1. NAME AND ADDRESS OF THE RESPONSIBLE PARTIES
Managing Director: Herr Norbert Türbach
Phone: +49 (0) 721 – 35 48 01 - 00
Fax: +49 (0) 721 – 35 48 01 - 10
2. DATA PROTECTION OFFICER CONTACT INFORMATION
3. DATA PROCESSING/DEFINITION
3.1. In the following document, we explain how we process your personal data when you use our website and outline your rights as a data subject.
3.2. Only if we subsequently inform you that the provision of personal data is required by law or contract or is required for a contract and you as the data subject are obliged to provide the personal data, these circumstances are present. Automated decision-making or profiling in accordance with Article 22 paragraphs 1 and 4 shall only take place if explicitly announced.
3.3. If you do not agree to provide us the data outlined below, you will be unable to use our services/functions or contact us.
3.4. For the purpose of this privacy statement, the following definition applies:
To learn more about how to control these setting or how to delete cookies on different browsers, please visit https://www.aboutcookies.org/how-to-control-cookies/ or https://www.aboutcookies.org/how-to-delete-cookies/
However, keep in mind that if you disable cookies, you may not be able to fully use all features of the web pages you visit or various tools on the Internet.
3.5. We use external service providers to process some parts of your data (data processor pursuant to art. 28 GDPR). We carefully select and commission these providors; they are bound by our instructions and monitored regularly. Incidentally, we only transfer your data to third parties in the instances outlined individually below.
4. DATA PROCESSING OVER WEBSITE
To ensure that your personal data is processed in a way that protects it against unauthorized or unlawful processing as well as against unintentional loss, destruction, or damage, we use encryption (SSL or TLS) on our website and all subpages.
4.2. Visiting our Website
Each time a user accesses our website, our system automatically collects the following data and information from the computer system of the calling computer:
• Name of the retrieved file
• Date and time of retrieval
• Amount of transmitted data
• Message regarding success of retrieval
• IP address
• Browser type
• Browser version and its language
• Operating system and its interface
• Referrer URL
• Access status / HTTP status code
• Device used
This data is stored in the log files of our host‘s IT system.
Purpose of data processing:
We process the data mentioned above to effectively display our website and ensure the security and stability of our information technology systems and the technology of our website. In addition, we process this data so that we can provide law enforcement authorities the information they need in the event of a cyber attack.
We have a legitimate interest in processing the data within the meaning of Art. 6 paragraph 1, point (f) GDPR, whereby a legitimate interest results from the stated purpose.
We delete the stored data as soon as the data storage no longer fulfills its stated purpose. The time of deletion is determined on a case-by-case basis; we will terminate storage, at the latest, as soon as any civil claims under § 199 BGB are statute-barred or prosecution is no longer possible because of the statute of limitations (§§ 78, 79 StGB)
4.3 Contact - General
When you contact us (by email, fax, etc.), we will store information including your name, email address, and any other contact details you have provide.
Purpose of data processing:
We must process the above mentioned data to answer your contact request.
The legal bases for data processing may vary, depending on the request. In any case, we process data to protect our legitimate interests within the meaning of Art. 6 paragraph 1, point (f) GDPR. These legitimate interests are a product of our intention to fulfill the purpose of the data processing.
We will delete your personal data as soon as storage is no longer necessary. The time of deletion will be determined on a case-by-case basis; we will terminate storage, at the latest, as soon as any civil claims under § 199 BGB are statute-barred or prosecution is no longer possible because of the statute of limitations (§§ 78, 79 StGB).
4.4. Contact – Contact Form
If you contact us via the contact form, the data you enter in the input mask will be transmitted and stored. When you use the contact form, we also store the following information at the time the message is sent:
- Date and time
Our website host provides us with a platform that allows us to show you our website and create applications that you can interact with. Your data is stored using the host's data storage, databases, and general applications.
Purpose of data processing:
We collect your personal data from the input mask to process the contact form. The other data we process at the time of dispatch prevents misuse of the contact form and ensures the security of our information technology systems.
To process this data, we obtain your consent before the contact form is sent and this data protection declaration is pointed out. On the basis of your consent, the legal basis of the processing is Art. 6 (1) lit (a) GDPR.
We will delete your data, at the latest, as soon as the data storage no longer fulfills its purpose. The time of deletion will be determined on a case-by-case basis; we will terminate storage, at the latest, as soon as any civil claims under § 199 BGB are statute-barred or prosecution is no longer possible because of the statute of limitations (§§ 78, 79 StGB).
At various points on our website, we use so-called cookies. We refer you to the function of cookies and how you can control general cookie settings in the sub-item "data processing/definition".
We use permanent and so-called session cookies.
The cookies on our website that enable us to analyze the behavior of visitors to our website (tracking) are only deployed if users previously give their consent. Cookies not involved in tracking are deployed by our system without this consent.
Purpose of data processing:
Session cookies are automatically deleted after you conclude your visit. Persistent cookies are stored for a maximum of 24 months or remain on your device until you delete them. We will delete data transmitted by cookies immediately after evaluating it.
5. USE OF GOOGLE SERVICES
We use various Google services (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), which are described in more detail below.
This involves the transmission of data to the USA. Google has a so-called EU-U.S. Privacy Shield certification. The EU-U.S. Privacy Shield Agreement is a data protection agreement intended to ensure an adequate level of data protection for data transfers to certified U.S. companies. The EU Commission has determined the adequacy of the guaranteed data protection level according to the EU-U.S. Privacy Shield Agreement by decision of 12.07.2016 (Az. C(2016) 4176).
5.1 Google Analytics
It is important to us to design our internet pages as optimized as possible and to make them attractive for our visitors. For this it is necessary for us to know how our website is used. For this purpose we use the service Google Analytics of Google.
Using Google Analytics, we record when you access which pages of our website, your rough location and data on the device you are using (e.g. device type, operating system or screen resolution). This data is processed pseudonymized, i.e. in such a way that the data is not linked to your directly identifying details (e.g. name, e-mail address).
How it works:
On our website, IP anonymization has been activated so that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
Purpose of data processing:
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and, where appropriate, to provide us as website operators with other services relating to website activity and internet usage.
Your Google Analytics data will be deleted after 14 months.
Possibility to object:
You may opt-out of data collection and use by Google Analytics by downloading and installing this browser plug-in.
The processing of your data takes place on the legal basis of Art. 6 para. 1 f) GDPR (balancing of interests). Our interest lies in being able to evaluate how our website is used and to adapt and optimize our website on the basis of the results.
5.2 GOOGLE Remarketing
We use Google Remarketing to show you interest-related advertising in the Google advertising network. A cookie is used to record your visit to our website. Google Remarketing is a function of the AdWords advertising network.
Purpose of use:
Google Remarketing allows us to target ads to you on Google and other Google advertising network websites based on your visit and activities on our website.
We delete the data collected by Google Remarketing after 12 months.
Possibility to object:
You can opt out of remarketing by doing one of the following:
You can deactivate interest-related ads from Google in the Google display settings
You can configure your browser so that it generally does not accept cookies. However, the use of our website may then only be possible to a limited extent.
The processing of your data takes place on the legal basis of Art. 6 para. 1 f) GDPR (balancing of interests). Our interest lies in optimizing our advertising on Google and Google's advertising network and in displaying targeted, interest-related advertising to visitors to our website.
5.3 GOOGLE Adwords and conversion tracking
We enable Google to collect certain activity from you on our website so that we can optimize our ads on Google and the Google advertising network.
Data collected and how it works:
If you have reached our website via an advertisement on Google or from the Google advertising network, Google may already have placed a cookie, i.e. a small text file, on your computer that has a lifespan of 30 days (so-called "conversion cookie").
If you carry out certain activities on our site, e.g. call up a page, fill out a form or order a newsletter, we integrate a code provided by Google on the relevant page. This code causes your browser to connect to Google and transmit the content of the conversion cookie. This way Google gets the information that your click on a particular ad has led to a particular activity (conversion) on our website and provides us with the result in a processed, statistical and non-personal form ("conversion tracking").
This way, we can optimize our ads that we place with Google by seeing what ads lead to what activity on our website. We only receive statistical data from Google, without reference to your person. Google collects your information in a pseudonymized form, i.e. it does not link it to any information that directly identifies you (e-mail address, Google user account) unless you have given Google your consent.
You can object to conversion tracking:
You can configure your browser so that it does not accept cookies. However, the use of our website and services may then only be possible to a limited extent.
You can deactivate interest-related ads from Google in the Google display settings:
The processing of your data takes place on the legal basis of Art. 6 Para. 1 f) GDPR (balancing of interests). Our interest lies in optimizing our advertising on Google and Google's advertising network.
6. OTHER DATA PROCESSING RELATED TO THE WEBSITE
6.1. Google Fonts
We use Google Fonts to ensure uniform font representation on our website.
The provider of Google Fonts is Google Inc. (hereinafter "Google"), 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
When visiting our website, your browser loads the embedded fonts into its cache. To do this, a direct connection between your browser and a Google server is established. We do not know what personal data Google uses.
Google‘s processing of your data is its own responsibility. We are therefore not responsible for any data processing related to this service. Nevertheless, we would like to inform you, to the extent possible, about the collection of data in connection with this service, based on Art. 13 GDPR.
Purpose of data processing:
The data mentioned above will be used so that we can make our website more consistent and therefore more appealing and user-friendly.
The legal basis for the use of this service is Art. 6 para. 1 point (f) GDPR. We have a legitimate interest in increasing the attractiveness of our website.
Since we have no influence over Google’s additional processing and use of data, we cannot say anything about how long Google stores this data.
Your data will be sent to Google's servers in the United States. The possibility exists that Google transmits this data to third parties.
We have integrated the plugin for the video portal YouTube on our website. The provider is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066 USA (hereinafter "YouTube").
When visiting our website, your browser will establish a direct connection to a YouTube server in the US. YouTube then transmits the video content embedded on our website to your browser.
As a result, YouTube processes at least the following data:
- your IP address
- Referer URL
YouTube‘s processing of your data is its own responsibility. We are therefore not responsible for data processing related to this service. Nevertheless, we would like to inform you, to the extent possible, about the collection of data in connection with this service, based on Art. 13 GDPR.
Purpose of data processing:
The above data is used to display YouTube platform videos on our website.
The legal basis for the use of the YouTube plug-in is Art. 6 paragraph 1, point (f) GDPR. We have a legitimate interest in increasing the attractiveness of our website.
Since we have no control over YouTube’s additional processing and use of data, we cannot say how long YouTube stores this data.
Your data will be sent to YouTube's servers in the United States. The possability exists that YouTube transmits this data to third parties.
7. SOCIAL MEDIA LINKS
We have decided not to embed so-called social media plugins on our website and, instead, only link to the pages of the companies listed below to protect your data:
• Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• LinkedIn Ireland Unlimited Company, Wilton Place,, Dublin 2, Irland
• XING SE, Dammtorstraße 30, 20354 Hamburg, Deutschland
• Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland
• Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA
If you follow a link, you will be redirected to the website of the respective company. Any processing of your personal data will be outside our area of responsibility. Nevertheless, we would like to fulfill our duty to inform under Art. 13 GDPR as far as we can.
Purpose of social media links:
We set the links to make our website appealing. Furthermore, the links are set to promote the communicative nature of the Internet and thus freedom of expression.
The legal basis for the creation of links is Art. 6 para. 1 point (f) GDPR. We have a legitimate interest in increasing the attractiveness of our website.
Since we have no influence over the further processing and use of the data by the companies identified above, we cannot say anything about how long the companies store the data.
If you follow a link, depending on the company, your data is sent to servers in third countries, such as the US. The possibility exists that the companies transmit this data to third parties.
8. RIGHTS OF THE DATA SUBJECT
According to the GDPR, you are the person affected by our processing of your personal data and you have the following rights for which we are "responsible":
Right of access, Art. 15 GDPR
You have the right to request information from the person responsible for the processing of your personal data. In this case, you have a right to information about the information listed in Art. 15 GDPR.
Right to rectification, Art. 16 GDPR
Pursuant to Art. 16 GDPR you have the right to the correction or completion of personal data concerning you by the person responsible, insofar as the personal data relating to you are incorrect or incomplete.
Right to erasure (‘right to be forgotten‘), Art. 17 GDPR
Pursuant to Art. 17 GDPR, you have the right to demand that the person responsible delete your personal data.
Right to restriction of processing, Art. 18 GDPR
As the data subject, you have the right, under the conditions of Art. 18 GDPR, to require the person responsible to restrict the processing of your data.
Right to notification, Art. 19 GDPR
Pursuant to Art. 19 GDPR, you have the right to be informed about the individuals or entities to whom your personal data have been disclosed and regarding whom the person responsible has informed you of your rights to rectification, deletion, or restriction of your data.
Right to data portability, Art. 20 GDPR
Under the conditions of Art. 20 GDPR you have the right to receive your personal data in a structured, common, and machine-readable format. You have the right, under the conditions of Art. 20 GDPR, to transfer this data to another person without hindrance by the person responsible in providing the personal data. You have the right to ensure that the personal data are transmitted directly from one responsible person to another responsible person, to the extent that this is technically feasible.
Right to object, Art. 21 GDPR
You have the right to object at any time to the processing of your personal data, on grounds relating to your particular situation, which are based on points (e) or (f) of Article 6 (1), including profiling based on those provisions. This also applies if personal data are processed for direct marketing purposes. You have the right to object at any time to the processing of your personal data for direct marketing; this includes profiling to the extent that it is related to such direct marketing.
Right of automated individual decision-making, including profiling, Art. 22 GDPR
As a data subject, you have the right, pursuant to Art. 22 GDPR, not to be subject to a decision based solely on automated processing – including profiling – that will have legal effects on you or similarly affect you considerably.
Right to withdraw consent, Art. 7 GDPR
According to Art. 7 GDPR, you have the right to withdraw your consent to the processing of your personal data at any time.
Right to lodge a complaint with a supervisory authority, Art. 77 GDPR
Without prejudice to other legal remedies, you have the right to complain to a supervisory authority in accordance with Art. 77 GDPR if you believe that our processing of your personal data violates the GDPR.