With the following data protection declaration, we would like to explain to you which types of your personal data (hereinafter also referred to as "data") we process for which purposes and to what extent. The data protection declaration applies to all processing of personal data carried out by us, both within the framework of the provision of our services and, in particular, on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as "online offer").
The terms used are not gender specific.
Table of Contents
- Responsible
- Overview of processing
- Relevant legal bases
- Safety measures
- Commercial and Business Services
- Use of online marketplaces for e-commerce
- payment service provider
- Provision of the online offer and web hosting
- Registration, login and user account
- Communication via Messenger
- Sweepstakes and Contests
- Presence in social networks (social media)
- Plugins and embedded functions and content
- deletion of data
- Change and update of the privacy policy
- definitions of terms
Responsible
Cornelia Papendick
Peter - Warnecke - way 42
51061 Cologne
Email address: info@redreaming.dein@redreaming.de
Telephone: 0176 - 68092833
Overview of processing
The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.
Types of data processed :
- Event data (Facebook) ("Event data" is data that can be transmitted by us to Facebook, e.g. via Facebook pixels (via apps or other means) and relates to people or their actions; Data includes, for example, information about visits to websites, interactions with content, functions, installation of apps, purchases of products, etc. The event data is processed in order to form target groups for content and advertising information (custom audiences); event data do not contain the actual content (such as comments written), no login information and no contact information (i.e. no names, e-mail addresses and telephone numbers).Event data will be deleted by Facebook after a maximum of two years formed target groups with the deletion of our Facebook account).
- Inventory data (e.g. names, addresses).
- Content data (e.g. entries in online forms).
- Contact information (e.g. email, phone numbers).
- Meta/communication data (e.g. device information, IP addresses).
- Usage data (e.g. websites visited, interest in content, access times).
- Location data (information about the geographical position of a device or a person).
- Contract data (e.g. subject of the contract, term, customer category).
- Payment data (e.g. bank details, invoices, payment history).
Categories of data subjects
- business and contractual partners.
- Interested persons.
- communication partner.
- Customers.
- Users (e.g. website visitors, users of online services).
- Sweepstakes and Contest Entrants.
purposes of processing
- Affiliate Tracking.
- Provision of our online offer and user-friendliness.
- office and organizational procedures.
- Cross-device tracking (processing of user data across devices for marketing purposes).
- Direct marketing (e.g. by e-mail or post).
- Conducting sweepstakes and competitions.
- Interest-Based and Behavioral Marketing.
- Contact Requests and Communication.
- Profiling (creating user profiles).
- remarketing.
- Range measurement (e.g. access statistics, recognition of returning visitors).
- Safety measures.
- Tracking (e.g. interest/behavioural profiling, use of cookies).
- Provision of contractual services and customer service.
- Management and response to inquiries.
- Target group formation (determination of target groups relevant for marketing purposes or other output of content).
Relevant legal bases
In the following we inform you about the legal basis of the General Data Protection Regulation (GDPR), on the basis of which we process the personal data. Please note that in addition to the regulations of the GDPR, the national data protection regulations in your or our country of residence and domicile may apply. If more specific legal bases are relevant in individual cases, we will inform you of them in the data protection declaration.
- Consent (Art. 6 Para. 1 S. 1 lit. a. GDPR) - The person concerned has given their consent to the processing of their personal data for a specific purpose or several specific purposes.
- Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. DSGVO) - The processing is necessary for the fulfillment of a contract to which the data subject is a party, or for the implementation of pre-contractual measures, which are required at the request of the data subject take place.
- Legal obligation (Art. 6 Para. 1 S. 1 lit. c. GDPR) - The processing is necessary to fulfill a legal obligation to which the person responsible is subject.
- Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR) - Processing is necessary to safeguard the legitimate interests of the person responsible or a third party, unless the interests or fundamental rights and freedoms of the data subject, which protect personal Data require prevail.
National data protection regulations in Germany: In addition to the data protection regulations of the General Data Protection Regulation, national data protection regulations apply in Germany. This includes in particular the law on the protection against misuse of personal data in data processing (Federal Data Protection Act - BDSG). In particular, the BDSG contains special regulations on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes and transmission as well as automated decision-making in individual cases including profiling. Furthermore, it regulates data processing for the purposes of the employment relationship (§ 26 BDSG), in particular with regard to the establishment, implementation or termination of employment relationships and the consent of employees. Furthermore, state data protection laws of the individual federal states may apply.
Safety measures
We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons to ensure a level of protection appropriate to the risk.
The measures include, in particular, securing the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access, input, disclosure, securing availability and their separation. Furthermore, we have set up procedures that ensure the exercise of data subject rights, the deletion of data and reactions to data threats. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and processes in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.
Shortening of the IP address: If IP addresses are processed by us or by the service providers and technologies used and the processing of a complete IP address is not necessary, the IP address will be shortened (also referred to as "IP masking"). The last two digits or the last part of the IP address after a point are removed or replaced by placeholders. The purpose of shortening the IP address is to prevent or make it much more difficult to identify a person based on their IP address.
SSL encryption (https): In order to protect your data transmitted via our online offer, we use SSL encryption. You can recognize such encrypted connections by the prefix https:// in the address line of your browser.
Commercial and Business Services
We process the data of our contractual and business partners, e.g. customers and interested parties (collectively referred to as "contractual partners") within the framework of contractual and comparable legal relationships and related measures and within the framework of communication with the contractual partners (or pre-contractual), e.g respond.
We process this data to fulfill our contractual obligations, to safeguard our rights and for the purposes of the administrative tasks associated with this information and the corporate organization. We only pass on the data of the contractual partners to third parties within the framework of the applicable law to the extent that this is necessary for the aforementioned purposes or to fulfill legal obligations or with the consent of the persons concerned (e.g. to telecommunications, transport and other auxiliary services involved as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). The contractual partners will be informed about other forms of processing, e.g. for marketing purposes, within the scope of this data protection declaration.
We inform the contractual partners which data is required for the aforementioned purposes before or during data collection, e.g. in online forms, by means of special markings (e.g. colours) or symbols (e.g. asterisks or similar), or personally.
We delete the data after statutory warranty and comparable obligations have expired, i.e. generally after 4 years, unless the data is stored in a customer account, e.g. for as long as it has to be kept for legal archiving reasons (e.g. for tax purposes usually 10 years). We delete data disclosed to us by the contractual partner as part of an order in accordance with the specifications of the order, generally after the end of the order.
Insofar as we use third-party providers or platforms to provide our services, the terms and conditions and data protection notices of the respective third-party providers or platforms apply in the relationship between the users and the providers.
Shop and e-commerce: We process the data of our customers in order to enable them to select, purchase or order the selected products, goods and associated services, as well as their payment and delivery or execution. If necessary for the execution of an order, we use service providers, in particular postal, forwarding and shipping companies, to carry out the delivery or execution for our customers. We use the services of banks and payment service providers to process payment transactions. The required information is marked as such in the context of the ordering or comparable acquisition process and includes the information required for delivery or provision and billing as well as contact information in order to be able to hold any consultation.
- Types of data processed: Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. e-mail, telephone numbers), contract data (e.g. subject matter of contract, term, customer category), usage data (e.g. websites visited, interest in content , access times), meta/communication data (e.g. device information, IP addresses).
- Affected persons: interested parties, business and contractual partners, customers.
- Purposes of processing: provision of contractual services and customer service, contact requests and communication, office and organizational procedures, management and response to requests, security measures.
- Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), Legal obligation (Art. 6 Para. 1 S. 1 lit. c. GDPR), Legitimate interests (Art. 6 Para. 1 p. 1 lit. f. GDPR).
Use of online marketplaces for e-commerce
We offer our services on online platforms operated by other service providers. In this context, the data protection notices of the respective platforms apply in addition to our data protection notices. This applies in particular with regard to the methods used on the platforms for measuring reach and for interest-based marketing.
- Types of data processed: Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. e-mail, telephone numbers), contract data (e.g. subject matter of contract, term, customer category), usage data (e.g. websites visited, interest in content , access times), meta/communication data (e.g. device information, IP addresses).
- Data Subjects: Customers.
- Purposes of processing: Provision of contractual services and customer service.
- Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).
Services and service providers used:
- Etsy: online marketplace for e-commerce; Service Provider: Etsy, Inc., 55 Washington Street, Suite 712, Brooklyn, NY 11201, USA; Website: Privacy Policy: https://www.etsy.com/de/legal/privacy/?ref=ftr.
payment service provider
- Types of data processed: Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contract data (e.g. subject matter of contract, term, customer category), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g device information, IP addresses).
- Affected persons: customers, interested parties.
- Purposes of processing: provision of contractual services and customer service, contact requests and communication, affiliate tracking.
- Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).
Services and service providers used:
- PayPal: payment services and solutions (e.g. PayPal, PayPal Plus, Braintree); Service provider: PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg; Website: Privacy Policy: H
tps://www.paypal.com/de/webapps/mpp/ua/privacy-full
Provision of the online offer and web hosting
- Types of data processed: content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
- Affected persons: users (e.g. website visitors, users of online services).
- Purposes of processing: Provision of contractual services and customer service.
- Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).
Services and service providers used:
- 1&1 IONOS: hosting platform for e-commerce / websites; Service provider: 1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany; site: https://www.ionos.de; Data protection: https://www.ionos.de/terms-gtc/terms-privacy.
Registration, login and user account
- Types of data processed: Inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms), meta/communication data (e.g. device information, IP addresses).
- Affected persons: users (e.g. website visitors, users of online services).
- Purposes of processing: provision of contractual services and customer service, security measures, management and response to inquiries.
- Legal bases: Consent (Art. 6 Para. 1 S. 1 lit. a. GDPR), fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).
Communication via Messenger
- Types of data processed: contact data (e.g. e-mail, telephone numbers), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses), content data (e.g. entries in online forms).
- Affected persons: communication partners.
- Purposes of processing: contact requests and communication, direct marketing (e.g. by email or post).
- Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a. GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).
Services and service providers used:
- Facebook Messenger: Facebook Messenger with end-to-end encryption (the end-to-end encryption of Facebook Messenger requires activation if it is not activated by default); Service provider: https://www.facebook.com, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; site: https://www.facebook.com; Data protection: https://www.facebook.com/about/privacy; Possibility of objection (opt-out): https://www.facebook.com/settings?tab=ads.
Sweepstakes and Contests
- Types of data processed: Inventory data (e.g. names, addresses), content data (e.g. entries in online forms).
- Affected persons: Sweepstakes and competition participants.
- Purposes of processing: conducting sweepstakes and competitions.
- Legal basis: Fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR).
Presence in social networks (social media)
Facebook: We are in partnership with Facebook Ireland Ltd. responsible for the collection (but not further processing) of data from visitors to our Facebook page (so-called "fan page"). This data includes information about the types of content users view or interact with, or the actions they take (see “Things Done and Provided by You and Others” in the Facebook Data Policy: https://www.facebook.com/policy), as well as information about the devices used by the users (e.g. IP addresses, operating system, browser type, language settings, cookie data; see under "Device information" in the Facebook data policy statement: https://www.facebook.com/policy). As explained in the Facebook Data Policy under "How do we use this information?", Facebook also collects and uses information to provide analytics services, called "Page Insights," to site operators so that they can gain insights into how people are using their Pages and interact with the content associated with them. We have entered into a special agreement with Facebook ("Page Insights Information", https://www.facebook.com/legal/terms/page_controller_addendum), in which it is regulated in particular which security measures Facebook must observe and in which Facebook has declared its willingness to fulfill the rights of the data subject (ie users can, for example, send information or requests for deletion directly to Facebook). The rights of users (in particular to information, deletion, objection and complaints to the competent supervisory authority) are not restricted by the agreements with Facebook. For more information, see "Page Insights Information" (https://www.facebook.com/legal/terms/information_about_page_insights_data).
- Types of data processed: Inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
- Affected persons: users (e.g. website visitors, users of online services).
- Purposes of processing: contact requests and communication, tracking (e.g. interest/behavioral profiling, use of cookies), remarketing, range measurement (e.g. access statistics, recognition of returning visitors).
- Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).
Services and service providers used:
- Instagram: social network; Service Provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, Parent Company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; site: https://www.instagram.com; Data protection: https://instagram.com/about/legal/privacy.
- Facebook: social network; Service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; site:
- https://www.facebook.com
- ; Data protection:
- https://www.facebook.com/about/privacy
- ; Possibility of objection (opt-out): Settings for advertisements:
- https://www.facebook.com/settings?tab=ads
- .
- Pinterest: social network; Service Provider: Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA; site:
- https://www.pinterest.com
- ; Data protection:
- https://about.pinterest.com/de/privacy-policy
- ; Possibility of objection (opt-out):
- https://about.pinterest.com/de/privacy-policy
- .
- TikTok: social network / video platform; Service Provider: musical.ly Inc., 10351 Santa Monica Blvd #310, Los Angeles, CA 90025 USA; site:
- https://www.tiktok.com
- ; Data protection:
- https://www.tiktok.com/de/privacy-policy
- .
- Twitter: social network; Service Provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland, Parent Company: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Data protection:
- https://twitter.com/de/privacy
- , (Ideas)
- https://twitter.com/personalization
- .
- YouTube: social network and video platform; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA; Data protection:
- https://policies.google.com/privacy
- ; Possibility of objection (opt-out):
- https://adssettings.google.com/authenticated
- .
Plugins and embedded functions and content
- Types of data processed: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses), event data (Facebook) ("event data" is data that, e.g .via Facebook pixels (via apps or other means) can be transmitted by us to Facebook and relate to people or their actions; The data includes, for example, information about visits to websites, interactions with content, functions, installations of apps, purchases of products, etc.; the event data is processed in order to form target groups for content and advertising information (custom audiences); event data does not contain the actual content (such as comments written), no login information and no contact information (i.e. no names, e-mail addresses and telephone numbers). Event data will be deleted by Facebook after a maximum of two years, the target groups formed from them with the deletion of our Facebook account), location data (information on the geographical position of a device or a person), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms), inventory data (e.g. names, addresses).
- Affected persons: users (e.g. website visitors, users of online services), communication partners.
- Purposes of processing: Provision of our online offer and user-friendliness, provision of contractual services and customer service, contact inquiries and communication, direct marketing (e.g. by e-mail or post), tracking (e.g. interest/behavioral profiling, use of cookies), interest-based and behavioral marketing, Profiling (creating user profiles), security measures, managing and responding to requests.
- Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR), consent (Art. 6 Para. 1 S. 1 lit. a. GDPR), fulfillment of contract and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR).
- Facebook plugins and content: Facebook social plugins and content - This can include content such as images, videos or text and buttons with which users can share content from this online offer within Facebook. The list and appearance of the Facebook Social Plugins can be viewed here:
- https://developers.facebook.com/docs/plugins/
- ; Service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; site:
- https://www.facebook.com
- ; Data protection:
- https://www.facebook.com/about/privacy
- ; Possibility of objection (opt-out): Settings for advertisements:
- https://www.facebook.com/settings?tab=ads
- .
- Google Maps: We integrate the maps of the service “Google Maps” from the provider Google. The processed data may include, in particular, IP addresses and location data of the users, which, however, are not collected without their consent (usually as part of the settings on their mobile devices); Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA; site:
- https://cloud.google.com/maps-platform
- ; Data protection:
- https://policies.google.com/privacy
- ; Possibility of objection (opt-out): Opt-out plugin:
- https://tools.google.com/dlpage/gaoptout?hl=de
- , Settings for the display of advertisements:
- https://adssettings.google.com/authenticated
- .
- Instagram plugins and content: Instagram plugins and content - This can include content such as images, videos or text and buttons with which users can share content from this online offer within Instagram. Service provider:
- https://www.instagram.com
- , Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; site:
- https://www.instagram.com
- ; Data protection:
- https://instagram.com/about/legal/privacy
- .
- YouTube videos: video content; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA; site:
- https://www.youtube.com
- ; Data protection:
- https://policies.google.com/privacy
- ; Possibility of objection (opt-out): Opt-out plugin:
- https://tools.google.com/dlpage/gaoptout?hl=de
- , Settings for the display of advertisements:
- https://adssettings.google.com/authenticated
- .
deletion of data
Change and update of the privacy policy
definitions of terms
- Affiliate tracking: Affiliate tracking logs links that the linking websites use to direct users to websites that offer products or other services. The operators of the linked websites can receive a commission if users follow these so-called affiliate links and then take advantage of the offers (e.g. buy goods or use services). To do this, it is necessary for the providers to be able to track whether users who are interested in certain offers subsequently perceive them at the instigation of the affiliate links. It is therefore necessary for affiliate links to work that they are supplemented with certain values that become part of the link or are stored in some other way, e.g. in a cookie. The values include in particular the source website (referrer), the time, an online ID of the operator of the website on which the affiliate link was located, an online ID of the respective offer, an online ID of the user as well as tracking-specific values , such as advertising media ID, partner ID and categorizations
- Cross-device tracking: Cross-device tracking is a form of tracking in which information on the behavior and interests of users is recorded across devices in so-called profiles by assigning an online identifier to the user. This allows user information to be analyzed for marketing purposes, regardless of the browser or device used (e.g. mobile phones or desktop computers). With most providers, the online identifier is not linked to clear data such as names, postal addresses or e-mail addresses.
- Interest-based and behavioral marketing: One speaks of interest- and/or behavioral marketing when the potential interests of users in ads and other content are predetermined as precisely as possible. This is done using information about their previous behavior (e.g. visiting certain websites and staying on them, purchasing behavior or interaction with other users), which is stored in a so-called profile. Cookies are usually used for these purposes.
- Personal data: "Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or one or more special features, are an expression of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
- Profiling: "Profiling" means any type of automated processing of personal data, which consists in using this personal data to obtain certain personal aspects relating to a natural person (depending on the type of profiling, this includes information relating to the Age, gender, location data and movement data, interaction with websites and their content, shopping behavior, social interactions with other people) to analyze, evaluate or predict them (e.g. interests in certain content or products, click behavior on a website or location) Cookies and web beacons are often used for profiling purposes.
- Range measurement: The range measurement (also known as web analytics) is used to evaluate the flow of visitors to an online offer and can include the behavior or interests of visitors in certain information, such as website content. With the help of the range analysis, website owners can, for example, see at what time visitors visit their website and what content they are interested in. This enables them, for example, to better adapt the content of the website to the needs of their visitors. Pseudonymous cookies and web beacons are often used for range analysis purposes in order to recognize returning visitors and thus obtain more precise analyzes of the use of an online offer.
- Remarketing: We speak of "remarketing" or "retargeting" when, for advertising purposes, for example, it is noted which products a user was interested in on a website in order to remind the user of these products on other websites, e.g. in advertisements.
- Location data: Location data is created when a mobile device (or another device with the technical requirements for location determination) connects to a radio cell, a WLAN or similar technical media and location determination functions. Location data is used to indicate at which geographically determinable position on earth the respective device is located. Location data can e.g. B. be used to display map features or other information dependent on a location.
- Tracking: One speaks of "tracking" when the behavior of users can be traced across several online offers. As a rule, behavior and interest information with regard to the online offers used is stored in cookies or on servers of the providers of the tracking technologies (so-called profiling). This information can then be used, for example, to show users advertisements that are likely to match their interests.
- Responsible: The "responsible person" is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data.
- Processing: "Processing" is any process or series of processes carried out with or without the aid of automated processes in connection with personal data. The term goes far and covers practically every handling of data, be it collection, evaluation, storage, transmission or deletion.
- Target group formation: One speaks of target group formation (or "custom audiences") when target groups are determined for advertising purposes, e.g. display of advertisements. For example, based on the interest of a user in certain products or topics on the Internet, it can be concluded that this user is interested in advertisements for similar products or the online shop in which he viewed the products. In turn, one speaks of "lookalike audiences" (or similar target groups) if the content assessed as suitable is displayed to users whose profiles or interests are presumably correspond to the users for whom the profiles were created. Cookies and web beacons are usually used for the purpose of creating custom audiences and lookalike audiences.