Privacy Policy
General information
This privacy policy explains the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offer and the associated websites, functions and content as well as external online presences, such as our social media profiles (hereinafter collectively referred to as “online offer”).
With regard to the terms used, such as “personal data” or their “processing”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
Privatsphäre-Einstellungen ändern Historie der Privatsphäre-Einstellungen Einwilligungen widerrufen1. Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice on this website.
2. Rights of the data subject
The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:
2.1 Right of information (according to Art. 15 GDPR)
In particular, you have a right to free information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making including profiling and, if applicable, meaningful information on the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed of the guarantees pursuant to Art. 46 GDPR if your data is transferred to third countries.
2.2 Right of rectification (according to Art. 16 GDPR)
You have a right to immediate correction of incorrect data concerning you and/or completion of your incomplete data stored by us.
2.3 Right of deletion (according to Art. 17 GDPR)
You have the right to request the deletion of your personal data if the requirements of Art. 17 para. 1 GDPR are met. However, this right does not exist in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
2.4 Right of restriction of processing (according to Art. 18 GDPR)
You have the right to demand the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse to delete your data due to inadmissible data processing and instead demand the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail.
2.5 Right to obtain information (according to Art. 19 GDPR)
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
2.6 Right of data portability (according to Art. 20 GDPR)
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller, insofar as this is technically feasible.
2.7 Right of revocation of consents granted (according to Art. 7 para. 3 GDPR)
If you have given your consent to data processing, you can revoke this consent at any time for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
2.8 Right to lodge a complaint (according to Art. 77 GDPR)
If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy. The competent supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based.
2.9 Right of objection (according to Art. 21 GDPR)
If we process your personal data as part of a balancing of interests on the basis of our overriding legitimate interest, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation.
If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to further processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. You can exercise your objection as described above.
3. Relevant legal basis
In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing. If the legal basis is not stated in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR, the legal basis for processing for the performance of our services and implementation of contractual measures as well as responding to inquiries is Art. 6 para. 1 lit. b GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 para. 1 lit. c GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 para. 1 lit. f GDPR.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
4. Changes and updates to the privacy policy
We ask you to inform yourself regularly about the content of our privacy policy. We will adapt the privacy policy as soon as changes to the data processing we carry out make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.
5. Cooperation with processors and third parties
This website is hosted by an external service provider, namely webgo GmbH, Wandsbeker Zollstr. 95, 22041 Hamburg (Webgo). Personal data collected on this website is stored on the hoster’s servers. The servers are located in Germany.
The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our hoster will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data.
In order to ensure data protection-compliant processing, we have concluded a contract data processing agreement with our host webgo GmbH in accordance with Art. 28 GDPR.
6. Transfer to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure or transfer of data to third parties, this will only take place if it is done to fulfill our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests.
Subject to legal or contractual permissions, we process or have the data processed in a third country only if the special requirements of Art. 44 et seq. GDPR are met. This means that processing takes place, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the EU (e.g. for the USA through the “Privacy Shield”) or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).
7. Safety measures
We take appropriate technical and organizational measures in accordance with Art. 32 GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, to ensure a level of security appropriate to the risk.
The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transfer, safeguarding of availability and its separation.
We have also set up procedures to ensure that data subjects’ rights are exercised, data is deleted and we respond to data threats. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and procedures, in accordance with the principle of data protection, through technology design and data protection-friendly default settings (Art. 25 GDPR).
7.1 SSL encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
8. Logfiles
When and during your visit to our website, data is automatically collected by the browser used on your device and stored on the server of our host webgo. This data is temporarily stored in so-called log files. These are:
- Internet address (URL) that was requested,
- Timestamp (date and time of the query),
- amount of data transferred,
- URL of the website from which you came to our website (so-called referrer),
- Browser used,
- operating system used,
- anonymized IP address.
Log files go back a maximum of 4 weeks, after which they are deleted or anonymized.
This data is not merged with other data sources.
The data stored in the log files does not allow us to draw any conclusions about your person. We do not intend, nor are we able with reasonable effort, to obtain further personal data about you via the stored data.
This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The log files and the data they contain are necessary to maintain server operation and to be able to analyze and shut down malicious behavior. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website. In order to ensure the operation and correct display of the website and for statistical purposes, it is necessary to record the server log files.
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The collection of data for the provision of the website and the storage of data in server log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.
9. Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies).
Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
If you write a comment on our website, this may constitute consent to store your name, e-mail address and website in cookies. This is a convenience function so that you don’t have to enter all this data again when you write another comment. These cookies are stored for one year.
We may work together with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard disk when you visit our website (third-party cookies). If we work together with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following paragraphs.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies or deactivate them, the functionality of this website may be restricted.
If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately in this privacy policy and, if necessary, request your consent.
We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents. Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/. The legal basis for the processing of personal data in this context is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR.
Google AdSense
We use functions of the online advertising service Google AdSense on our website. Google AdSense is a service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google AdSense is a Google service that displays Google advertising from advertisers on third-party websites. By integrating Google AdSense, we provide Google with corresponding advertising space on our website.
Google AdSense uses “cookies”, which are text files placed on your device, to help the website analyze how users use the site. Google AdSense can also use so-called web beacons (invisible graphics). These web beacons can be used to analyze information such as visitor traffic on the pages of this website. The information generated by cookies and web beacons about your use of this website (including your IP address) and delivery of advertising formats is transmitted to a Google server, possibly in the USA or other third countries, and stored there. In this way, Google can tell you on which website the advertising material has been used in order to be able to allocate a commission to the website operator.
Detailed information on the information processed can be found at https://www.google.com/intl/de/policies/privacy/#infocollect under “Data we receive from your use of our services” and at https://privacy.google.com/businesses/adsservices/.
By integrating Google AdSense, we pursue the purpose of being able to offer you interest-related advertisements and to be able to finance our offer through the successful use of advertising media.
The legal basis for the processing of personal data described here is your express consent pursuant to Art. 6 para. 1 lit. a) GDPR.
The legal basis for processing the data that is processed in the context of obtaining consent is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. We have a legitimate interest in being able to prove that you have given your consent to the measurement procedure (Art. 7 para. 1 GDPR).
The data is only stored for as long as is necessary to provide the function.
Your rights:
Right of Withdrawal
You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
In addition, you can prevent the collection of data by web beacons by downloading and installing the add-on available under the following link for the respective browser:
Furthermore, you can prevent the installation of cookies by making the appropriate settings in your browser; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
10. Comment function on this website
As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commentator name you have chosen (no real name required!) will be saved and published on the website.
We need your e-mail address in order to contact you if a third party should object to your published content as unlawful. We also reserve the right to delete comments if they are objected to as unlawful by third parties.
10.1 Storage of the IP address
Your IP address is not logged when you comment and is not stored by us.
10.2 Storage duration of comments
The comments and the associated data are stored and remain on our website until the commented content has been completely deleted or the comments have to be deleted for legal reasons (e.g. offensive comments).
10.3 Legal basis
The legal basis for the storage of comment data is Art. 6 para. 1 lit. b and Art. 6 para. 1 lit. f GDPR.
11. Social media
11.1 Data processing by social networks
We maintain publicly accessible profiles in social networks. The individual social networks we use are listed below.
Social networks such as Facebook, Twitter etc. can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing operations. In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are logged in or were logged in.
Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.
11.2 Legal basis
Our social media presences are intended to ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR).
11.3 Responsible party and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (information, rectification, erasure, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. Facebook).
Please note that, despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing procedures of the social media portals. Our options depend largely on the company policy of the respective provider.
11.4 Storage period
The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for its storage no longer applies, you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Stored cookies remain on your end device until you delete them. Mandatory statutory provisions – in particular retention periods – remain unaffected.
We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
11.5 Facebook
Facebook is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA.
We have set up a company page on Facebook. You can find them here: https://www.facebook.com/sparweise
This page informs you about current articles and offers on sparweise.de. You can mark our page with a “Like” to stay up to date. Depending on how you have configured your privacy settings, we may be able to see that you have given us a Like.
If you make comments, likes or other interactions on Facebook, you must comply with the provider’s privacy policy. As the platform operator, Facebook processes the personal data of its users and visitors, creates statistics and, if necessary, user profiles for advertising purposes.
As the operator of the company page, we have no influence on Facebook’s processing. Further information on the processing of data by Facebook can be found at: https://www.facebook.com/about/privacy/
If you contact us via the chat function of the platforms, we process your information for the purpose of communicating with you. The basis for data processing is a contract or a pre-contractual measure in accordance with Art. 6 lit. b GDPR.
11.6 Pinterest
Pinterest is operated by Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA (“Pinterest”).
Details on how they handle your personal data can be found in Pinterest’s privacy policy:
https://policy.pinterest.com/de/privacy-policy
We have a profile on Pinterest. You can find it here: https://www.pinterest.de/sparweise/
12. Partner programs
12.1 Amazon Partner Program
We participate in the Amazon EU Partner Program. On our pages, Amazon includes advertisements and links to the Amazon.de website, from which we can earn money by reimbursing advertising costs. Amazon uses cookies to be able to trace the origin of the orders. This allows Amazon to recognize that you have clicked on the partner link on our website.
The storage of “Amazon cookies” takes place on the basis of Art. 6 lit. f GDPR. The website operator has a legitimate interest in this, as the amount of its affiliate remuneration can only be determined through the cookies.
For more information on Amazon’s use of data, please refer to Amazon’s privacy policy: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.
Affiliate links are marked as such with an asterisk (*) so that you can recognize them at first glance.
12.2 Digistore24 partner program
On the basis of our legitimate interests (i.e. interest in the economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR), we are a participant in the affiliate program of Digistore24 GmbH. GDPR), we are a participant in the affiliate program of Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany, which was designed to provide a medium for websites through which advertising costs can be earned by placing advertisements and links to Digistore24 (so-called affiliate system). Digistore24 uses cookies in order to be able to trace the origin of the conclusion of the contract. Among other things, Digistore24 can recognize that you have clicked on the partner link on this website and subsequently concluded a contract with or via Digistore24.
Further information on the use of data by Digistore24 and objection options can be found in the company’s privacy policy: https://www.digistore24.com/page/privacyl.
13. VG WORT
13.1 Cookies and reports on access figures
We use “session cookies” from VG Wort, Munich, to measure access to texts in order to record the probability of copying. Session cookies are small units of information that a provider stores in the working memory of the visitor’s computer. A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. A cookie also contains information about its origin and the storage period. Session cookies cannot store any other data.
These measurements are carried out by Kantar Deutschland GmbH using the Scalable Central Measurement Method (SZM). They help to determine the probability of individual texts being copied in order to compensate authors and publishers for their legal claims. We do not collect any personal data via cookies.
Many of our pages are equipped with JavaScript calls, which we use to report access to the collecting society Verwertungsgesellschaft Wort (VG Wort). In this way, we enable our authors to participate in the distributions of VG Wort, which ensure the statutory remuneration for the use of copyrighted works in accordance with Section 53 UrhG.
It is also possible to use our services without cookies. Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser to notify you as soon as cookies are sent.
13.2 Privacy policy for the use of the Scalable Central Measurement System
Our website and our mobile website use the “Scalable Central Measurement Method” (SZM) of Kantar Deutschland GmbH to determine statistical parameters for determining the copy probability of texts.
Anonymous measured values are collected. To recognize computer systems, the access number measurement alternatively uses a session cookie or a signature that is created from various automatically transmitted information from your browser. IP addresses are only processed in anonymized form.
The process was developed with data protection in mind. The sole aim of the procedure is to determine the copy probability of individual texts.
At no time are individual users identified. Your identity always remains protected. You will not receive any advertising via the system.
13.3 Legal basis
The use of the scalable central measurement method and the session cookies of VG WORT is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in receiving royalties from VG WORT.
14. Newsletter/Emails
A newsletter may be created in the future. If you subscribe to this potential newsletter, the data in the respective input mask will be transmitted to the respective data controller. Subscription to our newsletter takes place in a so-called double opt-in procedure. This means that after registering, you will receive an email asking you to confirm your registration. This confirmation is necessary so that no-one can register with other people’s e-mail addresses. When registering for the newsletter, the user’s IP address and the date and time of registration are stored. This serves to prevent misuse of the services or the e-mail address of the person concerned. The data is not passed on to third parties. An exception is made if there is a legal obligation to pass on the data. The data is used exclusively for sending the newsletter.
Subscription to the newsletter can be terminated by the person involved at any time. Consent to the storage of personal data can also be revoked at any time. For this purpose, there is a corresponding link in every newsletter/email. The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 lit. a) GDPR if the user has given consent. The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) UWG.
15. Objection to unauthorized advertising by e-mail
We have published general contact details and an e-mail address on our website as part of our obligation to provide a legal notice in accordance with Section 5 of the German Telemedia Act (TMG). We hereby object to the use of this contact data for the unsolicited sending of information material, advertising or spam e-mails that we have not explicitly requested.