Name: CraftSessionId

Description: Craft relies on PHP sessions to maintain sessions across web requests. That is done via the PHP session cookie. Craft names that cookie “CraftSessionId” by default, but it can be renamed via the phpSessionId config setting. This cookie will expire as soon as the session expires.

Provider: this site

Expiry: Session

Name: *_identity

Description: When you log into the Control Panel, you will get an authentication cookie used to maintain your authenticated state. The cookie name is prefixed with a long, randomly generated string, followed by _identity. The cookie only stores information necessary to maintain a secure, authenticated session and will only exist for as long as the user is authenticated in Craft.

Provider: this site

Expiry: Persistent

Name: *_username

Description: If you check the "Keep me logged in" option during login, this cookie is used to remember the username for your next authentication.

Provider: this site

Expiry: Persistent

Name: CRAFT_CSRF_TOKEN

Description: Protects us and you as a user against Cross-Site Request Forgery attacks.

Provider: this site

Expiry: Session

Name: PayPal

Description: This is a payment service. Processing Company PayPal (Europe) S.à r.l. et Cie, S.C.A 22-24 Boulevard Royal, L-2449 Luxembourg Data Purposes This list represents the purposes of the data collection and processing. A consent is only valid for the stated purposes. The collected data can't be used or stored for any other purpose than the purposes listed below. Payment Functionality Technologies Used Cookies Data Collected This list represents all (personal) data that is collected by or through the use of this service. Name Address Bank details Passwords TANs and checksums Contract details Payment information Credit and Debit card number Transaction information Purchase activity IP address Browser information Internet Service Provider Geographic location Legal Basis In the following the legal basis for the processing of personal data required by Art. 6 I 1 GDPR is listed. Art. 6 Abs. 1 S. 1 lit. b GDPR Location of Processing European Union Retention Period The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes. The data will be deleted as soon as they are no longer needed for the processing purposes. Data Recipients PayPal (Europe) S.à r.l. et Cie, S.C.A Financial institutions Data Protection Officer of Processing Company Below you can find the email address of the data protection officer of the processing company. dpo@paypal.com Click here to read the privacy policy of the data processor https://www.paypal.com/de/webapps/mpp/ua/privacy-full#2 Click here to read the cookie policy of the data processor https://www.paypal.com/de/webapps/mpp/ua/cookie-full

Provider: PayPal

Expiry:

Name: Stripe

Description: This service provides technology for operating online payment systems. Processing Company Stripe, Inc. 3180 18th Street, San Francisco, CA 94110, United States of America Data Purposes This list represents the purposes of the data collection and processing. A consent is only valid for the stated purposes. The collected data can't be used or stored for any other purpose than the purposes listed below. Payment Technologies Used Cookies Data Collected This list represents all (personal) data that is collected by or through the use of this service. Payment method Date of purchase Purchase amount Payment method information Legal Basis In the following the legal basis for the processing of personal data required by Art. 6 I 1 GDPR is listed. Art. 6 para. 1 s. 1 lit. b GDPR Location of Processing United States of America Retention Period The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes. The data will be deleted as soon as they are no longer needed for the processing purposes. Data Recipients Stripe, Inc. Data Protection Officer of Processing Company Below you can find the email address of the data protection officer of the processing company. privacy@stripe.com Transfer to Third Countries This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing. United States of America Click here to read the privacy policy of the data processor https://stripe.com/us/privacy/

Provider: Stripe

Expiry:

Name: YouTube Video

Description: This is a video player service. Processing Company Google Ireland Limited Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland Data Purposes This list represents the purposes of the data collection and processing. A consent is only valid for the stated purposes. The collected data can't be used or stored for any other purpose than the purposes listed below. Displaying Videos Technologies Used Cookies (if "Privacy-Enhanced Mode" is not activated) Data Collected This list represents all (personal) data that is collected by or through the use of this service. IP Address Referrer url Device information Watched Videos Legal Basis In the following the legal basis for the processing of personal data required by Art. 6 I 1 GDPR is listed. Art. 6 para. 1 s. 1 lit. a GDPR Location of Processing European Union Retention Period The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes. The data will be deleted as soon as they are no longer needed for the processing purposes. Data Recipients Alphabet Inc. Google LLC Google Ireland Limited Data Protection Officer of Processing Company Below you can find the email address of the data protection officer of the processing company. https://support.google.com/policies/contact/general_privacy_form Transfer to Third Countries This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing. Worldwide Click here to read the privacy policy of the data processor https://policies.google.com/privacy?hl=en Click here to opt out from this processor across all domains https://safety.google/privacy/privacy-controls/ Click here to read the cookie policy of the data processor https://policies.google.com/technologies/cookies?hl=en

Provider: YouTube

Expiry:

Name: Vimeo

Description: This is a service for displaying video content. Processing Company Vimeo LLC 555 West 18th Street, New York, New York 10011, United States of America Data Purposes This list represents the purposes of the data collection and processing. A consent is only valid for the stated purposes. The collected data can't be used or stored for any other purpose than the purposes listed below. Displaying video Technologies Used Cookies Data Collected This list represents all (personal) data that is collected by or through the use of this service. IP address Browser type Device information Browser information Cookie information Browser language Referrer URL Pages visited Operating system Search query Information from third party sources Information users provide on this site Legal Basis In the following the legal basis for the processing of personal data required by Art. 6 I 1 GDPR is listed. Art. 6 para. 1 s. 1 lit. a GDPR Location of Processing United States of America Retention Period The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes. The data will be deleted as soon as they are no longer needed for the processing purposes. Data Recipients Google Analytics Vimeo LLC Service Partner Data Protection Officer of Processing Company Below you can find the email address of the data protection officer of the processing company. Privacy@vimeo.com Transfer to Third Countries This service may forward the collected data to a different country. Please note that this service might transfer the data outside of the EU/EEA and to a country without the required data protection standards. If the data is transferred to the US, there is a risk that your data can be processed by US authorities, for control and surveillance measures, possibly without legal remedies. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing. United States of America Click here to read the privacy policy of the data processor https://vimeo.com/privacy Click here to opt out from this processor across all domains https://vimeo.com/cookie_policy Click here to read the cookie policy of the data processor https://vimeo.com/cookie_policy

Provider: Vimeo

Expiry: