Pri­va­cy pol­i­cy

1. Data pro­tec­tion at a glance

Gen­er­al Infor­ma­tion

The fol­low­ing infor­ma­tion pro­vides a sim­ple overview of what hap­pens to your per­son­al data when you vis­it this web­site. Per­son­al data is any data that can be used to iden­ti­fy you per­son­al­ly. For detailed infor­ma­tion on the sub­ject of data pro­tec­tion, please refer to our pri­va­cy pol­i­cy list­ed below this text.

Data col­lec­tion on this web­site

Who is respon­si­ble for data col­lec­tion on this web­site?
Data pro­cess­ing on this web­site is car­ried out by the web­site oper­a­tor. Their con­tact details can be found in the “Infor­ma­tion on the respon­si­ble body” sec­tion of this pri­va­cy pol­i­cy.

How do we col­lect your data?
Your data is col­lect­ed when you pro­vide it to us. This may include, for exam­ple,
data that you enter in a con­tact form.
Oth­er data is col­lect­ed auto­mat­i­cal­ly or with your con­sent when you vis­it the web­site by our IT sys­tems.
This is pri­mar­i­ly tech­ni­cal data (e.g., Inter­net brows­er, oper­at­ing sys­tem, or time
of page view). This data is col­lect­ed auto­mat­i­cal­ly as soon as you enter this web­site.

What rights do you have regard­ing your data?
You have the right to receive infor­ma­tion about the ori­gin, recip­i­ent, and pur­pose of your stored per­son­al data free of charge at any time. You also have the right to request the cor­rec­tion or dele­tion of this data. If you have giv­en your con­sent.

What rights do you have regard­ing your data?
You have the right to obtain infor­ma­tion about the ori­gin, recip­i­ent, and pur­pose of your stored per­son­al data at any time and free of charge. You also have the right to request the cor­rec­tion or dele­tion of this data. If you have giv­en your con­sent to data pro­cess­ing, you can revoke this con­sent at any time for the future. In addi­tion, you have the right, under cer­tain cir­cum­stances, to request the restric­tion of the pro­cess­ing of your per­son­al data.
Fur­ther­more, you have the right to lodge a com­plaint with the com­pe­tent super­vi­so­ry author­i­ty.
You can con­tact us at any time if you have any ques­tions about this or oth­er data pro­tec­tion issues.

2. Host­ing

Het­zn­er

The provider is Het­zn­er Online GmbH, Indus­triestr. 25, 91710 Gun­zen­hausen (here­inafter referred to as Het­zn­er).
For details, please refer to Het­zn­er’s pri­va­cy pol­i­cy:
https://www.hetzner.com/de/legal/privacy-policy/.

The use of Het­zn­er is based on Art. 6 (1) lit. f GDPR. We have a legit­i­mate inter­est in ensur­ing that our web­site is dis­played as reli­ably as pos­si­ble. If cor­re­spond­ing con­sent has been request­ed, pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion on the user’s ter­mi­nal device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. Con­sent can be revoked at any time.

Order pro­cess­ing
We have con­clud­ed an order pro­cess­ing agree­ment (AVV) for the use of the above-men­tioned ser­vice.
This is a con­tract required by data pro­tec­tion law, which ensures that the per­son­al data of our web­site vis­i­tors is only processed in accor­dance with our
instruc­tions and in com­pli­ance with the GDPR.

3. Gen­er­al infor­ma­tion and manda­to­ry infor­ma­tion

Data pro­tec­tion

The oper­a­tors of these pages take the pro­tec­tion of your per­son­al data very seri­ous­ly. We treat your per­son­al data con­fi­den­tial­ly and in accor­dance with the statu­to­ry data pro­tec­tion reg­u­la­tions and this pri­va­cy pol­i­cy.
When you use this web­site, var­i­ous per­son­al data is col­lect­ed.
Per­son­al data is data that can be used to iden­ti­fy you per­son­al­ly. This pri­va­cy pol­i­cy explains what data we col­lect and what we use it for. It also explains how and for what pur­pose this is done.
We would like to point out that data trans­mis­sion over the Inter­net (e.g., when com­mu­ni­cat­ing by email) may be sub­ject to secu­ri­ty vul­ner­a­bil­i­ties. It is not ossi­ble to com­plete­ly pro­tect data from access by third par­ties.

Note on the respon­si­ble body

The respon­si­ble body for data pro­cess­ing on this web­site is:

Willi Baumeis­ter Stiftung GmbH
Gerokstraße 39
70184 Stuttgart, Ger­many

Man­age­ment:
Dr. Jochen Gut­brod, Had­wig Goez, Sabine Wil­helm

Phone: +49 711 – 241 009
Email: archiv@willi-baumeister.org

The respon­si­ble body is the nat­ur­al or legal per­son who, alone or joint­ly with oth­ers, decides on
the pur­pos­es and means of pro­cess­ing per­son­al data (e.g., names, email address­es, etc.).
The respon­si­ble body is the nat­ur­al or legal per­son who, alone or joint­ly with oth­ers, decides on.

Stor­age peri­od

Unless a more spe­cif­ic stor­age peri­od is spec­i­fied in this pri­va­cy pol­i­cy,
your per­son­al data will remain with us until the pur­pose for data pro­cess­ing no longer applies. If you assert a legit­i­mate request for dele­tion or revoke your con­sent to data pro­cess­ing, your data will be delet­ed unless we have oth­er legal­ly per­mis­si­ble rea­sons for stor­ing your per­son­al data (e.g., tax or com­mer­cial law reten­tion peri­ods); in the lat­ter case, dele­tion will take place once these rea­sons no longer apply.

Gen­er­al infor­ma­tion on the legal basis for data pro­cess­ing on this web­site

If you have con­sent­ed to data pro­cess­ing, we process your per­son­al data on he basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, if spe­cial cat­e­gories of data are processed in accor­dance with Art. 9 (1) GDPR. In the event of express con­sent to the trans­fer of per­son­al data to third coun­tries, data pro­cess­ing is also car­ried out on the basis of Art. 49 (1) (a) GDPR. If you have con­sent­ed to the stor­age of cook­ies or access to infor­ma­tion on your ter­mi­nal device, data pro­cess­ing is also car­ried out on the basis of Art. 6 (1) (b) GDPR. If you have con­sent­ed to the trans­fer of per­son­al data to third coun­tries, data pro­cess­ing is also car­ried out on the basis of Art. 49 (1) (a) GDPR. If you have con­sent­ed to the per­son­al data to third coun­tries, data pro­cess­ing is also car­ried out on the basis of rt. 49 (1) (a) GDPR. If you have con­sent­ed to the stor­age of cook­ies or to access to infor­ma­tion on your end device (e.g. via device fin­ger­print­ing), data pro­cess­ing is also car­ried out on the basis of § 25 (1) TDDDG. Con­sent can be revoked at any time. If your data is nec­es­sary for the per­for­mance of a con­tract or for the imple­men­ta­tion of pre-con­trac­tu­al mea­sures, we process your data on the basis of Art. 6 (1) lit. b GDPR. Fur­ther­more, we process your data if it is nec­es­sary to ful­fill a legal oblig­a­tion on the basis of Art. 6 (1) lit. c GDPR.
Data pro­cess­ing may also be car­ried out on the basis of our legit­i­mate inter­est pur­suant to Art. 6 (1) lit. f GDPR. The rel­e­vant legal basis in each indi­vid­ual case is explained in the fol­low­ing para­graphs of this pri­va­cy pol­i­cy.

Recip­i­ents of per­son­al data

As part of our busi­ness activ­i­ties, we work with var­i­ous exter­nal par­ties. This some­times requires the trans­fer of per­son­al data to these exter­nal par­ties.
We only pass on per­son­al data to exter­nal par­ties if this is nec­es­sary for the ful­fill­ment of a con­tract, if we are legal­ly oblig­ed to do so (e.g., dis­clo­sure of data to tax author­i­ties), if we have a legit­i­mate inter­est in the dis­clo­sure pur­suant to Art. 6 (1) lit. f GDPR, or if anoth­er legal basis per­mits the dis­clo­sure of data.
When using proces­sors, we only pass on our cus­tomers’ per­son­al data on the basis of a valid con­tract for data pro­cess­ing. In the case of joint pro­cess­ing, a con­tract for joint pro­cess­ing is con­clud­ed.
When using proces­sors, we only pass on our cus­tomers’ per­son­al data on the basis of a valid con­tract for data pro­cess­ing. In the case of joint pro­cess­ing, a con­tract for joint pro­cess­ing is con­clud­ed. When using proces­sors, we only dis­close our cus­tomers’ per­son­al data on the basis of a valid con­tract for order pro­cess­ing. In the case of joint pro­cess­ing, a con­tract for joint pro­cess­ing is con­clud­ed.

With­draw­al of your con­sent to data pro­cess­ing

Many data pro­cess­ing oper­a­tions are only pos­si­ble with your express con­sent. You can revoke con­sent you have already giv­en at any time. The legal­i­ty of the data pro­cess­ing car­ried out until the revo­ca­tion remains unaf­fect­ed by the revo­ca­tion.

Right to object to data col­lec­tion in spe­cif­ic cas­es and to direct mar­ket­ing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(e) OR (f) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN PROVE THAT THERE ARE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR THE
PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR). IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS RELATED TO SUCH DIRECT ADVERTISING . IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to lodge a com­plaint with the com­pe­tent super­vi­so­ry author­i­ty

In the event of vio­la­tions of the GDPR, data sub­jects have the right to lodge a com­plaint with a super­vi­so­ry author­i­ty, in par­tic­u­lar in the Mem­ber State of their habit­u­al res­i­dence, place of work or place of the alleged vio­la­tion. The right to lodge a com­plaint exists with­out prej­u­dice to oth­er admin­is­tra­tive or judi­cial reme­dies.

Right to data porta­bil­i­ty

You have the right to have data that we process auto­mat­i­cal­ly on the basis of your con­sent or in ful­fill­ment of a con­tract
hand­ed over to you or to a third par­ty in a com­mon, machine-read­able for­mat.
If you request the direct trans­fer of the data to anoth­er con­troller,
this will only be done if it is tech­ni­cal­ly fea­si­ble.

Infor­ma­tion, cor­rec­tion, and dele­tion

With­in the frame­work of the applic­a­ble legal pro­vi­sions, you have the right at any time to receive free infor­ma­tion about your stored per­son­al data, its ori­gin and recip­i­ents, and the pur­pose of data pro­cess­ing, and, if applic­a­ble, a right to cor­rect or delete this data. You can con­tact us at any time for this pur­pose or
if you have any fur­ther ques­tions on the sub­ject of per­son­al data.

Right to restric­tion of pro­cess­ing

You have the right to request the restric­tion of the pro­cess­ing of your per­son­al data. You can con­tact us at any time to do so. The right to restric­tion of pro­cess­ing applies in the fol­low­ing cas­es:

• If you dis­pute the accu­ra­cy of your per­son­al data stored by us, we usu­al­ly need time to ver­i­fy this. For the dura­tion of the review, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data.
• If the pro­cess­ing of your per­son­al data was/is unlaw­ful, you can request the restric­tion of data pro­cess­ing instead of era­sure.
• If we no longer need your per­son­al data, but you need it to exer­cise, defend, or assert legal claims, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data instead of its dele­tion.
• If you have lodged an objec­tion pur­suant to Art. 21 (1) GDPR, a bal­ance must be struck between your inter­ests and ours. As long as it is not yet clear whose inter­ests pre­vail, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data.

If you have restrict­ed the pro­cess­ing of your per­son­al data, this data may—apart from its storage—only be processed with your con­sent or for the asser­tion, exer­cise, or defense of legal claims or for the pro­tec­tion of the rights of anoth­er nat­ur­al or legal per­son or for rea­sons of impor­tant pub­lic inter­est of the Euro­pean Union or a Mem­ber State.

SSL or TLS encryp­tion

This site uses SSL or TLS encryp­tion for secu­ri­ty rea­sons and to pro­tect the trans­mis­sion of con­fi­den­tial con­tent, such as orders or inquiries that you send to us as the site oper­a­tor. You can rec­og­nize an encrypt­ed con­nec­tion by the fact that the address line of the brows­er changes from “http://” to “https://” and by the lock sym­bol in your brows­er line. If SSL or TLS encryp­tion is acti­vat­ed, the data you trans­mit to us can­not be read by third par­ties.

4. Data col­lec­tion on this web­site

Cook­ies

Our web­sites use so-called “cook­ies.” Cook­ies are small data pack­ets and do not cause any dam­age to your device. They are either stored tem­porar­i­ly for the dura­tion of a ses­sion (ses­sion cook­ies) or per­ma­nent­ly (per­ma­nent cook­ies) on your device. Ses­sion cook­ies are auto­mat­i­cal­ly delet­ed at the end of your vis­it. Per­ma­nent cook­ies remain stored on your device until you delete them your­self or your web brows­er auto­mat­i­cal­ly deletes them.

Cook­ies can orig­i­nate from us (first-par­ty cook­ies) or from third-par­ty com­pa­nies (so-called third-par­ty cook­ies). Third-par­ty cook­ies enable the inte­gra­tion of cer­tain ser­vices from third-par­ty com­pa­nies with­in web­sites (e.g., cook­ies for pro­cess­ing pay­ment ser­vices).

Cook­ies have var­i­ous func­tion. Numer­ous cook­ies are tech­ni­cal­ly nec­es­sary, as cer­tain web­site func­tions would not work with­out them (e.g., the shop­ping cart func­tion or the dis­play of videos). Oth­er cook­ies can be used to eval­u­ate user behav­ior or for adver­tis­ing pur­pos­es.

Cook­ies that are required to car­ry out the elec­tron­ic com­mu­ni­ca­tion process, to pro­vide cer­tain func­tions you have request­ed (e.g., for the shop­ping cart func­tion) or to opti­mize the web­site (e.g., cook­ies for mea­sur­ing the web audi­ence) (nec­es­sary cook­ies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless anoth­er legal basis is spec­i­fied.
The web­site oper­a­tor has a legit­i­mate inter­est in stor­ing nec­es­sary cook­ies for the tech­ni­cal­ly error-free and opti­mized pro­vi­sion of its ser­vices. If con­sent to the stor­age of cook­ies and com­pa­ra­ble recog­ni­tion tech­nolo­gies has been request­ed, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of this con­sent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG); con­sent can be revoked at any time.

You can set your brows­er so that you are informed about the set­ting of cook­ies and only allow cook­ies in indi­vid­ual cas­es, exclude the accep­tance of cook­ies for cer­tain cas­es or in gen­er­al, and acti­vate the auto­mat­ic dele­tion of cook­ies when clos­ing the brows­er. If you deac­ti­vate cook­ies, the func­tion­al­i­ty of this web­site may be lim­it­ed.

You can find out which cook­ies and ser­vices are used on this web­site in this
pri­va­cy pol­i­cy.

Con­tact form

If you send us inquiries via the con­tact form, your details from the
inquiry form, includ­ing the con­tact details you pro­vid­ed there, will be stored by us for the pur­pose of pro­cess­ing the inquiry and in case of fol­low-up ques­tions. We will not pass on this data with­out your con­sent.

The pro­cess­ing of this data is based on Art. 6 para. 1 lit. b GDPR, pro­vid­ed that your inquiry is relat­ed to the ful­fill­ment of a con­tract or is nec­es­sary for the imple­men­ta­tion of pre-con­trac­tu­al mea­sures. In all oth­er cas­es, pro­cess­ing is based on our legit­i­mate inter­est in the effec­tive pro­cess­ing of inquiries addressed to us (Art. 6 (1) (f) GDPR) or on your con­sent (Art. 6 (1) (a) GDPR) if this has been request­ed; con­sent can be revoked at any time.

The data you enter in the con­tact form will remain with us until you request us to delete it, revoke your con­sent to its stor­age, or the pur­pose for data stor­age no longer applies (e.g., after your inquiry has been processed). Manda­to­ry legal pro­vi­sions— in par­tic­u­lar reten­tion peri­ods —remain unaf­fect­ed.

Request by email, tele­phone, or fax

If you con­tact us by email, tele­phone, or fax, your inquiry, includ­ing all result­ing per­son­al data (name, inquiry), will be stored and processed by us for the pur­pose of pro­cess­ing your request.
We will not pass on this data with­out your con­sent.
The pro­cess­ing of this data is based on Art. 6 para. 1 lit. b GDPR, pro­vid­ed that your inquiry is relat­ed to the ful­fill­ment of a con­tract or is nec­es­sary for the imple­men­ta­tion of pre-con­trac­tu­al mea­sures.

The pro­cess­ing of this data is based on Art. 6 (1) lit. b GDPR, pro­vid­ed that your request is relat­ed to the ful­fill­ment of a con­tract or is nec­es­sary for the imple­men­ta­tion of pre-con­trac­tu­al mea­sures. In all oth­er cas­es, pro­cess­ing is based on our legit­i­mate inter­est in the effec­tive pro­cess­ing of inquiries addressed to us (Art. 6 (1) (f) GDPR) or on your con­sent (Art. 6 (1) (a) GDPR) if this has been request­ed; con­sent can be revoked at any time.

The data you send us via con­tact requests will remain with us until you request us to delete it, revoke your con­sent to its stor­age, or the pur­pose for data stor­age no longer applies (e.g., after your request has been processed). Manda­to­ry legal pro­vi­sions— in par­tic­u­lar statu­to­ry reten­tion peri­ods —remain unaf­fect­ed.

5. Social media

Insta­gram

This web­site incor­po­rates fea­tures of the Insta­gram ser­vice. These fea­tures are pro­vid­ed by Meta Plat­forms Ire­land Lim­it­ed, Mer­rion Road, Dublin 4, D04 X2K5, Ire­land.

When the social media ele­ment is active, a direct con­nec­tion is estab­lished between your device and the Insta­gram serv­er. Insta­gram there­by receives infor­ma­tion about your vis­it to this web­site.

If you are logged into your Insta­gram account, you can link the con­tent of this web­site to your Insta­gram pro­file by click­ing on the Insta­gram but­ton.
This allows Insta­gram to asso­ciate your vis­it to this web­site with your user account. We would like to point out that, as the provider of the pages, we have no knowl­edge of the con­tent of the data trans­mit­ted or its use by Insta­gram.

The use of this ser­vice is based on your con­sent in accor­dance with Art. 6 (1) lit. a GDPR and §25 (1) TDDDG. Con­sent can be revoked at any time.

Inso­far as per­son­al data is col­lect­ed on our web­site using the tool described here and for­ward­ed to Face­book or Insta­gram, we and Meta Plat­forms Ire­land Lim­it­ed, 4 Grand Canal Square, Grand Canal Har­bour, Dublin 2, Ire­land, are joint­ly respon­si­ble for this data pro­cess­ing (Art. 26 GDPR). The joint respon­si­bil­i­ty is lim­it­ed exclu­sive­ly to the col­lec­tion of data and its trans­fer to Face­book or Insta­gram. The pro­cess­ing by Face­book or Insta­gram fol­low­ing the trans­fer
is not part of the joint respon­si­bil­i­ty.
Our joint oblig­a­tions have been set out in a joint pro­cess­ing agree­ment.
The text of the agree­ment can be found at:
https://www.facebook.com/legal/controller_addendum. Accord­ing to this agree­ment, we are respon­si­ble for pro­vid­ing data pro­tec­tion infor­ma­tion when using the Face­book or Insta­gram tool and for the data pro­tec­tion-com­pli­ant imple­men­ta­tion of the tool on our web­site. Face­book is respon­si­ble for the
data secu­ri­ty of Face­book and Insta­gram prod­ucts. You can assert data sub­ject rights (e.g., requests for infor­ma­tion) regard­ing the data processed by Face­book or Insta­gram direct­ly with Face­book. If you assert your data sub­ject rights with us, we are oblig­at­ed to for­ward them to Face­book.

Data trans­fer to the USA is based on the stan­dard con­trac­tu­al claus­es of the EU Com­mis­sion.
Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://privacycenter.instagram.com/policy/ and
https://de-de.facebook.com/help/566994660333381.

Fur­ther infor­ma­tion on this can be found in Insta­gram’s pri­va­cy pol­i­cy:
https://privacycenter.instagram.com/policy/.

The com­pa­ny is cer­ti­fied under the EU-US Data Pri­va­cy Frame­work (DPF). The
DPF is an agree­ment between the Euro­pean Union and the USA that is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards when pro­cess­ing data in the USA. Every com­pa­ny cer­ti­fied under the DPF under­takes to com­ply with these data pro­tec­tion stan­dards. Fur­ther infor­ma­tion on this can be obtained from the provider at the fol­low­ing link:
https://www.dataprivacyframework.gov/participant/4452.

6. Plu­g­ins und Tools

Vimeo

This web­site uses plu­g­ins from the video por­tal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When you vis­it one of our pages equipped with a Vimeo video, a con­nec­tion to
the Vimeo servers is estab­lished. The Vimeo serv­er is informed which of our pages you have vis­it­ed. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The infor­ma­tion col­lect­ed by Vimeo is trans­mit­ted to the Vimeo serv­er in the USA.

If you are logged into your Vimeo account, you enable Vimeo to assign your surf­ing behav­ior direct­ly to your per­son­al pro­file. You can pre­vent this by log­ging out of your Vimeo account.

Vimeo uses cook­ies or sim­i­lar recog­ni­tion tech­nolo­gies (e.g., device fin­ger­print­ing) to rec­og­nize web­site vis­i­tors.

The use of Vimeo is in the inter­est of an appeal­ing pre­sen­ta­tion of our online offer­ings.
This con­sti­tutes a legit­i­mate inter­est with­in the mean­ing of Art. 6 para. 1 lit. f GDPR. If cor­re­spond­ing con­sent has been request­ed, pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6 para. 1 lit. a GDPR and Sec­tion 25 (1) TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion on the user’s ter­mi­nal device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. The con­sent can be revoked at any time.

Data trans­fer to the USA is based on the stan­dard con­trac­tu­al claus­es of the EU Com­mis­sion and, accord­ing to Vimeo, on “legit­i­mate busi­ness inter­ests.” Details can be found here:
https://vimeo.com/legal/privacy/policy.

Fur­ther infor­ma­tion on the han­dling of user data can be found in Vimeo’s pri­va­cy pol­i­cy
at: https://vimeo.com/legal/privacy/policy.

The com­pa­ny is cer­ti­fied under the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the USA that is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards when pro­cess­ing data in the USA. Every com­pa­ny cer­ti­fied under the DPF under­takes to com­ply with these data pro­tec­tion stan­dards. Fur­ther infor­ma­tion on this can be obtained from the provider at the fol­low­ing link:
https://www.dataprivacyframework.gov/participant/5711.