BACK

PRIVACY POLICY


1. Responsible person

SOKRATIV GmbH – Agency for Marketing
Rüsbergstraße 50a
58456 Witten, Germany

Telephone: +49 2302-282850
E-mail:
info@sokrativ.de


2. Applicable Legal Bases

The processing of personal data is based on the following legal frameworks:

General Data Protection Regulation (GDPR)
Federal Data Protection Act (BDSG)
Telecommunications Digital Services Data Protection Act (TTDSG)


3. Hosting and Data Processing Agreement

This website is technically operated by:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur, Germany

A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.

Legal basis:
Art. 6 (1) (f) GDPR
Legitimate interest in the secure and efficient provision of the website


4. Server Log Files

When accessing this website, the following data is automatically processed:

IP address
Date and time of access
Browser type and version
Operating system
Referrer URL
Hostname of the accessing computer

Purposes of processing:

Ensuring system security
Abuse and fraud prevention
Error analysis
Ensuring smooth operation

Legal basis: Art. 6 (1) (f) GDPR

Storage period:

Log files are deleted after 30 days at the latest unless security related events require longer retention.


5. Sweepstakes Processing of Personal Data

5.1 Processed Data

The following personal data is processed when participating in the sweepstakes:

First and last name
Postal address
Email address
Date of birth
Time of participation
IP address for abuse prevention


5.2 Purposes of Processing

Conducting and administering the sweepstakes
Verification of eligibility
Identifying and notifying winners
Shipping or handover of prizes
Legal documentation
Prevention of abusive multiple entries

Data will only be used for advertising purposes with separate voluntary consent.


5.3 Legal Basis

Art. 6 (1) (b) GDPR
Conducting the sweepstakes

Art. 6 (1) (f) GDPR
Abuse prevention and system security


5.4 Storage Period

Participant data will be deleted no later than 3 months after completion of the sweepstakes.

Winner data may be stored for up to 10 years due to legal retention requirements.

IP addresses will be deleted after 30 days unless misuse is detected.


5.5 Data Sharing

Data will only be shared where necessary with:

Travel provider for prize fulfillment
Shipping or logistics service providers

Legal basis: Art. 6 (1) (b) GDPR


6. Use of Technically Necessary Cookies

This website uses cookies required for technical operation and secure execution of the sweepstakes.

These include cookies for:

Providing basic website functions
Storing cookie settings
Ensuring IT security
Preventing abusive or automated access

These cookies are necessary for the operation of the website and cannot be disabled.

Legal basis:

Section 25 (2) No. 2 TTDSG
Art. 6 (1) (f) GDPR


7. Use of Google reCAPTCHA

To protect our registration form from automated entries, misuse and spam, we use Google reCAPTCHA.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

reCAPTCHA is used solely to ensure the functionality and security of our website and to prevent automated mass registrations.

The following data may be processed:

IP address
Mouse movements and interactions
Time spent on the website
Device and browser information

Processing is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR and Section 25 (2) No. 2 TTDSG.

Data may be transferred to servers of Google LLC in the USA. Google is certified under the EU US Data Privacy Framework.

Further information:
https://policies.google.com/privacy


8. Automated Decision Making

Automated decision making or profiling pursuant to Art. 22 GDPR does not take place.


9. Data Subject Rights

You have the following rights:

Right of access Art. 15 GDPR
Right to rectification Art. 16 GDPR
Right to erasure Art. 17 GDPR
Right to restriction of processing Art. 18 GDPR
Right to data portability Art. 20 GDPR
Right to object Art. 21 GDPR
Withdrawal of consent

You may withdraw your consent at any time by sending an email to:

info@sokrativ.de

Right to lodge a complaint:

State Commissioner for Data Protection and Freedom of Information
North Rhine Westphalia

Kavalleriestraße 2–4
40213 Düsseldorf, Germany

www.ldi.nrw.de


10. Data Security

This website uses SSL TLS encryption.

Technical and organizational measures protect personal data against:

Manipulation
Loss
Destruction
Unauthorized access


Witten, April 2026
SOKRATIV GmbH



BACK

PRIVACY POLICY


1. Your personal data within the meaning of Art. 4 No. 1 GDPR (e.g. IP address, name, date of birth, address, email address) will only be processed by us for the following purposes:

in accordance with the provisions of German data protection law and taking into account the European General Data Protection Regulation (GDPR)

processed. The following regulations inform you about the type, scope and purpose of the collection, processing and use.

personal data.

2. The processing of personal data within the meaning of Article 4 No. 2 GDPR is lawful in accordance with Article 6 GDPR if one of the following applies.

The following conditions are met:
a) The data subject has given consent to the processing of personal data relating to him or her for one or more specific purposes;
b) processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract;
c) processing is necessary for compliance with a legal obligation to which the controller is subject;
d) processing is necessary to protect the vital interests of the data subject or of another natural person;
e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where

The person concerned is a child.


3. The processing of special categories of personal data (e.g., health data) within the meaning of Article 9(1) GDPR is particularly permissible under Article 9

Article 2 of the GDPR is lawful if one of the following conditions is met:
– the person has given their explicit consent;
– the processing is necessary for the establishment, exercise or defense of legal claims or for actions of the courts in the course of their judicial activities.


4. Automated decision-making or profiling with regard to personal data within the meaning of Article 22 GDPR does not take place.


5. The operator ensures the security of the data in accordance with Article 32 GDPR, taking into account the principle of proportionality, by implementing appropriate measures.

technical measures are safe.


6. Should a data breach occur contrary to expectations, the competent supervisory authority will be notified in accordance with Article 33 GDPR, as well as the

The data subject has been notified in accordance with Article 34 GDPR.


Scope
This privacy policy applies only to our websites. If you are redirected to other websites via links on our pages,

Please inform yourself there about how your data is handled.


Duration of data storage
The retention period for the data they transmit is governed by statutory retention requirements. Insofar as commercial and

Due to the need to comply with tax law retention periods, the storage duration of certain data can be up to 10 years.


Disclosure of data to third parties
Data transmitted during the contact process will only be passed on to third parties (Art. 4 No. 10 GDPR) if:
a) You have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
b) the disclosure is necessary pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR for the establishment, exercise or defence of legal claims and no

There is reason to believe that you have an overriding legitimate interest in not disclosing your data.
c) in the event that there is a legal obligation to disclose the data pursuant to Article 6(1)(c) GDPR, as well as
d) this is legally permissible and necessary for the performance of a contract with you pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.


Controller within the meaning of the GDPR
The controller within the meaning of the General Data Protection Regulation (GDPR), as well as other data protection laws applicable in the European Union.

and other provisions with a data protection character is:
SOKRATIV GmbH, Rüsbergstraße 50a, 58456 Witten

Data Protection Officer: Mr. Kristian Krause
Tel.:  49 23 02 – 28 28 50, email: info@sokrativ.de


Storage of access data in log files
You can visit our websites without providing any personal information.
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes:
• Browser type/browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of server request
This data cannot be linked to specific individuals. This data will not be combined with other data sources.
We reserve the right to review this data subsequently if we become aware of concrete indications of unlawful use.
The purpose of the processing arises from our legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR.
A data processing agreement has been concluded with our hosting provider.


Cookies
We use cookies on our website. These are small files that your browser automatically creates and stores on your device.

(PC, laptop, tablet, smartphone, etc.) are stored when you visit our website. Cookies do not harm your device, nor do they contain viruses, Trojans, or other malware. Information is stored in the cookie that relates to the specific device used. However, this does not mean that we thereby gain direct knowledge of your identity.
The use of cookies serves, on the one hand, to make your use of our website more convenient. For example, we use so-called session cookies.

We use cookies to recognize that you have already visited certain pages of our website. These are automatically deleted when you leave our site.
Furthermore, we also use temporary cookies to optimize user-friendliness, which are used for a specific, predetermined purpose.

This information will be stored on your device for a certain period of time. When you revisit our site to use our services, it will be automatically stored.

We recognized that you had already visited us and what information and settings you had entered, so you wouldn't have to enter them again.
These cookies allow us to automatically recognize that you have visited our site before when you return.

Cookies are automatically deleted after a defined period. The data processed by cookies is used for the aforementioned purposes to protect user privacy.

This is necessary for our legitimate interests and those of third parties pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. Most browsers accept cookies automatically.

However, you can configure your browser so that no cookies are stored on your computer or so that a notification always appears before

A new cookie will be created. However, completely disabling cookies may prevent you from using all the features of our website.

can use them.


Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files,

which are stored on your computer and enable an analysis of your use of the website. The data generated by the cookie

Information about your use of this website is generally transmitted to and stored on a Google server in the USA.

If IP anonymization is activated on this website, your IP address will be anonymized by Google within member states of the EU.

European Union or in other contracting states of the Agreement on the European Economic Area previously reduced.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this

Google will use this information to evaluate your use of the website, to compile reports on website activity.

to compile and to provide further services related to website and internet usage to the

to provide website operators. The IP address transmitted by your browser as part of Google Analytics will not be combined with other data from

Google merged.


Opt-Out
You can prevent the storage of cookies by adjusting your browser settings accordingly; however, it will be noted that

Please note that in this case you may not be able to fully utilize all the functions of this website. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address).

You can prevent Google from collecting and processing this data by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.
The anonymization function of Google Analytics is used to mask IP addresses. A contract has been signed with Google Inc. regarding the

Order processing closed.
For more information on how Google Analytics handles user data, please see Google's privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de


Google Tag Manager
Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Tag Manager tool itself (which the

(Tags implemented) is a cookieless domain and does not collect any personal data. The tool triggers other tags that

They may in turn collect data. Google Tag Manager does not access this data. If deactivation has been performed at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.


Google reCAPTCHA
We use the reCAPTCHA service from Google Inc. (Google) to protect your data. This query serves to distinguish whether the

Input is either by a human or abusively through automated, machine processing. The query includes the transmission of the IP address.

Your address and, if applicable, other data required by Google for the reCAPTCHA service will be transmitted to Google. For this purpose, your input will be sent to Google.

transmitted and further used there. By using reCAPTCHA, you agree that the information you provide will be transmitted and used there.

Recognition is incorporated into the digitization of old works. If IP anonymization is activated on this website, your IP address will be anonymized by

However, Google within member states of the European Union or in other contracting states of the Agreement on the European

The economic area is shortened beforehand. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other Google data.
These data are subject to Google's separate privacy policy.
This function is used to prevent unlawful (especially automated) participation. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.
Further information on Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/


YouTube
Our website uses plugins from the Google-operated site YouTube. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This informs the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.
The use of YouTube videos serves to better visualize our offer and therefore constitutes a legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR.
Further information on how user data is handled can be found in YouTube's privacy policy at:
https://www.google.de/intl/de/policies/privacy


Registration form
By using the entry form, the information you enter and the attached files will be transmitted and stored for the purpose of your participation in the prize draw. Your data will be shared with the prize draw partner. Further details can be found in the terms and conditions of participation.
The lawfulness of the transfer of data is based on your consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR.
Data security / SSL encryption
In accordance with the legal regulations of Section 13 Paragraph 7 of the German Telemedia Act (TMG), this website uses SSL encryption, indicated by a padlock icon in your browser's address bar. With SSL encryption enabled, transmitted data cannot be intercepted by third parties.
This is usually a 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can tell whether a particular page of our website is being transmitted using encryption by the closed padlock icon in your browser's status bar.


We also employ appropriate technical and organizational security measures (TOMs) to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.


User rights
You can request information about the personal data stored about you at any time and free of charge. Your rights include confirmation, correction, restriction, blocking, and deletion of such data, as well as the provision of a copy of the data in a transferable format, and the right to withdraw any consent you have given and to object to its processing. Statutory retention obligations remain unaffected.
Your rights arise in particular from the following provisions of the GDPR:
• Article 7(3) – Right to withdraw consent under data protection law
• Article 12 – Transparent information, communication and modalities for exercising the rights of the data subject
• Article 13 – Information obligation when collecting personal data from the data subject
• Article 14 – Information obligation where personal data have not been obtained from the data subject
• Article 15 – Right of access by the data subject, right to confirmation and provision of a copy of personal data
• Article 16 – Right to rectification
• Article 17 – Right to erasure (“right to be forgotten”)
• Article 18 – Right to restriction of processing
• Article 19 – Notification obligation in connection with the rectification or erasure of personal data or the restriction of processing
• Article 20 – Right to data portability
• Article 21 – Right to object
• Article 22 – Right not to be subject to a decision based solely on automated processing, including profiling
• Article 77 – Right to lodge a complaint with a supervisory authority
To exercise your rights (with the exception of Article 77 GDPR), please contact the entity named under the heading “Controller within the meaning of the GDPR” (e.g. by email).
Competent supervisory authority:


State Commissioner for Data Protection and Freedom of Information NRW
Cavalry Street 2-4
40213 Düsseldorf
Telephone: 0211/38424-0
Fax: 0211/38424-10
Email: poststelle@ldi.nrw.de
Homepage: https://www.ldi.nrw.de
(Please check the website to ensure the above information is up-to-date before contacting us.)