Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on the subject of data protection can be found in the privacy policy set out below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the section “Information about the controller” in this privacy policy.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may, for example, include data that you send to us by email.

Other data is collected automatically, or after you have given your consent, by our IT systems when you visit the website. This primarily includes technical data (e.g. internet browser, operating system, time of page access, or referrer URL). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour. In addition, data may be processed in order to provide embedded content, translations, videos, and external services.

What rights do you have regarding your data?

You have the right at any time to obtain information free of charge about the origin, recipients, and purpose of your stored personal data. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time with effect for the future. Furthermore, under certain circumstances, you have the right to request restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time if you have further questions on the subject of data protection.

Analytics and Third-Party Tools

When visiting this website, your browsing behaviour may be statistically evaluated. This is done in particular using analytics and statistics tools such as Google Analytics and Squarespace Analytics. Detailed information on this can be found in the sections below.

2. Hosting

Squarespace

This website is operated using Squarespace. The provider is Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland.

Squarespace is a tool for creating and hosting websites. When you visit our website, your data is processed on Squarespace servers. Personal data may also be transferred to the parent company, Squarespace Inc., 8 Clarkson St, New York, NY 10014, USA. Squarespace also stores cookies that are necessary for the display of the website and to ensure security.

Squarespace is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is presented as reliably as possible. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG; consent may be revoked at any time.

Cloudflare

We use Cloudflare as a content delivery network (CDN), security, and performance service. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

Cloudflare helps us improve the loading times and security of this website. For this purpose, traffic between your browser and our website is routed through Cloudflare’s infrastructure. In particular, Cloudflare may process your IP address, technical connection data, security information, and log data.

Cloudflare is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the secure, stable, and efficient provision of our online services.

3. General Information and Mandatory Information

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is any data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmission over the Internet (e.g. communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information about the Controller

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Storage Period

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data; in the latter case, deletion will take place after these grounds no longer apply.

General Information on the Legal Basis for Data Processing on This Website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your terminal device, processing is also carried out on the basis of Section 25(1) TDDDG. Consent may be revoked at any time.

If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data where this is necessary to fulfil a legal obligation on the basis of Art. 6(1)(c) GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Recipients of Personal Data

As part of our business activities, we work together with various external parties. In some cases, this also requires the transfer of personal data to these external parties. We only transfer personal data to external parties if this is necessary for the performance of a contract, if we are legally obliged to do so, if we have a legitimate interest in the transfer, or if another legal basis permits the transfer of data.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You may revoke consent already given at any time. The legality of data processing carried out before the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. The respective legal basis on which processing is based can be found in this privacy policy.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority.

Right to Information, Rectification and Erasure

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient, and the purpose of data processing, and, if applicable, a right to correction or deletion of this data.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data, insofar as the legal requirements for this are met.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.

4. Cookies and Consent Management

Cookies

Our website uses so-called “cookies”. Cookies are small data packets and do not cause any damage to your terminal device. They are stored either temporarily for the duration of a session or permanently on your device.

Cookies may be used for technically necessary functions, for consent management, and – subject to your consent – for analytics and statistics purposes.

Usercentrics

We use Usercentrics to manage your consent for the use of certain cookies, external content, and analytics tools. The provider is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.

Usercentrics stores your decision as to whether and to which data processing operations you have consented or declined. In particular, your consent data, IP address, information about your browser, your device, and the time of your decision may be processed.

Processing takes place in order to fulfil our legal obligations regarding consent management on the basis of Art. 6(1)(c) GDPR and on the basis of Art. 6(1)(f) GDPR.

5. Analytics and Statistics Tools

Google Analytics

Subject to your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to analyse user behaviour on our website. In particular, page views, time spent on the site, technical information about your browser and device, referrer URL, and your IP address may be processed. We use Google Analytics only on the basis of your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Consent may be revoked at any time.

Squarespace Analytics

This website uses Squarespace’s integrated statistics and analytics functions. In particular, information about page views, visit times, technical device information, and usage behaviour may be processed.

If this processing is not exclusively technically necessary, it is carried out only on the basis of your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Otherwise, processing is based on Art. 6(1)(f) GDPR insofar as we have a legitimate interest in statistical evaluation for the improvement of our website.

6. Plugins, Embedded Content and External Content

YouTube with Enhanced Privacy Mode

This website embeds videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in enhanced privacy mode. When you visit one of our pages on which a YouTube video is embedded, no connection to YouTube’s servers is initially established until you actively interact with the video. After a video has been activated, however, personal data may be processed and transmitted to YouTube. In addition, local storage elements may be set.

The use of YouTube is in the interest of an appealing presentation of our online services. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG; consent may be revoked at any time.

Google Fonts

This website uses Google Fonts for the uniform display of fonts. If the fonts are not integrated locally, your browser loads the required fonts from Google servers. In doing so, your IP address may be transmitted to Google.

Processing takes place – insofar as necessary – on the basis of your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TDDDG or, if the integration is purely technical, on the basis of Art. 6(1)(f) GDPR.

External Links

Our website contains links to external third-party websites. If you click on such a link, you leave our website. The respective operators are solely responsible for the content, data protection standards, and data processing procedures on external websites.

7. Use of Artificial Intelligence (AI) on the Website

Automated Translations and AI-Assisted Content

On this website, content may in part be created, revised, or translated using artificial intelligence. This may in particular concern the provision of foreign-language content or editorial text variations.

Insofar as only already published website content is processed automatically when the website is used, no additional personal data of visitors is generally processed for this purpose. If AI services are used in the future in which personal data of website visitors is processed or transmitted to external providers, this privacy policy will be updated accordingly.

ChatGPT

ChatGPT, a service of OpenAI, may be used for individual editorial, organisational, or technical processes. The provider is OpenAI, L.L.C., USA.

It may be used in particular for text drafts, linguistic revisions, or translations. Personal data of website visitors is not automatically transmitted to ChatGPT through the mere use of this website, provided that no direct ChatGPT function or visitor input option is integrated on the website.

Should direct interaction between visitors and an AI service be enabled on this website in the future, we will update this privacy policy accordingly and – if necessary – obtain consent.

8. Calendar and Event Data

Cloudflare Worker / iCloud Calendar

To display event data automatically, we use a Cloudflare Worker that processes data from an external iCloud calendar or calendar publication. When the event overview is retrieved, technically necessary data such as IP address, browser information, time of retrieval, and requested resources is processed.

Processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the up-to-date, technical, and efficient display of event information on our website.

9. Updates and Changes to This Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or in order to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Legal Notice

Represented by

Thomas Hoppe, Stefan Heinemeyer, Annette von Hehn

Contact

Phone: +49 176 76781292
Email: info@atostrio.de

Editorial Responsibility

Stefan Heinemeyer
Johanniterstraße 10
Berlin, BE 10961
Germany

Consumer Dispute Resolution / Universal Arbitration Board

We are not willing or obliged to participate in dispute resolution proceedings before a consumer arbitration board.