailed information on possible transfers to third countries, including data recipients, can be found in this privacy policy.


9. Storage duration

Unless a more specific retention period is stated within this privacy policy, personal data will remain with the data controller until the purpose for processing the data no longer applies. If a legitimate request for erasure is made or consent to data processing is withdrawn, the data in question will be deleted, provided there are no other legally permissible grounds for storing the personal data (e.g., tax or commercial law retention periods). In these cases, the data will be deleted once these grounds cease to apply.

The data controller stores personal data only for as long as necessary to fulfill the respective purposes for which the data was collected. This includes, in particular, the fulfillment of contractual obligations, compliance with statutory retention periods, and the protection of the data controller's legitimate interests, such as IT security and protection against misuse. If the processing of personal data is based on consent, the data will be stored until the data subject withdraws this consent. Such withdrawal is possible at any time with effect for the future. After withdrawal, the data will be deleted immediately, unless there are statutory retention obligations or other overriding legal reasons that necessitate further storage.

In summary, personal data will be deleted once the purpose for which it was collected has been fulfilled or the legal basis for its storage no longer applies, unless there are still legal obligations or legitimate interests that justify further storage.


10. Security measures and data minimization

Comprehensive technical and organizational measures are implemented to effectively protect your personal data against accidental or unlawful destruction, loss, alteration, or unauthorized disclosure or access. Care is taken to ensure that only the data absolutely necessary for the respective purpose is collected and processed. This data minimization strategy significantly reduces the risk of misuse and unauthorized access. The security measures are continuously updated to reflect the latest technological advancements, guaranteeing a consistently high level of data protection.


11. SSL/TLS encryption

To protect the security of your data during transmission, state-of-the-art encryption methods (e.g., SSL or TLS) are used via HTTPS. SSL (Secure Socket Layer) and TLS (Transport Layer Security) are protocols for encrypting data transmissions on the internet. This ensures that the data exchanged between your browser and the server is protected from unauthorized access. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the padlock icon in your browser's address bar.


12. Encrypted payment transactions via the website

If, after concluding a paid contract, you are obligated to provide the responsible party with payment data (e.g., bank account number for direct debit), the data transmission is encrypted. This encryption technology offers a high level of protection for payment data and prevents access by third parties. You can recognize the encrypted transmission path by the fact that the browser's address bar changes from "http://" to "https://" and a padlock icon is displayed in the browser bar. The use of SSL/TLS ensures that payment data is handled securely and confidentially.


13. Cookies

This website uses cookies. These are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.) when you visit the site. Cookies do not harm your device and do not contain viruses, Trojans, or other malware.

The cookie stores information related to the specific device being used. However, this does not mean that the data controller thereby gains direct knowledge of your identity.

The use of cookies serves, among other things, to make your use of the website more convenient. For example, the website operator uses so-called session cookies to recognize that you have already visited certain pages of the website. These are automatically deleted when you leave the site.

Furthermore, the data controller also uses temporary cookies to optimize user-friendliness. These cookies are stored on your device for a specific, predetermined period. When you revisit the site to use the services, it is automatically recognized that you have already been there and what entries and settings you have made, so you don't have to enter them again.

Secondly, the data controller uses cookies to statistically record website usage and to evaluate this data in order to optimize the services offered to you. These cookies allow the data controller to automatically recognize that you have visited the site before when you return. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is necessary for the aforementioned purposes to safeguard the legitimate interests of the controller and third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser to prevent cookies from being stored on your computer or to always display a notification before a new cookie is created. Completely disabling cookies may prevent you from using all the website's features.


14. Use of the contact form

If you have any questions, you can contact the person in charge using the form provided on this website.

Data processing for the purpose of contacting the controller is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of the freely given consent.

The personal data collected for the use of the contact form will be regularly deleted after the request has been processed.


15. Inquiries via email or telephone

It is possible to submit inquiries to the data controller via email or telephone. The personal data transmitted in this process (e.g., name, email address, telephone number, and the inquiry itself) will be processed and stored by the data controller solely for the purpose of handling the inquiry and any follow-up questions.

The legal basis for this data processing is Article 6(1)(b) GDPR, as the processing is necessary for the performance of a contract or for taking steps prior to entering into a contract. If the processing is not related to a contract, it is based on Article 6(1)(f) GDPR, as the controller has a legitimate interest in processing and responding to inquiries.


16. Inquiries via WhatsApp

You can send inquiries to the data controller via WhatsApp. Please note that WhatsApp stores the transmitted data on servers in the USA. Therefore, no sensitive information should be transmitted via this channel. The personal data you submit (e.g., name, telephone number, and the inquiry itself) will be processed and stored by the data controller solely for the purpose of handling your inquiry and any follow-up questions.

The legal basis for this data processing is Article 6(1)(b) GDPR, as the processing is necessary for the performance of a contract or for taking steps prior to entering into a contract. If the processing is not related to a contract, it is based on Article 6(1)(f) GDPR, as the controller has a legitimate interest in processing and responding to inquiries.

Additional information on how WhatsApp processes your personal data can be found in their privacy policy at: https://www.whatsapp.com/legal/.


17. Registration on the website

It is possible to register on the website. The data entered for this purpose will only be used by the responsible party for the use of the respective offer or service for which registration is made. The mandatory information requested during registration must be provided in full. Otherwise, the registration will be rejected.

For important changes, such as changes to the scope of services or technically necessary changes, the responsible party uses the email address provided during registration to inform customers in this way.

The processing of data entered during registration is based on the user's consent (Art. 6 para. 1 lit. a GDPR). Consent can be withdrawn at any time. An informal notification by email to the data controller is sufficient. The lawfulness of data processing already carried out remains unaffected by the withdrawal.


Using Google for login

Users have the option to log in to this website using their Google account. In doing so, certain personal data is transmitted from Google to the website to enable the login. This data is used exclusively for processing and managing the login and for using the services offered on the website. The processing of this data is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Logging in via Google offers users a convenient and quick way to access the services of the data controller without requiring separate registration. However, please note that by using this function, data will be transmitted to and processed by Google. Google Ireland Limited is located at Gordon House, Barrow Street, Dublin 4, Ireland. Further information on data processing by Google can be found in Google's privacy policy at: https://policies.google.com/privacy.

Should users no longer wish to log in via Google, they can disconnect this connection at any time in their Google account settings. The data transmitted by Google will then no longer be used, and the user account on this website will remain active, but can be deleted if necessary.

The operator of this website undertakes to treat the transmitted data confidentially and not to pass it on to third parties, unless there is a legal obligation to do so or the disclosure is necessary to fulfill contractual obligations.


18th Newsletter

If you wish to subscribe to the newsletter offered on this website, the responsible party requires a valid email address from you, as well as information that allows verification that you are the owner of the specified email address and that you agree to receive the newsletter (double opt-in procedure). No further data is collected. This data is used exclusively for sending the requested information and will not be shared with third parties.

The processing of the data entered in the newsletter registration form is based solely on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke your consent to the storage of your data, your email address, and its use for sending the newsletter at any time, for example, via the "Unsubscribe" link in the newsletter or by sending a corresponding message to the data controller. The lawfulness of the data processing already carried out remains unaffected by the revocation.

The data you provided for the purpose of subscribing to the newsletter will be stored until you unsubscribe and will be deleted after you unsubscribe. Data stored by the data controller for other purposes (e.g., email addresses for the members' area) will remain unaffected.


Brevo

The newsletter is sent via the provider Brevo. Brevo is a service of Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. The email addresses of newsletter recipients, as well as other data described in this notice, are stored on Brevo's servers in the EU. Brevo uses this information to send and analyze the newsletter on behalf of the data controller. According to its own information, Brevo may also use this data to optimize or improve its own services, for example, for the technical optimization of newsletter delivery and display, or for business purposes, such as determining the countries of origin of the recipients. However, Brevo does not use the newsletter recipients' data to contact them directly or to share it with third parties.

Further information on data protection at Brevo can be found at: https://www.brevo.com/de/legal/privacypolicy/.

In addition, technical and organizational security measures are implemented to protect your personal data against manipulation, loss, destruction, or unauthorized access. These security measures are continuously improved in line with technological developments.


Sending to existing customers without consent

Newsletters are sent to existing customers even without their explicit consent under certain conditions. This is permissible according to Art. 6 para. 1 lit. f GDPR if the following conditions are met:

a) Existing customer status: The customer has provided their email address in connection with the sale of a product or service.
b) Direct advertising for own similar products or services: The newsletter contains only advertising for own similar products or services.
c) Notice of right to object: The customer was clearly and explicitly informed, both when the email address was collected and in every newsletter, that he or she can object to the use of his or her email address at any time without incurring any costs other than the transmission costs according to the basic rates.
d) No objection from the customer: The customer has not objected to the use of his email address.

This type of newsletter distribution is based on the legitimate interest of the data controller to inform existing customers about similar products or services and to maintain the business relationship. Data processing is carried out in accordance with Article 6(1)(f) GDPR. Customers can, of course, object to the use of their email address for this purpose at any time. An informal notification by email to the data controller or the use of the "unsubscribe" link in the respective newsletter is sufficient for this purpose.


19. Use of analytics and tracking tools

Analysis and tracking tools are used to ensure a user-friendly design and continuous optimization of this website. These measures help to statistically record website usage and thus optimize the services offered to you. The storage and analysis of this data is based on Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR, as the provider has a legitimate interest in offering an appealing and functional website.

If corresponding consent has been obtained, processing is additionally based on Article 6 Paragraph 1 Sentence 1 Letter a GDPR and Section 25 Paragraph 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting). This consent can be revoked at any time.


Adobe Analytics

This website uses Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland (“Adobe”). Adobe Analytics uses cookies to analyze how you use this website. The information generated by the cookie about your use of this website is stored on Adobe servers within the EU and may be transferred to servers in the USA for further processing. However, by activating IP anonymization on this website, your IP address will be shortened by Adobe within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transferred.

Adobe is certified under the EU-US Data Privacy Framework (DPF), which ensures adequate protection for the transfer of personal data from the EU to the US. Every company certified under the DPF commits to complying with these strict data protection standards. Further information about the EU-US DPF can be found at: https://www.dataprivacyframework.gov/.

Further information on data protection at Adobe Analytics can be found at: https://www.adobe.com/de/privacy/policy.html.


Clicky

This website uses Clicky, a web analytics service provided by Roxr Software Ltd., 10883 SE Main St, Suite 201, Milwaukie, OR 97222, USA ("Clicky"). Clicky uses cookies to analyze user behavior on this website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Clicky server in the USA. Clicky anonymizes users' IP addresses before storing them.

Further information on data protection at Clicky can be found at: https://clicky.com/terms/privacy.


Crazy Egg

This website uses Crazy Egg, a web analytics service provided by Crazy Egg, Inc., 16220 E. Ridgeview Lane, La Mirada, CA 90638, USA ("Crazy Egg"). Crazy Egg uses cookies to analyze user behavior on this website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Crazy Egg server in the USA. Crazy Egg anonymizes users' IP addresses before storing them.

Further information on data protection at Crazy Egg can be found at: https://support.crazyegg.com/hc/en-us/articles/360056916293-Crazy-Egg-Privacy.


etracker

This website uses etracker, a web analytics service provided by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany ("etracker"). etracker uses cookies to analyze user behavior on this website. The information provided by the cookie about your use of this website is stored and processed exclusively on servers in Germany. etracker anonymizes users' IP addresses before storing them.

Further information on data protection at etracker can be found at: https://www.etracker.com/datenschutz/.


Fathom Analytics

This website uses Fathom Analytics, a web analytics service provided by Conva Ventures Inc., BOX 37058 Millstream PO, Victoria, British Columbia, V9B 0E8, Canada ("Fathom Analytics"). Fathom Analytics does not use cookies and only collects anonymized data to analyze user behavior on this website. The information generated by your use of this website is stored on servers in Germany.

Further information on data protection at Fathom Analytics can be found at: https://usefathom.com/privacy.


Google Ads Tracking

This website uses Google Ads Tracking, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Ads Tracking uses cookies to measure the effectiveness of advertising campaigns and to analyze your use of this website. The information generated by the cookie about your use of this website is generally transmitted to and stored on Google servers in the United States.

Google is certified under the EU-US Data Privacy Framework (DPF), which ensures adequate protection for the transfer of personal data from the EU to the US. Every company certified under the DPF commits to complying with these strict data protection standards. Further information about the EU-US DPF can be found at: https://www.dataprivacyframework.gov/.

Further information on data protection at Google Ads Tracking can be found at: https://policies.google.com/privacy.


Google Ads Remarketing

This website uses Google Ads Remarketing, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Ads Remarketing uses cookies to display targeted advertising to users who have previously visited this website. This allows us to present visitors to this website with relevant ads on other websites within the Google Display Network. The information provided by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA.

Google is certified under the EU-US Data Privacy Framework (DPF), which ensures adequate protection for the transfer of personal data from the EU to the US. Every company certified under the DPF commits to complying with these strict data protection standards. Further information about the EU-US DPF can be found at: https://www.dataprivacyframework.gov/.

Further information on data protection at Google Ads Remarketing can be found at: https://policies.google.com/privacy.


Google AdSense

This website uses Google AdSense, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google AdSense uses cookies to display personalized advertising on this website and to analyze ad performance. The information generated by the cookie about your use of this website is generally transmitted to and stored on Google servers in the USA.

Google is certified under the EU-US Data Privacy Framework (DPF), which ensures adequate protection for the transfer of personal data from the EU to the US. Every company certified under the DPF commits to complying with these strict data protection standards. Further information about the EU-US DPF can be found at: https://www.dataprivacyframework.gov.

Further information on data protection at Google AdSense can be found at: https://policies.google.com/privacy.


Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies to analyze how users use the website. The information generated by the cookie about your use of the website is generally transmitted to and stored by Google on servers in the United States. However, by activating IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the US.

Google is certified under the EU-US Data Privacy Framework (DPF), which ensures adequate protection for the transfer of personal data from the EU to the US. Every company certified under the DPF commits to complying with these strict data protection standards. Further information about the EU-US DPF can be found at: https://www.dataprivacyframework.gov.

Further information on data protection at Google Analytics can be found at: https://policies.google.com/privacy.


Google Conversion Tracking

This website uses Google Conversion Tracking, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Conversion Tracking uses cookies to measure the effectiveness of ads and to analyze your use of this website. The information generated by the cookie about your use of this website is generally transmitted to and stored on Google servers in the United States.

Google is certified under the EU-US Data Privacy Framework (DPF), which ensures adequate protection for the transfer of personal data from the EU to the US. Every company certified under the DPF commits to complying with these strict data protection standards. Further information about the EU-US DPF can be found at: https://www.dataprivacyframework.gov.

Further information on data protection at Google Conversion Tracking can be found at: https://policies.google.com/privacy.


Google Tag Manager

We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Tag Manager itself does not use cookies and does not collect any personal data. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data.

Google is certified under the EU-US Data Privacy Framework (DPF), which ensures adequate protection for the transfer of personal data from the EU to the US. Further information about the EU-US DPF can be found at: https://www.dataprivacyframework.gov.

Further information on data protection at Google Tag Manager can be found at: https://policies.google.com/privacy.


Heap

This website uses Heap, a web analytics service provided by Heap, Inc., 225 Bush St, Suite 200, San Francisco, CA 94104, USA ("Heap"). Heap Analytics uses cookies and other technologies to collect and analyze data about user behavior on this website. The information generated by these technologies about your use of this website is generally stored on servers in the USA.

Further information on data protection at Heap can be found at: https://heap.io/privacy.


Hotjar

This website uses Hotjar, a web analytics service provided by Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta ("Hotjar"). Hotjar uses cookies to analyze and visually represent user behavior on this website. The information provided by the cookie about your use of this website is stored on servers within the European Union.

Further information on data protection at Hotjar can be found at: https://www.hotjar.com/de/datenschutz/.


IONOS WebAnalytics

This website uses IONOS WebAnalytics, a web analytics service provided by 1&1 IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS WebAnalytics enables the analysis of visitor numbers and behavior (e.g., number of page views, duration of a website visit, bounce rates), visitor sources (i.e., the website from which the visitor came), visitor locations, and technical data (browser and operating system versions). For this purpose, IONOS stores the following data in particular:

a) Referrer (previously visited website)
b) Requested website or file
c) Browser type and browser version
d) Operating system used
e) Device type used
f) Time of access
g) IP address in anonymized form (used only to determine the location of access)

According to IONOS, data collection is completely anonymized, so no conclusions can be drawn about individual persons. IONOS WebAnalytics does not store cookies.

Further information on data collection and processing by IONOS WebAnalytics can be found in the IONOS privacy policy at: https://www.ionos.de/terms-gtc/datenschutzerklaerung/.


Kissmetrics

This website uses Kissmetrics, a web analytics service provided by Sandstorm Analytics, Inc., 2529 Central Avenue, St. Petersburg, FL 33713, USA ("Kissmetrics"). Kissmetrics uses cookies to analyze user behavior on this website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Kissmetrics server in the USA. Kissmetrics anonymizes users' IP addresses before storing them.

Kissmetrics is certified under the EU-US Data Privacy Framework (DPF), which ensures adequate protection for the transfer of personal data from the EU to the US. Every DPF-certified company commits to complying with these strict data protection standards. Further information about the EU-US DPF can be found at: https://www.dataprivacyframework.gov.

Further information on data protection at Kissmetrics can be found at: https://www.kissmetrics.io/privacy.


Lucky Orange

This website uses Lucky Orange, a web analytics service provided by Lucky Orange LLC., 8665 W 96th St, Suite 100, Overland Park, KS 66212, USA ("Lucky Orange"). Lucky Orange uses cookies to analyze user behavior on this website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Lucky Orange server in the USA. Lucky Orange anonymizes users' IP addresses before storing them.

Further information on data protection at Lucky Orange can be found at: https://privacy.luckyorange.com/.


Matomo

This website uses Matomo, a web analytics service provided by InnoCraft Ltd., 7 Waterloo Qy Pipitea Wellington, Greater Wellington, 6011, New Zealand ("Matomo"). Matomo uses cookies to analyze user behavior on this website. The information generated by the cookie about your use of this website is stored on servers in Germany. Matomo anonymizes users' IP addresses before storing them.

Further information on data protection at Matomo can be found at: https://matomo.org/privacy-policy/.


Microsoft Advertising

This website uses Microsoft Advertising, a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (“Microsoft”). Microsoft Advertising uses cookies and similar technologies to measure the effectiveness of advertising campaigns and to analyze user behavior on this website. The information provided by the cookie about your use of this website is generally transmitted to and stored on Microsoft servers in the USA.

Microsoft is certified under the EU-US Data Privacy Framework (DPF), which ensures adequate protection for the transfer of personal data from the EU to the US. Every DPF-certified company commits to complying with these strict data protection standards. For more information about the EU-US DPF, please visit: https://www.dataprivacyframework.gov/.

Further information on data protection at Microsoft Advertising can be found at: https://privacy.microsoft.com/de-de/privacystatement.


Microsoft Clarity

This website uses Microsoft Clarity, a web analytics service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (“Microsoft”). Clarity uses cookies and similar technologies to analyze user behavior on this website. The information generated by the cookie about your use of this website is generally transmitted to and stored on Microsoft servers.

Microsoft is certified under the EU-US Data Privacy Framework (DPF), which ensures adequate protection for the transfer of personal data from the EU to the US. Further information about the EU-US DPF can be found at: https://www.dataprivacyframework.gov.

Further information on data protection at Microsoft Clarity can be found at: https://privacy.microsoft.com/de-de/privacystatement.


Mixpanel

This website uses Mixpanel, a web analytics service provided by Mixpanel, Inc., 1 Front Street, 28th Floor, San Francisco, CA 94111, USA ("Mixpanel"). Mixpanel uses cookies to analyze user behavior on this website. The information generated by the cookie about your use of this website is generally transmitted to and stored on Mixpanel servers in the USA.

Mixpanel is certified under the EU-US Data Privacy Framework (DPF). This ensures adequate protection for the transfer of personal data from the EU to the USA. Every company certified under the DPF commits to complying with strict data protection standards. Further information about the EU-US DPF can be found at: https://www.dataprivacyframework.gov/.

Further information on data protection at Mixpanel can be found at: https://mixpanel.com/legal/privacy-policy/.


Mouseflow

This website uses Mouseflow, a web analytics service provided by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen V, Denmark ("Mouseflow"). Mouseflow uses cookies to analyze user behavior on this website. The information generated by the cookie about your use of this website is generally transmitted to and stored on Mouseflow servers in the USA.

Mouseflow is certified under the EU-US Data Privacy Framework (DPF). This ensures adequate protection for the transfer of personal data from the EU to the USA. Every DPF-certified company commits to adhering to strict data protection standards. Further information about the EU-US DPF can be found at: https://www.dataprivacyframework.gov/.

Further information on data protection at Mouseflow can be found at: https://mouseflow.com/legal/privacy/.


Piwik PRO

This website uses Piwik PRO, a web analytics service provided by Piwik PRO GmbH, Kurfürstendamm 21, 10719 Berlin, Germany. Piwik PRO uses cookies and similar technologies to analyze user behavior on this website. The information generated by the cookie about your use of this website is generally stored on servers within the EU.

Further information on data protection at Piwik PRO can be found at: https://piwikpro.de/datenschutz-compliance/.


Plausible Analytics

This website uses Plausible Analytics, a web analytics service provided by Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia ("Plausible Analytics"). Plausible Analytics is a privacy-friendly web analytics service that does not use cookies and does not collect any personally identifiable information. The information generated about your use of this website is stored on servers in Germany. Plausible Analytics anonymizes all collected data and ensures that no personally identifiable information is collected or stored.

Further information on data protection at Plausible Analytics can be found at: https://plausible.io/data-policy


Statcounter

This website uses Statcounter, a web analytics service provided by StatCounter, Guinness Enterprise Centre, Taylor's Lane, Dublin 8, Ireland ("Statcounter"). Statcounter uses cookies and similar technologies to analyze user behavior on this website. The information generated by the cookie about your use of this website is stored on Statcounter servers in Ireland. Statcounter anonymizes users' IP addresses before storing them.

Further information on data protection at Statcounter can be found at: https://statcounter.com/about/legal/.


Trackboxx

This website uses Trackboxx, a web analytics service provided by Trackboxx, Humboldtstraße 9, 38820 Halberstadt, Germany ("Trackboxx"). Trackboxx does not use cookies and does not collect any personal data to analyze user behavior on this website. The information generated about your use of this website is stored on servers in Germany.

Trackboxx places great importance on data protection and is fully GDPR compliant. Further information on data protection at Trackboxx can be found at: https://trackboxx.com/datenschutz.


WP Statistics

This website uses WP Statistics, a web analytics plugin for WordPress websites, developed by VeronaLabs, Tornimäe 5, 10145, Tallinn, Estonia ("WP Statistics"). WP Statistics does not use cookies and only collects anonymized data to analyze user behavior on this website. The information generated about your use of this website is stored on the server hosting this website.

Further information on data protection at WP Statistics can be found at: https://wp-statistics.com/privacy-and-policy/.


20. Social Media Plugins

This section provides information about the integration and use of social media on this website. This includes details on data processing and your rights in connection with the use of social media plugins and their functions.


AddThis

This website uses features from AddThis, a service provided by Oracle Corporation, 2300 Oracle Way, Austin, TX 78741, USA. AddThis provides tools that allow you to share content from this website across various social media platforms and increase your reach. When you use AddThis features, data is transmitted to and processed by AddThis. This data includes, among other things, information about the social media platforms you use, your IP address, the type of browser you use, your browser language, the time of your visit, and your usage activity on this website.

By using AddThis, your data may be transferred to the USA and other third countries. AddThis uses this data to analyze the use of its services and to compile reports on website activity for the website operator. AddThis may also share this information with third parties if required by law or if third parties process this data on AddThis's behalf.

The use of AddThis is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, as consent is required for the use of cookies and other tracking technologies. You can withdraw your consent at any time with effect for the future. If you do not wish to use the functions of AddThis, you can adjust the corresponding setting in your browser to prevent the AddThis plugins from loading. Please note, however, that in this case, the functionality of AddThis will be limited.

AddThis also offers you the option to manage your privacy settings and disable tracking via the following link: https://datacloudoptout.oracle.com.

The transfer of personal data to the USA is based on the EU Commission's Standard Contractual Clauses. Further information can be found at: https://oracle.com/legal/privacy/addthis-privacy-policy.html.

Further information on data processing by AddThis can be found in the AddThis privacy policy at: https://oracle.com/legal/privacy/addthis-privacy-policy.html.


21. Form Tools

Here you will find information on the use of form tools on this website, including details on the processing of personal data and your rights in connection with the use of these forms.

The use of these tools is based on legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, in order to ensure efficient data collection and management. Where necessary, data processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDSG. Consent can be withdrawn at any time with effect for the future.


Cognito Forms

This website uses Cognito Forms, a service provided by Cognito LLC, 929 Gervais Street, Suite D, Columbia, SC 29201, USA. Cognito Forms allows you to create user-friendly forms to collect your data. When you fill out a form on this website, the data you enter is transmitted to and stored by Cognito Forms.

Cognito Forms uses this data to manage and analyze the collected information. Your data may be transferred to and stored in the USA. Cognito Forms may also share this information with third parties if required by law or if third parties process this data on Cognito Forms' behalf.

Cognito Forms is certified under the EU-US Data Privacy Framework (DPF). This ensures adequate protection for the transfer of personal data from the EU to the USA. Every company certified under the DPF commits to complying with strict data protection standards. Further information about the EU-US DPF can be found at: https://www.dataprivacyframework.gov/.

Further information on data processing by Cognito Forms can be found in Cognito Forms' privacy policy at: https://www.cognitoforms.com/privacy.


Formstack

This website uses Formstack, a service provided by Formstack LLC, 11671 Lantern Rd Suite 300 Fishers, IN 46038, USA. Formstack allows you to create customized forms to collect your data. When you fill out a form on this website, the data you enter is transmitted to and stored by Formstack.

Formstack uses this data to manage and analyze the collected information. Your data may be transferred to and stored in the USA. Formstack may also share this information with third parties if required by law or if third parties process this data on Formstack's behalf.

Formstack LLC is certified under the EU-US Data Privacy Framework (DPF). This ensures adequate protection for the transfer of personal data from the EU to the USA. Every company certified under the DPF commits to complying with strict data protection standards. Further information about the EU-US DPF can be found at: https://www.dataprivacyframework.gov/.

Further information on data processing by Formstack can be found in Formstack's privacy policy at: https://www.formstack.com/privacy.


Google Forms

This website uses Google Forms, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Forms allows you to create various forms to collect your data. When you fill out a form on this website, the data you enter will be transmitted to and stored by Google.

Google Forms uses this data to manage and analyze the collected information. Your data may be transferred to and stored in the USA and other third countries. Google may also share this information with third parties if required by law or if third parties process this data on Google's behalf.

Google Ireland Limited is certified under the EU-US Data Privacy Framework (DPF). This ensures adequate protection for the transfer of personal data from the EU to the USA. Every company certified under the DPF commits to complying with strict data protection standards. Further information about the EU-US DPF can be found at: https://www.dataprivacyframework.gov/.

Further information on data processing by Google Forms can be found in Google's privacy policy at: https://policies.google.com/privacy.


Jotform

This website uses Jotform, a service provided by Jotform Inc., 4 Embarcadero Center, Suite 780, San Francisco, CA 94111, USA. Jotform allows you to create user-friendly forms to collect your data. When you fill out a form on this website, the data you enter is transmitted to and stored by Jotform.

Jotform uses this data to manage and analyze the collected information. Your data may be transferred to and stored in the USA. Jotform may also share this information with third parties if required by law or if third parties process this data on Jotform's behalf.

Jotform Inc. is certified under the EU-US Data Privacy Framework (DPF). This ensures adequate protection for the transfer of personal data from the EU to the USA. Every company certified under the DPF commits to complying with strict data protection standards. Further information about the EU-US DPF can be found at: https://dataprivacyframework.gov.

Further information on data processing by Jotform can be found in Jotform's privacy policy at: https://jotform.com/privacy.


22. Processing of address data for postal advertising

The data controller collects and processes your address data in order to send you postal advertising about products and services. This processing is based on the legitimate interest of the data controller pursuant to Article 6(1)(f) GDPR. The legitimate interest lies in informing you about offers and maintaining the business relationship.

If you no longer wish to receive postal advertising, you have the right to object to the use of your address data for this purpose at any time. You can submit your objection informally by email, telephone, or post. Upon receipt of your objection, your data will be immediately removed from the mailing list and the sending of postal advertising will cease.


23. Shipping and delivery of goods

When goods are shipped to customers, the data controller collects and processes additional personal data necessary for handling the shipment. This includes, in particular, the name, delivery address, and any special delivery instructions. This data is used exclusively for processing the shipment and delivering the ordered goods.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, as it is necessary for the performance of the contract, namely the delivery of the ordered goods.

As part of the order processing, your data will be shared with contracted shipping providers to the extent necessary for delivery. These providers are contractually obligated to treat your data confidentially and to use it only for the purpose of fulfilling their service.

After completion of the shipment and fulfillment of the contractual relationship, your shipping data will be stored in accordance with the statutory retention periods and subsequently deleted, unless there are further legal obligations to retain it.


24. Conclusion of contracts for services or digital content

When concluding contracts for services or digital content, the data controller collects and processes your personal data in order to fulfill the contractual obligations. This data includes, in particular, your contact information such as name, address, email address, as well as relevant information regarding the use of the services or digital content.

Your data is processed on various legal bases: In accordance with Article 6(1)(b) GDPR, the controller processes your data for the performance of the contract and for carrying out pre-contractual measures, such as the provision and use of the services. Furthermore, processing is carried out in accordance with Article 6(1)(c) GDPR for compliance with legal obligations, including adherence to statutory retention requirements. In addition, processing is carried out in accordance with Article 6(1)(f) GDPR for the purposes of legitimate interests, such as improving services and ensuring IT security.

The collected data will be used exclusively for the execution and fulfillment of the contracts and will be deleted after the contractual relationship has ended and any statutory retention periods have expired. Your data may be shared with third parties involved in the provision of services, such as IT service providers, as part of the contract fulfillment process. These third parties are contractually obligated to treat your data confidentially and to use it solely for the purpose of providing the services.

The data controller ensures that your data is only shared to the extent necessary for fulfilling the contract. Your data will not be transferred beyond this scope unless you have expressly consented to such transfer. Your data will not be shared with third parties without your explicit consent, for example, for advertising purposes.


25. Third-party payment services

This website uses third-party payment services to ensure a secure and convenient payment option. When you make a purchase through the website, your payment details (e.g., name, payment amount, bank account details, credit card number) are processed directly by the respective payment service provider for payment processing purposes. The terms and conditions and privacy policies of the respective provider apply.

Your data is processed on the basis of Article 6(1)(b) GDPR for the performance of the contract and in the interest of a smooth, convenient, and secure payment process in accordance with Article 6(1)(f) GDPR. Where your consent is required for certain actions, data processing is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.


Amazon Pay

You have the option to pay for your purchases using Amazon Pay. Amazon Pay is a payment service provided by Amazon Payments Europe SCA, 38 avenue John F. Kennedy, L-1855 Luxembourg. When you use Amazon Pay, you will be redirected to the Amazon website to complete your payment. Your payment information will be collected and processed directly by Amazon.

Amazon Payments Europe SCA is certified under the EU-US Data Privacy Framework (DPF), which ensures adequate protection for the transfer of personal data from the EU to the US. Every company certified under the DPF commits to complying with these strict data protection standards. Further information about the EU-US DPF can be found at: https://www.dataprivacyframework.gov/.

Additional information on how Amazon Pay processes your personal data can be found in the Amazon Pay Privacy Notice at: https://pay.amazon.com/de/help/201212490.


Apple Pay

You have the option to pay for your purchases using Apple Pay. Apple Pay is a payment service provided by Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, T23 YK84, Ireland. When you use Apple Pay, you will be redirected to Apple's website to complete your payment. Your payment information will be collected and processed directly by Apple.

Additional information on how Apple Pay processes your personal data can be found in the Apple Pay Privacy Policy at: https://www.apple.com/legal/privacy/de-ww/.


Klarna

You have the option to pay for your purchases via Klarna. Klarna is a payment service provided by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. When you use Klarna, your payment information is collected and processed directly by Klarna.

Additional information on the processing of your personal data by Klarna can be found in the Klarna privacy policy at: https://www.klarna.com/de/datenschutz/.


PayPal

You have the option to pay for your purchases via PayPal. PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg. When you use PayPal, your payment information is collected and processed directly by PayPal.

PayPal is certified under the EU-US Data Privacy Framework (DPF), which ensures adequate protection for the transfer of personal data from the EU to the US. Every company certified under the DPF commits to complying with these strict data protection standards. Further information about the EU-US DPF can be found at: www.dataprivacyframework.gov.

Additional information on how PayPal processes your personal data can be found in the PayPal Privacy Statement at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.


26. Google Fonts

This website uses Google Fonts. Google Fonts is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service allows the use of fonts provided by Google to improve the visual design of this website.

To ensure the protection of your data, Google Fonts are hosted locally on our own server. This means that no connection is established to Google's servers, and your IP address is not transmitted to Google. Your data remains entirely on the server of the data controller and is not shared with third parties.


27. MyFonts

This website uses MyFonts. MyFonts is a service provided by Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA. MyFonts enables the use of fonts provided by Monotype to enhance the visual design of this website.

When you access MyFonts, your IP address is transmitted to and stored on Monotype servers in the USA.

Additional information on the processing of your personal data by MyFonts can be found in the MyFonts privacy policy at: https://www.monotype.com/legal/privacy-policy.


28. External Videos

This website embeds external videos to provide you with multimedia content and an interactive user experience. These embeds are provided by third-party providers who may process personal data when you use their services.

Your data is processed on the basis of Article 6(1)(b) GDPR for the performance of the contract, in particular for the provision of the videos and related services, as well as in our legitimate interest in a smooth, convenient, and secure user experience pursuant to Article 6(1)(f) GDPR. Where your consent is required for certain actions, data processing is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.


YouTube

This website uses YouTube to embed videos. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you visit a page with YouTube videos, a connection is established to YouTube's servers. Information about your use of this website, including your IP address, is transmitted to and stored by YouTube.

Google is certified under the EU-US Data Privacy Framework (DPF), which ensures adequate protection for the transfer of personal data from the EU to the US. Further information about the EU-US DPF can be found at: https://www.dataprivacyframework.gov.

Further information on how YouTube processes your personal data can be found in the YouTube privacy policy: https://policies.google.com/privacy.


29. AI Tool

This website uses an AI tool to offer you enhanced functionality and personalized experiences. This tool uses artificial intelligence to automate complex tasks, perform analyses, and interact with users.

Your data is processed on the basis of Article 6(1)(b) GDPR for the performance of the contract, in particular for providing the extended functionalities, as well as in the legitimate interest of a smooth, convenient and secure user experience pursuant to Article 6(1)(f) GDPR. Where your consent is required for certain actions, data processing is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Below you will find detailed information about the AI ​​tool:


ChatGPT

ChatGPT is used to enable automated interactions on the website. ChatGPT is a service provided by OpenAI, 3180 18th Street, San Francisco, CA 94110, USA. Personal data, such as your IP address and the content of your requests, may be transmitted to OpenAI in this process.

Further information on data processing by ChatGPT can be found in OpenAI's privacy policy: https://openai.com/privacy.