1. Data protection at a glance
Data collection on our website
Who is responsible for data collection on this website?
The website owner is responsible for data processing on this website. You can find their contact details on the Legal Notice of this website.
How do we collect your data?
On the one hand, your data is collected by you sharing it with us. This may, for example, include data that you provide via a contact form.
Other data is automatically collected by our IT systems when you visit the website. This is largely technical data (e.g. internet browser, operating system or time the page was accessed). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Some of your data is collected to ensure that we can provide a faultless experience on our website. Other data is used to analyse your user behaviour.
What are your rights regarding your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data at all times and free of charge. You also have the right to demand that this data is corrected, blocked or erased. If you have any questions regarding this topic or concerning data protection in general, please contact us on the address provided in the Legal Notice. Furthermore, you have the right to lodge a complaint at the local supervisory authority.
Analysis tools and third-party tools
2. General notes and mandatory information
We would like to point out that online data transfers (e.g. when communicating by email) can have security holes. It is not possible to completely protect data from being accessed by third parties.
Notice on the responsible body
The responsible body for data processing (the controller) on this website is:
MILK Agentur für moderne Kommunikation GmbH
Tel.: +49 (0) 69 8008717 0
The controller is the natural or legal person who, either alone or together with others, decides upon the purposes and means of processing the personal data (e.g. names, email addresses etc.).
Revoking your consent to data processing
Many data processing processes are only possible with your express consent. You can revoke your consent at any time. Simply notify us by email. The legality of the data processing completed prior to the revocation remains unaffected.
Right to complain to the local supervisory authority
In the case of an infringement of data protection rights, the data subject has the right to lodge a complaint at the local supervisory authority. Within the context of data protection issues, the local supervisory authority is the regional data protection officer for the German state in which our company has its headquarters. You can find a list of data protection officers and their contact details here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to request that we provide you or a third party with the data, which we automatically collect based on your consent or to fulfil a contract, in a commonly used, machine-readable format. Insofar as you request the direct transfer of the data to a different controller, this is only possible if it is technically feasible.
SSL or TLS encryption
This site uses an SSL or TLS encryption for security reasons and to protect the transfer of confidential content, such as orders or enquiries that you may send to us, the site operators. You can identify an encrypted connection by the address window in the browser changing from “http://” to “https://” and by a padlock appearing in your browser bar.
When the SSL or TLS encryption is activated, the data that you transfer to us cannot be read by third parties.
Information, blocking, deletion
The applicable legal regulations give you a permanent right of information regarding the personal data that is stored, its origin and recipient and the purpose of the data processing, as well as a right of correction, blocking or erasure of this data. You can contact us at any time regarding this and other questions concerning personal data. Please use the address provided in the Legal Notice section.
Revocation marketing emails
It is expressly forbidden for third parties to use the contact information that is provided as part of the mandatory legal information to send advertising and information that has not been expressly requested. The operators of these web pages reserve the right to take legal action in the case of the undesired sending of advertising material, e.g. spam emails.
3. Data collection on our website
This website uses so-called cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies help to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies used by us are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain saved on your device until you delete them. These cookies allow us to recognise your browser next time you visit.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically shares with us. This information is:
- Browser type and version
- Operating system
- Referrer URL
- Host name of the accessing computer
- Time of server request
- IP address
This data is not combined with data from other sources.
This data processing is based on Art. 6(1)(f) of the GDPR, which permits the processing of data in order to fulfil a contract or for pre-contractual measures.
If you send us an enquiry via the contact form, the information that you provide on the enquiry form, including the contact details that you provide, are saved for the purposes of processing the enquiry and in case there are follow-up questions. We will not pass on this data without your express permission.
As such, the processing of the information provided via the contact form is solely based on your consent (Art. 6(1)(a) of the GDPR). You can revoke this consent at any time. Simply notify us by email. The legality of the data processing completed prior to the revocation remains unaffected.
The information provided in the contact form remains stored by us until you request its erasure, revoke your consent to it being stored or the purpose of the data storage no longer applies (e.g. once your enquiry has been dealt with). Mandatory legal regulations – in particular retention periods – remain unaffected.
4. Social media
Facebook plugins (Like & Share buttons)
Plugins from the social network Facebook, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated into our web pages. The Facebook plugins can be identified by the Facebook logo or the “Like” button on our website. You can find an overview of the Facebook plugins at: https://developers.facebook.com/docs/plugins/.
If you do not want Facebook to be able to assign your visit to our pages with your Facebook user account, please log out of your Facebook account before visiting our pages.
You can change your Twitter data privacy settings in your account settings at https://twitter.com/account/settings.
5. Analysis tools and advertising
Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that we use to integrate tracking and statistics tools, as well as other technologies, into our website. Google Tag Manager does not create any user profiles, does not store any cookies and does not conduct any independent analyses. It serves solely to manage and run the connected tools. Google Tag Manager does, however, record your IP address, which may be transferred to the parent company of Google in the United States.
Google Tag Manager is used on the basis of Art. 6(1)(f) of the GDPR. The website operator has a legitimate interest in the fast and simple integration and management of different tools on its website. Insofar as any required consent is refused, the processing takes place solely on the basis of Art. 6(1)(a) of the GDPR; consent can be withdrawn at any time.
This website utilises the features of the website analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics allows the website operator to analyse the behaviour of visitors to the website. The website operator receives various usage data, such as the pages accessed, length of visit, operating system and location of the user. This data may be combined by Google to form a profile, which is assigned to the respective user or their device.
Google Analytics uses technologies that make it possible to identify the user for the purpose of analysing user behaviour (e.g. cookies and device fingerprinting). The information collected by Google about your use of this website is generally transferred to a Google server in the USA and stored there.
This analysis tool is used on the basis of Art. 6(1)(f) of the GDPR. The website operator has a legitimate interest in the analysis of user behaviour, in order to both optimise his/her website and marketing. Insofar as any required consent is refused (e.g. consent to the storing of cookies), the processing takes place solely on the basis of Art. 6(1)(a) of the GDPR; consent can be withdrawn at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find more information here: https://privacy.google.com/businesses/controllerterms/mccs/.
We have activated the IP anonymisation function on this website. This causes your IP address to be shortened by Google within the member states of the European Union or in other contracting states of the convention about the European Economic Area before it is transferred to the USA. The full IP address will only be transferred to a Google server in the USA and shortened there in exceptional cases. Google uses this information on behalf of the operator of this website to analyse your use of the website, to compile reports about the website activities, and to provide further services related to the use of the website and the internet in general. The IP address transferred from your browser as part of Google Analytics will not be merged with other data from Google.
You can prevent Google from recording and processing your data by downloading and installing the browser plugin from the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
We have concluded a data processing agreement with Google and apply the stringent specifications of the German data protection authorities in the use of Google Analytics.
Demographics information from Google Analytics
This website utilises the “demographics information” function from Google Analytics in order to display suitable ads from the Google ads network to website visitors. This makes it possible to create reports containing statements about the age, gender and interests of website users. This data is collated from interest-based advertising by Google and from visitor data from third parties. This data cannot be associated with a specific person. You can deactivate this function at any time using the display settings in your Google account, or can prevent the collection of any of your data by Google Analytics by following the instructions provided in the section entitled “Objecting to data collection”.
The data stored by Google at the user and event level, which is associated with cookies, user identification (e.g. user ID) or advertising IDs (e.g. DoubleClick cookies, Android ad ID), is anonymised or deleted after 14 months. You can find more information here: https://support.google.com/analytics/answer/7667196?hl=en
The website operator uses Google Ads. Google Ads is an online advertising program by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads allows us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms into Google (keyword targeting). Furthermore, targeted ads can be displayed using existing user data held by Google (e.g. location data and interests) (target group targeting). As a website operator, we can analyse this data quantitatively, for example by analysing which search terms led to our ads being displayed and how many ads led to clicks.
Google Ads is used on the basis of Art. 6(1)(f) of the GDPR. The website operator has a legitimate interest in the most effective marketing of its service and products.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find more information here: https://privacy.google.com/businesses/controllerterms/mccs/.
This website utilises the functions of Google Analytics Remarketing. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Remarketing analyses your user behaviour on our website (e.g. clicks on certain products) to assign you to specific advertising target groups and to then display suitable advertising messages when you visit other websites (remarketing or retargeting).
Furthermore, the advertising target groups created with Google Remarketing can be combined with over cross-device functions from Google. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and browsing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC).
If you have a Google account, you can object to personalised advertising using the following link: https://www.google.com/settings/ads/onweb/.
Google Remarketing is used on the basis of Art. 6(1)(f) of the GDPR. The website operator has a legitimate interest in the most effective marketing of its products. Insofar as any required consent is refused, the processing takes place solely on the basis of Art. 6(1)(a) of the GDPR; consent can be withdrawn at any time.
Target group creation with customer matching
In order to form target groups, we use the customer matching tool from Google Remarketing. For this we provide Google with certain customer information (e.g. email addresses) from our customer lists. If the corresponding customers are Google users and logged into their Google accounts, matching advertising messages will be displayed within the Google network (e.g. on YouTube, Gmail or in the search machine).
Google Conversion Tracking
This website utilises Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Conversion Tracking is used on the basis of Art. 6(1)(f) of the GDPR. The website operator has a legitimate interest in the analysis of user behaviour, in order to both optimise his/her website and marketing. Insofar as any required consent is refused (e.g. consent to the storing of cookies), the processing takes place solely on the basis of Art. 6(1)(a) of the GDPR; consent can be withdrawn at any time.
Our website uses Facebook Pixel to measure conversions. It is provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).
This makes it possible to track the behaviour of page visitors after they have been redirected to the provider’s website by clicking on a Facebook ad. So the effectiveness of Facebook ads can be analysed for statistical and market research purposes and future advertising campaigns can be optimised.
As the operator of this website the collated data is anonymous; we cannot draw any conclusions about the identify of the user. The data is saved and processed by Facebook. It is thus possible for it to be linked to the respective user profile and Facebook is able to use the data for its own advertising purposes in line with the Facebook Data Policy. This means that Facebook can show ads on Facebook pages and outside of Facebook. As the operator of this website, we have no influence on this use of data.
You can also deactivate the remarketing function “Custom Audiences” in the ads settings under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged into Facebook to do this.
If you don’t have a Facebook account, you can deactivate user-based Facebook ads on the European Interactive Digital Advertising Alliance website: https://www.youronlinechoices.com/uk/your-ad-choices.
If you want to access the newsletter advertised on our website, we require your email address, as well as information that allows us to check that you are the owner of the email address provided and consent to receiving the newsletter. No additional information is recorded unless provided on a voluntary basis. We use this information solely for the purposes of sending the information requested and do not share it with third parties.
The processing of the information provided via the newsletter sign-up form is solely based on your consent (Art. 6(1)(a) of the GDPR). You can revoke this consent to store your data and email address and to use it to send the newsletter at any time, e.g. by clicking on the “Unsubscribe” link in the newsletter. The legality of the data processing completed prior to the revocation remains unaffected.
Your personal data that we store for the purposes of providing the newsletter is stored by us until you unsubscribe and is then deleted. Any data that is stored for other purposes (e.g. email addresses for the member area) remains unaffected.
This website utilises the services of MailChimp to send newsletters. This service is provided by the Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
MailChimp is a service that can be used to organise and analyse the sending of newsletters. When you enter data (e.g. email address) for the purposes of signing up to the newsletter, this is stored on MailChimp’s servers in the USA.
MailChimp is certified in line with the “EU-US Privacy Shield”. The “Privacy Shield” is an agreement between the European Union (EU) and the USA intended to guarantee adherence to European data protection standards within the USA.
MailChimp allows us to analyse our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (so-called web beacon) connects with MailChimp’s servers in the USA. This makes it possible to ascertain whether a newsletter is opened and if links are clicked on. Technical information is also recorded (e.g. the time the newsletter was opened, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used solely for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of recipients.
If you do not want to partake in this analysis by MailChimp, you need to unsubscribe from the newsletter. A link is provided in every newsletter message for this purpose. Furthermore, you can unsubscribe from the newsletter directly from the website.
The data processing is solely based on your consent (Art. 6(1)(a) of the GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing completed prior to the revocation remains unaffected.
Your personal data that we store for the purposes of providing the newsletter is stored by us until you unsubscribe from the newsletter. Once you have unsubscribed, it is deleted from both our servers and from MailChimp’s servers. Any data that is stored for other purposes (e.g. email addresses for the member area) remains unaffected.
7. Plugins and tools
Our website uses plugins from the Vimeo video portal. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
If you visit one of our pages that contains a Vimeo plugin, a connection will be made to Vimeo’s servers. This tells the Vimeo server which of our pages you have visited. Vimeo also obtains your IP address. This includes cases where you are not logged into Vimeo and have no Vimeo account. The information recorded by Vimeo is transferred to the Vimeo servers in the USA.
If you are logged into your Vimeo account, you are giving Vimeo permission to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account.
This site uses the Google Maps service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Your IP address must be stored in order to use the Google Maps function. This information is then generally transmitted to a Google server in the USA and saved there. The provider of this website has no influence on this data transmission.
The use of Google Maps is based on the interest to present our web presence in an attractive manner and to make it easy to find us at the location specified on the website. This represents a legitimate interest in compliance with Art. 6(1)(f) of the GDPR. Insofar as any required consent is refused, the processing takes place solely on the basis of Art. 6(1)(a) of the GDPR; consent can be withdrawn at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find more information here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.