Allround Team

Data Protection

1. Introduction

With the following information, we would like to provide you – as a “data subject” – with an overview of how we process your personal data, as well as an explanation of your rights under data protection laws. In principle, it is possible to use our websites without entering any personal data. However, if you wish to make use of specific services offered by our company via our website, the processing of personal data may become necessary. In cases where the processing of personal data is required and there is no legal basis for such processing, we will generally obtain your consent. The processing of personal data – such as your name, address, or e-mail address – is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to “Allround Team GmbH.” Through this privacy policy, we wish to inform you about the scope and purpose of the personal data that we collect, use, and process. As the party responsible for data processing, we have implemented numerous technical and organizational measures to ensure the most comprehensive protection possible for the personal data processed via this website. Nevertheless, internet-based data transmissions may inherently have security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us through alternative means, such as by telephone or by mail. You, too, can take simple and easy-to-implement measures to protect yourself against unauthorized access to your data by third parties. We would therefore like to provide you with some guidance here on how to handle your data securely:

Protect your account (login, user account, or customer account) and your IT system (computer, laptop, tablet, or mobile device) using secure passwords.
Only you should have access to your passwords.
Ensure that each password is used for only one account (login, user account, or customer account).
Do not use the same password across different websites, applications, or online services.
Especially when using IT systems that are publicly accessible or shared with others, it is essential to log out after every session on a website, application, or online service.
Passwords should be at least 12 characters long and chosen in a way that makes them difficult to guess. They should not consist of common everyday words, your own name, or the names of relatives; instead, they should include a mix of uppercase and lowercase letters, numbers, and special characters.

2. Controller

The party responsible under the GDPR is: Allround Team GmbH Lüderichstr. 2–4, 51105 Cologne, Germany Phone: +49 221 99 55 50-0 Email: info@allround-team.com Representative of the controller: Alexandra Neubert

3. Data Protection Officer

You can reach our Data Protection Officer at datenschutzbeauftragter@allround-team.com or via our postal address, marked for the attention of the “Data Protection Officer.”

4. Definitions

This privacy policy is based on the terminology used by the European legislator when adopting the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easily readable and understandable for the general public, as well as for our customers and business partners. To ensure this, we would like to begin by explaining the terms used. In this privacy policy, we use, among others, the following terms:

1. Personal data

Personal data means any information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified, directly or indirectly – in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more specific factors that are an expression of the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

2. Data subject

A data subject is any identified or identifiable natural person whose personal data are processed by the controller (our company).

3. Processing

Processing means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

4. Restriction of processing

Restriction of processing means the marking of stored personal data with the aim of limiting their future processing.

5. Profiling

Profiling is any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person – in particular, to analyze or predict aspects concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

6. Pseudonymization

Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures intended to ensure that the personal data are not attributed to an identified or identifiable natural person.

7. Data Processors

A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.

8. Recipient

A recipient is a natural or legal person, public authority, agency, or another body to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

9. Third party

A third party is a natural or legal person, public authority, agency, or other body – other than the data subject, the controller, the processor, and the persons who, under the direct authority of the controller or the processor, are authorized to process the personal data.

10. Consent

Consent is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes – by a statement or by a clear affirmative action – signifying that the data subject agrees to the processing of personal data relating to them.

5. Legal basis for processing

Article 6(1)(a) of the GDPR (in conjunction with Section 25(1) of the TDDDG – formerly the TTDSG) serves as the legal basis for our company’s processing activities for which we obtain consent for a specific purpose. If the processing of personal data is necessary for the performance of a contract to which you are a party – for example, in the case of processing activities required for the delivery of goods or the provision of another service or consideration – such processing is based on Article 6(1)(b) of the GDPR. The same applies to processing activities necessary for the implementation of pre-contractual measures, such as in the case of inquiries regarding our products or services. If our company is subject to a legal obligation that necessitates the processing of personal data – for instance, to fulfill tax-related obligations – such processing is based on Article 6(1)(c) of the GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This could occur, for example, if a visitor were to be injured on our premises, requiring their name, age, health insurance details, or other vital information to be disclosed to a physician, a hospital, or other third parties. In such an instance, the processing would be based on Article 6(1)(d) of the GDPR. Finally, processing activities may be based on Article 6(1)(f) of the GDPR. This legal basis applies to processing operations that are not covered by any of the aforementioned legal grounds, provided that the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests, fundamental rights, or fundamental freedoms of the data subject. Such processing operations are permitted, in particular, because they have been explicitly mentioned by the European legislator. In this regard, the legislator took the view that a legitimate interest could be assumed if you are a customer of our company (Recital 47, second sentence, of the GDPR). Our services are generally intended for adults. Individuals under the age of 16 may not transmit personal data to us without the consent of their parents or legal guardians. We do not request, collect, or share with third parties any personal data from children or adolescents.

6. Technology

6.1 SSL/TLS Encryption

This site uses SSL/TLS encryption to ensure secure data processing and to protect the transmission of confidential content—such as orders, login credentials, or contact inquiries—that you send to us as the site operator. You can identify an encrypted connection by the fact that the browser’s address bar displays “https://” instead of “http://,” as well as by the padlock icon in your browser’s address bar. We employ this technology to safeguard the data you transmit to us.

6.2 Data collection when visiting the website

If you use our website solely for informational purposes – meaning you do not register, provide us with any other information, or grant consent for data processing activities that require such consent – we only collect data that is strictly technically necessary to provide the service. This generally consists of data transmitted by your browser to our server (stored in so-called “server log files”). Each time you or an automated system accesses our website, a series of general data and information is collected. This general data and information is stored in the server’s log files. The following may be collected:

the types and versions of browsers used, the operating system used by the accessing system,
the website from which an accessing system reaches our website (so-called referrers),
the subpages accessed on our website by an accessing system,
the date and time of access to the website,
an Internet Protocol address (IP address), and
the internet service provider of the accessing system.

We do not draw any conclusions about you personally when using this general data and information. Rather, this information is needed to

to deliver the content of our website correctly,
to optimize the content of our website as well as the advertising for it,
to ensure the long-term functionality of our IT systems and the technology underlying our website, and
to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyberattack.

We analyze the data and information collected in this way for statistical purposes, as well as with the objective of enhancing data protection and data security within our company, ultimately ensuring an optimal level of protection for the personal data we process. The data contained in server log files is stored separately from any personal data provided by an individual. The legal basis for the data processing is Article 6(1), first sentence, point (f) of the GDPR. Our legitimate interest arises from the purposes for data collection listed above.

7. Cookies

7.1 General Information About Cookies

Cookies are small files that your browser automatically creates and stores on your IT device (laptop, tablet, smartphone, etc.) when you visit our website. These cookies contain information related to the specific device being used. However, this does not mean that we gain direct knowledge of your identity. Cookies are used to make your experience of our website more pleasant. For instance, we use “session cookies” to recognize that you have already visited specific pages on our site. These are automatically deleted once you leave our website. Furthermore, we use temporary cookies to enhance user-friendliness; these are stored on your device for a specific, predetermined period. When you return to our site to use our services, the system automatically recognizes that you have visited us before, as well as the inputs and settings you previously provided, sparing you the need to enter them again. Additionally, we use cookies to compile statistics on the use of our website and to evaluate our offerings for the purpose of optimization. These cookies allow us to automatically recognize, upon your return to our website, that you have visited us previously. Cookies set in this manner are automatically deleted after a defined period. The specific storage duration for these cookies can be found in the settings of the consent tool being used. We use cookies on our website. These are small files that your browser automatically creates and stores on your IT device (laptop, tablet, smartphone, etc.) when you visit our site. The cookies contain information related to the specific device being used. However, this does not mean that we gain direct knowledge of your identity. The use of cookies serves, among other things, to make your experience of our services more pleasant. For instance, we use “session cookies” to recognize that you have already visited specific pages on our website. These are automatically deleted once you leave our site. Furthermore, we use temporary cookies to optimize user-friendliness; these are stored on your device for a specific, predetermined period. When you visit our site again to use our services, the system automatically recognizes that you have visited us before – as well as the inputs you made and the settings you selected – so that you do not have to enter them again. You can configure your browser to notify you when cookies are being set, allowing you to decide whether to accept them on a case-by-case basis, or you can choose to reject cookies in specific instances or altogether. Please note that if you do not accept cookies, the functionality of this website may be limited. Cookies that are necessary for carrying out the electronic communication process or for providing specific functions you have requested (e.g., a shopping cart feature) are stored on the basis of Article 6(1)(f) of the GDPR. We have a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of our services. If other types of cookies (such as those used to analyze your browsing behavior) are stored, they are addressed separately in this privacy policy.

8. Content of our website

8.1 Getting in touch / Contact form

Personal data is collected when you contact us (e.g., via a contact form or email). The specific data collected when using a contact form is indicated on the respective form. This data is stored and used exclusively for the purpose of responding to your inquiry or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry, in accordance with Article 6(1)(f) of the GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Article 6(1)(b) of the GDPR. Your data will be deleted once your inquiry has been fully processed – that is, when the circumstances indicate that the matter in question has been definitively resolved and there are no statutory retention obligations that would prevent such deletion.

9. Our activities on social networks

To enable us to communicate with you via social networks and keep you informed about our services, we maintain a presence on these platforms through our own dedicated pages. When you visit one of our social media pages, we – along with the provider of the respective social media platform – act as joint controllers for the data processing activities that occur, in accordance with Article 26 of the GDPR. Please note that we are not the original provider of these pages; rather, we simply utilize the features and options made available to us by the respective platform providers. We would like to point out that your data may be processed outside the European Union or the European Economic Area. Consequently, using these platforms may entail data protection risks for you; for instance, exercising your rights – such as the right to access, erasure, or objection – may be more difficult. Furthermore, social media providers often process data directly for advertising purposes or to analyze user behavior – activities over which we have no control. If a provider creates user profiles, they frequently employ cookies or link your usage behavior to the personal member profile you have established on the social network. The described processing of personal data is carried out in accordance with Article 6(1)(f) of the GDPR, based on our legitimate interest – as well as the legitimate interest of the respective provider – in communicating with you in a modern manner and informing you about our services. In cases where you are required to provide consent for data processing to a specific provider, the legal basis is Article 6(1)(a) of the GDPR in conjunction with Article 7 of the GDPR. As we do not have access to the providers’ data sets, we recommend that you exercise your rights (e.g., the right to access, rectification, erasure, etc.) directly with the respective provider. Further information regarding the processing of your data on social networks is provided below for each of the social network providers we utilize:

9.1 Facebook

(Joint) controller for data processing in Europe: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland Privacy Policy (Data Policy): https://www.facebook.com/about/privacy

9.2 Instagram

(Joint) controller for data processing in Germany: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland Privacy Policy (Data Policy): https://instagram.com/legal/privacy/

9.3 LinkedIn

(Joint) controller for data processing in Europe: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland Privacy Policy: https://www.linkedin.com/legal/privacy-policy

9.4 XING (New Work SE)

(Joint) controller for data processing in Germany: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung Requests for information for XING members: https://www.xing.com/settings/privacy/data/disclosure

9.5 Explanation regarding social media buttons with “Shariff” data protection

This website uses “Shariff” social media buttons, developed by heise with a focus on data protection. These allow you to use social media buttons without unnecessarily compromising your privacy. You can share content on social networks if you wish, WITHOUT the networks learning which websites you have visited or how long you spent on them simply by your visiting this site. If you would like to learn more about “Shariff,” we recommend visiting the heise website: http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html

10. Your rights as a data subject

10.1 Right to confirmation

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

10.2 Right of access, Art. 15 GDPR

You have the right to obtain from us, at any time and free of charge, information regarding the personal data stored about you, as well as a copy of such data, in accordance with the applicable legal provisions.

10.3 Right to rectification, Art. 16 GDPR

You have the right to request the correction of inaccurate personal data concerning you. Furthermore, taking into account the purposes of the processing, you have the right to request that incomplete personal data be completed.

10.4 Erasure (Art. 17 GDPR)

You have the right to request that we delete personal data concerning you without undue delay, provided that one of the legally stipulated grounds applies and the processing or storage of such data is not necessary.

10.5 Restriction of processing (Art. 18 GDPR)

You have the right to request that we restrict processing if one of the legal requirements is met.

10.6 Data Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller – without hindrance from us – provided that the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means; this right does not apply, however, if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us. Furthermore, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you have the right to have your personal data transmitted directly from one controller to another, provided that this is technically feasible and does not adversely affect the rights and freedoms of other individuals.

10.7 Right to object (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6(1)(e) (data processing in the public interest) or (f) (data processing based on a balancing of interests) of the GDPR. This also applies to any profiling based on these provisions, as defined in Article 4, point 4, of the GDPR. If you lodge an objection, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims. In certain cases, we process personal data for the purpose of direct marketing. You may object to the processing of your personal data for such marketing purposes at any time. This also applies to profiling, insofar as it is related to such direct marketing. If you object to the processing of your personal data for direct marketing purposes, we will no longer process your personal data for these purposes. Furthermore, you have the right to object—on grounds relating to your particular situation—to the processing of your personal data by us for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest. In connection with the use of information society services, and notwithstanding Directive 2002/58/EC, you are free to exercise your right to object by means of automated procedures that use technical specifications.

10.8 Revocation of consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time, with effect for the future.

10.9 Complaint to a supervisory authority

You have the right to lodge a complaint with a supervisory authority responsible for data protection regarding our processing of personal data.

11. Currency and Amendments to the Privacy Policy

This privacy policy is currently in effect and is dated September 2025. As we continue to develop our websites and services, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The most current version of the privacy policy can be accessed and printed at any time on our website at “www.allround-team.com/en/data-privacy/”.

Privacy Policy for Social Media Shariff

On our website, we use social media buttons that operate according to the “Shariff” principle. Shariff is a project developed by *c’t* magazine to improve data protection standards in the context of social media.

What is Shariff?

Conventional social media buttons transmit data to social networks every time a page is loaded, regardless of whether the user actually interacts with the button or not. Shariff, by contrast, only establishes a direct connection to social networks when the user actively clicks the button to share content. Consequently, data is only transmitted once the user has given their consent.

How does Shariff work on our website?

Our Shariff buttons are configured so that they do not transmit any data to social networks by default. A connection to a social network – such as Facebook – is only established, and the relevant data transferred, once you actively click on a button (for example, to share a post). Until that point, your browsing behavior remains anonymous.

Why Shariff?

By using Shariff, we aim to ensure that your privacy is protected while still giving you the option to share our content via social networks. We want you to be able to share our content without your data being transmitted to social networks without your consent.