Notes on data protection

General part

1.1 Information on the collection of personal data

(1) In the following, we inform you in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation "GDPR") about the collection of personal data when using our website(s). Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.
(2) The name and contact details of the controller pursuant to Art. 4 (7) GDPR can be found in our legal notice. You can reach our data protection officer at Creo.chat.
(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. We delete the data arising in this context after storage is no longer required, or restrict processing if there are statutory retention obligations.
(4) For individual functions of our offer, we use contracted service providers such as customer service centers, accounting, hosting service providers or advertising agencies. If we wish to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the specified criteria for the storage period.
(5) All information below relates to the use of our digital online services and applications, which can be accessed via PCs, smartphones, tablets and all other Internet-enabled, mobile or stationary devices.

1.2 Your rights

(1) You have the following rights vis-à-vis us with regard to your personal data:

Right to information
Right to rectification or erasure
Right to restriction of processing
Right to object to the processing
Right to data portability
Right to withdraw your consent.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
(3) Upon request, we will inform you whether and, if so, which personal data we have stored about you. If we have stored incorrect information about you, we will correct it as soon as you inform us of this.

1.3 Other functions and offers on our website

(1) In addition to the purely informational use of our website, we offer various optional services - such as the sending of a news newsletter - which you can use if you are interested. To do so, you must generally provide additional personal data that we use to provide the respective service and to which the aforementioned data processing principles apply.
(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
(3) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer below.
(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

1.4 Objection or revocation against the processing of your data

(1) If you have given your consent to the processing of your data, you can withdraw this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.
(2) Insofar as we base the processing of your personal data on the balancing of interests, you may object to the processing. This is the case if, in particular, the processing is not necessary for the performance of a contract with you. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your objection, we will examine the situation and will either stop or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time.

Special part

2.1 Collection of personal data when using our website for information purposes

(1) If you only use the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect your IP address, which your browser transmits to our server, as personal data. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. If you wish to view our website, we also collect technical data that is required to display the website. This may vary depending on the browser. For more information, please contact the respective browser provider.
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk and through which certain information flows to the place that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.
(3) Use of cookies:
a) This website uses the following types of cookies, the scope and function of which are explained below: - Transient cookies (see b) - Persistent cookies (see c).
b) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
d) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all functions of this website.
e) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise you would have to log in again for each visit.

2.2 Use of our portal/registration

(1) Parts of our website can only be used if you register by entering your e-mail address, a password of your choice and a user name of your choice. We use the so-called double opt-in procedure for registration, i.e. your registration is only complete when you have previously confirmed your registration via a confirmation e-mail sent to you for this purpose by clicking on the confirmation link. The provision of the aforementioned data is mandatory; you can provide all other information voluntarily by using our portal.
(2) If you have registered when using our online services, the content, posts, photos and comments you have written will be publicly visible (even to non-registered users). Your profile photo and user name are also publicly visible, but not your e-mail address.

2.3 Prize draws and competitions

(1) On Creo.chat and the associated social media offerings, there are regular prize draws and competitions. Anyone over the age of 18 can take part. The winners will be notified in writing. In the context of competitions, your e-mail address and, if applicable, other data to be provided - depending on the terms and conditions of the competition - will be processed. The personal data will be stored for six months beyond the period of the competition and used exclusively to determine the winners. The data is stored exclusively on our own servers. The organizers will provide the tickets or non-cash prizes directly to the winners. Cash payment or exchange is not possible. Legal recourse is excluded. For further information, please refer to the respective prize draw or competition.

2.4 Newsletter

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.
(2) To register for our newsletter, we use the so-called "double opt-in procedure". This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you wish to receive the newsletter. In addition, we store the IP addresses used and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
(3) The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation, we will store your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.
(4) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail, by e-mail to info@timeline-germany.de or by sending a message to the contact details given in the imprint.
(5) We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the evaluations, we link the data and the web beacons with your e-mail address and an individual ID.
We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on in them and deduce your personal interests from this. We link this data to the actions you take on our website.
You can object to this tracking at any time by clicking on the separate link provided in each email or by informing us via another contact channel. The information will be stored for as long as you are subscribed to the newsletter. After unsubscribing, we store the data purely statistically and anonymously.
Such tracking is also not possible if you have deactivated the display of images in your e-mail program by default. In this case, the newsletter will not be displayed in full and you may not be able to use all the functions. If you display the images manually, the above-mentioned tracking will take place.

2.5 Google Analytics and / or Matomo

2.5.1 Use of Google Analytics and / or Matomo

(1) Our website uses the web analysis service "Google Analytics" and / or "Matomo". Google Analytics and Matomo are open source solutions. Google Analytics and Matomo use "cookies". As described above, these are small text files that your web browser stores on your end device and that enable website usage to be analyzed. Information generated by cookies about the use of our website is stored on our server. Your IP address is anonymized before it is stored. Matomo cookies remain on your device until you delete them. Google Analytics and Matomo cookies are set on the basis of Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in the anonymized analysis of user behaviour in order to optimize both our website and, if necessary, advertising. The information stored in the Google Analytics or Matomo cookie about the use of this website is not passed on. The setting of cookies by your web browser can be prevented. However, some functions of our website may be restricted as a result.

(2) You can deactivate the storage and use of your data here. Your browser sets an opt-out cookie that prevents the storage of Matomo usage data. If you delete your cookies, the Matomo opt-out cookie will also be removed. When you visit our website again, the opt-out cookie must be set again to prevent the storage and use of your data. System note.

2.6 Social media

2.6.1 Use of social media plug-ins

(1) We currently use the following social media plug-ins: Facebook, Instagram, Google+, Twitter and YouTube. Behind the corresponding logos on the website are only links to the respective provider. Loading the logos does not transfer any data to one of the providers.
We use the so-called two-click solution for the interaction buttons under the individual articles. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the marking on the box above its initial letter or the logo. We give you the option of communicating directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it will the plug-in provider receive the information that you have accessed the corresponding website of our online offering. In the case of Facebook / Instagram, according to the respective providers in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, your personal data is therefore transmitted to the respective plug-in provider and stored there (for US providers in the USA).
(2) We have no influence on the data collected and data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.
(3) The plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. We offer you the opportunity to interact with the social networks and other users via the plug-ins so that we can improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f GDPR.
(4) The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be assigned directly to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this way you can avoid being assigned to your profile with the plug-in provider.
(5) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers provided below. There you will also find further information on your rights in this regard and setting options to protect your privacy.
(6) Addresses of the respective plug-in providers and URL with their data protection notices:
a) Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; further information on data collection: www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other and www.facebook.com/about/privacy/your-info. Facebook has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; www.google.com/policies/privacy/partners/. Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
c) Twitter, Inc, 1355 Market St, Suite 900, San Francisco, California 94103, USA; twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
d) WhatsApp Inc, 1601 Willow Road, Menlo Park, California 94025, USA; WhatsApp.com. Further information on data collection: www.whatsapp.com/legal/ and www.whatsapp.com/legal/. WhatsApp has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

2.6.2 Integration of YouTube videos

(1) We have integrated YouTube videos into our online offering, which are based on www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer.
(2) When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
(3) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

2.6.3 Integration of Google Maps

(1) We occasionally use Google Maps on our online offers. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.
(2) When you visit our online offers, Google receives the information that you have accessed the corresponding subpage of our online offers. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
(3) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

Usage-based online advertising

3.1 Display of advertising

Google Adwords and other Google Ad-

Our websites and apps use Google "Ad-Words" as software for the integration and anonymized statistical evaluation of advertisements (banners).

You will find details below:

Data processing conditions for Google advertising products: Information about the services

Data processing conditions between controllers:

Responsible services

The following Google services fall under the scope of the data processing conditions between those responsible for Google advertising products:

AdMob
AdSense
Authorized Buyers (former name: DoubleClick Ad Exchange Buyers)
Funding Choices
Google Ad Manager (former name: DoubleClick for Publishers Small Business and DoubleClick Ad Exchange)
Google Ad Manager 360 (former name: DoubleClick for Publishers Premium and DoubleClick Ad Exchange)
Google Ads (formerly known as AdWords): All Google Ads programs and services that customers can access through their Google Ads accounts, with the exception of Google Ads programs and services that fall under the scope of the Google Advertising Products Data Processing Terms and are accordingly listed below.
Google customer reviews
Waze Ads

Google is entitled to update this list in accordance with the provisions of the data processing conditions between those responsible for Google advertising products.

Order data processing conditions:

Processor services

The following Google services fall under the scope of application of the data processing terms for Google advertising products:

Ads Data Hub
Audience Partner API (former name: DoubleClick Data Platform)
Campaign Manager (former name: DoubleClick Campaign Manager)
Display & Video 360 (former name: DoubleClick Bid Manager)
Extended conversions
Google Ads customer matching (former name: AdWords customer matching)
Google Ads store sales
Google Ads store sales (direct upload) (former name: AdWords store sales (direct upload))
Google Analytics
Google Analytics 360
Google Analytics for Firebase
Google Attribution
Google Attribution 360
Google Data Studio
Google Optimize
Google Optimize 360
Google Tag Manager
Google Tag Manager 360
Search Ads 360 (former name: DoubleClick Search)

Google is entitled to update this list in accordance with the provisions of the order data processing conditions for Google advertising products.

Types of personal data

In relation to the Google Advertising Products Data Processing Terms (and depending on which processor services are used under the relevant agreement), the following types of personal data may constitute customer personal data:

Processor services	Types of personal data
Ads Data Hub	Online identifiers (including cookie identifiers), internet protocol addresses and device identifiers, identifiers assigned by the customer
Audience Partner API (former name: DoubleClick Data Platform)	Online identifiers (including cookie identifiers) and device identifiers
Campaign Manager	Online identifiers (including cookie identifiers), internet protocol addresses and device identifiers, precise location data, identifiers assigned by the customer
Display & Video 360	Online identifiers (including cookie identifiers), internet protocol addresses and device identifiers, precise location data, identifiers assigned by the customer
Extended conversions	Names, e-mail addresses, telephone numbers, addresses, identifiers provided by the customer, online identifiers (including internet protocol addresses)
Google Ads customer matching	Names, e-mail addresses, addresses and identifiers provided by the partner
Google Ads store sales	Names, e-mail addresses, telephone numbers and addresses
Google Ads store sales (direct upload)	Names, e-mail addresses, telephone numbers and addresses
Google Analytics	Online identifiers (including cookie identifiers), internet protocol addresses and device identifiers, identifiers assigned by the customer
Google Analytics 360	Online identifiers (including cookie identifiers), internet protocol addresses and device identifiers, identifiers assigned by the customer
Google Analytics for Firebase	Online identifiers (including cookie identifiers), internet protocol addresses and device identifiers, identifiers assigned by the customer
Google Attribution	Online identifiers (including cookie identifiers) and device identifiers, identifiers assigned by the customer
Google Attribution 360	Online identifiers (including cookie identifiers) and device identifiers, identifiers assigned by the customer
Google Data Studio	Data relating to natural persons provided to Google through the Service by (or at the direction of) the Customer, in particular to create or collaborate on reports, graphs and charts
Google Optimize	Online identifiers (including cookie identifiers) and internet protocol addresses, identifiers assigned by the customer
Google Optimize 360	Online identifiers (including cookie identifiers) and internet protocol addresses, identifiers assigned by the customer
Google Tag Manager	Online identifiers (including cookie identifiers) and internet protocol addresses
Google Tag Manager 360	Online identifiers (including cookie identifiers) and internet protocol addresses
Search Ads 360	Online identifiers (including cookie identifiers), internet protocol addresses and device identifiers, identifiers assigned by the customer