• Art. 6 para. 1 sentence 1 lit. a GDPR: The data subject has given his/her consent to the processing of personal data concerning him/her for one or more specific purposes. 
• Art. 6 para. 1 sentence 1 lit. b GDPR: The processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the request of the data subject. 
• Art. 6 para. 1 p. 1 lit. c GDPR: Processing is necessary for compliance with a legal obligation to which the controller is subject.
• Art. 6 para. 1 sentence 1 lit. d GDPR: Processing is necessary to protect the vital interests of the data subject or another natural person. 
• Art. 6 (1) p. 1 lit. e GDPR: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. 
• Art. 6 (1) sentence 1 lit. f GDPR: processing is necessary for the purposes of the legitimate interests of the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

However, at the relevant points in this data protection declaration, we will always point out once again the legal basis on which your personal data is processed.

b) Consent of the legal guardian according to Art. 8 Para. 1 Sentence 2 Alt. 2 GDPR

A parent or guardian must consent to all data processing on this website that requires the consent of a minor under the age of 16. For information on the individual data processing operations, their purposes and the categories of data concerned, for which the consent of the data subject is required, please refer to the data protection declaration. 

You can revoke your consent at any time by sending the revocation in text form to the contact details of the controller. The processing remains lawful until the revocation.  

c) Processing of information pursuant to Section 25 (1) TTDSG

We also process information pursuant to Section 25 (1) of the TTDSG by storing information on your terminal equipment or accessing information that is already stored on your terminal equipment. This can be both personal information and non-personal information. 
This can be both personal information and non-personal information, e.g. cookies, browser fingerprints, advertising IDs, MAC addresses and IMEI numbers. Terminal equipment is any equipment connected directly or indirectly to the interface of a public telecommunications network for the transmission, processing or reception of messages, § 2 para. 2 no. 6 TTDSG.  

As a rule, we process this information on the basis of your consent, § 25 para.1 TTDSG.  

As far as an exception according to § 25 para.2 No.1 and No.2 TTDSG is given, we do not need consent. Such an exception is given if we only access or store the information in order to transmit a message via a public telecommunications network or if this is absolutely necessary so that we can provide a telemedia service that you have expressly requested. You can revoke your consent at any time. 

We inform you that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. 

We use these tools on the basis of your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your consent at any time by changing the cookie settings. The processing remains lawful until revocation.

The respective data processing purposes and data categories can be found in the corresponding tools. We would like to point out that we have no influence on whether and to what extent the service providers carry out further data processing.

a)    Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”).

Google Analytics uses cookies in this context (see section 7). The information generated by the cookie about your use of this website, such as your

• Name and version of the browser used
• Operating system of your computer
• Website from which the access is made (referrer URL)
• IP address of the requesting computer
• Time of the server request

are usually transferred to a Google server in the USA and stored there.

Your IP address is automatically anonymised by Google before it is recorded via EU domains and servers. There is therefore no logging or storage of your IP address. 

On our behalf, Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity and providing other services relating to website activity and internet usage to us. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. 

We have concluded an order processing contract with Google. Please click here for an overview of data protection at Google:
https://support.google.com/analytics/answer/6004245

b) Google Remarketing

We use the remarketing function of Google Analytics to target advertising campaigns – including Google AdWords campaigns – to visitors to our website. Here, based on your previous visits to our website, you are presented with relevant advertisements when you visit other websites in the Google Display Network. 

The DoubleClick cookie enables Google to display targeted advertisements to ourselves and other third parties that match interests identified based on your previous visits to our website and/or other websites. These advertisements may be displayed on websites operated by Google and/or other operators of the Google advertising network. We also use the Google Analytics advertising features to analyse the effectiveness of our own advertising campaigns. 

If you have agreed in your Google account that your web and app browsing history is linked by Google to your Google account and information from your Google account is used to personalise ads, Google will use data from you together with Google Analytics data to create target group lists for cross-device remarketing. To do this, Google Analytics first collects Google-authenticated IDs for you as a user on our website, which are linked to your Google account. Google Analytics then temporarily links these IDs to Google Analytics data to optimise our targeting. 

Please click here for an overview of Google’s privacy policy: https://support.google.com/analytics/answer/6004245

c) Google Ads Conversion Tracking 

We use Google Ads, an online advertising programme from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), on our website. Conversion tracking is also used in this process. With this tool, Google Ads sets a cookie on your terminal device when you come to our website via a Google advertisement. 

The cookie does not serve any personal traceability. If you visit our website as a user and the cookie is still working, it will be recognisable to us together with Google that you clicked on the corresponding advertisement and were redirected to our site. A different cookie is assigned to each Google Ads customer. Cookies are thus not traceable via the websites of the Ads customers. 

The data collected through conversion cookies is used to create conversion statistics for Ads customers. As Google Ads customers, we thus learn the total number of users who responded to our ad and were then redirected to a website that was tagged with a conversion tracking tag. This enables us to see the success of individual advertising measures. We do not receive any information during this process with which we could personally identify you as a user. 

When Google Ads are used, your browser automatically establishes a direct connection with the Google server and, if you have a Google account and are logged in to it, can assign the visit to your account. If you do not have a Google account, Google will assign you its own identifier. We have no influence on what other data Google collects and stores.  

You can find out more about Google’s privacy policy at: http://www.google.de/policies/privacy/. 

d) Salesforce

We also work with Salesforce Sales Cloud CRM software from Salesforce Inc (Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA), through which we can manage our customer data and conduct online marketing. Salesforce Sales Cloud is a CRM system and enables us, among other things, to manage existing and potential customers and customer contacts and to organise sales and communication processes. The use of the CRM system also enables us to analyse our customer-related processes. 

For this purpose, among other things, landing pages are analysed and reports are created. So-called “web beacons” and cookies are used for this purpose. In this context, the following personal data may be processed: 

• IP address
• Geographical location
• type of browser
• duration of the visit
• pages viewed 

Customer data is stored on Salesforce’s servers. We have entered into the new standard contractual clauses with Salesforce. Salesforce does not obtain the right to share your data. You can find the privacy policy of Salesforce here. 

f) Facebook Conversion Pixel 

We use the “conversion pixel” or visitor action pixel of Meta Platforms Ireland Ltd (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland). By calling up this pixel from your browser, Meta Platforms can subsequently recognise whether a Facebook ad was successful, e.g. led to an online purchase. 

We only receive statistical data from Meta Platforms for this purpose without any reference to a specific person. This allows us to record the effectiveness of the Facebook ads for statistical and market research purposes. In particular, if you are registered with Facebook, we refer you to their data protection information: https://www.facebook.com/about/privacy/. 

g) LinkedIn Conversion Tracking

We use the conversion tracking function of LinkedIn on our website. This enables us to target you with advertisements following a visit to our website. In addition, LinkedIn provides a report that shows how successful our advertisements are and how users interact with our site in general. If you have logged in via LinkedIn before visiting our site, this will be recognised as part of the conversion tracking and you will be associated with your LinkedIn account as a visitor to our site. 

You can find more information in the LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policy?_l=de_DE 

You also have the option to unsubscribe from interest-based advertising via LinkedIn. This is possible via the following link: https://www.linkedin.com/psettings/enhanced-advertising 

h) LinkedIn Analytics

We use LinkedIn Analytics on our website, a web analytics service provided by LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, hereinafter “LinkedIn”).  

LinkedIn Analytics uses cookies in this context (see section 7). The information generated by the cookie about your use of this website, such as 

• Login data
• Device information
• IP addresses

are logged and possibly transmitted to a LinkedIn server in the USA and stored there. 

LinkedIn will use this information on our behalf for the purpose of evaluating your use of our website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of LinkedIn Analytics is not merged with other LinkedIn data. 

We have concluded an order processing contract with LinkedIn. Please click here for an overview of data protection at LinkedIn: https://www.linkedin.com/legal/privacy-policy  

i) iPAPI

We also use the service iPAPI, of Kloudend, Inc., 1887 Whitney Mesa Dr #4080, Henderson, NV 89014, USA, on our website to optimally display our website to our website visitors. The service collects your country location, your time zone, information about your internet service provider and your IP address as well as the access to our website, on the one hand to protect our website from unauthorised access by attackers and bots, and on the other hand to be able to optimally display the content of our website accordingly, to better tailor it to the respective visitor.  

IPAPI is used on the basis of our legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f GDPR, namely to ensure the functionality of the website and to be able to restore it as quickly and easily as possible in the event of a problem, and for the optimal presentation of our content.  

We have concluded the new standard contractual clauses with iPAPI. You can find more information about iPAPI’s data protection at:  https://ipapi.co/privacy/. 

j) Social Media

   (1) Facebook plugin “Like 

The Facebook “Like” plugin is integrated into this website. You can recognise it by the blue Facebook logo and the adjacent “Like” addition. The plugin is operated by Meta Platforms Ireland Limited (Hanover Reach, 5-7 Hanover Quay, Dublin 2 Ireland) and is directly connected to the Meta Platforms servers. No data is passed on to the website operator. 

As soon as you activate the plugin, it collects, uses and transmits data to Meta Platforms – independently of this website – to the extent and for the purpose specified in Facebook’s privacy policy at http://www.facebook.com/policy.php (including the information that and when you visited this website). If you actively use the plugin (e.g. by clicking the “Like” button), this information is also transmitted to Meta Platforms and used there. 

The type, scope and purpose of the data collected depends on whether you are registered and/or logged in to Facebook. However, data is only assigned to your Facebook account if you are currently logged in to Facebook. This means that you should log out of Facebook before visiting this website if you want to prevent an assignment to your Facebook profile. Meta Platforms may also process the collected data in third countries in accordance with the Facebook privacy policy. 

The most frequently asked questions about the plugin’s data protection are explained in a generally understandable way at http://www.facebook.com/help.php?page=1068.

   (2) Xing  

On our websites, we use functions of the Xing service, which is operated by XING SE. 
(Dammtorstraße 30, 20354 Hamburg Germany). 

If you click on the Xing button on our websites, the contents of our website will be linked to your Xing profile. However, this is only possible if you are logged into your Xing account. 

We would like to point out that we, as the provider of the website, have no knowledge of the content of the transmitted data or its use by Xing. You can find more information on this in Xing’s privacy policy: https://privacy.xing.com/de/datenschutzerklaerung 

   (3) LinkedIn 

On our websites, we use functions of the LinkedIn service, which is operated by LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland). 

If you click on the LinkedIn button on our website, the content of our website will be linked to your LinkedIn profile. However, this is only possible if you are logged into your LinkedIn account. 

We would like to point out that we, as the provider of the website, have no knowledge of the content of the transmitted data or its use by LinkedIn. You can find more information on this in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy?_l=de_DE 

a) Information

In accordance with Article 15 of the GDPR, you have the right to request information about your personal data processed by us. This right of access includes information about 

• the purposes of processing
• the categories of personal data
• the recipients or categories of recipients to whom your data have been or will be disclosed
• the planned storage period or at least the criteria for determining the storage period
• the existence of a right to rectification, erasure, restriction of processing or objection
• the existence of a right of appeal to a supervisory authority
• the origin of your personal data, if it was not collected by us
• the existence of automated decision-making including profiling and, if applicable, meaningful information on its details 

b) Correction

In accordance with Art. 16 GDPR, you have the right to have incorrect or incomplete personal data stored by us corrected without delay. 

c) Deletion

In accordance with Art. 17 GDPR, you have the right to request the immediate deletion of your personal data from us, insofar as the further processing is not necessary for one of the following reasons: 

• the personal data are still necessary for the purposes for which they were collected or otherwise processed
• for the exercise of the right to freedom of expression and information
• for compliance with a legal obligation which requires processing under the law of the European Union or the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
• for reasons of public interest in the area of public health in accordance with Art. 9(2)(h) and (i) and Art. 9(3) of the GDPR
• for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in section a) above is likely to render impossible or seriously prejudice the achievement of the purposes of such processing
• for the assertion, exercise or defence of legal claims 
  

d) Limitation of processing

You can request the restriction of the processing of your personal data for one of the following reasons in accordance with Art. 18 GDPR: 

• You dispute the accuracy of your personal data. 
• The processing is unlawful and you refuse to erase the personal data.
• We no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
• You object to the processing pursuant to Art. 21 (1) GDPR. 

e)  Information

If you have requested the rectification or erasure of your personal data or a restriction of processing in accordance with Art. 16, Art. 17 or Art. 18 of the GDPR, we will notify all recipients to whom your personal data has been disclosed, unless this proves impossible or involves a disproportionate effort. You can request that we inform you of these recipients.  

f)    Transmission

You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format. 

You also have the right to request that this data be transferred to a third party if the processing was carried out with the aid of automated procedures and is based on consent pursuant to Art. 6 (1) sentence 1 lit. a or Art. 9 (2) lit. a or on a contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR. 

g)  Revocation

In accordance with Art. 7 (3) of the GDPR, you have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. In the future, we may no longer continue the data processing that was based on your revoked consent. 

h)  Complaint

In accordance with Art. 77 GDPR, you have the right to complain to a supervisory authority if you believe that the processing of your personal data violates the GDPR. 

i)      Objection

If your personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) sentence 1 lit. f of the GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 of the GDPR, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without specifying the particular situation. If you would like to make use of your right of revocation or objection, it is sufficient to send an e-mail to info@reev.com. 

j)    Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision 

1. is necessary for the conclusion or performance of a contract between you and us
2. is permitted by legislation of the European Union or the Member States to which we are subject and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests
3. is done with your express consent 

However, these decisions must not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests. 

With regard to the cases mentioned in 1. and 3. above, we take appropriate measures to safeguard the rights and freedoms as well as your legitimate interests, which include at least the right to obtain the intervention of a person from our side, to express your point of view and to contest the decision.