Privacy policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data
when you visit this website. Personal data refers to any data that can personally identify you.
Detailed information on data protection can be found in the privacy policy listed below.

Data Collection on this Website

Who is responsible for data collection on this website? Data processing on this website is
carried out by the website operator. The operator’s contact details can be found in the section
“Information on the Responsible Party” in this privacy policy.

How do we collect your data?

Your data is collected, first, by you providing it to us. This could
be data entered into a contact form, for example. Other data is collected
automatically or with your consent when you visit the website through our IT systems.
These are mainly technical data (e.g., internet browser, operating system, or time of page access). This data is collected
automatically as soon as you enter this website.

For what purposes do we use your data?

Some data is collected to ensure the website is
provided without errors. Other data may be used to analyze user behavior. If contracts are
concluded or initiated via the website, the transmitted data will also be processed for contract
offers, orders, or other contractual inquiries.

What rights do you have regarding your data?

You have the right at any time to receive free
information about the origin, recipient, and purpose of your stored personal data. You also have
the right to request the correction or deletion of this data. If you have given consent to data
processing, you can revoke this consent at any time for the future. Furthermore, you have the
right to request the restriction of the processing of your personal data under certain
circumstances. You also have the right to lodge a complaint with the competent supervisory
authority. For this and other questions regarding data protection, you can contact us at any
time.

2. Hosting
External Hosting

This website is hosted externally. The personal data collected on this website
is stored on the servers of the hosting provider(s). This may include IP addresses, contact
requests, metadata and communication data, contract data, contact details, names, website
access logs, and other data generated via a website. External hosting is carried out for the
purpose of fulfilling our contractual obligations towards potential and existing customers
(Article 6(1)(b) GDPR) and to ensure a secure, fast, and efficient provision of our online offer by a
professional provider (Article 6(1)(f) GDPR). If consent has been requested, processing is
carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as
the consent includes the storage of cookies or access to information on the user’s end device
(e.g., device fingerprinting) as defined by the TDDDG. Consent can be revoked at any time. Our
hosting provider(s) will process your data only to the extent necessary to fulfill their service
obligations and will follow our instructions regarding these data.

We use the following hosting provider:

Telekom Deutschland GmbH
Landgrabenweg 149
D-53227 Bonn

3. General Information and Mandatory Disclosures
Data Protection

The operators of these pages take the protection of your personal data very
seriously. We treat your personal data confidentially and in accordance with statutory data
protection regulations and this privacy policy. When you use this website, various personal data
are collected. Personal data refers to data that can personally identify you. This privacy policy
explains what data we collect and how we use it. It also explains how and for what purpose this
occurs. We point out that data transmission over the Internet (e.g., when communicating via
email) may have security gaps. Complete protection of data against access by third parties is
not possible.
Information on the Responsible Party The responsible party for data processing on this
website is:

Günter Kiefer Management GmbH
Königstraße 26
70173 Stuttgart
Phone: +49 (0) 711 18 567 430
Email: info@guenterkiefer.de

The responsible party is the natural or legal person who alone or jointly with others determines
the purposes and means of the processing of personal data (e.g., names, email addresses,
etc.).

Storage Duration Unless a specific retention period is stated within this privacy policy, your
personal data will remain with us until the purpose for data processing ceases to apply. If you
make a legitimate deletion request or revoke consent for data processing, your data will be
deleted unless we have other legally permissible reasons for storing your personal data (e.g.,
retention periods under tax or commercial law); in the latter case, deletion takes place after
these reasons cease to apply.

4. Data Collection on This Website

Cookies Our website uses so-called “cookies.” Cookies are small data packets that do not
cause any harm to your device. They are either stored temporarily for the duration of a session
(session cookies) or permanently (persistent cookies) on your device. Session cookies are
automatically deleted after your visit. Persistent cookies remain stored on your device until you
delete them manually or they are automatically deleted by your web browser.

Cookies may be set by us (first-party cookies) or by third-party companies (third-party cookies).
Third-party cookies enable the integration of certain services from third-party providers within
websites (e.g., cookies for processing payment services).

Cookies serve various functions. Many cookies are technically necessary, as certain website
functions would not work without them (e.g., shopping cart functionality or video display). Other
cookies may be used to analyze user behavior or for advertising purposes.

Cookies that are required for carrying out electronic communication processes, providing
certain functions requested by you (e.g., shopping cart functionality), or optimizing the website
(e.g., cookies for measuring web traffic) are stored based on Article 6(1)(f) GDPR unless another
legal basis is specified. The website operator has a legitimate interest in storing necessary
cookies to ensure the technically error-free and optimized provision of its services. If consent
has been requested for storing cookies and similar recognition technologies, processing is
based exclusively on this consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG); consent can
be revoked at any time.

You can configure your browser settings to inform you about the placement of cookies, allow
cookies only in specific cases, exclude cookies generally, or activate automatic deletion of
cookies upon closing the browser. Disabling cookies may limit the functionality of this website.
Details on the cookies and services used on this website can be found in this privacy policy.

5. Plugins and Tools

Google Maps This website uses the Google Maps service. The provider is Google Ireland Limited
(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. This service allows us to integrate
map content into our website.

To use the functions of Google Maps, it is necessary to store your IP address. This information is
usually transferred to and stored on a Google server in the United States. The operator of this
site has no influence on this data transmission. When Google Maps is activated, Google may
use Google Fonts to ensure uniform font display. When you access Google Maps, your browser
loads the required web fonts into its cache to display texts and fonts correctly.

The use of Google Maps is in the interest of an appealing presentation of our online offerings
and to make it easier to locate the places we specify on the website. This constitutes a
legitimate interest under Article 6(1)(f) GDPR. If corresponding consent has been requested,
processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1)
TDDDG, provided that consent includes the storage of cookies or access to information on the
user’s device (e.g., device fingerprinting) as defined in the TDDDG. Consent can be revoked at
any time.

The data transfer to the United States is based on the European Commission’s Standard
Contractual Clauses. Details can be found here:
https://privacy.google.com/businesses/gdprcontrollerterms/ and
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more information on handling user data, please refer to Google’s privacy policy:
https://policies.google.com/privacy?hl=en.

Google is certified under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement
between the European Union and the United States that aims to ensure compliance with
European data protection standards in data processing operations conducted in the United
States. Every company certified under the DPF is obligated to comply with these data protection
standards. Further information is available from the provider at the following link:
https://www.dataprivacyframework.gov/participant/5780.