With the following privacy policy, we would like to inform you about the types of your personal data (hereinafter also referred to shortly as “data”) we process, for what purposes, and to what extent. The privacy policy applies to all processing of personal data carried out by us, both in the provision of our services and especially on our websites, in mobile applications, and within external online presences, such as our social media profiles (hereinafter collectively referred to as the “online offering”).

The terms used are not gender-specific. Date: December 9, 2021

Controller

Andreas Schmitz Alpspitzstr. 26a 82319 Starnberg Email: andreas@prisma-insights.com

Overview of Processing

The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.

Types of processed data:

  • Content data (e.g., entries in online forms).
  • Contact details (e.g., email, phone numbers).
  • Meta/communication data (e.g., device information, IP addresses).
  • Usage data (e.g., visited websites, interest in content, access times).

Categories of data subjects:

Users (e.g., website visitors, users of online services).

Purposes of Processing:

  • Provision of our online offering and user-friendliness.
  • Conversion measurement (measurement of the effectiveness of marketing measures).
  • Feedback (e.g., collecting feedback via online form).
  • Marketing.
  • Contact inquiries and communication.
  • Profiles with user-related information (creating user profiles).
  • Reach measurement (e.g., access statistics, recognition of returning visitors).

Significant Legal Bases:

Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) – Processing is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail.

Security Measures:

We take appropriate technical and organizational measures in accordance with legal requirements, taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, to ensure a level of security appropriate to the risk.

Data Erasure:

Data processed by us will be deleted or restricted in their processing in accordance with legal requirements. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and there are no legal retention obligations preventing their deletion.

Provision of the Online Offering and Web Hosting:

To provide our online offering securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers they manage) the online offering can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services.

Email Sending and Hosting:

The hosting services we use also include the sending, receiving, and storage of emails. For these purposes, the addresses of the recipients and senders, as well as further information regarding the email transmission (e.g., the providers involved), are processed. The data may also be processed for the purpose of recognizing and filtering out spam. Please note that emails sent over the internet are generally not encrypted.

United Domains:

Processed Data Types: Content Data (e.g., entries in online forms), Usage Data (e.g., visited websites, interest in content, access times), Meta/Communication Data (e.g., device information, IP addresses). Data Subjects: Users (e.g., website visitors, users of online services). Purposes of Processing: Provision of our online offering and user-friendliness. Legal Basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

Music and Podcasts:

We use hosting and analysis services from service providers to offer our audio content for listening or download and to obtain statistical information about the access to the audio content.

Julep Hosting:

Processed Data Types: Usage Data (e.g., visited websites, interest in content, access times), Meta/Communication Data (e.g., device information, IP addresses). Data Subjects: Users (e.g., website visitors, users of online services). Purposes of Processing: Reach measurement (e.g., access statistics, recognition of returning visitors), Conversion measurement (measurement of the effectiveness of marketing measures), Profiles with user-related information (creating user profiles).

Social Media Presences (Social Media):

We maintain online presences within social networks and process user data in this context to communicate with active users there or to offer information about us.

Facebook Pages:

We, together with Facebook Ireland Ltd., are jointly responsible for the collection (but not the further processing) of data of visitors to our Facebook page (so-called “fan page”). For this purpose, data such as information about the types of content users view or interact with, or actions they take (see “Things You and Others Do and Provide” in the Facebook Data Policy:  as well as information about the devices used by users (e.g., IP addresses, operating system, browser type, language settings, cookie data; see “Device Information” in the Facebook Data Policy ) are collected and used by Facebook to provide analysis services, so-called “Page Insights,” for page operators to receive insights about how people interact with their pages and with the content associated with them. We have concluded a special agreement with Facebook (“Information on Page Insights,” ), which regulates, in particular, the security measures Facebook must observe and in which Facebook has agreed to fulfill the rights of data subjects (i.e., users can address inquiries or deletion requests directly to Facebook). The rights of users (especially regarding access, deletion, objection, and complaint to the competent supervisory authority) are not limited by the agreements with Facebook. Further information can be found in the “Information on Page Insights” .

Processed Data Types:

  • Contact details (e.g., email, phone numbers).
  • Content data (e.g., entries in online forms).
  • Usage data (e.g., visited websites, interest in content, access times).
  • Meta/communication data (e.g., device information, IP addresses). Data Subjects:
  • Users (e.g., website visitors, users of online services). Purposes of Processing:
  • Contact inquiries and communication, Feedback (e.g., collecting feedback via online form), Marketing. Legal Basis:
  • Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).

Services and Service Providers Used:

Change and Update of the Privacy Policy:

We ask you to inform yourself regularly about the content of our privacy policy. We will adjust the privacy policy as soon as the changes to the data processing carried out by us make this necessary. We will inform you as soon as the changes require your cooperation action (e.g., consent) or individual notification.

If we provide addresses and contact information of companies and organizations in this privacy policy, we ask you to note that the addresses may change over time and to check the information before contacting us.

Created with the free privacy policy generator from Dr. Thomas Schwenke