Data protection information for the website and external pages of Zebra and Friends UG (limited liability)

I. General

1. Responsible person

We take the protection of your personal data and the legal obligations associated with this protection very seriously. The legal requirements require comprehensive transparency regarding the processing of personal data. Only if you are sufficiently informed about the purpose, type and scope of the processing will the processing be understandable for you as the data subject.

Our data protection information therefore explains in detail which personal data we process when you use our website (physiofinder.info), all other websites that refer to it and in the other cases that may be explained here.

The person responsible within the meaning of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other data protection regulations is

Andrei Telle

Tonhalderhof 4a

78576 Emmingen-Liptingen

Tel.: 0162 108 53 74

Email: info[at]physiofinder.info

Hereafter referred to as “ responsible party ” or “ we ”.

We have not appointed a data protection officer.

Please note that links on our website can take you to other websites that are not operated by us but by third parties. Such links are either clearly marked by us or can be recognized by a change in the address bar of your browser. We are not responsible for compliance with data protection regulations and the secure handling of your personal data on these websites operated by third parties.

2. Definitions

From the GDPR

This data protection declaration uses the terms of the legal text of the GDPR. You can view the definitions (Art. 4 GDPR) at eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX:32016R0679 .

Additional definitions:

Cookies and similar technologies

Cookies are text files that are stored or read from your device by a website. They contain letter and number combinations, for example to recognize the user and their settings when they reconnect to the cookie-setting website, to enable them to remain logged in to a customer account or to statistically analyze certain usage behavior.

WebStorage technology makes it possible to store variables and values locally in the user's browser cache. The technology includes both the so-called " sessionStorage ", which remains stored until the browser tab is closed, as well as the " localStorage ", which is stored in the browser's cache until the cache is cleared by the user. The localStorage technology makes it possible, among other things, to recognize the user and their settings when they access our website.

Data categories

When we indicate the categories of data processed, this includes in particular the following data: master data (e.g. name, address), contact data (e.g. email addresses, telephone number, messenger services), content data (e.g. text entries, photographs, videos, contents of documents/ files), contract data (e.g. subject matter of the contract, terms, customer category), usage data (e.g. history on our website, use of certain content, access times), connection data (e.g. device information, IP addresses, URL referrers), location data (e.g. GPS data , IP geolocation, access points); Diagnostic data (e.g. crash logs, website/app performance data, other technical data for analyzing malfunctions and errors).

3. Information on data processing

We only process personal data to the extent permitted by law. Personal data will only be passed on in the cases described below. The personal data is protected by appropriate technical and organizational measures (e.g. pseudonymization, encryption).

Unless we are legally obliged to store it or pass it on to third parties (in particular law enforcement authorities), the decision as to which personal data we process, for how long, and to what extent we disclose it, if applicable, depends on which functions of the website you use use in individual cases.

4. Storage period

The personal data will be deleted as soon as the purpose of processing no longer applies or a prescribed storage period expires, unless there is a need for further storage of the personal data to conclude or fulfill a contract. If we need to provide information about the storage period of cookies and similar technologies, you will find the information at the end of this data protection declaration.

Personal data that we process as part of an application (see below) will be stored for a period of six months after completion of the application process.

5. Automated decisions in individual cases including profiling

Automated decisions in individual cases, including profiling, do not take place.

6. Rights of data subjects

As a data subject, you have the right to information in accordance with Article 15 of the GDPR, the right to correction in accordance with Article 16 of the GDPR, the right to deletion in accordance with Article 17 of the GDPR, the right to restriction of processing in accordance with Article 18 of the GDPR and the right to Data portability according to Art. 20 GDPR. The restrictions in Sections 34 and 35 BDSG apply to the right to information and the right to deletion.

You have the right to complain to a data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).

The data protection supervisory authority responsible for us/our headquarters is:

Berlin Commissioner for Data Protection and Freedom of Information

Friedrichstrasse 219

10969 Berlin

However, you are free to complain to another data protection supervisory authority.

You can find a list of the supervisory authorities at: https://www.bfdi.bund.de/ (under Infothek/Addresses and Links)

7. Notification obligations of the person responsible

We will inform all recipients to whom your personal data has been disclosed of any correction or deletion of your personal data or a restriction of processing in accordance with Article 16, Article 17 Paragraph 1 and Article 18 GDPR, unless notification is impossible or involves disproportionate effort. We will inform you about the recipients if you request this.

8. Obligation to provide

Unless otherwise explained below in the information on the legal basis, you are not obliged to provide personal data. However, in the cases of Article 6 Paragraph 1 Letter b GDPR, the personal data is necessary to fulfill or conclude a contract. If you do not provide the personal data concerned, it will not be possible to fulfill or conclude the contract. If you do not provide the data in the cases of Article 6 Paragraph 1 Letters a and f of the GDPR, it will not be possible to use the affected parts of our website.

9. Right to object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is carried out on the basis of Article 6 Paragraph 1 Letter f of the GDPR. If personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising.

Your objection can be made informally to the contact details mentioned above.

10. Withdrawal of consent

In accordance with Art. 7 Para. 3 Sentence 1 GDPR, you have the right to revoke your consent at any time with future effect informally by post or email. This does not affect the lawfulness of the processing carried out based on consent until its revocation. Upon your revocation, we will delete the personal data processed based on your consent if there is no other legal basis for their processing.

Your revocation can be made informally using the contact details mentioned above.

You can also revoke certain consent(s) by deactivating the respective data processing services directly in our consent tool. Please note that you must do this on every device on which you have visited our website and consented to data processing.

II. Data processing in connection with the use of our website

The use of the website and its functions regularly requires the processing of personal data.

Provision of the website

Purpose of processing: Functionality and optimization of the website, as well as ensuring the security of our information technology systems when our website is used purely for informational purposes (without using additional functions such as contact forms or social media plugins).

Legal basis: Article 6 Paragraph 1 Letter f GDPR

Data categories: connection data

Recipients of the data: Data will only be passed on to third parties if this is necessary for the operation of our website. For this purpose, the personal data is transferred to the following recipients: In individual cases, IT service provider - discoverize GmbH

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No

Newsletter

Purpose of processing: Subscription to our newsletter about our news and offers; proof of your consent; Ensuring the security of our information technology systems; Measuring the click and opening behavior related to our newsletter; personal design of our newsletter.

Legal basis : Article 6 Paragraph 1 Letter a GDPR

Data categories : possibly master data, contact data, usage data, connection data

Recipient of the data: The Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, USA

Intended third country transfer: USA (based on the standard data protection clauses of the EU Commission, Art. 46 Para. 2 Letter c GDPR)

Do we store or read personal data on your device based on your consent? No

Application (application via email)

Purpose of processing: Processing your application and carrying out the application process.

Legal basis : Art. 88 Paragraph 1 GDPR in conjunction with Section 26 Paragraph 1 Sentence 1 BDSG

Data categories: master data, contact data, content data, contract data, connection data if applicable, usage data if applicable and special categories of personal data if applicable within the meaning of Art. 9 Para. 1 GDPR (depending on the specific advertisement; only the data relating to your application will be saved, which you provide to us and which we may process in the context of applications)

Data recipient: None

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No

Login area

Purpose of processing: Use of an account (login area) to create a (premium) entry in our portal and manage it; Ensuring data and information security.

Legal basis : Art. 6 Paragraph 1 Letters b, f GDPR

Data categories: master data, contact data, connection data, contract data and content data

Data recipient: None

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No

Booking premium listings

Purpose of processing: booking and processing your premium entry; Ensuring data and information security.

Legal basis: Article 6 Paragraph 1 Letters b, f GDPR

Data categories: master data, contact data, connection data, content data, contract data,

Recipient of the data: Payment service provider, if applicable

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No

contact

Purpose of processing: Processing your contact request and callback request.

Legal basis: Article 6 Paragraph 1 Letter f GDPR; Art. 6 Para. 1 Letter b GDPR (depending on the facts)

Data categories: contact data, master data, content data (depending on the type of request).

Data recipient: None

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No

Bugsnag (error analysis)

Purpose of processing: Error analysis to improve the accessibility, stability and security of our website.

Legal basis: Article 6 Paragraph 1 Letter f GDPR

Data categories: usage data, content data, connection data

Recipient of the data: Bugsnag Inc., 110 Sutter Street, San Francisco, CA 94104, USA

Intended third country transfer: In individual cases the USA and other third countries (based on the standard data protection clauses of the EU Commission, Art. 46 Para. 2 Letter c GDPR and on the basis of adequacy decisions, Art. 45 GDPR)

Do we store or read personal data on your device based on your consent? Yes (for details, see the overview at the end of this statement)

Stackify (error analysis)

Purpose of processing: Error analysis to improve the accessibility, stability and security of our website.

Legal basis: Article 6 Paragraph 1 Letter f GDPR

Data categories: usage data, content data, connection data

Recipient of the data: Stackify Inc., 7171 Warner Ave, Suite B787, Huntington Beach, CA 92647, USA

Do we store or read personal data on your device based on your consent? Yes (for details, see the overview at the end of this statement)

Cookie Consent

Purpose of processing: When you access our website, certain information is stored or read on your device if this is absolutely necessary to operate our website. This includes information that the “Cookie Consent” service processes to ensure that only cookies that are technically absolutely necessary to operate our website or to which you have consented are set or read. We selected the operator based on data protection-friendly and technical criteria.

Legal basis: Article 6 Paragraph 1 Letters c, f GDPR

Data categories: usage data, connection data

Recipient of the data: IT service provider

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No

Facebook (social media button)

Purpose of processing: Opening up the possibility of sharing content from our website via the social network “Facebook” using so-called social media buttons; personal design of our website.

Legal basis: Article 6 Paragraph 1 Letter a GDPR

Data categories: connection data, usage data

Recipient of the data: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (as jointly responsible, Art. 26 GDPR - the essence of the agreement concluded (including information on the implementation of your data subject rights) can be found at www. facebook.com/legal/controller_addendum; further information on the processing of personal data by Facebook, the legal basis on which Facebook bases the processing and the exercise of the data subject's rights vis-à-vis Facebook can be found at www.facebook.com/about/privacy)

Intended third country transfer: In individual cases the USA and other third countries (based on the standard data protection clauses of the EU Commission, Article 46 paragraph 2 letter c) GDPR or, if applicable, on the basis of adequacy decisions (Article 45 GDPR))

Do we store or read personal data on your device based on your consent? Yes (for details, see the overview at the end of this statement)

Google Maps

Purpose of processing: Determination of geo-coordinates based on addresses

Legal basis: Article 6 Paragraph 1 Letter f GDPR

Data categories: Address data

Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No

Google Analytics

Purpose of processing: Statistical evaluation; Optimization and needs-based design of our website based on your click and usage behavior.

Legal basis: Article 6 Paragraph 1 Letter a GDPR

Data categories: usage data, connection data

Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Intended third country transfer: In individual cases the USA (based on the standard data protection clauses of the EU Commission, Art. 46 Para. 2 Letter c GDPR)

Do we store or read personal data on your device based on your consent? Yes (for details, see the overview at the end of this statement)

Google Fonts

Purpose of processing: To make our website more personal using fonts loaded from Google servers.

Legal basis : Art. 6 Paragraph 1 Letter f GDPR

Data categories: connection data

Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No

Google Marketing Platform

Purpose of processing: Statistical evaluation of the use of our website through Google Marketing Platform services; Optimization and needs-based design of the website; Advertising purposes.

Legal basis: Article 6 Paragraph 1 Letter a GDPR

Data categories: usage data, connection data (active IP anonymization; only in exceptional cases is the full IP address transmitted to a Google server and shortened there)

Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Intended third country transfer: In individual cases the USA (based on the standard data protection clauses of the EU Commission, Art. 46 Para. 2 Letter c GDPR)

Do we store or read personal data on your device based on your consent? Yes (for details, see the overview at the end of this statement)

Google reCAPTCHA

Purpose of processing: Preventing improper use of our website by checking whether access is made by humans and not by bots or similar programs; Ensuring the security of our website and our information technology systems.

Legal basis: Article 6 Paragraph 1 Letter f GDPR

Data categories: connection data, usage data

Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Intended third country transfer: USA in individual cases

Do we store or read personal data on your device based on your consent? No

cloudflare turnstile

Legal basis: Article 6 Paragraph 1 Letter f GDPR

Data categories: connection data, usage data

Recipient of the data: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107 USA

Intended third country transfer: none

Do we store or read personal data on your device based on your consent? No

Mailchimp (newsletter)

Legal basis: Article 6 Paragraph 1 Letter a GDPR

Data categories: if applicable, master data, contact data, usage data, connection data.

Recipient of the data: The Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000

Atlanta, Georgia 30308, USA

Intended third country transfer: USA (based on the standard data protection clauses of the EU Commission, Art. 46 Para. 2 Letter c GDPR)

Do we store or read personal data on your device based on your consent? No

YouTube

Purpose of processing: Integration of videos via the YouTube video plugin to personalize our website.

Legal basis: Article 6 Paragraph 1 Letter a GDPR

Data categories: usage data, connection data

Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Intended third country transfer: USA in individual cases

Do we store or read personal data on your device based on your consent? Yes (for details, see the overview at the end of this statement)

Vimeo

Purpose of processing: Integration of videos via the Vimeo video plugin to personalize our website.

Legal basis: Article 6 Paragraph 1 Letter a GDPR

Data categories: usage data, connection data

Recipient of the data: Vimeo.com, Inc., 555 West 18th Street, New York, New York 10011

Intended third country transfer: USA in individual cases

Do we store or read personal data on your device based on your consent? No

SoundCloud

Purpose of processing: Integration of audio via the SoundCloud audio plugin to personalize our website.

Legal basis: Article 6 Paragraph 1 Letter a GDPR

Data categories: usage data, connection data

Recipient of the data: SoundCloud Global Limited & Co. KG, Rheinsberger Str. 76/77, 10115 Berlin

Intended third country transfer: none

Do we store or read personal data on your device based on your consent? No