Status: November 10, 2023
IBG Consulting OÜ
Aida tn 9
80011 Pärnu
Estonia
Email: fitness@ibg-consulting.eu
The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.
Relevant legal bases according to the GDPR: Below you will find an overview of the legal bases of the GDPR on the basis of which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or domicile. Should more specific legal bases also apply in individual cases, we will inform you of these in the privacy policy.
- Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR) - The data subject has given their consent to the processing of their personal data for a specific purpose or several specific purposes.
- Performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR) - Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
- Legal obligation (Art. 6 para. 1 sentence 1 lit. c) GDPR) - Processing is necessary for compliance with a legal obligation to which the controller is subject.Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR) - Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
National data protection regulations in USA: In addition to the data protection regulations of the GDPR, national data protection regulations apply in Germany. These include, in particular, the Act on the Protection against Misuse of Personal Data in Data Processing (Federal Data Protection Act - BDSG). In particular, the BDSG contains special regulations on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes and transmission as well as automated decision-making in individual cases, including profiling. The data protection laws of the individual federal states may also apply.
Note on the applicability of the GDPR and Swiss FADP: This data protection notice serves to provide information in accordance with both the Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR). For this reason, please note that the terms of the GDPR are used due to the broader geographical application and comprehensibility. In particular, instead of the terms "processing" of "personal data", "overriding interest" and "sensitive personal data" used in the Swiss DPA, the terms "processing" of "personal data", "legitimate interest" and "special categories of data" used in the GDPR are used. However, the legal meaning of the terms will continue to be determined in accordance with the Swiss DPA within the scope of application of the Swiss DPA.
We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.
The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access, input, disclosure, safeguarding availability and separation of the data. Furthermore, we have established procedures that ensure the exercise of data subject rights, the deletion of data and responses to data threats. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and processes in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.
As part of our processing of personal data, data may be transferred to other bodies, companies, legally independent organizational units or persons or disclosed to them. The recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we observe the legal requirements and, in particular, conclude corresponding contracts or agreements with the recipients of your data that serve to protect your data.
Data processing in third countries: If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA)) or the processing takes place in the context of the use of third-party services or the disclosure or transfer of data to other persons, bodies or companies, this will only take place in accordance with the legal requirements. If the level of data protection in the third country has been recognized by means of an adequacy decision (Art. 45 GDPR), this serves as the basis for the data transfer. In addition, we will inform you of the basis for third country transfers with the individual providers from the third country, whereby the adequacy decisions take precedence. Information on third country transfers and existing adequacy decisions can be found in the information provided by the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de.
EU-US Trans-Atlantic Data Privacy Framework: As part of the so-called "Data Privacy Framework" (DPF), the EU Commission has also recognized the level of data protection for certain companies from the USA as secure as part of the adequacy decision of 10.07.2023. The list of certified companies and further information on the DPF can be found on the website of the US Department of Commerce at https://www.dataprivacyframework.gov/ As part of the data protection information, we will inform you which service providers we use are certified under the Data Privacy Framework.
Rights of data subjects under the GDPR: As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Art. 15 to 21 GDPR:
Cookies are small text files or other storage notes that store information on end devices and read information from the end devices. For example, to store the login status in a user account, the contents of a shopping cart in an e-shop, the content accessed or the functions used in an online offering. Cookies can also be used for various purposes, e.g. to ensure the functionality, security and convenience of online services and to analyze visitor flows.
Notes on consent: We use cookies in accordance with the statutory provisions. We therefore obtain prior consent from users, unless this is not required by law. In particular, consent is not required if the storage and reading of information, including cookies, is absolutely necessary in order to provide the user with a telemedia service expressly requested by them (i.e. our online offer). Strictly necessary cookies generally include cookies with functions that serve the display and operability of the online service, load balancing, security, storage of user preferences and selection options or similar purposes related to the provision of the main and secondary functions of the online service requested by the user. The revocable consent is clearly communicated to the users and contains the information on the respective use of cookies.
Information on legal bases under data protection law: The legal basis under data protection law on which we process users' personal data with the help of cookies depends on whether we ask users for their consent. If users consent, the legal basis for processing their data is the consent they have given. Otherwise, the data processed using cookies will be processed on the basis of our legitimate interests (e.g. in the commercial operation of our online offering and improving its usability) or, if this is done in the context of fulfilling our contractual obligations, if the use of cookies is necessary to fulfill our contractual obligations. We explain the purposes for which we process cookies in the course of this privacy policy or as part of our consent and processing procedures.
Storage duration: With regard to the storage duration, a distinction is made between the following types of cookies:
General information on revocation and objection (so-called "opt-out"): Users can revoke the consent they have given at any time and object to processing in accordance with the legal requirements. Among other things, users can restrict the use of cookies in their browser settings (although this may also limit the functionality of our online offering). An objection to the use of cookies for online marketing purposes can also be declared via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/.
Further information on processing processes, procedures and services:
We process data of our contractual and business partners, e.g. customers and interested parties (collectively referred to as "contractual partners") in the context of contractual and comparable legal relationships and associated measures and in the context of communication with the contractual partners (or pre-contractual), e.g. to answer inquiries.
We process this data in order to fulfill our contractual obligations. These include, in particular, the obligations to provide the agreed services, any updating obligations and remedies in the event of warranty and other service disruptions. In addition, we process the data to safeguard our rights and for the purpose of the administrative tasks associated with these obligations and the company organization. In addition, we process the data on the basis of our legitimate interests in proper and efficient business management and in security measures to protect our contractual partners and our business operations from misuse, threats to their data, secrets, information and rights (e.g. to involve telecommunications, transport and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). Within the framework of applicable law, we only pass on the data of contractual partners to third parties to the extent that this is necessary for the aforementioned purposes or to fulfill legal obligations. Contractual partners will be informed about other forms of processing, e.g. for marketing purposes, as part of this privacy policy.
We inform the contractual partners which data is required for the aforementioned purposes before or during data collection, e.g. in online forms, by means of special marking (e.g. colors) or symbols (e.g. asterisks or similar), or personally.
We delete the data after the expiry of statutory warranty and comparable obligations, i.e. generally after 4 years, unless the data is stored in a customer account, e.g. as long as it must be retained for legal archiving reasons. The statutory retention period for data relevant to tax law is.
documents and, in the case of trading books, inventories, opening balance sheets, annual financial statements, the working instructions and other organizational documents and accounting vouchers required to understand these documents, ten years and, in the case of received commercial and business letters and reproductions of sent commercial and business letters, six years. The period begins at the end of the calendar year in which the last entry was made in the book, the inventory, the opening balance sheet, the annual financial statements or the management report were prepared, the commercial or business letter was received or sent or the accounting document was created, the record was made or the other documents were created.Insofar as we use third-party providers or platforms to provide our services, the terms and conditions and data protection notices of the respective third-party providers or platforms apply in the relationship between the users and the providers.
Processed data types: Inventory data (e.g. names, addresses); payment data (e.g. bank details, invoices, payment history); contact data (e.g. email, telephone numbers); contract data (e.g. subject matter of contract, term, customer category).
Data subjects: Interested parties. Business and contractual partners.
Purposes of Processing: Provision of contractual services and performance of contractual obligations; contact requests and communication; Office and organizational procedures. Managing and responding to inquiries.
Legal bases: Performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR); Legal obligation (Art. 6 para. 1 sentence 1 lit. c) GDPR). Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
We process the data of users in order to provide them with our online services. For this purpose, we process the user's IP address, which is necessary to transmit the contents and functions of our online services to the user's browser or device.
Types of Data Processed: Usage data (e.g., websites visited, interest in content, access times); meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status).Affected Persons: Users (e.g., website visitors, users of online services).
Purposes of Processing: Provision of our online services and user-friendliness; information technology infrastructure (operation and provision of information systems and technical devices (computers, servers, etc.)). Security measures.
Legal Basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Further Information on Processing Processes, Procedures, and Services:
Collection of Access Data and Log Files: Access to our online offering is logged in the form of "server log files." Server log files may include the address and name of the accessed web pages and files, date and time of access, transferred data volumes, messages about successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), and generally IP addresses and the requesting provider. Server log files may be used for security purposes, e.g., to avoid server overloads (especially in the case of abusive attacks, so-called DDoS attacks), and also to ensure server utilization and stability; Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR). Deletion of Data: Log file information is stored for a maximum of 30 days and then deleted or anonymized. Data that needs to be retained for evidence purposes is excluded from deletion until the respective incident is finally clarified. Deletion of Data: Log file information is stored for a maximum of 30 days and then deleted or anonymized. Data that needs to be retained for evidence purposes is excluded from deletion until the respective incident is finally clarified.
When contacting us (e.g., by mail, contact form, email, phone, or via social media) and within the scope of existing user and business relationships, the information provided by the inquiring persons is processed to the extent necessary to respond to the contact inquiries and any requested measures.
Types of Data Processed: Contact data (e.g., email addresses, phone numbers); content data (e.g., entries in online forms); usage data (e.g., websites visited, interest in content, access times); meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status).
Affected Persons: Communication partners.
Purposes of Processing: Contact inquiries and communication; management and response to inquiries; feedback (e.g., collecting feedback via online form). Provision of our online services and user-friendliness.
Legal Basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR). Fulfillment of contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR).
Further Information on Processing Processes, Procedures, and Services:
Contact Form: When users contact us via our contact form, email, or other communication channels, we process the data provided to us in this context to handle the communicated request; Legal Basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR)
We process personal data for the purpose of marketing communication through various channels such as email, phone, mail, or fax, in compliance with legal requirements. Recipients have the right to withdraw their consent at any time or to object to marketing communication at any time. After withdrawal or objection, we will retain the data necessary to prove previous authorization for contact or sending purposes for up to three years from the end of the year in which the withdrawal or objection occurred, based on our legitimate interests. The processing of this data is limited to the purpose of possible defense against claims. Based on our legitimate interest in permanently respecting the withdrawal or objection of users, we also store the data necessary to avoid renewed contact (e.g., depending on the communication channel, email address, phone number, name).
Processed Data Types: Master data (e.g., names, addresses); contact data (e.g., email, phone numbers).
Affected Persons: Communication partners.
Purposes of Processing: Direct marketing (e.g., via email or mail).
Legal Bases: Consent (Art. 6 (1) (a) GDPR); Legitimate interests (Art. 6 (1) (f) GDPR).
To subscribe to our newsletters, it is generally sufficient to provide your email address. However, we may ask you to provide a name for personal addressing in the newsletter or other information if required for the purposes of the newsletter.
Double Opt-In Procedure: Subscription to our newsletter is done in a so-called double opt-in procedure. This means you will receive an email after registration asking you to confirm your subscription. This confirmation is necessary to ensure that no one can subscribe with someone else's email address. Newsletter subscriptions are logged to be able to prove the subscription process according to legal requirements. This includes storing the time of subscription and confirmation, as well as the IP address. Changes to your data stored by the email service provider are also logged.
Deletion and Restriction of Processing: We may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them to provide evidence of previously given consent. The processing of these data is limited to the purpose of defending against possible claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed. In the case of obligations to permanently observe objections, we reserve the right to store the email address solely for this purpose in a blocklist.
The logging of the registration process is carried out on the basis of our legitimate interests for the purpose of proving its proper execution. If we commission a service provider to send emails, this is done based on our legitimate interests in an efficient and secure mailing system.
Contents:
Information about us, our services, promotions, and offers.
Types of Data Processed: Inventory data (e.g., names, addresses); contact data (e.g., email addresses, phone numbers); meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status); usage data (e.g., websites visited, interest in content, access times).
Affected Persons: Communication partners.
Purposes of Processing: Direct marketing (e.g., via email or postal service).
Legal Basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).
Opt-Out Option: You can cancel the receipt of our newsletter at any time, i.e., withdraw your consents, or object to further receipt. You will find a link to unsubscribe from the newsletter at the end of each newsletter or you can use one of the above-mentioned contact options, preferably email, for this purpose.
Further Information on Processing Processes, Procedures, and Services:
Measurement of Opening and Click Rates: The newsletters contain a so-called "web beacon," i.e., a pixel-sized file that is retrieved from our server, or, if we use a shipping service provider, from their server when the newsletter is opened. In the course of this retrieval, technical information such as information about the browser and your system, as well as your IP address and the time of retrieval, are collected.
This information is used for the technical improvement of our newsletters based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or access times. This analysis also includes determining whether the newsletters are opened, when they are opened, and which links are clicked. This information is assigned to the individual newsletter recipients and stored in their profiles until they are deleted. The evaluations help us understand our users' reading habits and adapt our content to them or send different content according to the interests of our users.
The measurement of opening rates and click rates as well as storage of the measurement results in the profiles of the users for advertising communication via email, post, fax, or telephone.
We process personal data for the purposes of promotional communication, which may be conducted through various channels such as email, telephone, mail, or fax, in accordance with legal requirements.
Recipients have the right to withdraw given consents at any time or to object to promotional communication at any time.After withdrawal or objection, we store the data required to prove previous authorization for contact or sending for up to three years after the end of the year of withdrawal or objection based on our legitimate interests. The processing of these data is limited to the purpose of potential defense against claims. Based on the legitimate interest to permanently respect the withdrawal or objection of users, we also store the data necessary to avoid renewed contact (e.g., the email address, telephone number, name, depending on the communication channel).
Types of Data Processed: Inventory data (e.g., names, addresses); contact data (e.g., email addresses, phone numbers).
Affected Persons: Communication partners.
Purposes of Processing: Direct marketing (e.g., via email or postal service).
Legal Basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR). Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Web analysis (also referred to as "reach measurement") serves to evaluate the visitor flows of our online offering and can include behavior, interests, or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach analysis, we can, for example, identify the time at which our online offering or its functions or content are most frequently used or invite reuse. We can also determine which areas need optimization.
In addition to web analysis, we can also use testing procedures to, for example, test and optimize different versions of our online offering or its components.
Unless otherwise specified below, profiles can be created for these purposes, i.e., data summarized into a usage process and information stored and read from a browser or device. The collected information includes, in particular, visited web pages and used elements, as well as technical information such as the browser used, the computer system used, and information about usage times. If users have consented to the collection of their location data with us or with the providers of the services we use, location data may also be processed.
Users' IP addresses are also stored. However, we use an IP masking procedure (i.e., pseudonymization by shortening the IP address) to protect users. Generally, no clear data of the users (such as email addresses or names) are stored within the scope of web analysis, A/B testing, and optimization, but pseudonyms. This means that neither we nor the providers of the software used know the actual identity of the users, only the information stored in their profiles for the purposes of the respective procedures.
Types of Data Processed: Usage data (e.g., visited websites, interest in content, access times); meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status).
Affected Persons: Users (e.g., website visitors, users of online services).
Purposes of Processing: Reach measurement (e.g., access statistics, identification of returning visitors). Profiles with user-related information (creating user profiles).
Security Measures: IP masking (pseudonymization of the IP address).
We process personal data for the purposes of online marketing, which includes, in particular, the marketing of advertising spaces or the display of advertising and other content (collectively referred to as "content") based on potential user interests and the measurement of their effectiveness.
For these purposes, so-called user profiles are created and stored in a file (known as a "cookie") or similar methods are used to store relevant information about the user for displaying the aforementioned content. This information may include, for example, viewed content, visited websites, used online networks, as well as communication partners and technical information such as the browser used, the computer system used, and information about usage times and used functions. If users have consented to the collection of their location data, this can also be processed.
Users' IP addresses are also stored. However, we use available IP masking procedures (i.e., pseudonymization by shortening the IP address) to protect users. In general, no clear data of users (such as email addresses or names) are stored in the context of online marketing procedures, but pseudonyms. This means that neither we nor the providers of the online marketing procedures know the actual identity of the users, only the information stored in their profiles.
The information in the profiles is usually stored in cookies or by similar methods. These cookies can generally also be read and analyzed for displaying content on other websites that use the same online marketing procedure and can be supplemented with additional data and stored on the server of the online marketing procedure provider.Exceptionally, clear data can be assigned to the profiles. This is the case if, for example, users are members of a social network whose online marketing procedure we use and the network links the profiles of the users with the aforementioned information. We ask users to note that they can make additional agreements with the providers, e.g., by consenting during registration.
We generally only have access to aggregated information about the success of our advertisements. However, as part of conversion measurements, we can check which of our online marketing procedures have led to a so-called conversion, i.e., for example, to a contract with us. Conversion measurement is used solely to analyze the success of our marketing measures.Unless otherwise specified, please assume that used cookies are stored for a period of two years.
Types of Data Processed: Usage data (e.g., visited websites, interest in content, access times); meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status).
Affected Persons: Users (e.g., website visitors, users of online services).
Purposes of Processing: Reach measurement (e.g., access statistics, identification of returning visitors); tracking (e.g., interest/behavior-based profiling, use of cookies); marketing. Profiles with user-related information (creating user profiles).
Security Measures: IP masking (pseudonymization of the IP address).
Opt-Out Options: We refer to the privacy notices of the respective providers and the opt-out options provided by the providers (so-called "opt-out"). If no explicit opt-out option has been provided, you have the option to disable cookies in your browser settings. However, this may limit the functionality of our online offering. We therefore recommend the following opt-out options, which are provided for specific regions:
a) Europa: https://www.youronlinechoices.eu.
b) Kanada: https://www.youradchoices.ca/choices.
c) USA: https://www.aboutads.info/choices.
d) Cross-regional: https://optout.aboutads.info.
We integrate so-called affiliate links or other references (which may include search masks, widgets, or discount codes) to the offers and services of third-party providers in our online offering (collectively referred to as "affiliate links"). If users follow the affiliate links or subsequently take advantage of the offers, we may receive a commission or other benefits from these third-party providers (collectively referred to as "commission").
To track whether users have taken advantage of the offers of an affiliate link used by us, it is necessary for the respective third-party providers to know that the users followed an affiliate link used within our online offering. The assignment of the affiliate links to the respective business transactions or other actions (e.g., purchases) serves solely the purpose of commission settlement and is revoked as soon as it is no longer required for this purpose.
For the purposes of the aforementioned assignment of affiliate links, the affiliate links can be supplemented with certain values that are part of the link or can be stored in another way, e.g., in a cookie. These values can include, in particular, the referring website (referrer), the time, an online identifier of the operators of the website on which the affiliate link was located, an online identifier of the respective offer, the type of link used, the type of offer, and an online identifier of the user.
Legal Basis Information: If we ask users for their consent to the use of third-party providers, the legal basis for the processing of data is consent. Otherwise, users' data will be processed based on our legitimate interests (i.e., interest in efficient, economical, and recipient-friendly services). In this context, we would also like to refer you to the information on the use of cookies in this privacy policy.
Types of Data Processed: Usage data (e.g., visited websites, interest in content, access times); meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status).
Affected Persons: Users (e.g., website visitors, users of online services).
Purposes of Processing: Reach measurement (e.g., access statistics, identification of returning visitors). Profiles with user-related information (creating user profiles).
Security Measures: IP masking (pseudonymization of the IP address)
We participate in review and rating procedures to evaluate, optimize, and promote our services. When users rate us on the participating review platforms or procedures or provide feedback in other ways, the general terms and conditions and the privacy policies of the providers apply. Usually, rating also requires registration with the respective providers.
To ensure that the reviewing persons have actually used our services, we transmit, with the customer's consent, the necessary data regarding the customer and the service used to the respective review platform (including name, email address, and order number or item number). This data is solely used to verify the authenticity of the user.
Types of Data Processed: Usage data (e.g., visited websites, interest in content, access times); meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status).
Affected Persons: Users (e.g., website visitors, users of online services).
Purposes of Processing: Reach measurement (e.g., access statistics, identification of returning visitors). Profiles with user-related information (creating user profiles).
Security Measures: IP masking (pseudonymization of the IP address)
We maintain online presences within social networks and process data of users in this context to communicate with active users there or to offer information about us.
We point out that data of users can be processed outside the European Union. This can result in risks for the users because, for example, the enforcement of the users' rights might be more difficult.
Furthermore, users' data within social networks are generally processed for market research and advertising purposes. For instance, usage profiles can be created based on user behavior and the resulting interests. The usage profiles can, in turn, be used to display advertisements within and outside the networks that presumably correspond to the users' interests. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. In addition, data can also be stored in the usage profiles regardless of the devices used by the users.
Data Types Processed: Contact data (e.g., email, phone numbers); content data (e.g., entries in online forms); usage data (e.g., visited websites, interest in content, access times); meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status).
Affected Persons: Users (e.g., website visitors, users of online services).
Purposes of Processing: Contact inquiries and communication; feedback (e.g., collecting feedback via online forms). Marketing.
Legal Bases: Legitimate interests (Art. 6(1) Sentence 1 lit. f) GDPR).
Additional Information on Processing Procedures, Services, and Providers:
Instagram: Social network; Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal basis: Legitimate interests (Art. 6(1) Sentence 1 lit. f) GDPR); Website: https://www.instagram.com. Privacy Policy: https://instagram.com/about/legal/privacy.
Facebook Pages: Profiles within the social network Facebook. We are jointly responsible with Meta Platforms Ireland Limited for the collection (but not the further processing) of data from visitors to our Facebook Page (so-called "Fanpage"). This data includes information about the types of content users view or interact with, and details about the devices used by the users (e.g., IP addresses, operating system, browser type, language settings, cookie data). Facebook also collects and uses this information to provide analytics services, known as "Page Insights," to page operators. We have a specific agreement with Facebook ("Page Insights Information") that outlines the security measures Facebook must adhere to and obliges Facebook to fulfill the rights of affected individuals. More details can be found in the "Page Insights Information." Service provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; Legal basis: Legitimate interests (Art. 6(1) Sentence 1 lit. f) GDPR); Website: https://www.facebook.com/policy), Facebook; Privacy Policy: Facebook Privacy Policy; Basis for third-country data transfers: EU-US Data Privacy Framework (DPF), Standard Contractual Clauses (SCCs). Further information: Joint controller agreement: Page Insights Data Information. Joint responsibility is limited to data collection and transmission to Meta Platforms Ireland Limited, an EU-based company. Further processing, especially the transfer of data to the parent company Meta Platforms, Inc. in the US, is the sole responsibility of Meta Platforms Ireland Limited, based on Standard Contractual Clauses between Meta Platforms Ireland Limited and Meta Platforms, Inc.
Privacy Policy: Facebook Privacy Policy; Basis for data transfers to third countries: EU-US Data Privacy Framework (DPF), Standard Contractual Clauses (SCCs) (EU Data Transfer Addendum). Further information: Joint controller agreement: Information About Page Insights Data. Joint responsibility is limited to the collection and transfer of data to Meta Platforms Ireland Limited, an EU-based company. Further processing of data, including the transfer to Meta Platforms, Inc. in the US, is the sole responsibility of Meta Platforms Ireland Limited, based on the Standard Contractual Clauses between Meta Platforms Ireland Limited and Meta Platforms, Inc.
We integrate functional and content elements into our online services that are sourced from servers of their respective providers (referred to as "third parties"). This may include graphics, videos, or maps (collectively referred to as "content").
The integration always requires that the third parties delivering this content process the IP addresses of users, as they cannot otherwise send the content to the users' browsers. Therefore, the IP address is necessary for displaying this content or functionality. We strive to use only those contents whose providers use IP addresses solely for delivering the content. Third parties may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. Pixel tags can evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on users' devices and may include technical information about the browser and operating system, referring websites, visit times, as well as other usage information and be linked with information from other sources.
Processed Data Types: Usage data (e.g., visited websites, interest in content, access times); meta, communication, and procedural data (e.g., IP addresses, timestamps, identification numbers, consent status).
Affected Persons: Users (e.g., website visitors, users of online services).
Purposes of Processing: Provision of our online services and user-friendliness.
Status: November 10, 2023
§ 1 Scope of Application and General Information
IBG Consulting operates as an online marketing agency, focusing solely on digital services.
1. These General Terms and Conditions (“GTC”) apply to all orders for strategies, knowledge share and online marketing services (hereinafter referred to as “the Service”) by the contracting partner in their version valid at the time of the order. Conflicting conditions of the contracting partner will not be accepted unless we have explicitly agreed to their applicability in writing.
2. These GTC apply exclusively to entrepreneurs, legal entities under public law, or special funds under public law. An entrepreneur is a natural or legal person or a partnership with legal capacity that acts in the exercise of its commercial or independent professional activity when concluding a legal transaction.
§ 2 Conclusion of Contract
1. All orders placed by the contracting partner require our written confirmation to be effective. The scope and subject of the order are determined by the order confirmation.
2. The specific details of the Service are attached as an annex to the order confirmation.
3. We reserve the right to make design or form changes during the delivery period that result from improvements in technology or requirements of the legislator, provided these changes are reasonable for the contracting partner and do not significantly alter the service.
§ 3 Electronic transmission Deadlines and Delays due to Force Majeure
1. Electronic transmission commence with the dispatch of the order confirmation but not before the submission of any documents, approvals, or releases to be provided by the contracting partner or before receipt of an agreed advance payment.
2. Electronic transmission are met if readiness for dispatch is communicated or if the completion of services is handed over to the customer by the deadline.
3. Electronic transmission may be extended due to unforeseen circumstances, such as strikes, natural disasters, or other force majeure events.
§ 4 Duty to Inspect and Notify Defects
1. The contracting partner must inspect the Service immediately upon completion and report visible defects within 5 working days. Hidden defects must be reported within 5 working days of discovery.
§ 5 Statute of Limitations
1. Claims for defects expire 14 days after the completion of services unless longer periods are legally mandated.
§ 6 Prices and Payment Terms
1. Prices are based on the current price list of offer at the time of the order.
2. Payments are due immediately before work was started unless otherwise agreed. In case of default, interest may be charged.
§ 7 Retention of Title
1. Ownership of delivered services remains with us until full payment of all outstanding amounts under the business relationship.
§ 8 Data Protection
1. We handle personal data in compliance with legal regulations and use them solely for contract processing.
§ 9 Liability
1. Liability for damages is excluded except in cases of intent, gross negligence, or breach of essential contractual obligations.
§ 10 Confidentiality
1. Both parties undertake to keep confidential any information disclosed in the course of the contract.
§ 11 Client Liability Disclaimer
1. We are not liable for the achievement of customer goals, including sales or profitability targets. Any forecasts or profitability projections provided are strictly estimates and do not constitute binding commitments.