Data protection

At this point, we would like to inform you about the processing of your personal data in connection with your visit to the website "www.n17projects.de" (the "Website"). The protection of your privacy and your personal data is important to us.

1. RESPONSIBLE BODY
The responsible body within the meaning of the General Data Protection Regulation (“GDPR”) with regard to the processing of personal data in connection with the website is (unless otherwise stated in this data protection declaration; see section 3(II) below):

N17 Projects GmbH
Heinrichstraße 9
60327 Frankfurt am Main

CONTACT
Email: office@n17projects.de

2. QUESTIONS REGARDING DATA PROTECTION ISSUES

Mr. Michael Schnur
N17 Projects GmbH
Heinrichstraße 9
60327 Frankfurt am Main

CONTACT
Email: office@n17projects.de

3. PROCESSING YOUR DATA
(I) PROCESSING OF DATA IN THE CASE OF SIMPLY INFORMATIONAL USE OF THE WEBSITE
If you use the website for informational purposes only, i.e., if you do not actively provide us with information, we generally do not collect any personal data (subject to the further information in this privacy policy), with the exception of the data that your browser automatically transmits, in particular to enable you to visit the website. This includes, for example:
• IP address of the requesting computer
• Date and time of access
• Amount of data transferred in each case
• Browser type and version
• Operating system used
• Referrer URL

The aforementioned processing of personal data is generally carried out for the purpose of enabling the use of the website (establishing a connection) or to improve the attractiveness and usability of the website and, if necessary, to detect technical problems and malfunctions on the website at an early stage.

In individual cases, individual data (information regarding the browser; see above) is stored for a maximum period of four weeks. To the extent that the processing of the aforementioned data involves personal data, the corresponding processing of this data is based on Art. 6 (1) (f) GDPR (legitimate interest; the legitimate interest follows from the aforementioned purposes).

(II) CONTACT FORMS
If you contact us using the contact forms provided on the website, the personal data you provide in this context (such as your name, email address) will be processed in order to answer your inquiry.

The legal basis for the processing of the aforementioned personal data is Art. 6 (1) (f) GDPR (legitimate interests; the legitimate interest arises from the fact that the action requested by the user (e.g., answering an inquiry) can only be carried out through appropriate data processing). If the contact is aimed at concluding a contract, Art. 6 (1) (b) GDPR (performance of the contract or pre-contractual measures) is (additionally) the legal basis for the processing.

(III) COOKIES
The website sometimes uses so-called cookies. Cookies are small text files that are stored on your computer and saved by your browser.

We use so-called session cookies to recognize that you have already visited individual pages of our website. Session cookies are stored only for the duration of your access to the website and are automatically deleted when you close the browser or leave the website. These cookies do not contain any personal data; they simply identify the browser used to access the website. They are designed to make the website more user-friendly, effective, and secure, and to make navigating the website easier for you.

We also use so-called temporary cookies. These allow us to store specific, device-related information on the user's access device (PC, smartphone, etc.), even beyond a session. They serve, for example, to retain page settings for future visits to the website. These cookies remain stored on your device for a maximum period of four weeks (usually for a shorter period). These cookies allow us to recognize your browser the next time you visit.

The aforementioned cookies are primarily used to carry out electronic communication processes or to provide certain functions you request (e.g., the shopping cart function). The legal basis for the corresponding processing of personal data is Art. 6 (1) (f) GDPR (legitimate interest; this legitimate interest arises from the purposes stated above, in particular, optimizing website usage).

You can generally configure your browser to prevent cookies from being saved or to always display a warning before a new cookie is created. However, deactivating cookies may prevent you from (fully) using all the features of our website.

If other cookies or cookie-like tools (e.g. tools for analyzing your surfing behavior) are used on or in connection with the website, these will be treated separately in this data protection declaration (see in particular section 3(V) below).

(IV) IT THEMES SECURITY
This website uses the "iThemes Security" tool. In this context, the IP addresses of website visitors are processed in particular to detect malicious activities and protect the website from certain types of attacks. The IP addresses are only stored in one of our local databases and are not transmitted to third parties. The legal basis for the corresponding processing of personal data is Art. 6 (1) (f) GDPR (legitimate interest; the legitimate interest is that we must protect the website against corresponding attacks by third parties).

(V) GOOGLE TOOLS
GOOGLE ANALYTICS
The website uses – (with regard to your visit to the website) if you give your consent when (first) visiting the website – Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on the website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

This website uses IP anonymization as described above.

You can prevent cookies from being saved (after consenting) by selecting the appropriate settings in your browser. However, please note that if you do this, you may not be able to use the full functionality of the website. Furthermore, you can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Further information about Google Analytics can be found here:
http://www.google.com/analytics/terms/de.html, http://www.google.de/intl/de/policies/privacy/
and at Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA.

We have concluded a data processing agreement with Google (see also section 4 below).

GOOGLE MAPS
On this website you may use content from the “Google Maps” service from Google. Each time you visit “Google Maps” Google sets a cookie to process user settings and data when displaying the page on which “Google Maps” is integrated. This cookie is not generally deleted when you close the browser, but only expires after a certain time unless you delete it manually beforehand. If you do not agree to this processing of your data, you have the option of deactivating the “Google Maps” service and thus preventing the transmission of data to Google. To do this you must deactivate the JavaScript function in your browser. However, we would like to point out that in this case you will not be able to use “Google Maps” or only to a limited extent. However, the data processing described above (with regard to your visit to the website) will only be carried out if you give us your consent when you (first) visit the website (if you do not give such consent, Google Maps content on the website will not be available or will only be available to a limited extent).

Further information on the purpose and scope of data collection and processing by Google can be found in Google's privacy policy. There you will also find further information on your rights and settings options for protecting your privacy: http://www.google.de/intl/de/policies/privacy

GOOGLE ADS
We use Google Ads to draw attention to our attractive offers on external websites using advertising materials (so-called Google Ads). We can determine the success of individual advertising measures based on the data from the advertising campaigns. This is in our interest to show you advertising that is of interest to you, to make our website more interesting for you, and to ensure fair calculation of advertising costs.

These advertisements are delivered by Google via so-called "ad servers." For this purpose, we use ad server cookies, which enable certain parameters to be measured in order to measure success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Ads will store a cookie on your PC. These cookies generally expire after 30 days and are not intended to identify you personally. The analysis values ​​stored for this cookie include the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (indicating that the user no longer wishes to be contacted).

These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Each Ads customer is assigned a different cookie. Cookies cannot therefore be tracked across Ads customers' websites. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can determine which of the advertising measures used are particularly effective. We do not receive any further data from the use of advertising material; in particular, we cannot identify users based on this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected through the use of this tool by Google and therefore inform you according to our current state of knowledge: By integrating ads, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will learn and save your IP address.

You can prevent participation in this process in various ways: a) by setting your browser software accordingly. In particular, suppressing third-party cookies will prevent you from receiving ads from third parties; b) by deactivating interest-based ads from providers that are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choices. This setting will be deleted if you delete your cookies; c) by permanently deactivating this option in your Firefox, Internet Explorer, or Google Chrome browsers via the link http://www.google.com/settings/ads/plugin. Please note that if you do this, you may not be able to use all of the features of this service to their full extent.

GOOGLE WEBFONTS
This site uses so-called web fonts provided by Google for the consistent display of fonts. Google Web Fonts are installed locally on our server (therefore, data processing may occur as described above in Section 3(I); see also the information on the relevant legal basis there). There is no connection to Google servers.

INTEGRATION OF YOUTUBE VIDEOS
On this website we may embed YouTube videos from the online video platform “YouTube” operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, which are stored on YouTube servers and can be played directly from our website (YouTube, LLC is a subsidiary of Google).

The videos are embedded in so-called extended data protection mode, which means that personal data about you as a user is only transferred to YouTube when you play the videos. We have no influence on this data transfer. This data transfer occurs regardless of whether YouTube provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google at the same time, your data will be assigned directly to your account. If you do not wish to be assigned to your YouTube profile, you must log out before playing the video (or refuse to consent to the corresponding data processing when (first) accessing the website; see below). YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or to tailor its website to meet your needs. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube.

In addition, when you access the website (for the first time), a notification window opens, which also contains information about YouTube content on the website. The above data processing will only take place if you grant your consent (if you do not grant such consent, YouTube content on the website will not be available or will only be available in a retrievable format).

Further information on the purpose and scope of data collection and processing by YouTube can be found in YouTube's privacy policy. There you will also find further information on your rights and settings options for protecting your privacy: https://www.google.de/intl/de/policies/privacy.

FURTHER INFORMATION ON THE TOOLS MENTIONED IN SECTION 3(V)
The legal basis for the above-mentioned processing of your personal data in connection with Google Analytics, YouTube and Google Maps is Art. 6 (1) (a) GDPR (consent; you can revoke the corresponding consent at any time with effect for the future).

The legal basis for the aforementioned processing of your personal data in connection with Google Ads is Art. 6 (1) (f) GDPR (legitimate interests). The legitimate interest here is that we have a legitimate economic interest in understanding whether and how (often) the website is used and how we can successfully place advertising. The interests of the website users, however, are not affected or only affected to a very limited extent in this context (since the data processed in this context makes assignment difficult and no particularly critical data is processed). Against this background, our legitimate interests outweigh the interests of the user.

In connection with the aforementioned tools, your personal data may be processed in the USA (see above). Google has committed to complying with the Privacy Shield Framework published by the US Department of Commerce regarding the collection, use, and storage of personal data from EU member states. Google has certified that it adheres to the relevant Privacy Shield Principles. The EU Commission assumes that the United States ensures adequate legal protection for personal data transferred from the EU to self-certified organizations in the USA under the Privacy Shield. Further information can be found at: https://www.privacyshield.gov/EU-US-Framework

(VI)USE OF SOCIAL MEDIA PLUGINS
Our website uses plugins from social networks (e.g. Facebook, Twitter, Instagram, XING, LinkedIn; further information on the tools used can be found below).

You can recognize these plugins on the website by the respective social media logos. Some of the tools we use (Twitter, Facebook, Instagram, LinkedIn, Matterport) would generally transmit certain personal data to the providers of these plugins immediately upon visiting the website (without the precautions we have taken). To prevent this, we only use plugins from such providers in conjunction with the so-called "Avada" solution. This application prevents the plugins integrated into the website from transmitting data to the respective provider of the corresponding plugins the first time you visit the website.

Only when you activate the respective plugin by clicking the corresponding button will a connection to the provider's server be established. As soon as you activate the plugin, the respective provider generally receives the information that you have visited the website using your IP address. If you are simultaneously logged into your respective social media account (e.g., Facebook), the respective provider may be able to associate your visit to the website with your user account.

Activating the plugin as described above constitutes consent to the aforementioned processing of personal data (you grant your consent by clicking the corresponding button; Art. 6 (1) (a) GDPR; you will find further information in the immediate vicinity of the corresponding buttons). You can revoke this consent at any time with future effect.

FACEBOOK
The website uses share plugins from the social network Facebook, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins are recognizable by one of the Facebook logos (e.g., a white "f" on a blue tile, the terms "Like," "I like," or a "thumbs up" symbol).

When a user activates a corresponding Facebook plug-in by clicking the corresponding button, their browser establishes a direct connection to the Facebook servers (see details above under “Use of social media plug-ins”).

LINKEDIN
Our website integrates a share plugin from LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. LinkedIn is a social network that enables users to connect with existing business contacts and establish new ones.
When a user activates a corresponding LinkedIn plugin by clicking the corresponding button, their browser establishes a direct connection to LinkedIn's servers (see the details above under "Use of Social Media Plug-ins").

LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible for data protection matters outside the USA. Further information about LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins. LinkedIn's applicable privacy policy can be found at https://www.linkedin.com/legal/privacy-policy.

INSTAGRAM
Our website uses share plugins from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The plugins are marked with an Instagram logo, e.g., in the form of an "Instagram camera."
When a user activates a corresponding Instagram plugin by clicking the corresponding button, their browser establishes a direct connection to the Instagram servers (see the details above under "Use of Social Media Plugins").

For further information on the purpose and scope of data collection and the further processing and use of the data by Instagram as well as your rights and setting options to protect your privacy, please refer to Instagram's privacy policy at https://help.instagram.com/155833707900388/.

MATTERPORT
We use components from the video and photo network provider Matterport on our website. Matterport is a service of Matterport, Inc., 352 East Java Drive, Sunnyvale, CA 94089, USA.

When a user activates a corresponding Matterport plugin by clicking the corresponding button, their browser establishes a direct connection to the Matterport servers (see the details above under “Use of social media plug-ins”).

For more information about data protection and Matterport, please visit https://matterport.com/legal/privacy-policy/.

FURTHER INFORMATION ON THE ABOVE-MENTIONED TOOLS
The operators of the services Twitter, Instagram and Matterport mentioned above under section 3(VI) process your personal data (possibly also) in the USA.

Twitter and Matterport have committed to complying with the EU-US Privacy Shield Framework published by the US Department of Commerce regarding the collection, use, and retention of personal data from EU member states. These providers have certified that they adhere to the relevant Privacy Shield Principles. The EU Commission assumes that the United States ensures adequate legal protection for personal data transferred from the EU to self-certified organizations in the US under the Privacy Shield. Further information can be found at: https://www.privacyshield.gov/EU-US-Framework

Instagram ensures an adequate level of data protection in third countries outside the EU (e.g., the USA) by implementing sufficient safeguards, including the so-called standard contractual clauses or standard data protection clauses approved by the EU Commission with regard to data transfers from the EU to the USA. Further information can be found at https://help.instagram.com/519522125107875. You can request further information on the standard contractual clauses used by Instagram from Instagram.

WHATSAPP
The website uses a so-called WhatsApp sharing button. Unlike other social plugins, this is an HTML link programmed by us that creates a native deep link in your WhatsApp application. Data is therefore only transferred to WhatsApp when a user activates the link AND forwards information to a friend within their WhatsApp application (we therefore do not directly transfer data to third parties (in particular, the WhatsApp provider) in this context).

4. TRANSFER OF DATA TO THIRD PARTIES
The personal data collected as part of the use of the website will not be passed on to third parties or transmitted in any other way without your consent, subject to other cases expressly described in this data protection declaration.

We may use (technical) service providers who process personal data on our behalf (e.g., IT service providers). These service providers process the corresponding personal data exclusively in accordance with our instructions (contract processors). The legal basis for such data processing is Art. 28 GDPR (contract processing) in conjunction with, as a rule, Art. 6 (1) (f) GDPR (legitimate interest; see the corresponding legitimate interest above).

We may share your personal data with third parties if we are legally obligated to do so (e.g., at the request of a court or law enforcement agency). The legal basis for such data processing is Art. 6 (1) (c) GDPR (legal obligation).

5. PERIOD FOR WHICH YOUR PERSONAL DATA IS STORED
Unless the other provisions of this privacy policy stipulate a different retention period, we will only store your personal data obtained in connection with your use of the website for as long as is necessary, in particular to process your inquiries to us or only for the period required to achieve the storage purpose. Thereafter, only to the extent and insofar as we are obligated to do so due to mandatory statutory retention periods. If we no longer need your data for the purposes described above, it will only be stored for the respective statutory retention period and not processed for other purposes.

6. NEWSLETTER DISTRIBUTION
The newsletter is sent based on the user's registration for a specific newsletter. When you subscribe to one of our free newsletters, the data from the registration form is transmitted to us. We use your email address, first name, last name, and gender to personalize your greeting.

In addition, the following data is collected during registration: IP address of the accessing computer, date and time of registration.

Your consent to the processing of your data will be obtained during the registration process and reference will be made to this privacy policy.

The legal basis for the processing of data after the user has registered for the newsletter is Art. 6 (1) (a) GDPR, provided the user has given his or her consent.

In connection with data processing for sending newsletters, data is generally not passed on to third parties. The data is used exclusively for sending the newsletter. The only exception to this is that, in individual cases, the data may be passed on to "MailChimp." This is a service provider for sending newsletters, which also stores email addresses and other information for sending and analyzing the newsletter. The legal basis for the processing of data by "MailChimp" is Art. 6 (1) (f) GDPR.

Include: Address, Privacy Shield The Rocket Science Group, LLC 675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA

The collection of other personal data as part of the evaluation serves to measure how often the newsletter is opened and which links the reader clicks on.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's first name, last name, and email address will therefore be stored as long as the newsletter subscription is active.

The other personal data collected during the evaluation are generally deleted after a period of seven days.

The affected user can cancel their newsletter subscription at any time. A link for this purpose is provided in each newsletter.

7. RIGHTS OF THE DATA SUBJECT
You have the right to request information from us at any time about the personal data we have stored about you. To the extent that the legal requirements are met, you also have the right to rectification, erasure, or restriction of processing of the relevant personal data, the right to object to the processing of your personal data by us, and the right to receive the personal data concerning you that you have provided to us in a structured, common, and machine-readable format (you can transmit this data to other parties or have it transmitted).

If you have given your consent to the use of personal data, you can revoke this consent at any time for the future.

If you believe that our processing of your personal data violates applicable data protection law, you can lodge a complaint with the competent data protection supervisory authority.

8. SECURITY OF YOUR DATA
The data you transmit to us is protected by appropriate technical and organizational means to protect it from accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously monitored and improved in line with technological developments and organizational possibilities.