Privacy Policy

This privacy policy outlines how we collect, use, and protect your personal data within our online services, associated websites, features, content, and external online presences, such as our social media profiles (collectively referred to as the „Online Service“).

What is Personal Data?

Personal data refers to any information that can be used to personally identify you.

Who is Responsible for Data Collection on this Website?

The „controller“ of data processing on this website is the person or legal entity that decides, alone or jointly with others, on the purposes and means of processing personal data.

Data processing for our Online Service is carried out by the website operator, Aham GmbH, represented by Managing Director Raphael Nguyen, located at Am Kohlfeld 17, 93468 Miltach, Email: team@quantummagic.de . You can find the detailed contact information in the legal notice of this website.

What Types of Data Do We Process?

„Processing“ refers to any operation or set of operations performed on personal data, with or without the aid of automated processes. This includes a wide range of handling of data.

We process:

• Inventory data (e.g., names, addresses).
• Contact data (e.g., email, phone numbers).
• Content data (e.g., text input, photographs, videos).
• Usage data (e.g., visited websites, interest in content, access times).
• Meta/communication data (e.g., device information, IP addresses).

How Do We Collect Your Data?

Your data is collected when you provide it to us, for example, by entering information into a contact form or by providing login data when using certain online services.

Other data is automatically collected by our IT systems when you use our Online Service. This primarily includes technical data (e.g., internet browser, operating system, or time of page view). This data is collected automatically as soon as you enter our Online Service.

For What Purposes Do We Use Your Data?

Part of the data is collected to ensure the proper functioning of our Online Service, its features, and content. Other data can be used to analyze your user behavior, for security measures, to respond to contact inquiries and communicate with users of our Online Service, for marketing purposes, and to measure reach.

What is the Legal Basis for Our Data Processing?

In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing. Unless the legal basis is specified in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 (1) lit. a and Art. 7 GDPR, the legal basis for processing for the performance of our services and execution of contractual measures as well as answering inquiries is Art. 6 (1) lit. b GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 (1) lit. c GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 (1) lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) lit. d GDPR serves as the legal basis.

What Happens in the Case of Data Processing by Third Parties?

If we disclose, transmit, or otherwise grant access to data to other persons and companies (processors or third parties) within the scope of our processing, this is done only on the basis of legal permission (e.g., if a transmission of data to third parties, such as payment service providers, is required for contract fulfillment according to Art. 6 (1) lit. b GDPR, if you have consented, if there is a legal obligation to do so, or based on our legitimate interests, such as the use of agents, web hosts, etc.).

If we commission third parties to process data on the basis of a so-called „processing agreement,“ this is done on the basis of Art. 28 GDPR.

Transfers to Third Countries

If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of using third-party services or disclosing or transferring data to third parties, this will only be done to fulfill our (pre)contractual obligations, on the basis of your consent, due to a legal obligation, or based on our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Art. 44 ff. GDPR. This means, for example, processing is carried out on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to the EU (e.g., for the USA through the „Privacy Shield“) or compliance with officially recognized special contractual obligations (so-called „standard contractual clauses“).

Your Rights

You have the right to request confirmation as to whether the data in question is being processed and to information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.

According to Art. 16 GDPR, you have the right to request the completion of data concerning you or the correction of incorrect data concerning you.

In accordance with Art. 17 GDPR, you are entitled to demand that relevant data be erased immediately or, alternatively, to demand a restriction on the processing of the data in accordance with Art. 18 GDPR.

You have the right to request that the data concerning you, which you have provided to us, be received in accordance with Art. 20 GDPR and to request their transmission to other responsible parties.

Complaint Option

According to Art. 77 GDPR, you have the right to file a complaint with the competent supervisory authority. For Miltach, this is:

Data Protection Officer of the Municipalities within the District of Cham Landratsamt Cham Rachelstraße 6 93413 Cham Germany Phone: +49 9971 78 567 Email: datenschutzbeauftragte.gmd@lra.landkreis-cham.de

Revocation and Objection

You have the right to revoke consent granted according to Art. 7 (3) GDPR with effect for the future.

You can object to the future processing of the data concerning you according to Art. 21 GDPR at any time. The objection can be made in particular against processing for direct marketing purposes.

Objections and revocations can be sent by email to the following address: kontakt@entspannungs-kongress.de or in writing to the following address: Aham GmbH, Managing Director Raphael Nguyen, Am Kohlfeld 17, 93468 Miltach.

Deletion of Data (Independent of Your Request)

The data processed by us is deleted or limited in its processing in accordance with Articles 17 and 18 GDPR. Unless expressly stated within the scope of this privacy policy, the data stored by us is deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory storage obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing is restricted. This means the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.

According to legal requirements in Germany, storage takes place in particular for 6 years according to § 257 (1) HGB (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years according to § 147 (1) AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).

Business-Related Processing

We process

• Contract data (e.g., subject matter of the contract, term, customer category).
• Payment data (e.g., bank details, payment history) of our customers, prospects, and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising, and market research.

Hosting

The hosting services we use are designed to provide the following services: infrastructure and platform services, computing capacity, storage space, and database services, security services, and technical maintenance services that we use for the purpose of operating this online offer.

In doing so, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties, and visitors to this online offer based on our legitimate interests in an efficient and secure provision of this online offer according to Art. 6 (1) lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of processing agreement).

Collection of Access Data and Log Files

We, or our hosting provider, collect data on every access to the server on which this service is located (so-called server log files) based on our legitimate interests within the meaning of Art. 6 (1) lit. f. GDPR. Access data includes the name of the accessed website, file, date and time of access, transferred data volume, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address, and the requesting provider.

Logfile information is stored for security reasons (e.g., to investigate abuse or fraud) for a maximum period of 7 days and then deleted. Data whose further retention is required for evidential purposes is exempt from deletion until the final clarification of the respective incident.

Provision of Contractual Services

We process inventory data (e.g., names and addresses as well as contact data of users), contract data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services according to Art. 6 (1) lit b. GDPR. The entries marked as mandatory in online forms are required for the conclusion of the contract.

As part of the use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user’s protection against misuse and other unauthorized use. A transfer of this data to third parties does not take place, unless it is necessary for the pursuit of our claims or there is a legal obligation according to Art. 6 (1) lit. c GDPR.

We process usage data (e.g., the visited web pages of our online offer, interest in our products) and content data (e.g., entries in the contact form or user profile) for advertising purposes in a user profile, to show the user e.g., product information based on their previously used services.

The deletion of the data takes place after the expiration of legal warranty and comparable obligations, the necessity of the retention of the data is reviewed every three years; in the case of legal archiving obligations, the deletion takes place after their expiration. Information in the customer account remains until its deletion.

Administration, Financial Accounting, Office Organization, Contact Management

We process data in the context of administrative tasks as well as organization of our operations, financial accounting, and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the course of rendering our contractual services. The processing bases are Art. 6 (1) lit. c. GDPR, Art. 6 (1) lit. f. GDPR. The processing affects customers, prospects, business partners, and website visitors. The purpose and our interest in processing lie in administration, financial accounting, office organization, archiving of data, i.e., tasks that serve to maintain our business activities, perform our tasks, and provide our services. The deletion of the data with regard to contractual services and contractual communication corresponds to the information mentioned in these processing activities.

We disclose or transmit data to the financial administration, consultants, such as tax advisors or auditors, as well as other fee offices and payment service providers.

Furthermore, based on our business interests, we store information on suppliers, event organizers, and other business partners, e.g., for later contact. We generally store this majority company-related data permanently.

Contacting Us

When contacting us (e.g., via contact form, email, telephone, or via social media), the user’s details are processed for handling the contact request and its processing according to Art. 6 (1) lit. b) GDPR. User information can be stored in a Customer Relationship Management System („CRM System“) or comparable request organization.

We delete the requests if they are no longer required. We review the necessity every two years; furthermore, the legal archiving obligations apply.

Comments and Contributions

If users leave comments or other contributions, their IP addresses are stored based on our legitimate interests within the meaning of Art. 6 (1) lit. f. GDPR for 7 days. This is for our safety if someone leaves illegal content in comments and contributions (insults, prohibited political propaganda, etc.). In this case, we can be prosecuted for the comment or contribution and are therefore interested in the identity of the author.

Comment Subscriptions

The follow-up comments can be subscribed to by users with their consent according to Art. 6 (1) lit. a GDPR. Users receive a confirmation email to verify that they are the owner of the entered email address. Users can unsubscribe from ongoing comment subscriptions at any time. The confirmation email will contain instructions on the revocation options.

Cookies and Right to Object in Direct Advertising

Cookies are used within the framework of our online offer. Cookies are small text files that are stored on your computer and saved by your browser. They serve to make our offer more user-friendly, effective, and secure.

Most of the cookies we use are so-called „session cookies.“ They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit.

You can set your browser to inform you about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Since each browser differs in its settings, we provide you with links to the respective instructions for the common browsers:

• Chrome: http://support.google.com/chrome/bin/answer.py?hl=en&hlrm=en&answer=95647
• Internet Explorer: http://windows.microsoft.com/en-GB/windows-vista/Block-or-allow-cookies
• Firefox: https://support.mozilla.org/en/kb/enable-and-disable-cookies-website-preferences
• Safari: http://apple-safari.giga.de/tips/cookies-in-safari-activate-block-delete-so-it-goes and https://support.apple.com/kb/PH21411?locale=en_US
• Opera: http://help.opera.com/Windows/10.20/en/cookies.html

You can object to the use of cookies for online marketing purposes by a variety of services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by switching them off in the browser settings. Please note that not all functions of this online offer may be available.

Cookies that are required to carry out the electronic communication process or to provide certain functions you desire (e.g., shopping cart function) are stored based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g., cookies for analyzing your surfing behavior) are stored, they are treated separately in this privacy policy.

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from „http://“ to „https://“ and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Tools from Third Parties

Newsletter

If you would like to receive the newsletter offered on the website, we need your email address. We also ask for your name for personalization of the newsletter. To verify that the email address provided actually belongs to you and that you really want to receive our newsletter, we use the so-called double opt-in procedure. For this purpose, you will receive a confirmation email with a confirmation link after your registration. Only when you click on this will you be entered into our newsletter list.

The data you provide us for the purpose of receiving the newsletter will be used exclusively for sending the newsletter and will not be passed on to third parties (with the exception of our technical newsletter service provider, see the following paragraph).

The processing of this data is based exclusively on your consent (Art. 6 (1) lit. a GDPR). You can revoke your consent to the storage of the data, the email address, and their use for sending the newsletter at any time. You will find an unsubscribe link at the end of each newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g., email addresses for the member area) remain unaffected by this.

Newsletter Dispatch with ActiveCampaign (USA)

As a technical service provider, we use ActiveCampaign based in the USA, where data storage, use, and processing take place. The EU Commission has decided that companies certified under the Privacy Shield have an „adequate level of data protection.“ ActiveCampaign, LLC is certified under the Privacy Shield guidelines. Thus, the prerequisites for data protection-compliant order data processing are met.

Statistical Surveys and Analyses

ActiveCampaign collects information about the browser and operating system, IP address, access time of the retrieval, opening time, and click behavior. Although this information can be assigned to individual subscribers, neither ActiveCampaign nor we intend to observe individual persons. The evaluations serve to recognize the general reading behavior and to optimize our content accordingly so that you receive the best possible added value.

For information on how ActiveCampaign handles data, please visit https://www.activecampaign.com/tos/.

A separation of newsletter and analyses is not possible. If you do not agree with the analysis, you must unsubscribe from the newsletter.

The data processing is based on your consent (Art. 6 (1) lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

Conclusion of a Data Processing Agreement

We have concluded a so-called „data processing agreement“ with ActiveCampaign, in which ActiveCampaign guarantees to protect the data of our customers and not to pass it on to third parties.

Online Presences in Social Media

We maintain online presences within social networks and platforms to communicate with active customers, interested parties, and users and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of the respective operators apply.

Unless otherwise stated in our privacy policy, we process users‘ data if they communicate with us within social networks and platforms, e.g., write posts on our online presences or send us messages.

Integration of Services and Content from Third Parties

We use content or service offers from third-party providers within our online offer based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offer within the meaning of Art. 6 (1) lit. f. GDPR) to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as „content“).

This always presupposes that the third-party providers of this content perceive the IP address of the users, as they could not send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. We strive to use only content whose respective providers use the IP address solely for the delivery of the content. Third-party providers can also use so-called pixel tags (invisible graphics, also known as „web beacons“) for statistical or marketing purposes. The „pixel tags“ can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user’s device and contain, among other things, technical information about the browser and operating system, referring web pages, visit time, and other information about the use of our online offer, as well as be linked to such information from other sources.

YouTube

We integrate the videos of the platform „YouTube“ of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The privacy policy of the provider can be found here: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Vimeo

We integrate videos of the platform „Vimeo“ of the provider Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. The privacy policy of the provider can be found here: https://vimeo.com/privacy.

We point out that Vimeo may use Google Analytics and refer to the privacy policy (https://www.google.com/policies/privacy) as well as opt-out options for Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=en) or Google’s data usage settings for marketing purposes (https://adssettings.google.com/.).

Google Fonts

We integrate the fonts („Google Fonts“) of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The privacy policy of the provider can be found here: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Use of Facebook Social Plugins

Based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offer within the meaning of Art. 6 (1) lit. f. GDPR), we use social plugins („plugins“) of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland („Facebook“). The plugins can represent interaction elements or content (e.g., videos, graphics, or text contributions) and are recognizable by one of the Facebook logos (white „f“ on a blue tile, the terms „Like,“ „Like,“ or a „thumbs up“ sign) or are marked with the addition „Facebook Social Plugin.“ The list and appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

When a user accesses a function of this online offer that contains such a plugin, his device establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user’s device and integrated into the online offer by the device. User profiles can be created from the processed data. We, therefore, have no influence on the amount of data that Facebook collects with the help of this plugin and therefore inform users according to our level of knowledge.

By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged into Facebook, Facebook can assign the visit to his Facebook account. If users interact with the plugins, for example, by pressing the Like button or leaving a comment, the corresponding information is transmitted directly from your device to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and store his IP address. According to Facebook, only an anonymized IP address is stored in Germany.

The purpose and scope of data collection and the further processing and use of data by Facebook as well as the related rights and setting options for protecting the privacy of users can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect data about him via this online offer and link it to his member data stored on Facebook, he must log out of Facebook and delete his cookies before using our online offer.

Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are platform-independent, i.e., they are adopted for all devices, such as desktop computers or mobile devices.

Payment Providers and Affiliate Programs

Some of our products, services, and content are offered by Digistore24 as a reseller. The provider and contractual partner is Digistore24 GmbH, St.-Godehard-Straße 32 in 31139 Hildesheim. Which data Digistore24 stores and processes when calling up this website is determined by Digistore24 GmbH as the responsible party in its own privacy policy. Further information can be found in the privacy policy of Digistore24: https://www.digistore24.com/data-protection.

DIGISTORE24 WORDPRESS PLUGIN

The WordPress plugin offers the possibility to integrate various services from Digistore24 on your own website, e.g., the Social-Proof-Bubble, the Affiliate Advertising Material Generator, or other tools.

Each integration involves non-personal data being reloaded from the Digistore24 server (e.g., a JavaScript file).

When reloading, your web browser retrieves a web page from the Digistore24 server. Our server has no influence on the extent to which your web browser transmits data to the Digistore24 server. Our server itself does not transmit any data to the Digistore24 servers in this context.

Which data Digistore24 stores and processes when calling up this website is determined by Digistore24 GmbH as the responsible party in its own privacy policy. The privacy policy of Digistore24 can be found here: https://www.digistore24.com/data-protection.

CONVERSION TOOLS/SHOPPING CART

Digistore24 offers the possibility to integrate various services on your own website via HTML and JavaScript codes, e.g., the Social-Proof-Bubble or the Digistore24 shopping cart.

Each integration involves non-personal data being reloaded from the Digistore24 server (e.g., a JavaScript file).

When reloading, your web browser retrieves a web page from the Digistore24 server. Our server has no influence on the extent to which your web browser transmits data to the Digistore24 server. Our server itself does not transmit any data to the Digistore24 servers in this context.

Which data Digistore24 stores and processes when calling up this website is determined by Digistore24 GmbH as the responsible party in its own privacy policy. The privacy policy of Digistore24 can be found here: https://www.digistore24.com/data-protection.

PROMO LINKS/CONTENT LINKS

On this website, we use various links to offers from Digistore24. The purpose of the links is to draw your attention to products that may be of interest to you.

Some of these links are links to the domain digistore24.com of Digistore24 GmbH.

When you click on one of the links, you call up a web page on the Digistore24 server.

Our server does not transmit any data to Digistore24 in this process, but the data is transmitted by your web browser to Digistore24 as with any web page call. We have no influence on the extent to which your web browser transmits data to Digistore24.

Please refer to the privacy policy of Digistore24 for further information on the extent of data use by Digistore24 when calling up the website: https://www.digistore24.com/data-protection.

AFFILIATE ADVERTISING MATERIAL GENERATOR

The Affiliate Advertising Material Generator allows automatic creation of advertising materials. It provides an input field where you can enter your Digistore24 ID. This way, you receive advertising materials that allow you to quickly and easily promote products and services.

In addition to the aforementioned, depending on your input, it is checked whether an affiliate partnership exists. For details, please refer to the privacy policy of Digistore24: https://www.digistore24.com/data-protection.

PARTNER PROGRAM DIGISTORE

We participate in the partner program of Digistore24. By placing advertisements and links to Digistore24, we can earn a small advertising cost reimbursement (affiliate).

In addition, we offer experts of the online congress as well as all other users of our website participation in our sales through the partner program of Digistore24 (affiliate) if these were mediated by a partner.

Digistore24 uses cookies to trace the origin of orders. Among other things, Digistore24 can recognize that you clicked on the partner link on this website or that you arrived at the sales page at Digistore24 via the partner link of a participant of the partner program.

Further information on data use by Digistore24 can be found in the company’s privacy policy: https://www.digistore24.com/data-protection.

The storage of Digistore cookies is based on Art. 6 lit. f GDPR. The website operator has a legitimate interest in this, as only through the cookies the amount of his affiliate remuneration can be determined.

Amazon Partner Program

We participate in the Amazon EU partner program. On our online offer, advertisements and links to the page of Amazon.de are integrated, through which we can earn money through advertising cost reimbursement. Amazon uses cookies to trace the origin of orders. This allows Amazon to recognize that you clicked on a partner link on our website.

Further information on data use by Amazon can be found in Amazon’s privacy policy: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.

The storage of „Amazon cookies“ is based on Art. 6 lit. f GDPR. As a website operator, we have a legitimate interest in this, as only through the cookies the amount of our affiliate remuneration can be determined.