Privacy Policy FPZ

Last updated: 04.11.2020

Controller pursuant to Art. 4 para. 7 EU General Data Protection Regulation (GDPR)

FPZ GmbH

Gustav-Heinemann-Ufer 88a 50968 Cologne Phone: +49 221 99 53 00 Fax: +49 221 99 53 08 00 E-mail: info@fpz.de

Data Protection Officer of the Controller

Dr. Ralf W. Schadowski E-Mail: datenschutz@fpz.de

Terms

Personal data

Any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable natural person is considered to be a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to it, which are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.

Processing

Any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.

Restriction of processing

The marking of stored personal data with the aim of restricting their future processing.

Profiling

Any type of automated processing of personal data consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movement of that natural person.

Pseudonymisation

The processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person be assigned.

Person in charge

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union law or by the law of the Member States, the controller or the specific criteria for its designation may be determined in accordance with Union law or the law of the Member States: should be provided.

Processor

A natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.

Third Party

A natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorised to process the personal data.

Consent

To the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes, in the form of a statement or other unambiguous affirmative action, by which the data subject indicates that he or she consents to the processing of personal data concerning him/her.

1. Legal basis for the processing of personal data

(1) Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. (2) In the case of the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures. (3) Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis. (4) In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis. (5) If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.

2. Data Deletion & Storage Period

(1) The personal data of the data subject will be deleted or blocked as soon as the purpose for which it was stored no longer applies. (2) In addition, storage may take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. (3) The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

3. Information on the collection of personal data

(1) In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour. (2) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, if applicable, etc.) will be collected. Your title, your name, your contact, any comments you may have made and your telephone number) will be stored by us in order to answer your questions. We delete the data collected in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations. (3) You can also register for our therapy programs via our website. The following data will be processed by you for the purpose of possible participation in one of the therapy programs and to ensure the correct therapy processes: e-mail address, telephone number, salutation, first name, last name, time of creation, health insurance, insurance number, therapy program, choice of doctor's appointment (analogue or online), street, postcode, city. (4) If we use contracted service providers for individual functions of our offer or if we would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we also mention the defined criteria for the storage period.

Collection of personal data when you visit our website

If you use the website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary for us to display our website to you and to ensure its stability and security (the legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR):

• IP address • Hostname • Date and time of the request • Time zone difference to Greenwich Mean Time (GMT) • Content of the request (specific page) • Access status/HTTP status code • Amount of data transferred in each case • Website from which the request comes (referrer) • The specific pages of our website that you have accessed • Browser: type, version and language set • Operating system: type and version • If JavaScript is enabled, also: ▪ Screen resolution • Color depth • Browser window size • Installed browser plugins

Use of cookies

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive associated with the browser you are using and through which certain information flows to the entity that sets the cookie. Cookies cannot run programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective overall.

Session cookies:

• Cookie-Name: LS_CSRF_TOKEN Domain: salesiq.zoho.eu Expiration date: Session Purpose: This cookie is used by Cloudflare to identify trusted web traffic and to ensure the security of our servers and data • Cookie-Name: pimcore_admin_sid Domain: .fpz.de Expiration date: Session Purpose: This cookie is temporarily necessary for the functionality of the website. • Cookie-Name: __utmc Domain: .fpz.de Expiration date: Session Purpose: This cookie is a thing of the past and is no longer used by Google Analytics. For backward compatibility of sites that still use the urchin.js tracking code, this cookie is still written and expires when the browser is closed. However, this cookie does not need to be taken into account when debugging and using the new ga.js tracking code. • Cookie-Name: __utmt_customer Domain: .fpz.de Expiration date: Session Purpose: This cookie is set by Google Analytics. Per Google Analytics documentation, it is used to throttle the request rate for the service. • Cookie-Name: ABTasty Domain: .fpz.de Expiration date: Session Purpose: Saves website settings • Cookie-Name: ABTastySession Domain: .fpz.de Expiration date: Session Purpose: Saves website settings

Cookie Settings:

• Cookie-Name: klaro Domain: www.fpz.de Expiration date: 30 days Purpose: This cookie remembers the privacy setting

Google Cookies:

• Cookie-Name: NIB Domain: .google.com Expiration date: 6 months Purpose: NID is used by Google to tailor ads to your Google search. With the help of the cookie, Google "remembers" your most frequently entered search queries or your previous interaction with ads. This way, you will always receive tailor-made advertisements. The cookie contains a unique identifier that Google uses to collect your personal preferences for advertising purposes. • Cookie-Name: DV Domain: www.google.com Expiration date: 5 minutes Purpose: This cookie is used to support Google's advertising services. • Cookie-Name: 1P_JAR Domain: .google.com Expiration date: 1 month Purpose: This Google cookie is used to optimize advertising, to deliver ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. • Cookie-Name: CONSENT Domain: .google.com Expiration date: 19 years old Purpose: The cookie stores the status of a user's consent to the use of various Google services. CONSENT is also used for security in order to verify users and protect user data from unauthorized attacks. • Cookie-Name: _Guide Domain: .fpz.de Expiration date: 1 day Purpose: Registers a unique ID that is used to generate statistical data on how the visitor uses the website. • Cookie-Name: _Ga Domain: .fpz.de Expiration date: 2 years Purpose: Registers a unique ID that is used to generate statistical data on how the visitor uses the website. • Cookie-Name: _gcl_au Domain: .fpz.de Expiration date: 3 months Purpose: Used by Google AdSense to experiment with advertising efficiency on websites that use their services. • Cookie-Name: _gat_UA-<property-id> Domain: .fpz.de Expiration date: 1 minute Purpose: Used to throttle the request rate. • Cookie-Name: __utma Domain: .fpz.de Expiration date: 2 years Purpose: This cookie stores the main information in order to track visitors. This cookie contains a unique visitor ID, the date and time of the first visit, the time at which the active visit is started and the number of visitors a unique visitor has made to the website. • Cookie-Name: __utmb Domain: .fpz.de Expiration date: 30 minutes Purpose: In this cookie, Google Analytics remembers whether a visit has expired and how far a visitor moves on the page. It stores the number of pageviews within the current visit and the start time of a visitor's current visit. • Cookie-Name: __utmz Domain: .fpz.de Expiration date: 6 months Purpose: This cookie is the Visitor Sources cookie. It contains all visitor source information of the current visit, including information that has been passed through campaign tracking parameters. This cookie also stores whether the source of the visitors of the last visit was different from the current one. If no information about the source of the visitor can be determined, the cookie will not be modified. In this way, Google Analytics can attribute visitor information such as conversions and e-commerce transactions to a visitor source. The cookie does not contain any historical information about past visitor sources.

Vimeo Cookies:

• Cookie-Name: vuid Domain: .vimeo.com Expiration date: 2 years Purpose: Collects data from users about their visit and the pages accessed. • Cookie-Name: player Domain: .vimeo.com Expiration date: 1 year Purpose: Saves the user's preferences when playing embedded videos from Vimeo.

4. Further functions and offers of our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you will usually have to provide further personal data that we use to provide the respective service and to which the aforementioned data processing principles apply. Mandatory information is marked with an asterisk. Entries in fields not marked in this way are purely voluntary. (2) When you contact the Service Provider by e-mail or via the contact form, we will store your e-mail address and, if you provide it, your name, telephone number and, if applicable, any other data you have provided, in order to answer your questions. In the event that it becomes clear from your remark in the contact that one of our partners can better help you with your request, we will forward the contact details you provide to this partner on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR). (3) If you are interested in FPZ Back Therapy and request the Guide for Physicians via our website (How to do it), we will collect your first and last name, your title and your health insurance company or insurance. This data will be processed for the purpose of creating the guide for medical professionals. We also store this data in our CRM system for further communication. Optionally, you can enter your address details, your e-mail address and your telephone number. We process the e-mail address and telephone number for the purpose of establishing contact and providing further advice with regard to FPZ Back Therapy. We process the address data for the purpose of analysing the needs in order to optimise our range of services. Address data, e-mail address and telephone number are only collected with your consent, which you can revoke at any time and without giving reasons. (4) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked. (5) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, contracts or similar services together with partners. You can find more information about this by providing your personal data or in the description of the offer below. (6) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.

5 Rights of the data subject

In the following, we inform you about your rights as a data subject in accordance with Art. 15 GDPR. You can exercise these rights at any time and contact us directly. If you assert these rights against us, we will examine them in detail, taking into account the associated legal requirements and obligations. We may ask you for further information on this. We will explain the results of our audit in detail as well as our procedure for fulfilling your request. It is possible that we will not be able to fully comply with your wishes in the manner you wish. This is not to prevent you from claiming your rights against us or from asking us about them. We will be happy to answer all your questions. (1) In accordance with Art. 15 GDPR, you have the right to request information from us at any time as to whether and which data about you is being processed by us. This also includes information on the purposes of the processing, if applicable, on recipients to whom we have disclosed data about you, the planned storage period and, if applicable, information on the origin of this data, if we have not collected it directly from you. In addition, you have the right to a one-time copy of your personal data stored by us free of charge. We reserve the right to charge a reasonable administration fee for the following copies. (2) In accordance with Art. 16 GDPR, you have the right to demand that we correct any inaccurate data that we have stored about you. This includes the right to have incomplete personal data completed. (3) Right to erasure You have the right to request that we delete data that we have stored about you. If we have published your data, this also includes our obligation to forward all links to this data as well as copies or replications of this data to other controllers for the processing of this published personal data within the framework of the "right to be forgotten" in accordance with Art. 17 (2) GDPR, taking into account available technology and the costs of implementation. (4) Right to restriction of processing In accordance with Art. 18 GDPR, you have the right to demand that we restrict the processing of data that we have stored about you. After that, the processing of this data is only possible with your consent or for a few purposes defined by law. (5) Right to object to processing Insofar as we base the processing of your personal data on the balancing of interests, you may object to the processing in accordance with Art. 21 GDPR. This is the case, in particular, if the processing is not necessary for the performance of a contract with you, which is described by us in the following description of the functions. If you wish to object, we will ask you to explain the reasons why we should not process your personal data as we do. In the event of your justified objection, we will review the situation and will either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we continue the processing. Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your objection to advertising via the contact channels listed above. (6) Right to withdraw consent under data protection law If you have given your consent to the processing of your data, you can revoke it at any time in accordance with Art. 7 (3) GDPR. Such a withdrawal will affect the lawfulness of the processing of your personal data after you have given it to us. (7) Right to data portability In accordance with Art. 20 GDPR, you have the right to receive data about yourself that you have provided to us from us in a structured, commonly used and machine-readable format for the purpose of transmitting it to another controller. At your request and taking into account the available technical possibilities, this also includes the direct transfer from us to the other controller. (8) Right to lodge a complaint with a supervisory authority In accordance with Art. 13 GDPR, you have the right to lodge a complaint with a data protection supervisory authority at any time about our processing of data relating to you. A list of regulators can be found athttps://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html;jsessionid=BA0DF782666E2FD6737E399FFAD02175.intranet212

(9) Automated decision-making, including profiling You have the right to obtain information about the existence of automated decision-making, including profiling, pursuant to Art. 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, as well as the scope and intended effects of such processing for the data subject.

6. E-mail-based information services

1. Newsletter / Press mailing list

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent. (2) To subscribe to our newsletter, we use the so-called double opt-in procedure. This means that after your registration, we will send you an e-mail to the e-mail address provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data. (3) The only mandatory information for sending the newsletter is your e-mail address. The provision of additional, separately marked data is voluntary and will be used in order to be able to address you personally. After your confirmation, we will store your e-mail address for the purpose of sending you the newsletter. The legal basis for this is Art. 6 para. 1 sentence 1 lit. a GDPR. (4) You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in each newsletter e-mail.

7. Web Analytics

The legal basis for the use of all web analysis tools listed in this section is Art. 6 (1) sentence 1 (a) GDPR. We are interested in analysing the use of our website by our website visitors in order to use the statistics obtained in this way to improve our offer and to make it more interesting for you as a user. If the analysis tool used also serves other purposes or if we use it for other interests of ours, we will inform you about this directly in the explanations for the respective analysis tool.

1. Use of Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", which are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the use of cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website activity and internet usage. (2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google. (3) You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link:http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are processed in an abbreviated manner, so that personal reference can be excluded. Insofar as the data collected about you has a personal reference, this will be excluded immediately and the personal data will therefore be deleted immediately. (5) Third Party Information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 Terms of Use :http://www.google.com/analytics/terms/de.html

Privacy Overview: http://www.google.com/intl/de/analytics/learn/privacy.htmlPrivacy

Policy: http://www.google.de/intl/de/policies/privacy.

(6) This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "personal data". (7) Google Analytics Demographics: This website uses the "Demographics" feature of Google Analytics. This makes it possible to generate reports that contain information about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google, as well as third-party visitor data. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section "Objection to data collection".

2. Use of Mouseflow

(1) This website uses the web analysis service Mouseflow to evaluate user access to this website. Mouseflow registers clicks, mouse and scroll movements, form interactions, and more. (2) The information collected by Mouseflow is stored on a server in the United States. You can prevent the collection of data by Mouseflow by storing an opt-out cookie by clicking on the "Deactivate" button underhttps://mouseflow.de/opt-out/

(3) This website uses Mouseflow to the exclusion of the storage of IP addresses. (4) Third-Party Information: Mouseflow, Inc. 2205 152nd Ave NE, Redmond, Washington 98052, USA; Privacy Policy: https://www.salesviewer.com/datenschutz

3. New Relic

(1) This website uses a plugin from New Relic's web analytics service. It enables us to collect statistical evaluations about the speed of the website, to determine whether the website can be accessed and how quickly the respective page is displayed when it is accessed. This service is provided by New Relic Inc. (188 Spear Street, Suite 1200 San Francisco, CA 94105, USA; "New Relic"). (2) New Relic uses cookies. When a user accesses a web page that contains a New Relic plugin, their browser establishes a direct connection with New Relic's servers. By integrating the plugin, New Relic receives the information that a user has accessed the corresponding page of the offer. If the user is logged in to New Relic, New Relic can associate the visit with their New Relic account. However, if a user is not a member of New Relic, New Relic will store their IP address. (3) The purpose and scope of the data collection and the further processing and use of the data by New Relic, as well as the related rights and setting options for the protection of users' privacy, can be found in New Relic's privacy policy:https://newrelic.com/termsandconditions/privacy

4. A/B-Testing

(1) In order to be able to provide you with a better offer, we carry out A/B tests during your visit to our website, which are carried out with the help of the software solution of AB Tasty (AB Tasty GmbH, Am Hof 20-26, 50667 Cologne, Germany). In A/B testing, two different versions of a website are displayed. For example, some users will be shown version A, while other users will be shown version B of the website. The aim is to determine which version is better received by website users in order to optimize the entire website piece by piece. The legal basis for A/B testing is Art. 6 para. 1 sentence 1 lit. a GDPR. (2) The data collected by AB Tasty is not personally identifiable. If you do not wish to participate in these tests, you can deactivate this feature by clicking on the following link: https://www.abtasty.com/de/#abtastyoptout=1

Note: all you need to do is click on the link and open the corresponding page. You will then be automatically excluded from A/B testing.

8 Social media and other third-party services

1. Integration of YouTube videos

(1) We have integrated YouTube videos into our online offering, which are stored on http://www.YouTube.com

and can be played directly from our website. These are all integrated in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transfer. With the integration of YouTube videos, we pursue our interest in making our website more interesting and attractive for our visitors and achieving a better presentation of content or facts. The legal basis for the use of the plug-in is Art. 6 para. 1 sentence 1 lit. a GDPR. (2) When you visit the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the data referred to in 5 of this declaration will be transmitted. This happens regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly associated with your account. If you do not wish to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) in order to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube in order to exercise this right. (3) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find more information about your rights and settings to protect your privacy: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irelandhttps://www.google.de/intl/de/policies/privacy.

2. Integration of Google Maps

(1) On this website we use the offer of Google Maps. In this way, we pursue our interest in increasing the attractiveness of our website by displaying interactive maps directly on our website and enabling you to use the map function comfortably. The legal basis for the use of the plug-in is Art. 6 para. 1 sentence 1 lit. a GDPR. (2) When you visit the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the data referred to in 5 of this declaration will be transmitted. This happens regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) in order to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google in order to exercise this right. (3) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information about your rights in this regard and setting options to protect your privacy: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland;http://www.google.de/intl/de/policies/privacy.

3. Google Web Fonts

This site uses so-called web fonts from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland for the uniform display of fonts. When you open a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. To do this, the browser you are using must connect to Google's servers. As a result, Google becomes aware that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. If your browser does not support web fonts, your computer will use a standard font. For more information about Google Web Fonts, seehttps://developers.google.com/fonts/faq

and Google's privacy policy:https://www.google.com/policies/privacy/.

4. Google Tag Manager

(1) This website uses Google Tag Manager from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a solution that allows us to manage so-called website tags via an interface and thus integrate Google Analytics and other Google Marketing services into our website. The Google Tool Manager does not process any personal data of users and does not create cookies. (2) You can find more information about Google Tag Manager at:https://www.google.com/analytics/terms/tag-manager/;

as well as data protection at Google in general:https://policies.google.com/privacy.

5. MyNewsDesk Newsroom

(1) We used the services of Mynewsdesk GmbH (Mynewsdesk) on our website under News (news.fpz.de). Here you will find the cookie policy and the privacy policy of Mynewsdesk GmbH. Mynewsdesk GmbH uses the following services, among others: Google Analytics, Google DoubleClick, Chartbeat and NewRelic.

(2) For more information, please refer to Mynewdesk's privacy policy at: https://www.mynewsdesk.com/de/about/terms-and-conditions/privacy_policy

(3) For more information, please refer to Mynewdesk's cookie policy at:https://www.mynewsdesk.com/de/about/terms-and-conditions/cookies

6. Zoho SalesIQ

Access data: We receive data about access to our websites via the website operator or site provider as well as via the Zoho tool SalesIQ (information about Zoho can be found below). The following data is logged in this way:

(1) Websites visited (2) Time of access (3) Location from which you accessed the site (4) Source/reference from which you accessed the site (5) Browser used (6) Type of device used (7) IP address used The data collected is only used for statistical evaluations and to improve the website. However, the website operator reserves the right to check the server log files retrospectively if there are concrete indications of illegal use. For more information, please refer to Zoho's Privacy Policy.

7. Integration of Vimeo

(1) We have integrated Vimeo videos into our online offering, which are stored onhttp://www.vimeo.com

and can be played directly from our website. With the integration of Vimeo videos, we pursue our interest in making our website more interesting and attractive for our visitors and in achieving a better presentation of content or facts. The legal basis for the use of the plug-in is Art. 6 para. 1 sentence 1 lit. a GDPR.

(2) Further information on the purpose and scope of data collection and processing by Vimeo can be found in the privacy policy. There you can also find more information about your rights and settings to protect your privacy: Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA;https://vimeo.com/privacy

8. Integration of the Facebook Pixel (Custom Audience) and Facebook Conversion Tracking

Our website uses the remarketing function "Custom Audiences" of Facebook Inc. ("Facebook") including Facebook pixel and Facebook conversion tracking. As a result, users of the website when visiting the social network Facebook or other interest-based advertisements ("Facebook Ads") can be displayed by websites that also use this method. The use of Facebook pixels and the storage of "conversion cookies" is based on Art. 6 (1) (a) GDPR.

Due to the marketing tools used, your browser automatically establishes a direct connection with Facebook's server. We have no influence on the scope and further use of the data collected through the use of this tool by Facebook. Through the integration of Facebook pixels and Facebook Conversion Tracking, Facebook receives the information that you have accessed the corresponding website of our website or have clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and store your IP address and other identifiers. You can subsequently deactivate tracking by Facebook underhttps://www.facebook.com/settings/?tab=ads

Please note that you will need to disable the feature again as soon as you empty your cookies. Logged-in Facebook users can make further settings underhttps://www.facebook.com/settings/?tab=ads

For further information on data processing and data collection by Facebook, please visit: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland;http://www.facebook.com/policy.php

For specific information and details about the Facebook pixel and how it works, please visit Facebook's Help Center athttps://www.facebook.com/business/help/742478679120153

Facebook also processes your personal data in the USA. This transfer and processing takes place only on the basis of the EU standard data protection clauses that Facebook has concluded with companies in the USA.

9 Online Advertising

1. DoubleClick by Google

(1) This website continues to use the online marketing tool DoubleClick from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. DoubleClick uses cookies to serve ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed multiple times. In addition, DoubleClick may use cookie IDs to track so-called conversions related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later uses the same browser to visit the advertiser's website and make a purchase there. According to Google, DoubleClick cookies do not contain any personally identifiable information. By using this tool, we pursue the interest of showing you advertising that is of interest to you, increasing the attractiveness of our website for you and achieving a fair calculation of advertising costs. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f GDPR. (2) Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address. (3) You can prevent participation in this tracking procedure in various ways: a) by setting your browser software accordingly, in particular the suppression of third-party cookies, you will not receive advertisements from third-party providers, b) by disabling cookies for conversion tracking by setting your browser to accept cookies from the domain,https://ads.google.com

be blocked, https://adssettings.google.de/

whereby this setting will be deleted when you delete your cookies, c) by permanently deactivating it in your Firefox, Internet Explorer or Google Chrome browsers under the linkhttp://www.google.com/settings/ads/plugin

We would like to point out that in this case you may not be able to use all the functions of this offer to their full extent. (4) For more information about DoubleClick by Google, please visithttps://www.google.de/doubleclick

as well as data protection at Google in general:https://policies.google.com/privacy