Data Protection

§1 Information regarding the collection of personal data

  1. Personal data are data relating to a natural person, for example: name, address, e-mail address, user behaviour.
  2. Pursuant to article 4(7) of the European Union’s General Data Protection Regulation (GDPR), the data controller is IFOK GmbH, Berliner Ring 89, 64625 Bensheim, (see our legal notice). You can contact our data protection officer by email ( or via post by addressing your letter to “der Datenschutzbeauftragte” (the data protection officer).
  3. When you contact us by email or via a contact form, the information you share with us (your email address, and, if applicable, your name and telephone number) is stored so that we can respond to your queries. We shall delete the data collected in this way once they are no longer required, or we shall restrict their processing if legal record keeping requirements apply.
  4. Should we engage external providers to carry out some of the services we offer, or should we intend to use your data for marketing purposes, we shall provide you with detailed information about the processes involved (see below). In this case, we shall inform you regarding the specific criteria for determining the period for which the data will be stored.

§2 Your rights as a data subject

You have the right:

  1. to request access to the personal data processed by us, pursuant to Article 15 GDPR. In particular, you may request the following information: the purposes of the processing, the categories of personal data concerned, the categories of recipient to whom your personal data have been or will be disclosed, the envisaged period for which the data will be stored, the existence of the right to request from the controller rectification or erasure or restriction of processing or to object, the right to lodge a complaint, the source of your data where the personal data are not collected by us, as well as the existence of automated decision-making, including profiling and, if applicable, meaningful information about relevant details;
  2. to obtain without undue delay the rectification of inaccurate personal data held by us or to have incomplete personal data completed, pursuant to Article 16 GDPR;
  3. to obtain the erasure of the personal data held by us to the extent that processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims, pursuant to Article 17 GDPR;
  4. to obtain restriction of processing of your personal data where you contest the accuracy of the data or where the processing is unlawful, and you oppose the erasure or where we no longer need the data, pursuant to Article 18 GDPR. Or where you need the data for the establishment, exercise or defense of legal claims or you have objected to processing, pursuant to Article 21 GDPR;
  5. to receive the personal data you have provided us with in a structured, commonly used and machine-readable format or to obtain transmission of those data to another controller, pursuant to Article 20 GDPR;
  6. to withdraw your consent at any time, pursuant to Article 7(3) GDPR; this means that we may not continue to process the data for which consent had been given
  7. to lodge a complaint with a supervisory authority, pursuant to Article 77 GDPR; you can normally contact the supervisory authority in your habitual residence, place of work or our company`s location.

§3 Collection of personal data when visiting our website

  1. When you visit our website for information purposes only, i.e. when you do not register or transmit information in any other way, we only collect personal data transmitted by your browser to our server. If you wish to view our website, we collect the following data that are necessary for technical reasons, such as displaying the website and ensuring its stability and security (legal basis: first sentence of Point (f) of Article 6(1) GDPR):
    • IP address
    • Date and time of the request
    • Time difference to Greenwich Mean Time (GMT)
    • Content of the request (specific page)
    • Access status/HTTP status code
    • Specific data volume transmitted
    • Website from which the request originates
    • Browser
    • Operating system and corresponding interface
    • Language and version of browser software.
  2. In addition to the above data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive by your browser and that enable certain information to be transmitted to the entity using the cookie (in this case us). Cookies are not able to run programs or transmit viruses to your computer. They allow websites to be more user-friendly and effective.
  3. Use of Cookies:
    • This website uses the following types of cookies. Below you will find an explanation of their scope and how they work:
      • Transient Cookies
      • Persistent Cookies
    • Transient cookies are deleted automatically when you close the browser. In particular, these include session cookies. Session cookies store a so-called session ID which helps to associate different requests made by your browser with the joint session. This means that your computer is recognized when you return to our website. Session cookies are deleted when you log off or close your browser.
    • Persistent cookies are deleted automatically after a prescribed time period which varies from cookie to cookie. You can delete cookies in your browser’s security settings at any time.
    • You can configure your browser settings as you wish, for example, you can refuse to accept third-party cookies or cookies in general. Please note that this may prevent you from using all the functions on this website.
    • We use cookies to identify you on subsequent visits if you have an account with us. Otherwise you would have to log in every time you visit the website.
    • The flash cookies used are not collected by your browser, but by your flash plug-in. We also use HTML5 storage objects which are stored on your device. These objects store the requisite data independently of the browser you use and do not have an automatic expiry date. If you do not want flash cookies to be processed, you need to install an appropriate add-on, for example, “Better Privacy” for Mozilla Firefox ( or Adobe Flash killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by setting your browser to private mode. We also recommend manually deleting your cookies and browser history at regular intervals.

§4 Objection to processing your data or withdrawal of consent

  1. If you have given consent to the processing of your data, you can withdraw this at any time. Withdrawing your consent shall affect the admissibility of the processing of your personal data.
  2. Insofar as we base the processing of your personal data on balancing various interests, you may object to the processing. This shall apply when the processing is not necessary for the performance of a contract with you which will be specified in the relevant description of the specific function. Should you exercise your right to object, we ask you to state your reasons as to why we may no longer process your personal data. In the case of a substantiated objection, we shall examine the situation and shall either discontinue/adapt the processing or we shall demonstrate compelling legitimate grounds on which we shall continue the processing.

As a matter of course, you may object to the processing of your personal data for marketing purposes and data analysis at any time. You can find out more on objecting to marketing by contacting:

§5 Social Media

This website uses Twitter plug-ins. These functions are provided by Twitter Inc. 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. In using Twitter and its re-tweet function, the website you visited will be linked with your Twitter account and made known to other users. In this process, data is also transmitted to Twitter. We inform you that as a provider of this website, we do not receive notification on the contents transmitted or your use of Twitter. You can find further information on this within Twitter’s data privacy statement at: Your data privacy setting on Twitter can be edited within your account settings at:

 § 6 Data security

  1. We apply the commonly used SSL protocol (Secure Sockets Layer) to our website in order to encrypt the transmission of the pages. Depending on which browser you use, you can see whether individual pages on our website are encrypted if the padlock icon is displayed as closed in the address line of your browser..
  2. We also use appropriate technical and organizational security measures to protect your data against incidental or intentional manipulation, partial or total loss, deletion or unauthorized access by third parties. Our security measures are constantly updated in line with the latest technological developments.

§ 7 Web analytics

  1. This website uses web analytics provider Matomo to analyze and regularly improve the use of our website. We use the statistics obtained to improve our services and to make them more interesting for our users. Legal basis for the use of Matomo: first sentence of Point (f) of Article 6(1) GDPR.
  2. You may block the use of Matomo by unticking the box below and in this way activating the opt-out plug-in:

  3. For the purposes of this analysis, cookies (for more details see §3) are stored on your computer. The controller stores the information obtained in this way only on its server in Germany.
  4. This website uses Matomo with the extension “AnonymizeIP”. This allows us to process IP addresses in an abbreviated format which prevents any personal identification. The IP address transmitted by your server using Matomo is not linked to any other data collected by us.
  5. Matomo software is an open source project. For third-party information regarding privacy go to

§8 Validity and amendment of this Privacy Statement

This Privacy Statement shall be valid as of May 2018.
Due to improvements to our website and services or due to changes in legal or regulatory requirements, it may be necessary to amend this Privacy Statement from time to time. The current version of this Privacy Statement can be viewed on our website ( and printed at any time.