Date:June 1, 2025
With this information, the controller named under section 1 ("We") informs the user of the website ("You" or "User") in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR) about the collection and processing of personal data. At the same time, we inform you when we store information on the terminal equipment you use when accessing our websites, or when we access information already stored on your terminal equipment.
For the use of websites of other providers, which are referred to, for example, via links, the respective privacy policies on those sites apply.
A General Information
1 Controller and Data Protection Officer
1.1 The controller responsible for data processing on
this website is: Ute Schmalhofer, Karlstraße 7, 82054
Sauerlach, Germany, kontakt@klarheitswerk.de
1.2 We are not required to appoint a Data Protection Officer.
1.3 Our website is hosted by ALL-INKL.COM (www.all-inkl.com), meaning it is technically provided on the web servers of this web host. The web host is a processor engaged by us in accordance with Art. 28 GDPR.
2 Data Subject Rights
If personal data concerning you is collected by us, you, as the
"Data Subject", have the following rights:
2.1 Right of Access
You can request information in accordance with Art. 15 GDPR about your personal data that we process.
2.2 Right to Object
You have a right to object based on the specific grounds of Art. 21 para. 1 GDPR. We inform you about this separately from this information under "B".
2.3 Right to Rectification
If the information concerning you is no longer accurate, you can request rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request completion.
2.4 Right to Erasure
You can request the erasure of your personal data under the conditions of Art. 17 GDPR.
2.5 Right to Restriction of Processing
In the cases of Art. 18 GDPR, you have the right to request a restriction of the processing of your personal data ("blocking").
2.6 Right to Lodge a Complaint
If you believe that the processing of your personal data violates data protection law, you have the right, in accordance with Art. 77 para. 1 GDPR, to lodge a complaint with a data protection supervisory authority of your choice.
2.7 Right to Data Portability
In the event that you have provided us with personal data in accordance with Art. 20 para. 1 GDPR, you have the right to receive the data that we process automatically based on your consent or for the performance of a contract, in a structured, commonly used and machine-readable format, or to have it transmitted to yourself or to a third party. The collection of data for the provision of the website and the storage of log files (see section 3.1 below) are strictly necessary for the operation of the website. They are therefore not based on consent pursuant to Art. 6 para. 1 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR, but are justified pursuant to Art. 6 para. 1 lit. f GDPR. The requirements of Art. 20 para. 1 GDPR are therefore not met in this regard.
3 Procedure: Provision of the Website and Creation of
Log Files
3.1 Which data is processed for which purpose?
With each access to content on the website, information (data) is temporarily collected and stored by the web server of our web host, where our website is hosted, from the internet browser of the accessing computer or terminal equipment of the user. This data may potentially allow for the identification of the user and is therefore personal data.
3.1.1 The following data is collected and stored by our web host:
IP address of the user,
Date and time of the website access,
The protocol, e.g., HTTP,
The request method "Get" or "Post",
Content of the request or specification of the requested file
transmitted to the user,
The access status (successful transmission, error, etc.),
The amount of data transmitted in bytes,
Incoming and outgoing data traffic ("Traffic"),
A process identification number ("Process ID"),
The duration until the web server responded to the user's
request,
The website from which the user's access originated (Referrer
URL),
The browser used by the user, the operating system, the
interface, the language of the browser, and the version of the
browser software.
3.1.2 The temporary storage of this user data is
required for the process of a website visit to enable the
delivery of the website. For this purpose, the user's IP
address must necessarily remain stored for the duration of the
session (i.e., the website visit).
3.1.3 Further storage of the IP address with the subsequently named data from the list above beyond this purpose occurs in log files. This is done so that our web host can ensure the functionality of the website and the security of the information technology systems.
3.2 On which legal basis is this data processed?The data from section 3.1 is collected and processed by our web host for the mentioned temporary storage purpose and also for the further storage purpose in accordance with Art. 6 para. 1 lit. f GDPR. This purpose also constitutes the legitimate interest in the data processing. This legitimate interest is the interest of our web host, but also our legitimate interest in a functional website.
3.3 Are there other recipients of the aforementioned data besides the controller?As our processor, our web host has technical access to the data mentioned in 3.1.
3.4 How long is the data stored?The data from 3.1.1 is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of providing the website, this is when the respective session ends. The log files are stored for a maximum of 7 days, unless a security incident requires longer retention.
3.5 Is there an obligation to provide data?You must provide the data from 3.1 to our web host. Otherwise, you cannot technically use our website and our web host cannot ensure a secure technical operation.
4 Data Processing Procedures
4.1 Data and Information Processing Requiring
Consent
Insofar as we are only permitted to collect and process personal data with your consent, we inform you about this in our consent banner in the context of the consent dialogue.
4.2 Use of Email Address and Contact Form Data based on Legitimate Interests
4.2.1 Which data is processed for which purpose?
Insofar as we provide you with an email address and a contact form with input fields, this serves the purpose of allowing you to contact us. If you submit personal data to us, it will be stored by us and processed for the purpose of contacting you.
4.2.2 On which legal basis is this data processed?
The data from section 4.2.1 is processed on the basis of Art. 6 para. 1 lit. f GDPR (our legitimate interest as the controller). If your inquiry aims at concluding a contract, Art. 6 para. 1 lit. b GDPR is an additional legal basis (initiation, conclusion, and performance of a contract).
4.2.3 Are there other recipients of the aforementioned data besides the controller?
As our processor, our web host has technical access to the data mentioned in 4.2.1.
4.2.4 How long is the data stored?
The data from 4.2.1 is deleted as soon as it is no longer required for the purpose for which it was collected. For personal data sent to us via email or the contact form, this is the case when the respective correspondence with the user has ended and storage is not still required for other reasons. The conversation is considered ended when the circumstances indicate that the matter concerned has been finally clarified.
4.2.5 Is there an obligation to provide data?
You are not obligated to provide us with data from 4.2.1. You are not required to communicate with us.
4.3 Use of the Session Cookie "wbk_sid" based on Legitimate Interests
4.3.1 Which data is processed for which purpose?
As soon as you use the contact form, the session cookie "wbk_sid" is stored on your terminal equipment by default. This cookie contains a long combination of numbers and letters ("ID"). The purpose of the cookie is that the user can be recognized as such when submitting contact information and distinguished from malicious users (e.g., SPAM bots).
4.3.2 On which legal basis is this data processed?
While the information in this cookie constitutes personal data, the use of the cookie "wbk_sid" does not require data protection consent because the data processing is necessary for the protection of the legitimate interests of the website operator and because the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, do not override them. The legal basis for the data processing is consequently Art. 6 para. 1 sentence 1 lit. f GDPR.
4.3.3 Are there other recipients of the aforementioned data besides the controller?
As our processor, our web host has technical access to the data mentioned in 4.3.1.
4.3.4 How long is the data stored?
If the user closes the browser, the cookie is automatically deleted from the user's operating system. It therefore only applies for the duration of the website visit (session cookie).
4.3.5 Is there an obligation to provide data?
You are obligated to provide us with data from 4.3.1. Otherwise, you cannot use the login form or the contact form.
4.3.6 Consent for the Use of the Cookie?
Your consent to the storage of information for the cookie "wbk_sid" on your terminal equipment or our access to this information stored on your terminal equipment is not required because storage and/or access are absolutely necessary so that you can use the contact form (§ 25 para. 2 no. 2 TTDSG).
5 Processing of Information from Your Terminal
Equipment
5.1 Insofar as we wish to store information on the
terminal equipment you use when visiting our websites and/or
wish to access information already stored on your terminal
equipment, we ask for your consent on the basis of clear and
comprehensive information.This is done via a consent
banner used by us. We obtain necessary consent before accessing
your terminal equipment. Your consent can be revoked by you at
any time. However, for certain purposes specified by law, your
consent is not necessary, so in these cases we do not ask for
it. Consent is not required, on the one hand, if the sole
purpose of storing information on the end user's terminal
equipment or the sole purpose of accessing information already
stored on the end user's terminal equipment is to carry out the
transmission of a communication over a public
telecommunications network. On the other hand, consent to the
use of your terminal equipment is not required if the storage
of information on the end user's terminal equipment or access
to information already stored on the end user's terminal
equipment is absolutely necessary for us, as a provider of a
telemedia service, to provide a telemedia service expressly
requested by the user.
5.2 Such access to terminal equipment is possible through certain technologies.The best-known technology concerns cookies. Cookies are objects that can be stored in the internet browser or by the internet browser on the user's terminal equipment. When a user accesses a website, the server of the website operator or a third party can read the cookie stored there via the user's operating system and consequently the information stored within it. A cookie can, but does not have to, contain a characteristic string of characters that allows for a unique identification of the user's browser when the website is accessed again.
5.3 Possibility of Elimination:The user can prevent or restrict the installation of cookies by setting their browser accordingly. Cookies that have already been stored can also be deleted by the user at any time via their browser. The settings for this depend on the respective browser. However, if the user prevents or restricts the installation of cookies, this may result in not all functions of the website being fully usable. What applies to cookies also applies to other technologies that utilize the user's terminal equipment.
5.4 Cookies and similar technologies requiring consent:Our consent banner on the website provides information about cookies and similar technologies that require your consent.
5.5 Cookies and similar technologies not requiring consent:We have internally documented for cookies and similar technologies that do not require consent that consent is not required pursuant to § 25 para. 2 TTDSG.
6 Consent Banner
6.1 In order to obtain legally required consent from
you for certain services or functions or to respect your
revocation in this regard, a consent banner will be displayed
to you.Your consent or non-consent relates to our use
of your terminal equipment (computer, laptop, smartphone,
tablet) through cookies or similar technologies, whereby
information can be stored on or read from your terminal
equipment. Your consent may also be required for the processing
of personal data by us or third parties pursuant to Art. 6
para. 1 sentence 1 lit. a GDPR, which is associated with your
use of our websites. In certain cases, the law permits us to
use your terminal equipment without consent and/or also the
subsequent processing of your personal data without your
consent.
6.2 Via the consent banner, we inform you about all services and functions that require your consent before we use the service or function.The consent banner provides an overview of all processing operations requiring consent and describes details for each, so that you, as a user, can assess the meaning and scope of your consent. You can consent to each operation via a button/click area by activating it or decline this operation by deactivating it. There are three decision options:
Choosing "Make Selection and Save" means that the user's decision is saved as made through their selection via the buttons/click areas. All services and functions requiring consent that the user consents to are active and can be used. Services and functions that cannot be used without consent are not integrated into the website.
Choosing "Reject All and Save" means that this decision is not saved. The user's decision is thus that they do not consent to anything requiring their consent, which results in all services and functions requiring consent not working for this user. The banner is hidden.
Choosing "Accept All and Save" means that all services and functions requiring consent are "active" or "enabled". This means that you have given consent under the GDPR and also consent to the use of your terminal equipment. The banner is then hidden.
During the further use of the websites, the user can actively cause the consent banner to reappear by revoking previously given consent or subsequently giving consent that was initially not required. To do this, the user clicks the "Consent Settings" link. The consent banner appears again.
Your consent can thus be revoked at any time with effect for the future. A subsequent revocation no longer affects the lawfulness of the access or storage of information that occurred until the revocation.
6.3 All three aforementioned decisions of the user ("Make Selection and Save", "Reject All and Save", or "Accept All and Save") are each stored via the browser of the user's terminal equipment in the so-called "Local Storage" on the user's terminal equipment.The storage there is permanent. The information is stored in the object "wbkConsent". This technology is not a cookie in the strict sense. The information in "wbkConsent" also has no personal reference, meaning the user is not recognized again when they access the WBK user's website. The selection decision for consent is not stored on our server. This use of the user's terminal equipment does not require consent pursuant to § 25 para. 2 no. 2 TTDSG (User request).
7 Technical Measures
7.1 SSL/TLS
For security reasons and to protect the transmission of confidential content, for example via inquiries you send to us as the website operator, our websites are equipped with active SSL or TLS encryption. An encrypted connection is recognized by the browser's address bar changing from "http://" to "https://" and a lock symbol being visible in the browser bar. As a result of this encryption, data you transmit to us cannot be read by third parties.
7.2 End-to-End Communication
If you contact us using one of the email addresses provided on our website, the transport of the email content to us is not end-to-end encrypted. This means that while emails are usually encrypted during transport via the involved email providers, they are stored unencrypted on their servers. Contacting us via the provided contact form, however, is technically a secure communication.
7.3 Video Embedding
Insofar as you can watch videos on our websites which are marked as external links to third-party websites, this is done exclusively via the technology of linking to the respective referred website or to a third-party video portal. There, these videos are stored under the data protection responsibility of the respective third-party provider. The respective referred website or video portal is thus not directly embedded in our websites. This ensures that user information is not transmitted to the portal already when the website where the video is integrated is loaded. It also ensures that cookies or similar technologies for tracking user activities of the portals or their advertising partners cannot be placed on your terminal equipment via the mere linking. Only after you consciously click on the video preview image is a connection established to the third-party provider's portal, triggering the associated data processing. This and the associated potential processing of your user data on the linked portal then, however, occurs exclusively due to your wish to watch the video there. The data processing triggered by this is outside our sphere of influence and is subject to the responsibility of these third-party providers, who inform about their data processing to a greater or lesser extent. If you do not agree with the data processing by the third-party provider, please do not click the video preview image.
B Special Information
Special Right to Object pursuant to Art. 21 para. 1
GDPR
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data which is based on Article 6 para. 1 lit. f GDPR (processing for the purpose of safeguarding legitimate interests pursued by us or by a third party) in accordance with Art. 21 para. 1 GDPR. You can address the objection to the address in section 1.1.
We shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing is for the establishment, exercise or defence of legal claims.
In the event of your objection, you must explain in detail your potential interests ("your particular situation") so that we can carry out a renewed balancing of interests. If our interests in further storage do not override, the personal data stored in the course of contact will be deleted. If they continue to override, the data processing by us will continue.
C Copyright and Neighboring Rights
The content published on this website is subject to German
copyright and neighboring rights law. Any use not permitted by
German copyright and neighboring rights law requires the prior
written consent of the provider or the respective rights
holder. This applies in particular to the reproduction,
adaptation, translation, storage, processing, or
reproduction/display of content in databases or other
electronic media and systems. Content and rights of third
parties are marked as such. Unauthorized reproduction or
distribution of individual content or complete pages is not
permitted and is punishable by law. Only the creation of copies
and downloads for personal, private and non-commercial use is
permitted.
The presentation of this website in external frames is only permitted with written permission.
D Appointment Booking via Calendly
For booking appointments, we use the service "Calendly" provided by Calendly LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA. If you click on the corresponding link on our website, you will be redirected to an external page of Calendly. The data you enter there (e.g., name, email address, possibly further information) is processed directly by Calendly.
Further information on data processing by Calendly can be found in their privacy policy: https://calendly.com/privacy
The processing of data takes place on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. Please note that Calendly is a provider from the USA. A data transfer to a third country without an adequate level of data protection cannot therefore be ruled out.
E Regulation for Obligation Type Test
For conducting interactive quizzes, we use the service
"Tally.so", offered by Tally BV, August Van Lokerenstraat
71,9050 Ghent (Gent), Belgium. If you participate in a quiz,
your entries are processed directly by Tally.so. Tally.so's
privacy policy applies: https://tally.so/help/data-processing-agreement
and https://tally.so/help/privacy-policy.
The processing takes place on the basis of your consent
pursuant to Art. 6 para. 1 lit. a GDPR.