Shopping Cart Link
 

Facebook Link Instagram Link Youtube Link TikTok Link

BONUS GIFT CARD SALEBUY NOW

Privacy Notice

 

As the data controller we have prepared this privacy notice to inform you in accordance with the requirements of the UK General Data Protection Regulation (UK GDPR) about the nature, scope and purpose of the processing of personal data in relation to the services we offer on our website.

  1. Definitions

‘Controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;

‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

‘Recipient’ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with domestic law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

‘domestic law’ means the law of the United Kingdom or of a part of the United Kingdom.

  1. General Information
  2. The data controller

K1 Speed Inc.
18500 Von Karman Ave , Suite 1100
Irvine CA 92612
USA
Telephone:  949-250-0242
Telefax:
E-Mail:  [email protected]

 

K1 Speed UK
15 Cabot Square
London E14 4QS,
UK
Telephone:  0207 100 4412
Telefax:
E-Mail:  [email protected]

  1. Contact details of the K1Speed Group Data Protection Officer

OBSECOM GmbH
Königstr. 40
70173 Stuttgart
Germany
Telephone: +49 711 46 05 025-40
Fax: +49 711 46 05 025-49
E-Mail: [email protected]
Website: https://www.obsecom.eu

  1. Legal bases

We process personal data based on at least one of the following legal bases:

  • The data subject has given consent to the processing of his or her personal data for one or more specific purposes (Art. 6 (1)(a) UK GDPR);
  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) UK GDPR);
  • Processing is necessary for compliance with a legal obligation to which we are subject (Art. 6 (1)(c) UK GDPR);
  • Processing is necessary in order to protect the vital interests of the data subject or of another natural person (Art. 6 (1)(d) UK GDPR);
  • Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party (Art. 6 (1)(f) UK GDPR)

In this privacy policy we refer to the respective legal basis of the individual data processing activities.

  1. Onward transfer of personal data

We forward personal data to recipients (data processors or other third parties) only to the extent required and only if one of the subsequent conditions are met:

  • the data subject has consented to the data transfer;
  • the onward transfer is required to fulfil a contractual obligation or pre-contractual measure on the request of the data subject;
  • we are obliged by law to make such a transfer;
  • The onward transfer is made on the basis of our legitimate interest or those of a third party.
  1. Third countries

The transfer of personal data to a third country or an international organisation outside the United Kingdom is subject to legal or contractual permission only in accordance with the provisions under Art. 44 et seq. UK GDPR. Pursuant to Art. 45 UK GDPR an adequacy decision of the Secretary of State must be present for the respective country, or appropriate safeguards for data privacy under Art. 46 UK GDPR, or Binding Corporate Rules under Art. 47 UK GDPR must exist. In individual cases, a data transfer may be permitted on the basis of an exception under Art. 49 UK GDPR.

We may use on our website external services provided by organisations based in the USA. If these services are active, personal data is collected in connection with the provision of the relevant service and may be transferred to and stored on servers in the USA. When data is transferred to the US, there is a fundamental risk that the US authorities may access and use the data for surveillance and monitoring purposes without notification and without the possibility of a legal remedy.

  1. Rights of data subjects

As a data subject you have the following right:

  • Pursuant to Art. 15 UK GDPR to request information about your personal data processed by us. You may also request information regarding the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored or the criteria used to determine that period, the data source (where personal data is not collected from you), the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing; the existence of the right to request rectification or erasure of data concerning you, the right to restrict processing or to object to such processing, the right to lodge a complaint with a supervisory authority. Finally, you have a right to know whether personal data has been transferred to a third country or to an international organisation, and, if so, the appropriate safeguards relating to this transfer;
  • Pursuant to Art. 16 UK GDPR to demand the immediate rectification of inaccurate personal data and to have incomplete personal data which is stored by us completed;
  • Pursuant to Art. 17 UK GDPR to demand the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of a legal claim.
  • Pursuant to Art. 18 UK GDPR to request the restriction of the processing of your personal data if the accuracy of the personal data is contested by you; the processing is unlawful but you oppose the erasure of the personal data and request the restriction of their use instead; we no longer need the personal data for the purposes of the processing but they are required by you for the establishment, exercise or defence of legal claims; you have objected to processing pursuant to Art. 21 (1) UK GDPR pending the verification whether our legitimate grounds override your interests;
  • Pursuant to Art. 20 UK GDPR to receive your personal data, which you have provided for us, in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller;
  • Pursuant to Art. 21 UK GDPR to object to the processing of your personal data on grounds relating to your particular situation, or if you object to processing for direct marketing purposes and the legal basis for processing is our legitimate interests pursuant to Art. 6 (1)(f) UK GDPR;
  • Pursuant to Art. 7 (3) UK GDPR to withdraw your consent given to us at any time. As a result, we are no longer allowed to continue to process the data that was based on this consent in the future;
  • Pursuant to Art. 77 UK GDPR to lodge a complaint with the Commissioner. The contact details of the Information Commissioner’s Office can be found on this website: https://ico.org.uk/global/contact-us/.

If you wish to assert the data subject rights mentioned above, you can contact us or our data protection officer at any time using the contact details above.

  1. Erasure and restriction of personal data

Unless otherwise provided for in this privacy notice, personal data will be deleted, if this data is no longer necessary in relation to the purposes for which they were collected or otherwise processed and the deletion does not conflict with statutory retention requirements. In addition, we will erase the personal data processed by us in accordance with Art. 17 UK GDPR on your request, if the conditions provided therein are met. If personal data are required for other lawful purposes, they will not be erased, but their processing will be restricted in accordance with Art. 18 UK GDPR.

In case of restriction, the data will not be processed for other purposes. This applies, for example, to personal data that must be retained by us for commercial or tax law reasons.

  1. Cookies

Our website uses cookies. Cookies are small text files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, PC, etc.) when you visit our website. Cookies do no harm to your device, nor do they contain any viruses or other malicious software. The cookie stores information which is created in relation to the specific device you are using. However, this does not mean that we become immediately aware of your identity. Cookies are mainly used to make the website more user-friendly, effective and secure.

Most browsers accept cookies automatically. However, if you do not wish to accept cookies, you can configure your browser so that no cookies are stored on your device or a message is displayed before new cookies are created. Information on how to remove cookies in Internet Explorer / Edge, please refer to: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies. Information on the removal of cookies in Firefox, please refer to: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox?redirectlocale=en-US&redirectslug=delete-cookies-remove-info-websites-stored. Learn how to remove cookies in Safari here: https://support.apple.com/en-gb/guide/safari/sfri11471/mac.

A general objection to the use of cookies used for online marketing purposes can be made for a variety of services, as explained at http://www.youronlinechoices.com/ or the opt-out page of the Network Advertising Initiative http://optout.networkadvertising.org. However, disabling cookies may mean that you may not be able to use all the features of our website.

This website uses a cookie banner to store your cookie consent. You can find a list of the cookies we use via this link: https://www.k1speed.com/privacy-policy.html

The personal data processed by essential/necessary cookies are required under Art. 6 (1)(f) UK GDPR for the respective purposes to protect our legitimate interests as well as those of third parties in the provision and operation of our website. The legal basis for the use of cookies for advertising, market research and the integration of external media services is your voluntarily given consent according to Art. 6 (1)(a) UK GDPR.

  1. Information on Joint Controllership

K1 Speed Inc. and its local legal entities and franchisees work closely together in the provision of kart racing experience. This also applies to the processing of your personal data. The parties have jointly determined the order in which these data will be processed. They are therefore jointly responsible under Art. 26 UK GDPR for the protection of your personal data within the process steps described below.

For which process steps is there joint controllership?

The local legal entities and franchisees are responsible for the conclusion and execution of contractual agreements for the use of the racing venues by customers. K1 Speed Inc. is responsible for the overall customer management, marketing, promotion, invoice management, dunning and customer care.

What have the parties agreed?

As part of their joint responsibility under data protection law, both parties have agreed which of them will fulfil which obligations under the UK GDPR. In particular, this concerns the exercise of data subjects’ rights and the fulfilment of information obligations under Articles 13 and 14 UK GDPR. This agreement is necessary because personal data will be processed in centralised systems.

What does this mean for data subjects?

The parties will comply with data protection obligations in accordance with their respective responsibilities as follows:

  • The local legal entities and franchisees provide the information required by Art. 13 and 14 UK GDPR to the data subjects free of charge throughout the entire process in a precise, transparent, comprehensible and easily accessible form in clear and simple language. In doing so, K1 Speed Inc. will provide the local legal entities and franchisees with all necessary information from its area of activity.
  • The parties shall promptly inform each other of any legal positions taken by data subjects. They shall provide each other with all information necessary to respond to requests for information.
  • For data subjects, K1 Speed Inc. is the central point of contact for all data protection inquiries under Chapter III UK GDPR (see also: Rights of the data subjects) and provides all relevant information.

III. Individual processing operations

  1. Hosting

In order to make our website available, we use services provided by hosting companies, such as: Provision of web servers, disk space, database services, and security or maintenance services. Here we, or our hosting providers, process personal data of website visitors based on our legitimate interests in providing efficient and secure access to our website in accordance with Art. 6 (1)(f) UK GDPR.

  1. Access data and log files

By visiting our website or its individual pages, your device’s internet browser automatically sends information to the server of our website. This information is stored in so-called log files by us or our hosting provider and will be deleted after 1 year at the latest.

The following information is stored:

  • IP address of the requesting computer;
  • Date and time of access;
  • Name and URL of the requested file;
  • Website from which our site was accessed (Referrer-URL);
  • The browser used and your computer’s operating system;
  • Status codes and the transferred amount of data;
  • Name of your access providers.

This data will be used for the following purposes:

  • The provision of our website, including all of its features and contents;
  • To ensure a smooth connection to our website;
  • To ensure a more user-friendly experience on our website;
  • To ensure system security and stability;
  • For anonymised statistical evaluation of website access;
  • To optimise our website;
  • For disclosure to law enforcement authorities in the event of unlawful interference / attacks on our systems;
  • For further administrative purposes.

The legal basis for data processing is Art. 6 (1)(f) UK GDPR. Our legitimate interest relates to the data collection purposes mentioned above. Under no circumstances will we use the personal data collected for the purpose of drawing conclusions about a person.

  1. General means of contact

If you contact us using the contact details published on our website (for example, by e-mail) and in this context provide us with personal data, we will use this data to process your request on the basis of Art. 6 (1)(b) UK GDPR, if your request is related to the performance of a contract or is required to perform pre-contractual action. In all other cases, processing is based on your consent in accordance with Art. 6 (1)(a) UK GDPR and / or our legitimate interest in the effective processing of requests addressed to us pursuant to Art. 6 (1)(f) UK GDPR. We will store your personal data until you ask us for deletion, revoke your consent to the storage, or the data are no longer necessary for the purpose for which they were collected (for example, after completion of your request). Mandatory statutory provisions – especially retention periods – remain thereof unaffected.

  1. Contact form

If you use the contact form, you will be asked to provide your e-mail address, Name, Telephone and any other contact details, so that we can get in touch with you. Further information can be provided voluntarily. The data processing for the purpose of contacting us and answering your request takes place in accordance with Art. 6 (1)(a) UK GDPR based on your voluntary consent. All personal data collected in connection with the contact form will be deleted after your request has been processed, unless further storage is required for the documentation of other transactions (for example, subsequent conclusion of a contract).

  1. E-Mail direct marketing to customers

If you are an existing customer and we have received your e-mail address in connection with the sale of goods or services, we may use your name, e-mail address, your company affiliation if you are interacting on behalf of a company, and the type of goods or services you purchased from us for the direct marketing of our own similar goods or services. This only applies if you have not objected and we clearly and unequivocally have advised you of the possibility of objection at the time of collecting the e-mail address, and every time we use it thereafter. The legal basis of processing is our legitimate interest in direct marketing according to Art. 6 (1)(f) UK GDPR. We will store the personal data until you object to the processing.

  1. Newsletter

If you would like to receive our newsletter we require your e-mail address. The processing of personal data for the purpose of sending the newsletter takes place in accordance with Art. 6 (1)(a) UK GDPR based on your voluntary consent by means of the so-called double-opt-in procedure. The e-mail address will be used and stored for this purpose until you withdraw your consent or unsubscribe from receiving the newsletter. You can unsubscribe at any time, for example by using the link at the bottom of each newsletter. You can also send your withdrawal/unsubscribe request at any time to the e-mail address given under Clause II.

We embed a so-called counting pixel into our newsletters. A counting pixel is a miniature graphic embedded in the HTML format of the newsletter to allow us an analysis of the reader’s reading behaviour. In this context, we gather information on whether, and at what time, a newsletter was opened by you and which of the links contained in the newsletter were accessed by you. We use this data to generate statistical evaluations of the success or failure of a marketing campaign to optimize the distribution of our newsletters and to better tailor the content of future newsletters to your interests. The collected data will not be passed on to third parties and will be deleted after the statistical evaluation.

  1. Ongage

We process our e-mail newsletters via Ongage. The provider is Ongage LTD, 6 HaNehoshet St., Tel Aviv 6971070, Israel (hereafter ‘Ongage’). Ongage is used to send and evaluate the reach of our newsletters. For this purpose, Ongage processes your e-mail address and any other data required by Ongage for the provision of the newsletter on our behalf. The legal basis for data processing is our legitimate interest in the use of a user-friendly and secure newsletter system in accordance with Art. 6 (1)(f) UK GDPR. The personal data required for processing the newsletter is stored on servers in Israel. The transfer is based on an adequacy decision under Art. 45 UK GDPR.

  1. Job applications

If you use our form to apply for a job, you will be asked to provide your name, contact information and further application documents so that we can review your application and contact you. The data processing for the purpose of processing your application is carried out in accordance with Art. 6 (1)(a) UK GDPR based on your voluntary consent. Taking into account the limitation periods of the Equality Act 2010, application documents will be kept for a period of 6 months after completion of the application process and then deleted, unless storage is required for the documentation of other operations (for example, subsequent recruitment). We use a third-party recruitment system to manage applications. The service provider is ADP Inc., MS 325 One ADP Boulevard, Roseland, NJ 07068-1728 USA. For more information on how ADP processes personal data, please refer to: http://www.adp.com/privacy.aspx

  1. Booking form

If you would like to hold an Event at one of our K1 Speed Locations, we need your name and contact details (e-mail, telephone) to process your reservation request and to contact you in reply to your request. The legal basis for the processing of personal data is Art. 6 (1)(b) UK GDPR.

  1. Registration and Check-in

You can register on our POS system with your personal data. Registration is required to use our race facilities and to check in for races. The registration and check-in form requires you to provide your name, contact details (phone, email), address, date of birth, gender, signature, and photo. The personal data collected will be used for the purposes of registering you as a racer, signing waivers, managing your race experience, and contacting you to provide you with information about our offers and the services you have registered for. The legal basis for the processing of personal data related to registration and check-in is Art. 6 (1)(b) UK GDPR. The taking of photographs of racers is a condition of insurance cover. The legal basis for taking the photos is the legitimate interest of K1Speed or a third party under Art. 6(1)(f) UK GDPR. K1Speed’s legitimate interest is to administer and process insurance claims. Your data will be stored until you instruct us to delete your racer account. However, the processing and storage of personal data in connection with the contract, insurance and our limitation of liability is independent of the creation of a racer account and cannot be deleted early.

  1. Contractual data

In connection with and for the purpose of fulfilling pre-contractual measures and contractual obligations initiated through our Internet offers, which are carried out at the request of the data subject, we process personal data required for the fulfilment of a contract with the data subject. These include:

  • Data of the contracting party, such as name, address and contact details. If applicable, alternate delivery or billing address of recipients;
  • if necessary, the date of birth;
  • contractual documentation including subject matter, duration or customer category;
  • payment data such as credit card details and payment history.

The legal basis for the processing of personal data is Art. 6 (1)(b) UK GDPR. The data will be disclosed to third parties only to the extent necessary to fulfil pre-contractual and contractual obligations, e.g. credit card companies for processing the payment, shipping service providers for the shipment of gift vouchers.

  1. Statistics and Analytics
  2. Meta Pixel

This website uses the so-called ‘Meta pixel’. Provider is Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Responsibility for the processing of personal data of data subjects in the EU is held by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. The use of the Meta pixel-technology enables Facebook to recognize visitors of our website and to associate them to certain groups for the display of specific advertisements (for example, categories visitors to our website according to areas of interest which we have given to Facebook, so-called ‘Custom Audiences’). This ensures that the users are shown only interest-oriented ads thus avoiding annoyance by improper advertising. By using Meta pixel, we can also track the effectiveness of our Facebook ads for statistical purposes and track whether and how users have used our offer after clicking on the advertisement. The use of the Meta pixel helps us to promote our products and services in an appropriate manner without annoying users with inappropriate advertising.

For more information about the Meta Pixel and how it works, please refer to: https://www.facebook.com/business/help/651294705016616. More information on how Facebook processes the data obtained, and general details about Facebook advertisement is made available on the Facebook data policy at: https://www.facebook.com/about/privacy/update. In your personal Facebook account under the heading ‘Settings’, you also have the option to object to the collection of your personal data via the Meta pixel and its use for the display of specific advertisements. More information about these settings are available at: https://www.facebook.com/settings?tab=ads (Login required).

The legal basis for the use of the Meta pixel is your voluntarily given consent under Art. 6 (1)(a) UK GDPR. The legal basis for data transfer to the USA is also your voluntarily consent under Art. 49 (1)(a) UK GDPR.

  1. Bing Conversion Tracking

Our website uses Bing Conversion Tracking. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter ‘Microsoft’). The personal data is processed for the purpose of advertising of our products and services, as well as analysing the clicks on advertisements, purchases, and registrations. Cookies are used for analysis and evaluation. This service records your IP address, which of our websites you have visited and, where applicable, other data required by Microsoft for the provision of conversion tracking. The information recorded about your use of this website is stored on servers in the USA. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Microsoft. You may refuse to use cookies by selecting the appropriate settings on your browser. However, please note that if you do this you may not be able to use the full functionality of this website. The legal basis for the processing of personal data is your voluntarily given consent according to Art. 6 (1)(a) UK GDPR. The legal basis for the transfer of personal data to the USA is also your voluntarily given consent according to Art. 49. (1)(a) UK GDPR. For more information on how Microsoft handles your personal data, please refer to Microsoft’s privacy policy at: https://privacy.microsoft.com/de-de/privacystatement.

  1. Google Services

Provider of the services below is Google Ireland Limited (Register No: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter ‘Google’).

The information collected by Google in connection with the provision of the respective services may be transferred to and processed by Google servers in the USA and stored there. Google has joined the UK Extension to the EU/US Data Privacy Framework and has committed to abide by UK data protection standards, thereby meeting the UK’s requirements for the transfer of personal data to the US under Art. 45 UK GDPR. Information about Google’s voluntary commitment can be found at: https://business.safety.google/privacy/ and https://policies.google.com/privacy?hl=en. For information on the use of data for advertising purposes by Google, settings and your right to object please refer to: https://www.google.de/policies/privacy/partners/, https://www.google.de/policies/technologies/ads/, https://adssettings.google.de/

  1. Google services for which your consent is required

The legal basis for the use of the following services is your voluntarily given consent according to Art. 6 (1)(a) UK GDPR. The legal basis for data transfer to the USA is also your voluntarily given consent in accordance with Art. 49 (1)(a) UK GDPR.

1.1 Google Analytics

Our website uses Google Analytics. Google Analytics uses cookies. Google Analytics collects information about the visits of website users and analyses their behaviour. This data serves the purpose of developing a user-friendly website design, the continuous optimisation of our services and offers, to measure the success of marketing activities and to create statistical analysis. In this context, pseudonymised user profiles are created and cookies are used. Google Analytics collects information such as browser type / version, operating system, referrer URL (the previously visited page), host name of the accessing computer (IP address) and time of server request. The information generated is transferred to the US and stored on servers owned by Google. The collected user data and event data will be deleted after 14 months. Information may also be transferred to third parties if required by law or if third parties process this data on behalf of us or Google. Under no circumstances will your IP address be merged with any other data that is kept by Google. The IP address will be anonymised so that assignment is impossible. You can prevent the local storage of cookies by configuring your browser software accordingly. However, be advised that in this case you may not be able to use all the features of this website to the full extent possible. Additionally, in order to prevent Google from collecting and processing the data generated in relation to your use of the website you may download and install the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en. You can prevent Google from gathering your data by clicking on this link [<a href=’javascript:gaOptout()’>Deactivate Google Analytics</a>] which sets an opt-out cookie on your computer. This cookie ensures that Google Analytics will not collect and store any user data from your browser when visiting this website. Attention: If you delete your cookie cache, this will result in the opt-out cookie being deleted as well. Then you must re-activate the opt-out cookie again.

1.2 Google Maps

This website uses Google Maps to display site maps, maps, terrain data, or geographic maps. This service collects your IP address, which of our websites you have visited and, if necessary, other data required by Google for the provision of the maps (such as location data). The generated information is stored on servers in the USA. This information may also be transferred to third parties if required by law or if third parties process this data on behalf of us or Google. The Google Maps terms of service can be found at: https://www.google.com/intl/en_uk/help/terms_maps.html.

1.3 YouTube

Our website uses media content from the Google YouTube platform. The purpose is to display content of the YouTube platform that relates to the content of our website. This service collects your IP address and any additional data Google may need to provide the YouTube content. The information gathered about your use of this website is stored on a server in the USA. This information may also be transferred to third parties if required by law or if third parties process this data on behalf of us or Google. If you are logged in to your YouTube account while you are visiting our website, Google can link your visit of our website directly to your YouTube user account. If you do not want Google to be able to associate the data collected on our website with your respective user account on YouTube, you must first log out of YouTube.

  1. Other Google services

The legal basis for the use of the following services are our legitimate interests according to Art. 6 (1)(f) UK GDPR. Our legitimate interests are listed below for each service individually.

2.1 Google Web Fonts

Our website uses external typesets provided by Google, so-called web fonts. To do this, your browser loads the required web fonts into your browser cache when you visit the website. If your browser does not support this feature, your computer will use a standard font to display the website. This service collects your IP address, which of our websites you have visited and, if necessary, other data required by Google for the provision of the web fonts. The generated information about your use of this website is stored on servers in the USA. This information may also be transferred to third parties if required by law or if third parties process this data on behalf of us or Google.

2.2 Google Tag Manager

Our website uses Google Tag Manager to manage the website through a single tag management interface. Google Tool Manager only implements tags. This means no cookies are used and no personal data is collected. Google Tag Manager triggers other tags, which may collect data. However, Google Tag Manager does not access this data. If deactivated at the domain or cookie level, it will remain effective for all tracking tags as far as they are implemented with the Google Tag Manager. Our legitimate interests in the use of Google Tag Manager are the efficient maintenance of our website and the central administration of HTML elements.

  1. Links to social media profiles

On our website we refer with hyperlinks to social media profiles in social networks. When you actively click on a link to such a profile, your browser establishes a direct connection with servers of the respective social media network, whereby the provider obtains knowledge of your visit. If you are simultaneously logged in to the respective social network, the provider can assign the visit to the profile to your user account. In this context, personal data may be processed in the USA. For more information on the processing of personal data, please refer to the privacy policy of the respective social media network. The purpose of linking our website to social media profiles is to increase the visibility of our website. Clicking on a social media link takes place on the basis of your voluntary decision in accordance with Art. 6 (1)(a) UK GDPR. The legal basis for any data transfer to the USA is also your voluntarily given consent according to Art. 49. (1)(a) UK GDPR.

VII. Media content

Our website partially uses third party content loaded directly from servers of the content providers, as named below. The purpose of integrating this content is to make our website more attractive.

  1. Other Media content

The legal basis for the use of the following media content is our legitimate interests according to Art. 6 (1)(f) UK GDPR. Our legitimate interest in using third-party content is to improve the reach of our website through attractive web content. Further legitimate interests are listed individually below.

1.1 Cloudflare cdnjs

This website uses the cdnjs content delivery network. The provider is Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA (hereinafter ‘Cloudflare’). The purpose of the use of cdnjs is to deliver static and dynamic web content such as HTML, CSS,.js and image files on our website. In this context, your IP address, which of our websites you have visited and, if necessary, other data that Cloudflare can determine in connection with the connection may be recorded. The legal basis for the processing of personal data is our legitimate interest under Art. 6 (1)(f) GDPR. Our legitimate interests are the provision, maintenance and secure operation of our website. Information collected by Cloudflare in connection with the provision of cdnjs may be transferred to, and stored on, servers in the USA. Cloudflare has joined the UK Extension to the EU/US Data Privacy Framework and has committed to abide by UK data protection standards, thereby meeting the UK’s requirements for the transfer of personal data to the US under Art. 45 UK GDPR. Information about Google’s voluntary commitment can be found at https://www.dataprivacyframework.gov/participant/5666. For more information about how Cloudflare handles your personal information, please refer to the Cloudflare privacy policy at: https://www.cloudflare.com/en-gb/privacypolicy/.