General information

The following information provides an overview of what happens to your personal data when you visit this website. Personal data refers to any data by which you can be personally identified.

Data Collection on This Website

Who is responsible for data collection?

Data processing is carried out by the website operator.
You can find the contact details below.

How do we collect your data?

Your data is collected in part when you provide it to us (e.g. via contact or application forms).

Other data is collected automatically or with your consent by our IT systems (e.g. browser, operating system, time of access).

What do we use your data for?

Your data is used to:

• provide the website
• process inquiries
• handle application procedures
• (with your consent) analyze user behavior and for marketing purposes

What rights do you have?

You have the right at any time to:

• obtain information about your stored data
• request correction or deletion
• restrict processing
• withdraw your consent
• lodge a complaint with a supervisory authority

2. Hosting

We host our website with:

IONOS SE
Elgendorfer Str. 57
56410 Montabaur, Germany

When visiting our website, log files (including IP address) are collected by IONOS.

Legal basis:
Art. 6 (1) (f) GDPR (legitimate interest in stable website operation)

A data processing agreement (DPA) has been concluded.

3. General Information and Mandatory Disclosures

Controller

Sinnesfreunde GmbH
Heidemannstraße 11b
80939 Munich, Germany

Phone: +49 (0)89 1894360
Email: info@sinnesfreunde.de

Storage Duration

Data will be deleted as soon as the purpose for processing no longer applies, unless statutory retention obligations exist.

Legal Bases

• Consent: Art. 6 (1) (a) GDPR
• Contract: Art. 6 (1) (b) GDPR
• Legal obligation: Art. 6 (1) (c) GDPR
• Legitimate interest: Art. 6 (1) (f) GDPR
• Cookies / Tracking: § 25 TTDSG (Germany)

4. Data Collection on This Website

Consent Management (Borlabs Cookie)

We use Borlabs Cookie (Borlabs GmbH, Hamburg) to manage and store user consents.

Legal basis:
Art. 6 (1) (c) GDPR

Contact Form

Data entered into the contact form will be stored for the purpose of processing your request.

Legal basis:

• Art. 6 (1) (b) GDPR (contract / pre-contractual request)
• Art. 6 (1) (f) GDPR (general inquiries)

Application Form

If you apply via our website, we process your data for the purpose of conducting the application process.

Legal basis:

• § 26 BDSG (German Federal Data Protection Act)
• Art. 6 (1) (b) GDPR

Storage period:
6 months after completion of the application process

Optional inclusion in a candidate pool only with your consent.

Requests via Email or Phone

Processing is carried out to handle your request.

Legal basis:

• Art. 6 (1) (b) GDPR
• Art. 6 (1) (f) GDPR

5. Analytics and Marketing

Google Analytics (GA4)

We use Google Analytics provided by Google Ireland Limited, Dublin.

Google Analytics allows us to analyze user behavior (e.g. page views, duration of visit, device information).

Legal basis:

• Art. 6 (1) (a) GDPR
• § 25 TTDSG

Data transfer to the USA is based on:

• EU Standard Contractual Clauses
• EU-US Data Privacy Framework

A data processing agreement has been concluded.

Google Signals

We use Google Signals to generate cross-device reports.

Use is based exclusively on your consent.

Google Ads and Conversion Tracking

We use Google Ads and conversion tracking.

This allows us to analyze whether users perform certain actions after clicking on an ad.

No direct identification of individuals takes place.

Legal basis:

• Art. 6 (1) (a) GDPR
• § 25 TTDSG

IONOS WebAnalytics

We use IONOS WebAnalytics for statistical analysis.

Data collected includes:

• referrer
• browser
• operating system
• time of access
• anonymized IP address

Processing is carried out anonymously.

Legal basis:

• Art. 6 (1) (f) GDPR
  or consent (if cookie banner is active)

6. Plugins and Tools

Google Fonts (local)

No connection to Google servers.

Font Awesome (local)

No connection to external servers.

7. Social Media

We maintain profiles on:

• Facebook
• Instagram

When visiting our profiles, personal data may be processed by Meta.

In some cases, joint controllership exists (e.g. Facebook Insights).

Legal basis:
Art. 6 (1) (f) GDPR

Further information:

• https://www.facebook.com/privacy
• https://privacycenter.instagram.com/policy

8. Your Rights

You have the right to:

• access
• rectification
• erasure
• restriction of processing
• data portability
• withdrawal of consent
• objection
• lodge a complaint with a supervisory authority

9. Security

This website uses SSL/TLS encryption to ensure secure data transmission.

Our social media appearances

This privacy policy applies to the following social media presence

• https://www.facebook.com/Sinnesfreunde
• https://www.instagram.com/sinnesfreunde/

Data processing through social networks

We maintain publicly available profiles in social networks. The individual social networks we use can be found below.

Social networks such as Facebook, X etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g., like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:

If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.

Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.

Please also note that we cannot retrace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals.

Legal basis

Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6 (1) (a) GDPR).

Responsibility and assertion of rights

If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g., Facebook).

Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.

Storage time

The data collected directly from us via the social media presence will be deleted from our systems as soon as you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions – in particular, retention periods – remain unaffected.

We have no control over the storage duration of your data that are stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g., in their privacy policy, see below).

Your rights

You have the right to receive information about the origin, recipient and purpose of your stored personal data at any time and free of charge. You also have the right to object, the right to data portability and the right to file a complaint with the responsible regulatory agency. Furthermore, you can request the correction, blocking, deletion and, under certain circumstances, the restriction of the processing of your personal data.

Individual social networks

Facebook

We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter Meta). According to Meta’s statement the collected data will also be transferred to the USA and to other third-party countries.

We have signed an agreement with Meta on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Meta are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can customize your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active

Instagram

We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381.

For details on how they handle your personal information, see the Instagram Privacy Policy: https://privacycenter.instagram.com/policy/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active