We are very delighted that you have shown interest in our company. Data protection is of a particularly high priority for TRUH GmbH (hereinafter referred to as TRUH). For this reason, TRUH has implemented extensive technical and organizational measures to ensure the most complete protection possible for your personal data processed by us. However, we would like to point out that Internet-based data transmissions can generally have security gaps, meaning that absolute protection cannot be guaranteed. 

By means of this privacy policy, we would like to inform you about the type, scope and purpose of the personal data we collect, use and process when you visit our website. We also inform you as the data subject about your rights. 

1.Responsible body 

The controller responsible for data processing on this website is

TRUH GmbH 
Industriestrasse 2 | D-75228 Ispringen | Telephone: (+49) 0 7231 801 4365 
E-mail: info@truh-agentur.com 

2.General information 

How do we collect your data? 
There are various ways in which we collect data from you on our website. One way is that you provide us with this data when you contact us via our contact form. Other data is collected automatically or after your consent in our Consent Manager by our analysis tools when you visit our website. This is primarily technical data (e.g. internet browser, operating system or time of page view). 

What do we use your data for?
We collect some of your data to ensure the error-free provision of our website. We use other data to analyze your user behavior in order to offer you special services, for example. 

Storage period
Unless we provide you with a specific storage period within the privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, we will delete your data unless we have other legally permissible reasons for storing your personal data. Such a reason would be, for example, retention periods under tax or commercial law. If such a reason exists, the deletion will take place after the reason no longer applies. 

Contact options
 If you have any questions or wish to assert one of your rights as a data subject, you can contact us at any time by email at: info@truh-agentur.com 

3.External hosting of our website 

The website is not hosted by TRUH itself, but by an external service provider. We use the services of DomainFactory GmbH, c/o WeWork, Neuturmstraße 5, 80331 Munich (hereinafter referred to as DomainFactory) to host our website Our hoster will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data. DomainFactory processes our customer data on our behalf in accordance with our instructions and has undertaken to handle your personal data in a trustworthy and GDPR-compliant manner. We ensure this through a so-called order processing contract (hereinafter AVV) with DomainFactory in accordance with Art. 28 GDPR. Further information on data processing by DomainFactory can be found at: https://www.df.eu/datenschutz ### 4th processing purposes Personal data such as name, address or email address are only collected by us in the context of providing a service, e.g. when using the contact form, placing an order via our webshop or registering for our newsletter. We only use the information you provide voluntarily for the purpose for which you have given it to us. The processing of personal data is carried out exclusively in accordance with the principles of Art. 5 GDPR. 

4.1 Processing of usage data when accessing our website 
Even in the case of purely informational use, a range of general data and information is transmitted each time our website is accessed. We only log the general data and information that your browser transmits to our server. Data and information are recorded that are technically necessary for us to display our website to you and that serve to ensure stability, security and security in the event of attacks on our information technology systems. 

In detail, the following data is collected

IP address Date and time of accessing the website browser types and versions used 
Operating system used and its interface 
Website from which an accessing system accesses our website (so-called referrer) 
Sub-websites which are accessed via an accessing system on our website 
Internet service provider of the accessing system 

We delete the data collected in this context after storage is no longer required for error analysis, or restrict processing if there are statutory retention obligations. The legal basis for data processing in this context is Art. 6 para. 1 f) GDPR. When using this general data and information, we do not draw any conclusions about you as the data subject. The logged data is stored for a period of 100 days. It is then deleted by the system. 

4.2 Error logs ("error logs")
Error logs are created for the purpose of identifying and rectifying errors. This is absolutely necessary in order to be able to react as quickly as possible to possible problems in the presentation and implementation of content (legitimate interest). These data are generally pseudonyms and therefore do not allow any conclusions to be drawn about a natural person. The legal basis for this can be found in Section 15 (1) TMG and Art. 6 (1) sentence 1 f) GDPR. If an error message occurs, general data such as the domain name of the website, the web browser and web browser version, the operating system, the IP address and the timestamp when the corresponding error message/specification occurs are recorded. These error logs are stored for up to 100 days. There is no right of objection. 

4.3 Use of the contact form or contact by e-mail 
If you have any questions, for example about our services, you can use the contact form provided on our website or you can also contact us by email. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 a) GDPR on the basis of your voluntarily given consent or, in the case of a (pre-)contractual relationship with us, in accordance with Art. 6 para. 1 b) GDPR. We delete the data arising in this context after storage is no longer required to process your request, or restrict processing if there are statutory retention obligations. 

4.4 Cookies
The TRUH website uses cookies. Cookies are text files that are stored on a computer system via an Internet browser. Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters that can be used to assign websites and servers to the specific internet browser in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID. 

Through the use of cookies, we can provide the users of this website with more user-friendly services that would not be possible without the cookie setting. By means of a cookie, the information and offers on our website can be optimized for the benefit of the user. As already mentioned, cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to re-enter their access data each time they visit the website, as this is done by the website and the cookie stored on the user's computer system. We use tracking services and cookies to create user profiles under a pseudonym. Such a user profile contains information about the behavior of a visitor on websites. It is not possible to draw any direct conclusions about the user. 

The setting of cookies by our website can be prevented at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable. 

You can delete all cookies stored on your computer and set most browsers to prevent the storage of cookies. You can find out how here, for example: AllAboutCookies.org. 

In general, web browsers are currently set by default to accept cookies automatically. On these pages you can find out how to change this default setting and block cookies - including from this website: 

Chrome Firefox 
Internet Explorer 
Opera 
Safari 

Our website uses different types of cookies. Some cookies are placed by third parties that appear on our pages. 

Essential cookies are required to ensure the core functionality of the website. 

Statistical cookies are cookies that are used to record user behavior on our website so that the functionality of the website can be improved. 

The legal basis for the use of essential cookies is Art. 6 para. 1 f) GDPR - a legitimate interest. Our legitimate interest in the use of essential cookies is to be able to provide a functioning website. 

The legal basis for statistical cookies is Art. 6 para. 1 a) GDPR - your consent. 

No non-essential cookies are set without your consent. You can change or revoke your consent to the use of cookies at any time in our Cookie Consent Manager on our website with effect for the future. 

5.Integration of third-party tools 

5.1 Google
On our website, we use the services of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter "Google"). The following information relates to all Google components across the board and is therefore not explained further in the subsections under 5.1 below. 

Google tools are only ever used with your consent in accordance with Art. 6 (1) a) GDPR. You can refuse your consent or revoke it at any time via our Consent Manager with effect for the future if you do not want Google to collect and process the aforementioned data for the respective purposes. 

Your personal data will only be stored for the period of time required to fulfill the respective processing purpose. Your data will be deleted as soon as it is no longer required to achieve the purpose. 

In addition to Google Ireland Limited, your data may also be transmitted to the following recipients for processing: 

Google LLC.
 Alphabet Inc.

If personal data is processed by Google, this data may also be transferred to the USA. We ensure the transfer of your data through so-called standard contractual clauses, which we have included in our DPA with Google. These additionally guarantee your data a contractual level of security during processing that corresponds to that of the GDPR. 

You can find more information about Google's privacy policy here: https://www.google.com/intl/de/policies/privacy/. 

5.1.1 Google Analytics
Our website uses Google Analytics, a web analysis service from Google. Google Analytics uses cookies that are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on servers in the United States. 

The following data is collected and processed with the help of Google Analytics

IP address (anonymized)
Usage data
Click path
App updates
Browser information
Device information
JavaScript support
Visited pages
Referrer URL
Downloads 
Flash version 
Location information 
Purchase activity 
Widget interactions 
Date and time of the visit 

We would like to point out that this website uses the "\_anonymizeIp()" extension from Google Analytics. This activates IP anonymization on our website and your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The truncation prevents direct personal identification. 

Google will use the information to evaluate your use of our website, to compile reports on website activity for website operators and to provide other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. 

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website. By clicking on the "I agree" button in the cookie window that appears the first time you visit our website or by making the appropriate settings in our cookie settings, you consent to the processing of the data collected about you by Google in the manner described above and for the aforementioned purpose. You can revoke your consent at any time with effect for the future, i.e. without the legality of the data processing ceasing to apply at the time of your revocation, in one of the following ways: 

By changing the cookie settings on our website: Consent Manager 
By downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

An opt-out cookie will be set to prevent the future collection of your data when you visit this website. 

You can find more information on Google's terms of use and data protection at http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/ 

We can also use Google Analytics to track so-called events on our website using a JavaScript, i.e. clicks on certain buttons, downloads of information, etc. You cannot object to this separately, but only by completely deactivating tracking as described above. 

6.Contact options for data protection questions 

If you have any questions or wish to assert one of your data subject rights explained below, you are welcome to contact us at any time by email with the subject "Data protection request": info@truh-agentur.com

7.Your rights as a data subject

 The GDPR regulates certain rights that data subjects can assert against the controller. We would like to inform you about these in more detail below. The exercise of these rights can be asserted against TRUH in writing. We ask you to assert these rights in writing, as this will make it easier for us to process your case internally. Thank you for your understanding. 

7.1 Right to confirmation 
Confirmation as to whether personal data concerning you is being processed by TRUH. 

7.2 Right to information
To receive information about the personal data stored about him/her and a copy of this information - Art. 15 GDPR. Furthermore, the European legislator has granted the data subject access to the following information:

the purposes of the processing;
the categories of personal data being processed; 
the recipients or categories of recipients to whom the personal data have been or will be disclosed;
the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing the existence of the right to lodge a complaint with a supervisory authority;
if the personal data are not collected directly from the data subject: All available information about the origin of the data;
the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject; 
statement as to whether personal data have been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate guarantees in connection with the transfer. 

7.3 Right to rectification
Immediate correction of incorrect personal data in accordance with Art. 16 GDPR. 

7.4 Right to erasure (right to be forgotten)
The immediate erasure of the personal data concerned if one of the following reasons applies and insofar as the processing is not necessary: 

The personal data have been collected or otherwise processed for such purposes for which they are no longer necessary. 
The data subject withdraws consent on which the processing is based according to Article 6(1)(a) GDPR, or Article 9(2)(a) GDPR, and where there is no other legal ground for the processing. 
The data subject objects to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2) GDPR. The personal data have been processed unlawfully. 
There is no exception pursuant to Art. 17 para. 3 GDPR. 

If TRUH has made the personal data public and our company, as the controller, is obliged to erase the personal data pursuant to Article 17(1) GDPR, we have taken reasonable steps to do so, taking into account the available technology and the cost of implementation. 

7.5 Right to restriction of processing
In accordance with Art. 18 GDPR, you have the right to request the restriction of the processing (blocking) of your personal data. The prerequisites for this are:

The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data. 
The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead. 
The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims. 
The data subject has objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject. 

7.6 Right to data portability
The transfer of the personal data concerned in a structured, commonly used and machine-readable format in accordance with Art. 20 GDPR. 

7.7 Right to object
You have the right to object, at any time, to the processing of your personal data based on Art. 6 (1) e) or f) GDPR in accordance with Art. 21 GDPR. 

In the event of an objection, TRUH will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims. 

7.8 Automated decisions in individual cases including profiling
As a responsible company, we do not use automated decision-making or profiling. 

7.9 Right to withdraw consent under data protection law
The temporally independent withdrawal of a given consent to the processing of personal data with effect for the future in accordance with Art. 7 para. 3 GDPR. 

7.10 Right to lodge a complaint
As a data subject, you have the right to lodge a complaint with the competent supervisory authority at any time in accordance with Art. 77 GDPR. 

The competent supervisory authority for TRUH is:
 

State Commissioner for Data Protection and Freedom of Information 
Baden-Württemberg Lautenschlagerstraße 20 | D-70173 Stuttgart | Tel.: 0711/615541-0 
E-mail: poststelle@lfdi.bwl.de| www.baden-wuerttemberg.datenschutz.de

8.Validity of this privacy policy 

Please note that the contents of this privacy policy are only valid in the version stated at the time of your visit. Due to changes in legal or official requirements, it may be necessary to adapt this privacy policy. This is also the case if we add functions or use additional providers. The new privacy policy will then apply the next time you visit our website. 

Current status of the privacy policy: August 2024