Data Privacy Statement


Of course, we take all data protection concerns very seriously and implement the provisions of the European Data Protection Regulation (hereinafter referred to as "GDPR") and other statutory provisions for the protection of personal data. The following notes provide you with an overview and information about the processing of personal data and the resulting data protection rights. The processing of personal data includes any operation such as collection, recording, organization, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. In doing so, we observe the legal requirements of data protection and process personal data only to the extent permitted and required by law.

§ 1 Person responsible and data protection officer

Contact person and so-called responsible person for the processing of your personal data when visiting this website in the sense of the General Data Protection Regulation (GDPR) is

Tracie Healthcare Solutions GmbH
Salvatorplatz 3
80333 Munich

E-mail: [email protected]

For all questions regarding data protection in connection with our products and services or the use of our website, you can also contact our data protection officer at any time. He or she can be reached at the above postal address and at the e-mail address given above (keyword: "attn. data protection officer"). We expressly point out that if you use this e-mail address, the contents will not be exclusively noted by our data protection officer. If you wish to exchange confidential information, please therefore first contact us directly via this e-mail address.

§ 2 General information on data processing

1. Terms used

Personal data as defined in Art. 4 No. 1 GDPR: any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. S.d. § 4 No. 2 DSGVO: any operation or set of operations which is performed upon personal data, whether or not by automated means, such as collection, recording, organization, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction

2. Description and scope of the processing of personal data

In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, telephone numbers. 

3. Appointment

To arrange a consultation, you can make an appointment online. For this purpose, we use the services of Calendly LLC, BB&T Tower, 271 17th St NW, Atlanta, GA, USA. To make an appointment, we process your e-mail address and the date of the appointment. The data generated in this context may be transferred by Calendly to a server in the USA and stored there. In the event that personal data is transferred to the USA or other third countries, the transfer takes place on the basis of Art. 49 (1) p. 1 lit. b DS-GVO for the performance or initiation of a contract.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b GDPR because of the initiation or performance of a contract.

4. Legal basis for the processing of personal data

Insofar as we obtain your consent for the processing of personal data, Art. 6 (1) p. 1 lit. a GDPR serves as the legal basis. This consent can be revoked at any time with effect for the future. However, the revocation of consent does not affect the lawfulness of the data processed until the revocation or further processing on another legal basis. For the processing of personal data that is necessary for the performance of a contract to which you are a party, Article 6 (1) p. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures. Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 (1) p. 1 lit. c GDPR serves as the legal basis. In the event that vital interests of you or another natural person make processing of personal data necessary, Art. 6 (1) p. 1 lit. d GDPR serves as the legal basis. If the processing is necessary to protect a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not override, Art. 6 (1) p. 1 lit. f GDPR serves as the legal basis for the processing.

5. Purpose of data processing

We operate our website on which we offer you various products and services in the field of pre-analytical sampling and processing. For the performance of these services, we use third party independent service partners. The collection, processing or use of personal data is always in accordance with the provisions of data protection law, primarily in order to fulfill contractual and legal obligations in the provision of the respective services. Contact information provided by users of our website is stored for as long as necessary to achieve the purpose of customer service, including our waiting list. Generally, they are stored for a maximum of 5 years from the date you stop using the services. If you assert an existing right to deletion pursuant to Art. 17 GDPR, we will delete the data immediately. Some data we collect is stored longer if we have an overriding legitimate interest in retaining it (e.g., information about suspicious behavior of certain users of our services and transaction records).

6. Data deletion and storage period

Your personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies. In addition, data may be stored if this is provided for by the European or national legislator in EU regulations, laws or other regulations to which our company is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfillment of a contract. For example, in some cases we still have to store your data for accounting reasons. We are obliged to do so because of legal documentation obligations that may arise from the German Commercial Code, the German Fiscal Code, the German Banking Act, the German Money Laundering Act and the German Securities Trading Act. The periods specified there for the retention of documents are up to ten years.


§ 3 When using the website

1. Access to our website / access data

When you access our website, information is automatically sent to the server of our website by the browser used on your terminal device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until its automatically deleted: IP address of the requesting computer, date and time of access, name and URL of the retrieved file, website from which access is made (referrer URI), the browser used and, if applicable, the operating system of your computer and the name of your access provider. We process the aforementioned data for the following purposes: To ensure a smooth connection setup of the website, to ensure a comfortable use of our website, to evaluate the system security and stability and for other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest results from the above-mentioned purposes of data collection. In no case do we use the collected data for the purpose of drawing conclusions about your person.

The temporary storage of the IP address by the system is necessary to enable the delivery of the website to your computer. For this purpose, your IP address must remain stored for the duration of the session. In these purposes also lies our legitimate interest in data processing pursuant to Art. 6 para. 1 p. 1 lit. f GDPR.

The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility of objection on your part.

2. Data security

To ensure data security, the transmission of the contents of our website is encrypted using the SSL procedure in accordance with the state of the art. To secure the data, we and the commissioned service providers, with whom corresponding contractual agreements have been made, use suitable measures in accordance with the state of the art, in particular to restrict access to the data, to protect against modification and loss and to guarantee confidentiality in accordance with the state of the art.

3. Use of cookies and comparable technologies

This website uses cookies and similar technologies (collectively, "Tools") provided either by us or by third parties.A cookie is a small text file that is stored on your device by the browser. Cookies are not used to run programs or download viruses onto your computer. Comparable technologies are in particular web storage (local / session storage), fingerprints, tags or pixels. Most browsers are set by default to accept cookies and comparable technologies. However, you can usually adjust your browser settings so that cookies or comparable technologies are rejected or stored only with your prior consent. If you reject cookies or comparable technologies, not all of our offers may work properly for you.In the following, we list the tools we use by category, informing you in particular about the providers of the tools, the storage period of the cookies and the transfer of data to third parties. We also explain in which cases we obtain your voluntary consent to use the tools and how you can revoke it. If - even despite the greatest care - the information in the cookie banner contradicts that in this privacy policy, the information in this privacy policy takes precedence.

3.1 Legal basis and revocation

Note: Tools necessary for website operation are generally based on Art. 6 para. 1 p. 1 lit. f GDPR or, in the case of access to and storage of information in the terminal device, on Section 25 para. 2 TTDSG. All others are based on the user's consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR or, in the case of access to and storage of information in the terminal device, pursuant to Section 25 para. 1 TTDSG. 

3.2 Necessary tools

3.2.1 Google Tag Manager 

Our website uses Google Tag Manager, a service provided for users from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other users by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (together "Google"). The Tag Manager is used to manage tracking tools and other services, so-called website tags. A tag is an element that is stored in the source code of our website, for example, to record specified usage data. The Google Tag Manager ensures that the usage data required by our partners is forwarded to them.The Google Tag Manager does not require the use of cookies.The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR, based on our legitimate interest to integrate and manage multiple tags in a straightforward manner on our website. We have concluded an order processing agreement with Google. Partially, data is processed on a Google server in the USA. In the event that personal data is transferred to the USA or other third countries, we have concluded standard contractual clauses with Google pursuant to Art. 46 (2) lit. c GDPR. For more information, please refer to paragraph 10 ("Data transfer to third countries").

For more information, please refer to Google's information on the Tag Manager.

3.3 Functional tools

3.3.1 Calendly 

To arrange a consultation, you can make an appointment online. For this purpose, we use the services of Calendly LLC, BB&T Tower, 271 17th St NW, Atlanta, GA, USA. To make an appointment, we process your e-mail address and the date of the appointment. The data generated in this context may be transferred by Calendly to a server in the USA and stored there. In the event that personal data is transferred to the USA or other third countries, the transfer takes place on the basis of Art. 49 para. 1 p. 1 lit. b GDPR for the performance or initiation of a contract.The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b GDPR because of the initiation or performance of a contract.

3.4 Analytics tools

3.4.1 Google Analytics

Our website uses Google Analytics, which is provided for users from Europe, the Middle East and Africa (EMEA) by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other users by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (together "Google"). In this context, pseudonymized usage profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of server request, is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website and internet use for the purposes of market research and demand-oriented design of these Internet pages. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking). You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).For more information on data protection in connection with Google Analytics, see the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de). If you have reached this page via an ad on Google, we use the Google Adwords Conversion Tracking service, whereby a cookie is set on your device. This is used to analyze and statistically evaluate the use of the website. The cookie is valid for 30 days. The person is not identified, but it is observed whether the user arrived at the site via a Google ad. You can prevent this use by rejecting the setting of corresponding cookies in your browser settings.

The following cookies are set by Google Analytics for the specified purpose with the respective storage period:

- "_ga" for 2 years


3.5 Marketing tools 

3.5.1 Facebook Pixel

For marketing purposes, our websites use the "Facebook Pixel" service of the social network Facebook, a service offered for users outside the USA and Canada by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland and for all other users by Facebook Inc, 1601 Willow Road, Menlo Park, California 94025, USA (together "Facebook").

We use Facebook Pixel to analyze the general use of our websites and to track the effectiveness of Facebook advertising ("Conversion Tracking"). In addition, we use Facebook pixels to play you individualized advertising messages based on your interest in our products ("retargeting"). This also involves target group remarketing through Custom Audience. For this purpose, Facebook processes data that the service collects via cookies, web beacons and comparable storage technologies on our websites.

The following cookies are set by Facebook Pixel for the specified purpose with the respective storage period:

- "_fbp" for 3 months (usage analysis and retargeting)

The data accruing in this context may be transferred by Facebook to a server in the USA for evaluation and stored there. In the event that personal data is transferred to the USA, we have concluded standard contractual clauses with Facebook.

If you are a member of Facebook and have allowed Facebook to do so via the privacy settings of your account, Facebook can also link the information collected about your visit to us to your member account and use it for the targeted placement of Facebook ads. You can view and change the privacy settings of your Facebook profile at any time. If you have not consented to the use of Facebook Pixel, Facebook will only display general Facebook Ads that are not selected based on the information collected about you on this website.

You can find more information about this in Facebook's privacy policy.


3.5.2 Google Ads conversion tracking and Ads remarketing (formerly AdWords)

Our websites use the "Google Ads" service, which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area and Switzerland and by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (together "Google") for all other users.

Google Ads uses "Google Ads conversion tracking" to record and analyze customer actions defined by us (such as clicking on an ad, page views, downloads). "Google Ads-Remarketing" we use to show you individualized advertising messages for our products on partner websites of Google. Both services use cookies and similar technologies for this purpose.The data generated in this context may be transferred by Google to a server in the USA for evaluation and stored there. In the event that personal data is transferred to the USA, we have concluded standard contractual clauses with Google.

If you use a Google account, Google may, depending on the settings stored in the Google account, link your web and app browsing history to your Google account and use information from your Google account to personalize ads. If you do not wish this association with your Google account, it is necessary to log out of Google before accessing our website.

If you have not consented to the use of Google Ads, Google will only display general advertising that has not been selected based on the information collected about you on this website. In addition to withdrawing your consent, you also have the option of deactivating personalized advertising in Google's advertising settings.

The following cookies are set by Google:

- "_gcl_au" for 90 days.
- "_gcl_aw" for 90 days

You can find more information on this in the notes on data use and Google's privacy policy.

3.5.3 Google Ad Manager (formerly DoubleClick)

Our website uses Google Ad Manager, services which are provided for users from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other users by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (together "Google").

These services use cookies and similar technologies to present you with advertisements that are relevant to you. Use of the services enables Google and its partner websites to serve ads based on previous visits to our website or other websites on the Internet.

The data generated in this context may be transferred by Google to a server in the USA for analysis and stored there. In the event that personal data is transferred to the USA, we have concluded standard contractual clauses with Google.

If you have not consented to the use of Google Ad Manager, Google will only display general advertising that has not been selected on the basis of the information collected about you on this website. In addition to withdrawing your consent, you also have the option of disabling personalized advertising in Google's advertising settings.

The following cookies are set by Google:
- "IDE" for 13 months
- "NID" for 6 months

You can find more information on this in Google's privacy policy.

3.6 Personalization tools 
Currently, no cookies are set for the purpose of personalization on our website.

§ 4 Contact form and e-mail contact

4.1 Description and scope of data processing

We offer you the opportunity to contact us via a form provided on the website or Calendly. If you use this option, the data entered in the input mask will be transmitted to us and stored. For the processing of the data, your voluntary consent is obtained in accordance with Art. 6 (1) p. 1 lit. a GDPR and reference is made to this privacy policy. Alternatively, you have the option of contacting us via the e-mail address provided. In this case, the personal data transmitted with your e-mail will be processed. The legal basis is Art. 6 para. 1 p. 1 lit. b GDPR, insofar as your information is required to answer your inquiry or to initiate or execute a contract, and otherwise Art. 6 para. 1 p. 1 lit. f GDPR due to our legitimate interest that you contact us and we can answer your inquiry.

4.2 Legal basis for data processing

The legal basis for the processing of data is the existence of your consent pursuant to Art. 6 (1) p. 1 lit. a GDPR. The legal basis for the processing of data transmitted in the context of sending an e-mail is Art. 6 (1) p. 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, a further legal basis for the processing is Art. 6 para. 1 p. 1 lit. f GDPR.

4.3 Purpose of the data processing

The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed as part of the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4.4 Duration of storage

If you contact us by e-mail or via a contact form, the data you provide (e.g. e-mail address, name, address, telephone number) will be stored by us in order to answer your questions. The data collected by us when contacting you will be automatically deleted after your request has been fully processed, unless we still need your request to fulfill contractual or legal obligations.

4.5 Possibility of objection and deletion

You have the option to revoke your consent to the processing of your personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. All personal data stored in the course of contacting you will be deleted in this case.

§ 5 Existing customer advertising by e-mail

5.1 Description and scope of data processingIf you purchase products or services on our website, we also use your contact data to send you further information relevant to you about our products and services by e-mail ("existing customer advertising"). This may include, in particular, news, promotions and offers as well as feedback and other surveys.

5.2 Legal basis for data processing

The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. f GDPR in conjunction with. § Section 7 (3) UWG, according to which data processing is permissible for the purpose of safeguarding legitimate interests, insofar as this relates to the storage and further use of data for advertising purposes.

5.3 Purpose of data processing

The data collected during the conclusion of the contract is processed for the purpose of sending you relevant information on our products and services by e-mail for promotional purposes.

5.4 Possibility of objection and unsubscription

You can unsubscribe from the newsletter at any time. For this purpose, you will find a corresponding link in each newsletter. Alternatively, you can object by notifying the above contact details (e.g. by e-mail or letter). You will not incur any costs for the objection other than the transmission costs according to the prime rates

§ 6 Surveys and sweepstakes

6.1 Surveys

You have the opportunity to participate in one of our surveys. We use the results of these surveys to improve our service.The legal basis for data processing in the context of the survey is your consent in accordance with Art. 6 para. 1 lit. a GDPR.The dispatch of surveys are based on Art. 6 para. 1 lit. f GDPR in conjunction with § 7 para. 3 UWG, based on our legitimate interest to design our services to meet demand and to continuously improve. You can object to the sending of a satisfaction survey and the use of your data for advertising purposes at any time by using a corresponding link in the e-mails or by notifying the above contact details (e.g. by e-mail or letter), without incurring any costs other than the transmission costs in accordance with the basic rates.

6.2 Competitions and prize games

In the context of competitions, we use your data for the purpose of conducting the competition and notifying you of the prize. Detailed information can be found, if applicable, in the conditions of participation of the respective sweepstakes. The legal basis for the processing is the sweepstakes contract pursuant to Art. 6 (1) p. 1 lit. f GDPR.

§ 7 Youtube

Our site uses the provider YouTube LLC , 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for the integration of videos. Normally, when you call up a page with embedded videos, your IP address is already sent to YouTube and cookies are installed on your computer. However, we have embedded our YouTube videos with the extended data protection mode (in this case, YouTube still contacts Google's Double Click service, but personal data is not evaluated in the process, according to Google's privacy policy). This means that YouTube no longer stores any information about visitors unless they watch the video. If you click on the video, your IP address is transmitted to YouTube and YouTube learns that you have watched the video. If you are logged in to YouTube, this information is also assigned to your user account (you can prevent this by logging out of YouTube before viewing the video). Of the then possible collection and processing of your data by YouTube, we have no knowledge and no influence on it. You can find more information in YouTube's privacy policy at www.google.de/intl/de/policies/privacy/. In addition, we refer to our general presentation in this privacy policy for the general handling and deactivation of cookies.

§ 8 Rights of the user

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights against our company: To request information about your personal data processed by us in accordance with Article 15 of the GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable. request meaningful information about the details of this data; pursuant to Art. 16 GDPR, to request the immediate correction of inaccurate or incomplete personal data stored by us; pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims; pursuant to Art. 18 GDPR to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you object to the processing pursuant to Art. 21 GDPR; pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller; pursuant to Art. 7 (3) GDPR, to revoke your consent to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future and in accordance with Article 77 of the GDPR, to complain to a supervisory authority. in accordance with Article 21 of the GDPR, to object to the processing of your personal data if there are grounds for doing so that arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a particular situation. You have the option to inform us of your objection informally by telephone, by e-mail, by fax or to our postal address listed at the beginning of this privacy policy. You also have the right to complain to a data protection supervisory authority about our processing of your personal data: Which supervisory authority this is may depend on your country of residence and the alleged breach. For a list of supervisory authorities and their addresses, please visit www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html;jsessionid=F2946CC289AD6635C4763174324D1B36.2_cid319.

§ 9 Data transmission

We use external service providers to provide the services. We do not disclose your personal data to our external service providers for purposes other than those mentioned below. We only pass on your personal data to external service providers if: You have given your express consent to do so in accordance with Art. 6 para. 1 p. 1 lit. a GDPR, the disclosure is necessary in accordance with Art. 6 para. 1 p. 1 lit. f GDPRfor the assertion, exercise or defense of legal claims and there is no reason to believe that you have an overriding interest worthy of protection in not having your data disclosed, if there is a legal obligation to disclose in accordance with Art. 6 para. 1 p. 1 lit. c GDPR exists and this is legally permissible and necessary for the processing of contractual relationships with you according to Art. 6 para. 1 p. 1 lit. b GDPR. The possible recipients of the transmitted personal data are: Public bodies, if a legal obligation exists.

Google: All personal data transmitted by a user to Tracie Healthcare Solutions GmbH is stored on Google's servers and processed there in data centers in Europe according to the specifications of Tracie Healthcare Solutions GmbH.

Webflow: The website is hosted on Webflow. Personal data is stored and processed in data centers in the European Union and complies with the GDPR. A transfer of personal data beyond this is not intended and does not take place.

§ 10 Transfers to third countries

If data transfers to third countries become necessary, this will only be done for the conclusion or fulfillment of contracts - insofar as this does not conflict with the legitimate interests of the data subject - taking into account all data protection requirements. If a transfer of personal data to a third country or an international organization is intended, this will take place in accordance with Art. 45 GDPR data transfer on the basis of an adequacy finding. Should a data transfer nevertheless take place in accordance with Art. 46 or Art. 47 or Art. 49 (1) subpara. 2 of the GDPR, we would like to point out that corresponding guarantees or binding internal data protection regulations exist or that a strict standard is always applied in favor of the data subject when weighing up the interests of the data subjects and the contractual partners. We would like to point out that the EU-US Privacy Shield (adequacy decision) has been declared invalid and that in the event of data transfer to unsafe third countries (here: USA), there is no adequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by U.S. authorities, for control and for monitoring purposes, possibly also without any legal remedy. In the case of data processing in the context of the use of analysis tools, we have obtained your voluntary declaration of consent for this data processing, which you can revoke at any time with effect for the future, via our cookie banner and base the data transfer on Art. 49 (1) lit. a GDPR. Furthermore, we have concluded either a commission processing agreement pursuant to Art. 28 GDPR or a joint responsibility agreement pursuant to Art. 26 GDPR as well as standard data protection clauses with the third-party providers where data transfer to an unsafe third country takes place, depending on the case constellation.