Privacy Policy

Privacy Policy | The Social Shepherd Ltd

As of 06.06.2024

Identity and contact details of the data controller

The data controller in accordance with the UK GDPR and other data protection regulations is:

The Social Shepherd Ltd

Alexander House, James Street West

BA1 2BT, Bath

United Kingdom

(+44) 1225 432222

[email protected]

https://thesocialshepherd.com

Contact details of the data protection officer

The designated data protection officer is:

Jack Shepherd

Alexander House, James Street West, Bath, BA1 2BT

Email: [email protected]

General information on data processing

1. Scope of processing personal data

In general, we only process the personal data of our users to the extent necessary to provide a functioning

website with our content and services. The regular processing of personal data only takes place with the

consent of the user. Exceptions include cases where prior consent cannot be technically obtained and where

the processing of the data is permitted by law.

2. Legal basis for data processing

Where consent is appropriate for processing personal data, Art. 6 (1) (a) UK GDPR serves as the legal basis

to obtain the consent of the data subject for the processing of their data.

As for the processing of personal data required for the performance of a contract of which the data subject

is party, Art. 6 (1) (b) UK GDPR serves as the legal basis. This also applies to processing operations required

to carry out pre-contractual activities.

When it is necessary to process personal data in order to fulfil a legal obligation to which our company is

subject, Art. 6 (1) (c) UK GDPR serves as the legal basis.

If vital interests of the data subject or another natural person require the processing of personal data, Art. 6

(1) (d) UK GDPR serves as the legal basis.

If the processing of data is necessary to safeguard the legitimate interests of our company or that of a third

party, and the fundamental rights and freedoms of the data subject do not outweigh the interest of the

former, Art. 6 (1) (f) UK GDPR will serve as the legal basis for the processing of data.

3. Data removal and storage duration

The personal data of the data subject will be erased or restricted as soon as the purpose of its storage has

been accomplished, unless the retention of the data is required is accordance with mandated statutory

retention periods. Restriction or erasure of the data also takes place when the storage period stipulated by

the aforementioned standards expires, unless there is a need to prolong the storage of the data for the

purpose of concluding or fulfiling the respective contract.

Rights of the data subject

When your personal data is processed, you are a data subject within the meaning of the UK GDPR and have

the following rights:

1. Right of access (Art. 15 UK GDPR)

You may request the data controller to confirm whether your personal data is processed by them.

If such processing occurs, you can request the following information from the data controller:

Purposes of processing

Categories of personal data being processed.

Recipients or categories of recipients to whom the personal data have been or will be disclosed.

Planned storage period or the criteria for determining this period

The existence of the rights of rectification, erasure or restriction or opposition.

The existence of the right to lodge a complaint with a supervisory authority.

If applicable, origin of the data (if collected from a third party).

If applicable, existence of automated decision-making including profiling with meaningful information

about the logic involved, the scope and the effects to be expected.

If applicable, transfer of personal data to a third country or international organisation.

2. Right to rectification (Art. 16 UK GDPR)

You have a right to rectification and/or modification of the data, if your processed personal data is incorrect

or incomplete. The data controller must correct the data without delay

3. Right to the restriction of processing (Art. 18 UK GDPR)

You may request the restriction of the processing of your personal data under the following conditions:

If you challenge the accuracy of your personal data for a period that enables the data controller to verify the

accuracy of your personal data.

The processing is unlawful, and you oppose the erasure of the personal data and instead request the

restriction of their use instead.

The data controller or its representative no longer need the personal data for the purpose of processing, but

you need it to assert, exercise or defend legal claims; or

If you have objected to the processing pursuant and it is not yet certain whether the legitimate interests of

the data controller override your interests.

4. Right to erasure ("Right to be forgotten") (Art. 17 UK GDPR)

If you request from the data controller to delete your personal data without undue delay, they are required

to do so immediately if one of the following applies:

Personal data concerning you is no longer necessary for the purposes for which they were collected or

processed.

You withdraw your consent on which the processing is based pursuant to and where there is no other

legal basis for processing the data.

You object to the processing of the data and there are no longer overriding legitimate grounds for

processing, or you object pursuant to Art. 21 (2) UK GDPR.

Your personal data has been processed unlawfully.

The personal data must be deleted to comply with a legal obligation under UK law to which the data

controller is subject.

Your personal data was collected in relation to information society services offered pursuant to Art. 8

(1) UK GDPR.

The right to deletion does not exist if the processing is necessary:

to exercise the right to freedom of speech and information;

to fulfil a legal obligation required by a UK law to which the data controller is subject, or to perform a

task of public interest or in the exercise of public authority delegated to the representative.

for reasons of public interest in the field of public health.

for archival purposes of public interest, scientific or historical research purposes or for statistical

purposes.

to enforce, exercise or defend legal claims.

5. Right to data portability

You have the right to receive your personal data given to the data controller in a structured and machinereadable format. In addition, you have the right to transfer this data to another person without hindrance by

the data controller who was initially given the data.

6. Right to object

For reasons that arise from your particular situation, you have, at any time, the right to object to the

processing of your personal data pursuant to Art. 6 (1) (e) or 6 (1) (f) UK GDPR; this also applies to profiling

based on these provisions.

If the personal data relating to you are processed for direct marketing purposes, you have the right to object

at any time to the processing of your personal data in regard to such advertising; this also applies to

profiling associated with direct marketing.

7. Right to complain to a supervisory authority

You have the right to complain to the ICO if you are unhappy with how we have used you data and/or

believe that the processing of the personal data concerning you violates the applicable law. The ICO´s

address: Information Commissioner´s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Helpline

number: 0303 123 1113 ICO website: https://www.ico.org.uk

Provision of website and creation of log files

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and relevant information from

the computer system of the calling device.

The following data is collected:

Information about the browser type and the version used

The user's operating system

Other:: Marketing data

This data is stored in the log files of our system.

This data is not stored together with other personal data of the user.

2. Purpose of data processing

The temporary storage of the IP address by the system is necessary for the delivery of the website to the

computer of the user. For this purpose, the user’s IP address must be kept for the duration of the session.

The storage in logfiles is done to ensure the functionality of the website. The data is also used to optimise

the website and to ensure the security of our IT systems. An analysis of the data for marketing purposes

does not take place.

3. Legal basis for data processing

The legal basis for the temporary storage of data and logfiles is Art. 6 (1) (f) UK GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. The session is

complete when the collection of data for the provision of the website is accomplished.

If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is

possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the

calling client is not possible.

5. Objection and removal

The collection of data for the provision of the website and the storage of the data in log files is absolutely

necessary for the operation of the website. The user can object to this. Whether the objection is successful

is to be determined within the framework of a balancing of interests.

Use of cookies

1. Description and scope of data processing

When you visit our website, we use technical tools for various functions, in particular cookies, which can be

stored on your device. When you visit our website for the first time and at any time later, you have the

choice of whether you generally permit the setting of cookies or which individual additional functions you

would like to select. You can make changes in your browser settings or via our consent manager. Cookies

are text files or information in a database that are stored on your hard drive and assigned to the browser

you are using so that certain information can be passed to the entity that sets the cookie.

We use cookies on our website that are classed as ‘non-essential’. Non-essential cookies are cookies which

are used for purposes beyond the basic functioning of a website.

The following data will be processed through the use of non-essential cookies:

IP-address

Internet user location

Date and time of the website request

Customization of advertisements to the user

Tracking of the surfing behavior

Linking the website visit with other social media platforms

2. Purpose of data processing

The use of non-essential cookies is carried out for the purpose of improving the quality of our website, its

content and thus our reach and profitability. By setting these cookies, we learn how the website is used and

can thus constantly optimise our offer. These cookies serve us particularly for the following purposes:

Non technical cookies are used for purposes which include tracking, to collect various data such as the

location data of internet users; targeting, for purposes of advertising to the internet user; analysis, to inform

about the behavior of internet users on a website; connection to social media, in order to link our website

with other platforms.

3. Legal basis for data processing

The legal basis for the processing of personal data using non-essential cookies is Art. 6 (1) (a) UK GDPR. The

legal basis for the processing of personal data using essential cookies is Art. 6 (1) (f) UK GDPR, legitimate

interests.

Newsletter

1. Description and scope of data processing

You can subscribe to a newsletter on our website free of charge. When subscribing for the newsletter, the

data from the input mask is transmitted to us.

We collect the following data from you in order to provide this service:

Email address

No data will be passed on to third parties in connection with data processing for the dispatch of newsletters.

The data will be used exclusively for sending the newsletter.

2. Purpose of data processing

The user's email address is collected to deliver the newsletter to the recipient.

Additional personal data as part of the registration process is collected to prevent misuse of the services or

email address.

3. Legal basis for data processing

The legal basis for the processing of data provided by the user after registration for the newsletter is Art. 6

(1) (a) UK GDPR if the user has given his consent.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was

collected. The user's email address will therefore be stored as long as the newsletter subscription is active.

The other personal data collected during the registration process is generally deleted after a period of seven

days.

5. Objection

The subscription for the newsletter can be cancelled by the data subject at any time. For this purpose, every

newsletter contains an opt-out link.

Through this, it is also possible to withdraw the consent to the storage of personal data collected during the

registration process.

Contact via Email

1. Description and scope of data processing

You can contact us via the email address provided on our website. In this case the personal data of the user

transmitted with the email will be stored.

The data will be used exclusively for the processing of the conversation.

2. Purpose of data processing

If you contact us via email, this also constitutes the necessary legitimate interest in the processing of the

data.

3. Legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) (f) UK

GDPR. Our legitimate interest is to optimally answer your request that you send by e-mail.

If the purpose of the email contact is to conclude a contract, the additional legal basis for the processing is

Art. 6 (1) (b) UK GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was

collected. For personal data sent by email, this is the case when the respective conversation with the user

has ended. The conversation ends when it can be concluded from the circumstances that the matter in

question has been conclusively resolved.

The additional personal data collected during the sending process will be deleted after a period of seven

days at the latest.

5. Objection and removal

The user has the possibility to withdraw consent to the processing of their personal data at any time. If the

user contacts us by email, he can object to the storage of his personal data at any time.

Consent can be revoked to the processing of your personal data, or you can object to your data being

stored, by sending an email to [email protected] to express your preferences.

In this case, all personal data stored while establishing contact will be deleted.

Contact form

1. Description and scope of data processing

A Contact form is available on our website, which can be used for electronic contact. If a user makes use of

this option, the data entered in the input mask will be transmitted to us and stored.

When sending the message the following data will also be stored:

Email address

Last name

First name

Telephone / mobile phone number

Date and time

2. Purpose of data processing

The processing of the personal data from the input mask as well as if you contact us by mail serves us

exclusively for the purpose of establishing contact.

The other personal data processed during the sending process serve to prevent misuse of the Contact form

and to ensure the security of our information technology systems.

3. Legal basis for data processing

The legal basis for the processing of data transmitted while sending an email is Art. 6 (1) (f) UK GDPR. Our

legitimate interest is to provide you with the best possible response to the request you send to us via the

contact form. If the purpose of the email contact is to conclude a contract, the additional legal basis for the

processing is Art. 6 (1) (b) UK GDPR.

4. Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were

collected. For the personal data from the input mask of the Contact form and those sent by email, this is the

case when the respective conversation with the user has ended. The conversation ends when it can be

inferred from the circumstances that the facts in question have been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven

days at the latest.

5. Objection and removal

If the user contacts us via the input mask in the contact form or via e-mail, the user can object to the

storage of his or her personal data at any time.

Consent can be revoked to the processing of your personal data, or you can object to your data being

stored, by sending an email to [email protected] to express your preferences.

In this case, all personal data stored while establishing contact will be deleted.

Application via Email and Form

There is a form on our website which can be used for electronic job applications. If an applicant makes use

of this possibility, the data entered in the input mask will be transmitted to us and stored. The data is:

Title

Last name

First name

Telephone / mobile phone number

Email address

Curriculum Vitae

Alternatively, you can send us your application by email. In this case, we collect your email address and the

information you provide in the email.

After sending your application, you will receive confirmation of receipt of your application documents from

us by email.

In addition, we offer an applicant/talent pool.

Your data will not be passed on to third parties. The data will be used exclusively for processing your

application.

2. Purpose of data processing

The processing of personal data from the application form serves us solely to process your application. If

you contact us by email, this also constitutes the necessary legitimate interest in the processing of the data.

The other personal data processed during the sending process serve to prevent misuse of the application

form and to ensure the security of our information technology systems.

3. Legal basis for data processing

The legal basis for the processing of the data is the initiation of the contractual relationship at the request of

the data subject, Art. 6 (1) (b) UK GDPR.

The legal basis for the processing of data within the context of the applicant pool is the applicant's express

consent, Art. 6 (1) (a) UK GDPR.

4. Duration of storage

After completion of the application procedure, the data will be stored for up to 3 months. Your data will be

deleted after 3 months at the latest. In the event of a legal obligation, the data will be stored within the

framework of the applicable provisions.

The additional personal data collected during the sending process will be deleted after a period of seven

days at the latest.

Hosting

The website is hosted on servers of a service provider commissioned by us.

Our service provider is:

Cloudflare

The servers automatically collect and store information in so-called server log files, which your browser

automatically transmits when you visit the website. The stored information is:

Information about the browser type and the version used

The user's operating system

Other: Marketing data

This data will not be merged with other data sources. The data is collected on the basis of Art. 6 (1) (f) UK

GDPR. The website operator has a legitimate interest in the technically error-free presentation and

optimisation of his website - and server log files are therefore recorded.

The server of the website is geographically located in the UK.

Geotargeting

We use the IP address and other information provided by the user (e.g. the postal code used for registration

or ordering) to approach regional target groups (so-called "geotargeting").

The regional target group approach is used, for example, to automatically display regional offers or

advertisements that often are more relevant to users. The legal basis for the use of the IP address and any

other information provided by the user (e.g. postal code) is Art. 6 (1) (f) UK GDPR, based on our legitimate

interest in ensuring a more precise target group approach and thus providing offers and advertising with

greater relevance for our users.

Part of the IP address and the additional information provided by the user (e.g. postal code) are merely

processed and not stored separately.

You can prevent geotargeting by, for example, using a VPN or proxy server that prevents accurate

localisation. In addition, depending on the browser you are using, you can also deactivate a location

localisation in the corresponding browser settings (as far as this is supported by the respective browser).

We use geotargeting on our website for the following purposes:

Advertising

Content delivery networks

CloudFlare

1. Description and scope of data processing

On our website we use functions of the content delivery network CloudFlare of CloudFlare Germany GmbH,

Rosental 7, 80331 Munich, Germany (Hereinafter referred to as CloudFlare). A Content Delivery Network

(CDN) is a network of regionally distributed servers connected via the Internet to deliver content, especially

large media files such as videos. CloudFlare offers web optimisation and security services that we use to

improve the load times of our website and to protect it from misuse. When you visit our website you will be

connected to the servers of CloudFlare, e.g. to retrieve content. This allows personal data to be stored and

evaluated in server log files, the user's activity (e.g. which pages have been visited) and device and browser

information (e.g. IP address and operating system). Further information on the collection and storage of data

by CloudFlare can be found here: https://www.cloudflare.com/en-...

2. Purpose of data processing

The use of CloudFlare's features serves to deliver and accelerate online applications and content.

3. Legal basis for data processing

The data is collected on the basis of Art. 6 (1) (f) UK GDPR. The website operator has a legitimate interest in

the technically error-free presentation and optimisation of his website -and the server log files are therefore

recorded.

4. Duration of storage

Your personal information will be retained for as long as necessary to fulfil the purposes described in this

Privacy Policy or as required by law.

5. Objection and removal

Information about objection and removal options regarding CloudFlare can be found at:

https://www.cloudflare.com/en-...

Usage of Plugins

We use plugins for various purposes. The plugins used are listed below:

Use of Facebook pixel

1. Scope of processing of personal data

We use the Facebook pixels of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA and their

representatives in Union Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal H , D2 Dublin, Ireland

(Hereinafter referred to as Facebook) on our online presence. It allows us to track the actions of users after

they have seen or clicked on a Facebook ad. This allows personal data to be stored and evaluated, in

particular the user's activity (in particular which pages have been visited and which elements have been

clicked on), device and browser information (in particular the IP address and the operating system), data on

the advertisements displayed (in particular which advertisements have been displayed and whether the

user has clicked on them) and also data on advertising partners (in particular pseudonymised user IDs). This

allows us to measure the effectiveness of Facebook advertisements for statistical and market research

purposes.

The data collected in this way is anonymous for us, i.e. we do not see the personal data of individual users.

However, this data is stored and processed by Facebook. Facebook may link this information to your

Facebook account and may also use it for its own promotional purposes in accordance with Facebook's Data

Usage Policy.\For more information about how Facebook collects and stores this information, please visit:

https://en-gb.facebook.com/pol...

2. Purpose of data processing

The use of the Facebook pixel serves the analysis and optimisation of advertising measures.

3. Legal basis for the processing of personal data

The legal basis for the processing of personal data is the user's given consent in accordance with Art. 6 (1)

(a) UK GDPR.

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this

Privacy Policy or as required by law, e.g. for tax and accounting purposes.

5. Possibility of revocation of consent and removal

You have the right to revoke your declaration of consent under data protection law at any time. The

revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the

consent up to the revocation.

You can prevent Facebook from collecting and processing your personal information by preventing the

storage of third-party cookies on your computer, by using the "Do Not Track" feature of a supporting

browser, by disabling the execution of script code in your browser, or by installing a script blocker such as

NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can find more information about objection and removal options for Facebook at:

https://en-gb.facebook.com/pol...

Use of Google Analytics

1. Scope of processing of personal data

We use Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway,

Mountain View, CA 94043, USA and its representative in the Union Google Ireland Ltd., Gordon House,

Barrow Street, D04 E5W5, Dublin, Ireland (Hereinafter referred to as Google). Google Analytics examines,

among other things, the origin of visitors, their length of stay on individual pages and the use of search

engines, thus allowing better monitoring of the success of advertising campaigns. Google places a cookie on

your computer. This allows personal data to be stored and evaluated, in particular the user's activity (in

particular which pages have been visited and which elements have been clicked on), device and browser

information (in particular the IP address and the operating system), data on the advertisements displayed

(in particular which advertisements have been displayed and whether the user has clicked on them) and

also data on advertising partners (in particular pseudonymised user IDs). The information generated by the

cookie about your use of this website will be transmitted to and stored by Google on servers in the United

States. However, if IP anonymisation is enabled on this online presence, Google will previously truncate your

IP address within member states of the European Union or other signatory states to the Agreement on the

European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in

the USA and shortened there.

On behalf of the operator of this online presence, Google will use this information to evaluate your use of the

online presence, to compile reports on the activities of the online presence and to provide further services

associated with the use of the online presence and the Internet use to the operator of the online presence.

The IP address transmitted by your browser as part of Google Analytics is not combined with other data

from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser,

however please note that if you do this you may not be able to use the full functionality of our

website.\Further information on the collection and storage of data by Google can be found here:

https://policies.google.com/pr...

2. Purpose of data processing

The purpose of processing personal data is to specifically address a target group that has already expressed

an initial interest by visiting the site.

3. Legal basis for the processing of personal data

The legal basis for the processing of personal data is the user's given consent in accordance with Art. 6 (1)

(a) UK GDPR.

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this

Privacy Policy or as required by law. Advertising data in server logs is anonymised by Google's own

statements to delete parts of the IP address and cookie information after 9 and 18 months respectively.

5. Possibility of revocation of consent and removal

You have the right to revoke your declaration of consent under data protection law at any time. The

revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the

consent up to the revocation.

You may prevent the collection and processing of your personal data by Google by preventing the storage of

cookies by third parties on your computer, by using the "Do Not Track" function of a supporting browser, by

deactivating the execution of script code in your browser or by installing a script blocker such as NoScript

(https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. your IP address) to Google

and to prevent the processing of this data by Google by downloading and installing the browser plug-in

available under the following link:

https://tools.google.com/dlpag...

With the following link you can deactivate the use of your personal data by Google:

https://adssettings.google.com\Further information on objection and removal options against Google can be

found at:

https://policies.google.com/pr...

Use of Instagram Plugin

1. Scope of processing of personal data

We use plugins of the Instagram service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA

and their representatives in the Union Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour,

Dublin 2, Ireland (Hereinafter referred to as Facebook). The integrated Instagram buttons are used by us to

link to our Instagram profile. Also included is a widget that allows us to display certain photos and videos

from our Instagram profile on our online presence. When you visit one of our pages that contains such a

plug-in, your browser connects directly to a Facebook server. The contents of the plug-ins are transmitted

directly to your browser and integrated into the online presence. Data is automatically transferred to

Instagram and stored on its servers. This transmitted data includes connection data (such as your IP

address, date and time, the URL accessed) as well as the browser and operating system used.

Your visit to our site can be tracked by Instagram even if you are not actively using the plug-in features.\ If

you are logged into your Instagram account, you can click the Instagram button to link the contents of our

site to your Instagram profile. This allows Instagram to assign the visit to our pages to your user account. If

you want to prevent this direct assignment, you must log out of Instagram before visiting our online

presence. \For more information, see Instagram's privacy policy:

https://help.instagram.com/519...

2. Purpose of data processing

The use of the Instagram Plug-In serves to improve the public image of our company.

3. Legal basis for the processing of personal data

The legal basis for the processing of personal data is the user's given consent in accordance with Art. 6 (1)

(a) UK GDPR.

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this

Privacy Policy or as required by law, e.g. for tax and accounting purposes.

5. Possibility of revocation of consent and removal

You have the right to revoke your declaration of consent under data protection law at any time. The

revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the

consent up to the revocation.

You can prevent Instagram from collecting and processing your personal information by preventing third

party cookies from being placed on your computer, by using the "Do Not Track" feature of a supporting

browser, by disabling script code execution in your browser, or by installing a script blocker such as

NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

For more information about objection and removal options for Instagram, visit:

https://help.instagram.com/519...

Use of LinkedIn

1. Scope of processing of personal data

We use functions of the network LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Place,

Dublin 2, Irland (Hereafter referred to as LinkedIn). Each time you access one of our pages that contains

LinkedIn functions, a connection is established to LinkedIn servers. LinkedIn will be informed that you have

visited our website with your IP address. If you click the LinkedIn "Recommend" button and are logged into

your LinkedIn account, LinkedIn will be able to associate your visit to our website with you and your user

account. This allows personal data to be stored and evaluated, in particular the user's activity (in particular

which pages have been visited and which elements have been clicked on) and device and browser

information (in particular the IP address and the operating system). We would like to point out that, as the provider of the pages, we have no knowledge of the content of the

transmitted data or its use by LinkedIn. For more information on LinkedIn's collection and storage of data,

please visit:

https://www.linkedin.com/legal...

2. Purpose of data processing

The use of the LinkedIn Plugin serves the usability of our online presence.

3. Legal basis for the processing of personal data

The legal basis for the processing of personal data is the user's given consent in accordance with Art. 6 (1)

(a) UK GDPR.

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this

Privacy Policy or as required by law, e.g. for tax and accounting purposes.

5. Possibility of revocation of consent and removal

You have the right to revoke your declaration of consent under data protection law at any time. The

revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the

consent up to the revocation.

You can prevent LinkedIn from collecting and processing your personal data by preventing the storage of

third-party cookies on your computer, by using the "Do Not Track" function of a supporting browser, by

deactivating the execution of script code in your browser or by installing a script blocker such as NoScript

(https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. Furthermore, the

transmission may be prevented by logging out of your LinkedIn account before accessing our website.

The following links will allow you to deactivate the use of your personal data by LinkedIn:

https://www.linkedin.com/psett...

For further information on the possibilities of objection to and removal from LinkedIn, please visit:

https://www.linkedin.com/legal...

Use of MailChimp

1. Scope of processing of personal data

We use the service provider MailChimp of The Rocket Science Group, LLC, 512 Means Street, Suite 404,

Atlanta, GA 30318, USA (Hereinafter referred to as MailChimp) to send our newsletter. MailChimp is a

provider for email marketing and enables us to communicate directly with potential customers via email

newsletters. If you register for the newsletter, the data you enter when registering for the newsletter will be

transferred to MailChimp and stored there. This allows further personal data to be stored and evaluated, in

particular the user's activity (in particular which pages have been visited and which elements have been

clicked) and device and browser information (in particular the IP address and operating system).

Therefore your data will also be stored by MailChimp. Your data will not be passed on to third parties to

receive the newsletter and MailChimp does not have the right to pass on your data. After registration

MailChimp will send you an email to confirm your registration. In addition, MailChimp offers various analysis

options on how the sent newsletters are opened and used, e.g. how many users an email was sent to,

whether emails were rejected and whether users unsubscribed from the list after receiving an email.

\Further information on the collection and storage of data by MailChimp can be found here:

https://MailChimp.com/legal/pr...

2. Purpose of data processing

The personal data collected during registration for the newsletter will be used exclusively for sending our

newsletter, possibly for invitations to events and, if you are already our customer, for our customer e-mail.

Furthermore, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation

of the newsletter service or registration in this respect, as might be the case in the event of changes to the

newsletter offering or changes to the technical conditions.

3. Legal basis for the processing of personal data

The legal basis for the processing of personal data is the user's given consent in accordance with Art. 6 (1)

(a) UK GDPR.

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this

Privacy Policy or as required by law. In addition, you can contact MailChimp and request the deletion of your

data.

5. Possibility of revocation of consent and removal

You have the right to revoke your declaration of consent under data protection law at any time. The

revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the

consent up to the revocation.

Your consent to the storage of the data, as well as their use for the dispatch of the newsletter by MailChimp

can be revoked at any time. You can exercise your right of withdrawal at any time by sending an email to

MailChimp or by clicking on the link provided in each newsletter.\Further information on objection and

removal options against MailChimp can be found at:

https://MailChimp.com/legal/pr...

Use of YouTube

1. Scope of processing of personal data

We use the plugin operated by Google from YouTube, YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066,

USA and their representatives in the Union Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,

Ireland (Hereinafter referred to as Google). We use the plugin from YouTube to embed videos from YouTube

on our online presence. When you visit our website, your browser connects to YouTube's servers. It may be

used to store and analyse personal data, in particular user activity (in particular which pages have been

visited and which elements have been clicked on) and device and browser information (in particular IP

address and operating system). We have no influence on the content of the plug-in. If you are logged into your YouTube account during your

visit, YouTube can assign your online presence visit to this account. By interacting with this plug-in, this

corresponding information is transmitted directly to YouTube and stored there. \Further information on the

collection and storage of data by Google can be found here:

https://policies.google.com/pr...

2. Purpose of data processing

The use of the YouTube PlugIn serves the improvement of the user friendliness and an appealing

representation of our on-line operational readiness level.

3. Legal basis for the processing of personal data

The legal basis for the processing of personal data is the user's given consent in accordance with Art. 6 (1)

(a) UK GDPR.

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this

Privacy Policy or as required by law, e.g. for tax and accounting purposes.

5. Possibility of revocation of consent and removal

You have the right to revoke your declaration of consent under data protection law at any time. The

revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the

consent up to the revocation.

You can prevent the collection and processing of your personal data by Google by preventing the storage of

cookies from third parties on your computer, by using the "Do Not Track" function of a supporting browser,

by deactivating the execution of script code in your browser or by using a script blocker such as a browser

browser browser.B. Install NoScript (https://noscript.net/) or Ghostery (www.ghostery.com=EN&hl=e) in your

browser. With the following link you can deactivate the use of your personal data by Google:

https://adssettings.google.com

Further information on objection and removal options against Google can be found at:

nhttps://policies.google.com/privacy?hl=en-GB

Use of Google Tag Manager

1. Scope of processing of personal data

We use the Google Tag Manager (https://marketingplatform.goog...) of Google LLC,

1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and its representative in the Union Google

Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (Hereinafter referred to as Google). With Google Tag Manager, tags from Google and third-party services can be managed and bundled and

embedded on an online presence. Tags are small code elements on an online presence that are used,

among other things, to measure visitor numbers and behavior, capture the impact of online advertising and

social channels, use remarketing and targeting, and test and optimise online presences. When a user visits

the online presence, the current tag configuration is sent to the user's browser. It contains statements about

which tags are to be triggered. Google Tag Manager triggers other tags that may themselves collect data.

You will find information on this in the passages on the use of the corresponding services in this data

protection declaration. Google Tag Manager does not access this data.

For more information about the Google Tag Manager, please

visit https://marketingplatform.goog... and see Google's privacy

policy: https://policies.google.com/pr...

2. Purpose of data processing

The purpose of the processing of personal data lies in the collected and clear administration as well as an

efficient integration of the services of third parties.

3. Legal basis for the processing of personal data

The legal basis for the processing of personal data is the user's given consent in accordance with Art. 6 (1)

(a) UK GDPR.

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this

Privacy Policy or as required by law. Advertising data in server logs is anonymised by Google's own

statements to delete parts of the IP address and cookie information after 9 and 18 months respectively.

5. Possibility of revocation of consent and removal

You have the right to revoke your declaration of consent under data protection law at any time. The

revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the

consent up to the revocation.

You may prevent the collection and processing of your personal data by Google by preventing the storage of

cookies by third parties on your computer, by using the "Do Not Track" function of a supporting browser, by

deactivating the execution of script code in your browser or by installing a script blocker such as NoScript

(https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. your IP address) to Google

and to prevent the processing of this data by Google by downloading and installing the browser plug-in

available under the following link:

https://tools.google.com/dlpag...

With the following link you can deactivate the use of your personal data by Google:

https://adssettings.google.de

Further information on objection and removal options against Google can be found at:

https://policies.google.com/pr...

Use of Facebook Retargeting

1. Scope of processing of personal data

We use functionalities of the advertising plugin Facebook Retargeting of Facebook Ireland Limited, 4 Grand

Canal Square, Dublin Dublin 2, Ireland (hereinafter referred to as Facebook).

Facebook Retargeting is used to run advertising campaigns and to interact with them. Facebook

Retargeting reminds users about products they have searched for or viewed but not purchased. In the

process, cookies from Facebook are stored on your device.

In particular, the following personal data is processed by Facebook:

- Information about user activities

- Accessed website

- Which products have been displayed

- Which ads have been clicked

- Device information, especially device type, IP address

- Facebook account of users if they are logged in to Facebook

Data is processed on servers of Facebook Inc, Facebook, Inc, 1601 Willow Road, Menlo Park, California

94025 in the USA.

Further information on the collection and storage of data by Facebook Retargeting can be found at:

https://www.facebook.com/priva...

2. Purpose of data processing

The use of Facebook Retargeting allows us to run advertisements on various platforms and to analyse the

interaction of users with these advertisements. In this way, we aim to provide users with personalised and

therefore more relevant advertisements.

3. Legal basis for the processing of personal data

The legal basis for the processing of personal data is the user's given consent in accordance with Art. 6 (1)

(a) UK GDPR.

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this

Privacy Policy or as required by law, e.g. for tax and accounting purposes.

5. Possibility of revocation of consent and removal

You have the right to revoke your declaration of consent under data protection law at any time. The

revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the

consent up to the revocation.

You can prevent Facebook Retargeting from collecting and processing your personal data by blocking the

storage of third-party cookies on your computer, by using the "Do Not Track" feature of a supporting

browser, by deactivating the execution of script code in your browser, or by installing a script blocker such

as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

The deactivation of personalised advertisements for Facebook users is possible for logged-in users here:

https://www.facebook.com/setti...

For further information on objection and removal options against Facebook Retargeting, please visit:

https://www.facebook.com/priva...

Don’t be sheepish
let’s talk

TSS 6th Birthday 3