This Privacy Policy informs you about the handling of your data by Abracadabra GmbH. We aim to make the processing of your data transparent and provide an overview of it. This policy covers general disclosures about how we handle your data and your rights under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

We detail:

I. General disclosures
II. Data processing on our website
III. Presence in social networks
IV. Other data processing

The data controller responsible for data processing is Abracadabra GmbH.

I. General Disclosures

1. Contact

For questions or to assert your rights, contact:

Abracadabra GmbH
Brunnenstraße 183,
10119 Berlin, Germany
Email: company@abracadabra.work

2. Legal basis

We process personal data in compliance with the GDPR and BDSG. Processing is based on your consent, to fulfill contracts, comply with legal obligations, or protect legitimate interests, where applicable.

3. Duration of storage

We store your data as long as necessary for the purpose of processing or to fulfill our contractual or legal obligations.

4. Data processing outside the EU

Abracadabra GmbH commissions various service providers to carry out certain processing activities on our behalf. These activities encompass a wide range of functions, including hosting, maintaining, and supporting IT systems, executing marketing initiatives, and securely destroying files or data storage media. Our service providers are bound by strict contractual obligations to process data exclusively as directed by us and to implement suitable technical and organizational measures for data protection.

Additionally, it may be necessary for us to share our customers' personal data with various third-party organizations, such as postal and delivery services, payment processing services, credit reporting agencies, banks, tax advisors, auditors, and tax authorities. During such processes, personal data may be transferred to countries outside of the European Economic Area (EEA) or to international organizations that operate globally, which may involve, for instance, entities with headquarters in the United States. Consequently, there exists a possibility that your data could be accessed from such locations.

The processing of personal data outside the EEA is contingent upon ensuring an adequate level of protection for the data. Appropriate safeguards might include mechanisms such as adequacy decisions by the European Commission, internal data protection policies, approved codes of conduct, standard data protection clauses, or approved certification mechanisms in accordance with Article 46(2) a) through f) GDPR.

Aware of the potential risks in certain third countries related to the protection of fundamental rights due to surveillance laws, Abracadabra GmbH, in collaboration with our Data Protection Officer, evaluates these risks and adopts all reasonable measures to ensure that any transfer of personal data is protected according to the statutory requirements and the appropriate safeguards are in place.

For transfers to countries without an adequacy decision by the European Commission, we rely on EU standard contractual clauses to ensure the lawful processing of personal data. Detailed information on EU standard contractual clauses can be found on the European Union's website: EU standard contractual clauses.

Among the service providers we use, some are based in countries where it cannot be entirely ruled out that data might be accessed by third parties despite our contractual arrangements. This includes:

• MailChimp (The Rocket Science Group LLC d/b/a MailChimp, USA) for newsletter distribution. Privacy policy: MailChimp Privacy

• Vimeo, Inc. (USA) for video streaming services. Privacy policy: Vimeo Privacy

• Social media services, such as Facebook (Facebook Ireland Ltd.). Privacy policy: Facebook Privacy

• For video content, we also use YouTube, a platform operated by Google LLC. Privacy policy: YouTube Privacy

Abracadabra GmbH ensures that all data transfers comply with GDPR requirements, protecting our users' privacy and data integrity.

II. Data Processing on Our Website

When you use our website, Abracadabra GmbH collects information both provided by you and automatically through your use of the site. Under data protection laws, personal data includes information like IP addresses, which internet service providers assign to every internet-connected device for data transmission.

1. Processing Server Log Files

For purely informational visits to our website, we automatically store general information transmitted by your browser to our servers. This data includes the browser type and version, operating system, the visited page, the previously visited page (referrer URL), IP address, date and time of the server request, and the HTTP status code. This processing, based on Art. 6 (1) f) GDPR, serves our legitimate interests in the technical administration and security of the website. The data is anonymized shortly after collection, ensuring no personal identification. Unless additional information is provided enabling your identification, rights under Art. 15 to 22 GDPR are not applicable in accordance with Art. 11 (2) GDPR.

2. Contact Possibilities and Inquiries

If you reach out to us via the provided contact email (company@abracadabra.work), we process the transmitted data to respond to your inquiry. The processing of your data for inquiries related to the conclusion or execution of a contract is based on Art. 6 (1) b) GDPR. For other inquiries, we process your data based on our legitimate interest in engaging with you, under Art. 6 (1) f) GDPR.

3. Newsletter

a. Type and Purpose of Processing:

At Abracadabra GmbH, your data is exclusively used to send the newsletter to which you have subscribed via email. Upon registering for our newsletter, we use the data you provide solely for this purpose. Subscribers may also receive emails regarding service-related matters, such as changes to the newsletter service or technical updates. A valid email address is necessary for effective registration, and we employ a double opt-in procedure to verify the ownership of the provided email address. This process includes logging the subscription request, sending a confirmation email, and recording the receipt of the requested response. No additional data is collected during this process.

b. Legal Basis:

The delivery of our newsletter and similar communications to your provided email address is based on the consent you have expressly given, in accordance with Art. 6 (1) a) GDPR. You have the right to withdraw your consent for the storage of personal data and its use for newsletter delivery at any time, effective for future processing. Every newsletter contains a link for this purpose. Alternatively, you may use the contact details provided in this Privacy Policy to withdraw your consent.

c. Recipients:

Data may be shared with other processors tasked with managing the newsletter service.

d. Duration of Storage:

Data related to the newsletter service is processed only as long as the consent is valid. It is erased upon withdrawal of consent.

e. Provision Stipulated or Necessary:

Providing your personal data for our newsletter service is entirely voluntary, based solely on your consent. Without your consent, we are unable to deliver our newsletter to you.

f. Newsletter Analysis:

Abracadabra GmbH analyzes subscribers' reading behavior and the newsletter's opening rates. We collect and process usage data, linking it with your email address or IP address, under the legal basis of your consent, according to Art. 6 (1) a) GDPR. You may withdraw this consent at any time by using the unsubscribe link provided in every newsletter or by contacting us through the methods outlined above.

g. Service Providers:

To manage subscriptions, distribute, and analyze the newsletter, we utilize MailChimp, a service provided by The Rocket Science Group LLC d/b/a MailChimp (USA). Consequently, we transmit your email address to MailChimp. The processing is performed on our behalf based on Art. 6 (1) f) GDPR, reflecting our legitimate interest in optimizing and economically operating our newsletter service. Should you wish to avoid MailChimp processing your data, we advise not subscribing or opting out of the newsletter service. MailChimp provides statistical analysis options for usage data, such as email delivery success rates.

Abracadabra GmbH has entered into a data processing agreement with The Rocket Science Group LLC d/b/a MailChimp, ensuring compliance with GDPR requirements for our newsletter service.

4. Cookies

Abracadabra GmbH uses cookies on our website. Cookies are small text files stored by your browser to identify it for future interactions with our web server. The processing of personal data via cookies is based on Art. 6 (1) f) GDPR, justified by our legitimate interest in optimizing our website to be more user-friendly, effective, and secure. We deploy "persistent cookies," which are automatically deleted after a predetermined duration.

Cookies can be managed and deleted through your browser settings at any time. For detailed instructions, refer to the guidance provided by the German Federal Office for Information Security here.

1. Category "Necessary"

These cookies are essential for operating the website, enabling basic functions like navigation and access to secure areas. The website cannot function properly without them.

• Matomo: We employ Matomo for website analytics, using pseudonyms to create user profiles. This involves storing permanent cookies to recognize return visits and analyze usage through heatmap and session recording. Consent is obtained via our consent banner, in accordance with Section 25 (1) TTDSG and Art. 6 (1) a) GDPR. Consent can be withdrawn at any time.

• Cookie Consent: This tool manages users' cookie consent status for our domain.

2. Category "Statistics"

Statistics cookies collect information about how visitors use the website, helping us understand and improve their experience.

• Google Analytics: The "Collect" cookie sends data about the user's behavior and device to Google Analytics for analysis.

• Pll_Language: Sets the preferred language of the visitor.

• Vuid: Gathers data on the user’s website visits, such as page views.

3. Category "Marketing"

Marketing cookies track website visitors to display targeted advertisements that are relevant to the user, enhancing the value for publishers and advertisers.

• Test_Cookie: Checks if the user’s browser supports cookies.

• IDE: Used by Google DoubleClick to track user actions after interacting with ads for targeted advertising.

• Yt-remote Cookies: Facilitates YouTube video functionality on our website, managing playback and user preferences.

• GPS: Registers a unique ID on mobile devices for tracking based on geographic GPS location.

To prevent cookie storage, adjust your browser settings or install a browser plugin to block cookies, such as the one available here for Google Analytics.

III. Presence in Social Networks

Abracadabra GmbH actively maintains its online presence on social networks, including but not limited to Facebook, to foster communication, marketing, and brand visibility. This involvement allows us to interact with and inform our followers or interested parties about our services and news.

It's essential to acknowledge that while we manage our social network pages, the platforms themselves, such as Facebook, process users' personal data according to their own privacy policies and for their purposes, such as market research and advertising. Facebook, for instance, may create user profiles based on behavior and interests, which can influence the type of advertisements users see within and outside the platform.

In line with our commitment to data protection, Abracadabra GmbH has agreed to the Page Controller Addendum by Facebook Ireland Limited, recognizing shared responsibility for the processing of Insights data. This agreement ensures that we, alongside Facebook, uphold the necessary data protection standards to protect our followers' rights.

However, users should be aware that their data may be processed outside the European Union, where different standards of data protection may apply. Such international data processing could potentially affect users' ability to exercise their privacy rights.

For detailed information about how Facebook Ireland Ltd., located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Republic of Ireland, and its parent company, Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA, process personal data, and how to manage or restrict the placement of cookies for advertising purposes, please refer to Facebook's privacy policy available at Facebook Privacy and their advertisement settings at Facebook Ad Settings.

Abracadabra GmbH encourages our social media followers to review these policies and manage their privacy settings according to their preferences to ensure a secure and personalized online experience.

IV. Other Data Processing

1. Contractual Relationships

For the initiation and execution of contractual relationships with our customers, Abracadabra GmbH processes contact details and other relevant personal data provided to us. This is crucial for ensuring smooth business operations and is grounded in our legitimate interest, as per Art. 6 (1) f) GDPR. Moreover, we process data of customers and potential customers for evaluation and marketing purposes, which allows us to enhance our offerings and communicate effectively about our services. This processing also relies on Art. 6 (1) f) GDPR and is aligned with our interest in business development. Whenever consent is given (Art. 6 (1) a) GDPR) or there's a legal requirement (Art. 6 (1) c) GDPR), further processing of personal data may occur.

Data Protection Officer

Contact our Data Protection Officer for more information on data protection at company@abracadabra.work.