Data privacy policy in accordance with the GDPR

Protecting personal data is an important concern to us. Processing personal data is therefore carried out in accordance with the applicable European and national laws.

You can of course revoke your consent at any time with future effect. To do this, please contact the data controller in accordance with § 1.

The following statement provides an overview of what kind of data is collected, how it is used and shared, what security measures we take to protect your information, and how you obtain details about the information provided to us.

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 para. 1 S. 1 lit. a) of the EU General Data Protection Regulation (GDPR) serves as legal basis.
For the processing of personal data necessary for performance of a contract to which the data subject is a party, Art. 6 para. 1 S.  lit. b GDPR applies as the legal basis. This also applies to processing operations that are necessary for the performance of precontractual measures.
Insofar as processing personal data is necessary to fulfill a legal obligation to which we are subject, Art. 6 para. 1 S. 1 lit. c GDPR applies as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the said interest, Art. 6 para. 1 S. lit. f) GDPR applies as the legal basis for processing.

Data deletion and storage duration

The personal data of a data subject will be deleted or blocked as soon as the purpose of storage ceases to exist. Furthermore, data may be stored if this is provided for by European or national legislators in union regulations, laws, or other regulations to which we are subject as the data controller. Blocking or erasing data will also be carried out if a storage deadline prescribed by the above-mentioned standards expires, unless data storage is a necessity for concluding or performing a contract.


§ 1 The data controller and the data protection officer

(1) Name and address of the data controller
The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the EU Member States, as well as other data protection regulations, is:

1io GmbH
Mozartstraße 5
87435 Kempten
phone: +49 831 2513100

(2) Name and address of the Data Protection Officer

The Data Protection Officer for the data controller is:

Dieter Grohmann
Akwiso Datenschutz & Audit
Beethovenstraße 23
87435 Kempten
phone: +49 831 51247030

§ 2 Definition of terms
The privacy policy is based on the terms used by the European regulator in the adoption of the basic EU data protection regulation (hereinafter referred to as "GDPR"). The privacy policy should be easy to read and understand. To ensure this, the most important terms are explained below:


§ 3 Provision of the website and creation of log files


The data is also stored in the log files of our system. This data is not stored together with other personal user data.

The data is stored in log files to ensure the website's functionality. The data is also used to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is undertaken in this context.
These purposes also encompass our legitimate interest in data processing in accordance with Art. 6 para. 1 S.1 lit. f) GDPR.

If the data is stored in log files, this will be undertaken in seven days at the latest. Further storage is possible. In this case, the user's IP addresses will be deleted or anonymised in such a way that assignment of the accessing client is no longer be possible.


§ 4 Use of cookies

This cookie contains a characteristic character string ( called a cookie ID), which enables unique identification of the browser when reopening the website.


The data collected in this way is pseudonymised via technical provisions. It is therefore no longer possible to assign the data to the accessing user. This data is not stored together with your other personal data.
The legal basis for processing personal data using cookies is Art. 6 para. 1 S. 1 lit. f) GDPR.

We require cookies for the following applications:

The user data collected by technically necessary cookies shall not be used to create user profiles.

§ 5 Newsletter

To subscribe to our newsletter, we use the "double opt-in" procedure. This means that after your registration we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the time of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
The only required information for sending the newsletter is your email address. Any other further information [salutation, first name, last name] is voluntary and is used to address you personally.
The data will be used exclusively for sending the newsletter.


Collection of other personal data as part of the subscription process is for preventing the misuse of the services or of the used email address.

The other personal data collected during the subscription process will generally be deleted after a period of seven days.

This also enables withdrawal of consent for storage of personal data collected during the subscription process.




§ 6 Sending personal data to third parties

The following data is transmitted

This takes place regardless of whether YouTube makes available a user account via which you are logged in or no user account exists. If you are logged in to Google, your information will be directly associated with your account.

This website contains links to external sites. We are responsible for our own content. We have no influence over the contents of external links and are therefore not responsible for them, in particular we do not adopt their contents as our own. If you are directed to an external site, the privacy policy provided there applies. If you notice any illegal activities or contents on this page, please let us know. In this case we will check the content and respond accordingly (notice and take down procedure).


§ 7 Contact form and email contact

The following data is also stored at the time the message was sent:

During the sending process, your consent is obtained for processing data and reference is made to this data protection declaration.
Alternatively, you can contact us via the provided email address. In this case, the user's personal data that is transmitted along with the email will be stored.
If this includes information about communication channels (e.g. email address, telephone number), you also agree that we may contact you via this communication channel in order to respond to your request.
This data will not be disclosed to third parties in this context. The data is used exclusively for processing the conversation.


§ 8 Rights of the data subject


If your personal data is processed, you are a data subject as defined by the GDPR and you have the following rights with respect to the data controller:


Right to information


The right of rectification

You have the right to rectification and/or completion with respect to the data controller if the personal data processed concerning you is incorrect or incomplete.


The right to limitation of processing

Right to deletion


Right to information

If you have exercised your right to have the data controller correct, delete, or limit the processing, this party is obliged to inform all recipients to whom the personal data that concerns you has been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort. It is your right to have the data controller inform you regarding such recipients.

Right to data portability


Right of objection


The right to revoke the declaration of consent pursuant to data protection rights

You have the right at any time to revoke your data protection declaration of consent. The revocation of consent shall not affect the legality of any processing undertaken on the basis of this consent before its withdrawal. You can contact the data controller for this.

Automated decision in individual cases, including profiling


The right to file a legal complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or where the infringement is suspected, if you believe that the processing of personal data that concerns you is in contravention of GDPR. The supervisory authority with which the appeal has been filed shall inform the appellant of the status and results of the appeal, including the possibility of a judicial remedy under Art. 78 GDPR.

§ 9 Changes to the privacy policy
We reserve the right to change our privacy practices and this policy to adapt it to changes in relevant laws and/or regulations or to better meet your needs. Possible changes to our data protection practices will be announced here. Please note the current version date of the privacy policy.