We want you to understand the types of information we collect as you use our website and how we use it:
1. Personal Data That We Collect and Store As You Use Our Website, As Well As Type And Purpose
a) When you visit the website
Whenever a visitor accesses our website, the internet browser on their device (computer, laptop, tablet, smart phone, etc.) will automatically transmit information to our website server. We temporarily store this information in a so-called log file.
We collect the following data without you having to do anything and retain them until they are deleted automatically:
- IP-address of the requesting data processor, device ID or individual unique device identifiers and device type,
- Name of requested file and amount of data transmitted, as well as date and time of request,
- Notice on success of request,
- Requesting domain,
- Type of Internet-Browser and possibly operating system of your device, as well as name of your access provider,
- Your browser history and your standard weblog information,
- Location information, including location information of your device. Please note that on most mobile devices you can use individual settings for location information or even completely deactivate location information.
We process your information for our legitimate interests according to Art. 6 s. 1 phr. 1 lit. f GDPR while applying appropriate safeguards that protect your privacy for the following purposes: We use information to ensure a smooth connection and comfortable use of our website, to monitor and improve system security and stability, as well as for other administrative purposes.
In no case will we use the collected information to draw conclusions regarding your person.
b) When you use our contact forms
For questions of any kind, we offer you the possibility to get in touch with us through the contact forms provided on our website. The minimum information required is: name, e-mail address, message, so we know who is asking the question and to be able to answer correctly. More information can be provided voluntarily.
We are processing the information for the purpose of getting in touch with us according to Art. 6 s. 1 phr. 1 lit. a GDPR based on your voluntary consent.
The personal information we collect for you to be able to use the contact forms is deleted automatically once we have answered your request.
c) When you conclude a contract with us
When you conclude a contract on our website, we request the following personal information:
- Information for your personal identification, like name and e-mail address
- further personal information we are legally required or entitled to collect and process, and which we need to authenticate and identify you or to verify the information collected by us.
Said information is processed for the proper execution of the contract. We process the information according to Art. 6 s. 1 phr. 1 lit. b GDPR. The retention period is limited to the purpose of the contract and, if applicable, to legally and contractually required retention obligations.
d) When you use payment providers
For payments of contracts that involve a fee we are cooperating with payment providers. We forward your payment information for the handling of payments – limited to the purpose of payment – to the payment provider in question, insofar as this is necessary for the handling of payments. Legal foundation for forwarding the information is Art. 6 s. 1 phr. 1 lit. b GDPR.
e) When you register for our newsletter
If you have expressly given your consent according to Art. 6 s. 1 phr. 1 lit. a GDPR we will use your e-mail address to send you our regular newsletter.
You can unsubscribe at any time, either through the link at the bottom of each newsletter, or via e-mail (subject line: “Unsubscribe from Newsletter“).
2. Sharing Your Personal Data
We will not share your personal data with any persons or companies for any other purpose than stated below.
We will only share your personal data with third parties, if:
- you have expressly given your consent (Art. 6 s. 1 phr. 1 lit. a GDPR),
- it is necessary for the proper execution of a contract with you (Art. 6 s. 1 phr. 1 lit. b GDPR),
- we are legally required to share the information (Art. 6 s. 1 phr. 1 lit. c GDPR),
- sharing the information is necessary for the assertion, the exercise or defense of legal rights, and if there is no reason to suppose that you have an overriding interest warranting protection for your data not to be shared (Art. 6 s. 1 phr. 1 lit. f GDPR).
2.1 Information on Data Transfer to the USA and Other Countries
Among other things, we use tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries. For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities will process, evaluate and permanently store your data located on US servers for monitoring purposes.
3. Data Subject Rights
On request we will be happy to provide information whether and which personal information we have on record for you (Art. 15 GDPR), and about the purpose for which we are processing your information, the categories of personal information, the categories of recipients who have received or will receive your information, the intended retention period, your right to correct, delete, restrict or object the use of your information, the right to legal remedy, the source of your information, if it was not collected by us, and an automated decision making process including profiling.
Additionally, you have the right to correct personal data that may have been stored incorrectly or to complete personal data that may have been stored incompletely (Art. 16 GDPR).
You also have the right to demand a limited processing of your information, provided the legal requirements are met (Art. 18 GDPR).
You have the right to receive the personal information collected about you in a structured, commonly used, machine-readable format or to demand transmission to another controller (Art. 20 GDPR).
Furthermore, you have the “Right to be Forgotten”, i.e. you can demand that we delete your personal information, provided the legal requirements are met (Art. 17 GDPR).
Irrespective of that your personal information is deleted automatically as soon as the purpose for collecting the information ceases to exist or if processing the information was unlawful.
According to Art. 7 s. 3 GDPR you have the right to revoke your consent at any time. This means we will not be able to process your data any longer like we used to when you consented.
Furthermore, you have the right to object to the processing of your personal data at any time, provided there is a legal right to object. In case of an effective retraction of that consent, we will also automatically delete your personal information (Art. 21 GDPR).
If you would like to exercise your right to object or retract, it is sufficient to write an e-mail to: firstname.lastname@example.org.
In case of violations against the data protection regulations you have the possibility according to Art. 77 GDPR to file a complaint with the regulating authority.
4. Retention Period
We retain the data we collect for as long as it is necessary for the proper execution of the contract or you do not use your right to delete your data or your right to transfer the data to a different controller.
We use so-called “Session-Cookies” to recognize which subpages of our website you have already visited. If you have registered, your password is temporarily stored for the duration of your visit to our website and the subpages, so you do not have to enter it over and over again. These Session-Cookies are deleted automatically once you leave our website.
In order to optimize the user experience on our website, we use temporary cookies that are stored on your device for a certain amount of time. If you visit our website again to make use of our services, the website recognizes automatically that you are a returning visitor and remembers your previous settings, so you do not have to enter them again.
We are using Java-Script to provide our internet services. If for security reasons you do not want to use this utility program or active content, please deactivate the relevant settings in your browser.
6. Online Marketing / Analysis Tools
We use our tracking and measurement components according to Art. 6 s. 1 phr. 1 lit. f GDPR, § 15 s. 3 TMG (German Tele Media Act). Our tracking and measurement components help to provide a customer-oriented design and continued optimization of our website. We are also using our tracking and measurement components for a statistical analysis of the use of our website and to evaluate and optimize our internet presence. These interests are considered legitimate in the sense of the regulations mentioned above.
For the purpose of customer-oriented design and continued optimization of our website we use Google Analytics, a web analysis tool by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, we also create pseudonymized user profiles and store cookies (see also # 5). The information on your use of our website provided by cookies, such as browser type / version, used operation system, referrer URL (webpage visited before ours), host name of accessing computer (IP address), and time of server request are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of our website, to compile reports on the activities on the website, and to provide further services connected to the use of the website and the internet for the purpose of market research and customer-oriented design of our website. These purposes present our legitimate interest in processing your information. The legal foundation for the use of Google Analytics is § 15 s. 3 TMG in connection with Art. 6 s. 1 phr. 1 lit. f GDPR.
This information may possibly be transmitted to third parties, as far as this is legally required and third parties process this information on our behalf. Under no circumstances do we connect your IP address with other information that Google has stored. The IP addresses are anonymized, so it is impossible to match this information (so-called IP masking).
The information we send and combine with cookies, user ID or advertizing IDs is automatically deleted after a period of 14 months. Data with expired retention periods is deleted automatically once a month.
By adjusting your browser settings you can block the installation and saving of cookies; we would like to point out, however, that you may not be able to use all services provided by our website.
Furthermore, you can block the retention of the information concerning your use of the website provided by cookies (including your IP address) as well as the processing of this information by Google by downloading and installing the available browser plugin here
As an alternative to the browser add-on, especially for browsers on mobile devices, you can block the retention of information by Google Analytics by clicking the following link: Click here to deactivate Google Analytics. This will place an Opt-Out-Cookie to block the retention of your information when you visit our website. The Opt-out-Cookie is only valid for this browser and only for our website. It is stored on your device. When you delete all cookies for this browser, you will have to replace the Opt-out-Cookie.
Google AdWords / Conversion Tracking:
We are using the online advertizing software “Google AdWords” and within Google AdWords we are using Conversion Tracking. Google Conversion Tracking is an analysis tool provided by Google. If you click on an ad by Google, a cookie for Conversion Tracking is saved on your device. These cookies expire after a period of 30 days; they do not contain any personal information and do not identify you. If you visit certain pages of our website and the cookie has not expired yet, Google and we can see that you have clicked the ad and were referred to this page. Every Google AdWords customer is given a different cookie. So there is no possibility for cookies to be tracked through the websites of AdWords customers. The information collected by Conversion-Cookies serves to create conversion statistics for AdWords customers who have opted for Conversion Tracking. The customers can learn about the total number of users who have clicked their ad and who were referred to a page with a Conversion Tracking tag. However, they will not receive any information to personally identify any users. This purpose presents our legitimate interest in processing this information. The legal foundation for the use of Google AdWords / Conversion Tracking is § 15 s. 3 TMG in connection with Art. 6 s. 1 phr. 1 lit. f GDPR.
Our website uses the “G+1” button provided by Google‘s social network Google+. You can recognize the Google+ plug-in by the symbol “Google+” or the additional “G+1”. When you click this plug-in, this initiates a connection to the Google Plus servers. Google transmits the content of the plug-in directly to your browser which will embed it into the website. This will forward the information about your visit to our website to Google+.
We want to point out that we as website provider have no knowledge about the content of the data transmitted nor about their use by Google+. According to Google no personal data is collected without your click on the plug-in. While logged into your Google+ account, your data like IP address is collected and processed. If you would like to block such transmission of data, you have to log out of your Google+ account prior to visiting our website.
Google Fonts / Web Fonts:
For a unified display of fonts, we use so-called web fonts, provided by Google. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). When you visit a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to Google's servers in the USA. However, you do not have to log in or enter a password to use Google fonts. Furthermore, no cookies are stored in your browser. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. This provides Google with knowledge that our website was accessed via your IP address. According to Google, CSS and fonts requests are completely separate from all other Google services. If you have a Google account, your Google account information is not transmitted to Google during the use of Google Fonts. Google records the use of CSS (Cascading Style Sheets) and the fonts used and stores this data securely.
Using Google web fonts is in the interest of a unified and attractive presentation of our online services. This purpose presents our legitimate interest in the sense of Art. 6 s. 1 phr. 1 lit. f GDPR. For further information on Google Web Fonts, please see
How long and where is the data from the use of Google Fonts stored?
Google stores requests for CSS assets for one day on its servers, which are mainly located outside the EU. This allows us to use fonts with the help of a Google stylesheet. A stylesheet is a format template that can be used to easily and quickly change the design or font of a website, for example.
The font files are stored by Google for one year. Google thus pursues the goal of fundamentally improving the loading time of web pages. If millions of web pages refer to the same fonts, they are cached after the first visit and immediately reappear on all other web pages visited later. Sometimes Google updates font files to reduce file size, increase language coverage, and improve design.
How can I delete my data or prevent data storage?
The data that Google stores for one day or one year respectively is automatically transmitted to Google when the page is accessed. To delete this data early, contact Google support at https://support.google.com/?hl=de&tid=311141511. You can only prevent data storage completely in this case if you do not visit our site.
Unlike other web fonts, Google allows us unrestricted access to all fonts. In this way, we are able to optimally design our web presence. You can find out more about Google Fonts and other issues at developers.google.com/fonts/faq. You can also find out what data is generally collected by Google and what this data is used for athttps://www.google.com/intl/de/policies/privacy/.
This website uses web fonts provided by Adobe for the uniform display of certain fonts. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).
When you access this website, your browser loads the required fonts directly from Adobe so that they can be displayed correctly on your device. In doing so, your browser establishes a connection to Adobe's servers in the USA. This enables Adobe to know that your IP address has been used to access this website. According to Adobe, no cookies are stored when providing the fonts.
The storage and analysis of the data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.adobe.com/de/privacy/eudatatransfers.html.
For more information about Adobe Fonts, please visit: https://www.adobe.com/de/privacy/policies/adobe-fonts.html.
On our website we use Social Plug-ins (“plug-ins”) by the social network facebook.com, owned by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA (“Facebook”). When you open our website with the plug-in, this established a direct connection with the Facebook servers via your browser. This transmits the information to Facebook that you have accessed the website.
If you are logged into your Facebook account, your visit to our website clicking the plug-in can be linked directly to your profile. Even if you do not have a profile, you cannot exclude that Facebook may store your IP address.
If you are a member of Facebook and do not want Facebook to collect information about your visit of our website and link it to your member account, you have to log out of your Facebook account prior to visiting our website and delete the appropriate Facebook cookies. It is also possible to block Facebook-Social-Plug-ins with add-ons for your browser, e.g. with the “Facebook Blocker”.
Our website uses plug-ins by the social network Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA). You can recognize the Instagram plug-in by the “Instagram button” on our website. If you click on the Instagram button while you are logged into your Instagram account, you can link the content on our website to your Instagram profile. Instagram hereby can link the visit to our website to your profile.
To block YouTube from collecting this data during your visit of our website log out of your YouTube account prior to visiting our website. To generally block YouTube from collecting your data while browsing websites, you can block YouTube plug-ins by an add-on for your browser (e.g. www.youtube.com/user/disconnecters).
We are working hard to implement all necessary technical and organizational security measures to store your personal data in such a way so that neither third parties nor the public will be able to access them. If you should want to contact us via e-mail, we do point out that this means of communication cannot guarantee the complete confidentiality of the information transmitted. So we recommend sending confidential information via regular post.
Names in our Internet Presence:
The names of children and former drug addicts used throughout our internet presence (website, Facebook, newsletter) are changed for privacy protection and known to the editor, even if they are not expressly marked as "name changed".
Name and Contact Details for Data Processing Entity
TOS Dienste International e.V.
Markranstädter Straße 1
Phone: +49 341 961 58 81
Data Protection Officer:
Phone: +49 7071 360 920