1) Information about the collection of personal data and contact details of the person responsible

1.1We are pleased that you are visiting our website and thank you for your interest. In the following we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Enrico Triebkorn, NewStep Marketing, c/o Grosch Postflex #1371, Emsdettener Str. 10, 48268 Greven, Germany, Tel.: 01748715132, E-Mail: info @newstep-marketing.de. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.

1.3For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

2) Data collection when visiting our website

If you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if necessary: in anonymous form)

The processing takes place in accordance with Article 6 Paragraph 1 Letter f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3) cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie.

If personal data is also processed by individual cookies implemented by us, the processing takes place in accordance with Article 6 Paragraph 1 Letter b GDPR either to execute the contract or in accordance with Article 6 Paragraph 1 Letter f GDPR to safeguard our legitimate interests the best possible functionality of the website and a customer-friendly and effective design of the page visit.

We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we work together with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following paragraphs.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for the respective browsers under the following links:

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-allow-and-reject
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

Please note that if cookies are not accepted, the functionality of our website may be restricted.

4) Contact

When contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted once your request has been processed. This is the case if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no legal storage obligations to the contrary.

5) Use of rating and seal of approval graphics

– Provenexpert widget
We use the Provenexpert seal on our website, a widget from Expert Systems AG, Quedlinburger Straße 1, 10589 Berlin ("Provenexpert"). When you visit our website, dynamic content (current rating of the shop, certificate, etc.) is loaded into the widget from Provenexpert servers. Information about the website you previously visited, date and time of retrieval, the amount of data transferred, the type of browser used, the operating system you are using and the requesting provider (referrer data) can be transmitted to the Provenexpert servers. If this also includes personal data, the processing takes place on the basis of our overriding legitimate interest in optimizing our offer in accordance with Art. 6 Para. 1 f DSGVO.
Further information on data protection at Provenexpert can be found at: https://www.provenexpert.com/de-de/datenschutzbedingungen/

6) Online Marketing

6.1Facebook Pixel for creating Custom Audiences
Within our online offer, the so-called "Facebook Pixel" of the social network Facebook is used, which is operated by Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
If a user clicks on an advertisement placed by us, which is played on Facebook, the URL of our linked page is added by Facebook Pixel. If our site allows data to be shared with Facebook via pixels, this URL parameter is written to the user's browser via a cookie, which our linked site sets itself. This cookie is then read by Facebook Pixel and enables the data to be forwarded to Facebook.
With the help of the Facebook pixel, Facebook is on the one hand able to determine the visitors of our online offer as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to only display the Facebook ads we have placed to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products, which are based on the visited website). websites are determined), which we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interests of users and are not annoying. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by understanding whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").
The data collected is anonymous to us, so we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage guidelines (https://www.facebook.com/about/privacy/). The data can enable Facebook and its partners to place advertisements on and outside of Facebook.
The data processing associated with the use of the Facebook pixel will only take place if you have given your express consent in accordance with Article 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, remove the tick next to the setting for the “Facebook Pixel” in the “Cookie Consent Tool” integrated on the website.

6.2Google AdSense

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, which are text files that are stored on your computer and enable an analysis of your use of the website. In addition, Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information, which can be used to record, collect and evaluate simple actions such as visitor traffic on the website. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This can also lead to a transmission to the servers of Google LLC. come in the US.

Google uses the information obtained in this way to evaluate your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google.

The processing of data described is carried out in accordance with Article 6 (1) (f) GDPR for the purpose of targeting the user with advertising by third-party advertisers, whose ads are displayed on this website on the basis of the evaluated user behavior. This processing also serves our financial interest in exploiting the economic potential of our website by displaying personalized third-party advertising content for a fee.

You can find more information about Google's data protection regulations at the following Internet address: https://www.google.de/policies/privacy/

You can permanently deactivate cookies for advertising preferences by preventing them by setting your browser software accordingly, or you can download and install the browser plug-in available under the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

Insofar as this is legally required, we have obtained your consent in accordance with Art. 6 (1) (a) GDPR to process your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the above-described option to make an objection.

6.3Use of Google Ads conversion tracking

This website uses the online advertising program "Google Ads" and, as part of Google Ads, conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers with the help of advertising material (so-called Google Adwords) on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. We are pursuing the goal of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an Ads ad placed by Google. Cookies are small text files that are stored on your end device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. This means that cookies cannot be tracked via the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not wish to participate in the tracking, you can block this use by deactivating the Google Conversion Tracking cookie in your Internet browser under the keyword "User settings". You will then not be included in the conversion tracking statistics. We use Google Ads based on our legitimate interest in targeted advertising in accordance with Article 6 (1) (f) GDPR. As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. come in the US.

You can find more information about Google's data protection regulations at the following Internet address: https://www.google.de/policies/privacy/

You can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available under the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

Insofar as this is legally required, we have obtained your consent in accordance with Art. 6 (1) (a) GDPR to process your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie-Consent-Tool" provided on the website or alternatively follow the option described above to make an objection.

6.4hubspot

This website uses the services of HubSpot, a software-based marketing service provided by HubSpot Ireland Ltd., 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.

With the help of Hubspot, various customer service and customer management services can be digitally synchronized and processed via a central user interface. HubSpot enables the generation of leads, central email and newsletter marketing, contact management in the form of user segmentation and CRM, and the management of contact forms.

To fulfill the various functions, HubSpot uses cookies, small text files that are stored locally in the cache of your web browser on your device and enable us to analyze your use of the website. The cookies record certain information such as the IP address, the location, the time the page was accessed, etc. Information recorded using HubSpot is stored on HubSpot servers and evaluated on our behalf.

If personal data is processed here, the data is processed for the statistical analysis of user behavior for optimization and marketing purposes in accordance with Article 6 (1) (f) GDPR. Other legal bases for data processing that intervene in the context of specific HubSpot services (e.g. express consent in accordance with Art. 6 Para. 1 lit. a GDPR when sending newsletters) remain unaffected by this.

We have concluded an order processing agreement with HubSpot, with which we oblige HubSpot to protect our customers' data and not to pass it on to third parties.

You can permanently object to the collection of data by HubSpot using cookies and the setting of cookies by preventing the storage of cookies through your browser settings accordingly.

You can find more information about Hubspot's data protection regulations at the following Internet address: https://legal.hubspot.com/de/datenschutz

Insofar as this is legally required, we have obtained your consent in accordance with Art. 6 (1) (a) GDPR to process your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the above-described option to make an objection.

7) Tools and Miscellaneous

7.1Cookie consent tool based on Usercentrics technology

This website uses a cookie consent tool with technology from Usercentrics GmbH, Rosental 4, 80331 Munich (hereinafter “Usercentrics”) to obtain effective user consent for cookies that require consent and cookie-based applications.

By integrating a corresponding JavaScript code, a banner is displayed to users when the page is accessed, in which consent can be given for certain cookies and/or cookie-based applications by ticking the box. The tool blocks the setting of all cookies that require consent until the respective user gives their consent by ticking the box. This ensures that such cookies are only set on the respective end device of the user if consent has been given.

So that the cookie content tool can clearly assign page views to individual users and can individually record, log and save the consent settings made by the user for the duration of the session, certain user information (including the IP address) is stored by the cookie content tool when our website is accessed. collected, transmitted to the Usercentrics server and stored there.

This data processing takes place in accordance with Article 6 Paragraph 1 Letter f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and therefore in a legally compliant design of our website.

Another legal basis for the data processing described is Art. 6 (1) (c) GDPR. As the person responsible, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

We have concluded an order processing contract with Usercentrics, with which we oblige Usercentrics to protect the data of visitors to our website and not to pass it on to third parties.

For more information on how Usercentrics uses data, see the Usercentrics Privacy Policy at https://usercentrics.com/privacy-policy/

7.2- Adobe Fonts (Typekit)
This site uses so-called web fonts provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA ("Adobe") for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly.
For this purpose, the browser you are using must connect to the Adobe servers. This may also result in the transmission of personal data to the Adobe servers in the USA. In this way, Adobe is informed that our website has been accessed via your IP address. Adobe fonts are used in the interest of a uniform and attractive presentation of our online offers. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. If your browser does not support web fonts, a standard font will be used by your computer.
You can find more information about Adobe Fonts at https://fonts.adobe.com/ and in Adobe's privacy policy: https://www.adobe.com/de/privacy.html
– Google Web Fonts
This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly.
For this purpose, the browser you are using must connect to the Google servers. This can also result in the transmission of personal data to the servers of Google LLC. come in the US. In this way, Google becomes aware that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offering. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. If your browser does not support web fonts, a standard font will be used by your computer. You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

7.3- Typeform
To conduct surveys or online forms, we use the service of TYPEFORM SL Carrer Bac de Roda, 163, local, 08018 Barcelona, Spain ("Typeform"). Typeform enables us to design and evaluate surveys and online forms. In addition to the personal data that you enter in the forms, information about your operating system, browser, date and time of your visit, referrer URL and your IP address is also collected, transmitted to Typeform and stored on Typeform servers. The information you enter in the forms is stored in a password-protected manner to ensure that third-party access is excluded and only we can evaluate the information data for the purpose specified in the form.
The legal basis for the processing of the above information, insofar as it contains a personal reference, is exclusively your express consent in accordance with Article 6 (1) (a) GDPR, which you can revoke at any time with effect for the future.
We have concluded an order processing contract with Typeform for the use of the above-mentioned services, which obliges Typeform to protect the data of our site visitors and not to pass it on to third parties. Typeform's data protection regulations can be found at: https://admin.typeform .com/to/dwk6gt/

7.4- Google Meet
We use the "Google Meet" service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter "Google Meet") to conduct online meetings, video conferences and/or webinars.
When using Google Meet, different data is processed. The scope of the processed data depends on which data you provide before or during participation in an online meeting, video conference or webinar. When using Google Meet, the data of the communication participants is processed and stored on Google servers. This data can include, in particular, your registration data (name, email address, telephone (optional) and password) and meeting data (topic, participant IP address, device information, description (optional)). In addition, visual and auditory contributions from the participants as well as voice inputs can be processed in chats. This can also lead to a transmission to the servers of Google LLC. come in the US.
When processing personal data that is required to fulfill a contract with you (this also applies to processing operations that are required to carry out pre-contractual measures), Article 6 (1) (b) GDPR serves as the legal basis. If you have given us your consent to the processing of your data, the processing will take place on the basis of Article 6(1)(a) GDPR. A given consent can be revoked at any time with effect for the future.
Otherwise, the legal basis for data processing when conducting online meetings, video conferences or webinars is our legitimate interest in conducting the online meeting, webinar or video conference effectively in accordance with Article 6 Paragraph 1 Letter f GDPR. For more information on how Google Meet uses data, see Google's privacy policy at https://www.google.de/policies/privacy/
- Zoom
We use the "Zoom" service from Zoom Video Communications Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA (hereinafter "Zoom") to conduct online meetings, video conferences and/or webinars.
When using Zoom, different data is processed. The scope of the processed data depends on which data you provide before or during participation in an online meeting, video conference or webinar. When using Zoom, the data of the communication participants is processed and stored on Zoom servers. This data can include, in particular, your registration data (name, email address, telephone (optional) and password) and meeting data (topic, participant IP address, device information, description (optional)). In addition, visual and auditory contributions from the participants as well as voice inputs can be processed in chats.
When processing personal data that is required to fulfill a contract with you (this also applies to processing operations that are required to carry out pre-contractual measures), Article 6 (1) (b) GDPR serves as the legal basis. If you have given us your consent to the processing of your data, the processing will take place on the basis of Article 6(1)(a) GDPR. A given consent can be revoked at any time with effect for the future.
Otherwise, the legal basis for data processing when conducting online meetings, video conferences or webinars is our legitimate interest in conducting the online meeting, webinar or video conference effectively in accordance with Article 6 Paragraph 1 Letter f GDPR. For more information on how Zoom uses data, see Zoom's privacy policy at https://zoom.us/docs/de-de/privacy-and-legal.html

8) Rights of the data subject

8.1The applicable data protection law grants you comprehensive data subject rights (rights to information and intervention) vis-à-vis the person responsible with regard to the processing of your personal data, about which we will inform you below:

• Right to information in accordance with Art. 15 GDPR: In particular, you have a right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data was or will be disclosed, the planned Storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if they were not collected from you by us, Existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing on you, as well as your right to information about the guarantees under Art. 46 GDPR when your data is forwarded to third countries;
• Right to rectification in accordance with Art. 16 GDPR: You have the right to immediate rectification of incorrect data concerning you and/or completion of your incomplete data stored by us;
• Right to deletion according to Art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Art. 17 Para. 1 GDPR are met. However, this right does not apply in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you contest, is checked, if you refuse to delete your data due to inadmissible data processing and instead Request restriction of the processing of your data if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;
• Right to information according to Art. 19 DSGVO: If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or Restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
• Right to data transferability in accordance with Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible, insofar as this is technically feasible;
• Right to revoke granted consent in accordance with Art. 7 Para. 3 GDPR: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation;
• Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in particular the Member State of your residence, place of work or place of the alleged infringement.

8.2RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA INVOLVED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN PROVE COMPREHENSIVE REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING IS FOR THE CERTIFICATION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. YOU MAY OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA INVOLVED FOR DIRECT MARKETING PURPOSES.

9) Duration of storage of personal data

The duration of the storage of personal data is based on the respective legal basis, the processing purpose and - if relevant - also based on the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data on the basis of an express consent in accordance with Article 6 Paragraph 1 lit. a GDPR, this data is stored until the person concerned revokes his consent.

If there are statutory retention periods for data that are processed as part of legal or similar obligations on the basis of Article 6 (1) (b) GDPR, this data will be routinely deleted after the retention period has expired, provided that it is no longer required to fulfill or initiate a contract and/or we have no legitimate interest in further storage.

When personal data is processed on the basis of Article 6 (1) (f) GDPR, this data is stored until the data subject exercises his or her right to object under Article 21 (1) GDPR, unless we can provide compelling reasons worthy of protection for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Article 6 Paragraph 1 lit. f GDPR, this data is stored until the data subject exercises his right of objection under Article 21 Paragraph 2 GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.