Privacy Policy

The use of our website is generally possible without providing personal data. Where personal data (such as name, address or email address) is collected on our website, this is always done on a voluntary basis where possible. This data will not be passed on to third parties without your explicit consent.

We point out that data transmission over the internet (e.g. communication by email) can have security gaps. Complete protection of data from access by third parties is not possible.

We have implemented numerous technical and organisational measures to ensure the most complete protection possible for personal data processed via this website. Nevertheless, internet-based data transmissions can have security gaps, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us via alternative means, for example by telephone.

Definitions

Our privacy policy uses terms defined by the European legislator when adopting the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand for the public as well as our customers and business partners. To ensure this, we would like to explain the terms used in advance.

We use in this privacy policy the following terms:

  • Personal data
    Personal data means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  • Data subject
    Data subject is any identified or identifiable natural person whose personal data is processed by the controller.
  • Processing
    Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  • Restriction of processing
    Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.
  • Profiling
    Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
  • Pseudonymisation
    Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
  • Controller
    Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
  • Processor
    Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
  • Recipient
    Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.
  • Third party
    Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
  • Consent
    Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Cookies

We use cookies on our website. Cookies are text files that are stored on a computer system via an internet browser.

Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which internet pages and servers can be assigned to the specific internet browser in which the cookie was stored. This allows visited internet sites and servers to differentiate the individual browser of the data subject from other internet browsers that contain other cookies.

Through the use of cookies, we can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.

By means of a cookie, the information and offers on our website can be optimised with the user in mind. Cookies allow us, as previously mentioned, to recognise our website users. The purpose of this recognition is to make it easier for users to utilise our website.

The data subject may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an internet browser or other software programs. This is possible in all popular internet browsers. If the data subject deactivates the setting of cookies in the internet browser used, not all functions of our website may be entirely usable.
You can find information on how to manage cookies in the most popular browsers here:
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en
Internet Explorer: https://support.microsoft.com/en-us/help/17442
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies
Safari: https://support.apple.com/guide/safari/sfri11471/mac

Collection of General Data and Information

Our website collects a series of general data and information each time it is accessed by a data subject or an automated system. This general data and information is stored in the server log files. The following may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the internet site, (6) an internet protocol address (IP address), (7) the internet service provider of the accessing system, and (8) any other similar data and information that may be used in the event of attacks on our information technology systems.

When using these general data and information, we do not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimise the content of our website as well as its advertisement, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, we analyse anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise.

Contact

Contact by the customer via email
If you contact us by email on your own initiative, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of handling and responding to your contact request.
If the contact serves the execution of pre-contractual measures (e.g. consultation in the event of purchase interest, offer preparation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR.
We use your email address only for processing your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Routine Erasure and Blocking of Personal Data

The data controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or as far as this is granted by the European legislator or other legislators in laws or regulations to which the controller is subject to.

If the storage purpose is not applicable, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.

Rights of the Data Subject

  • Right of confirmation
    Each data subject shall have the right granted by the European legislator to obtain from the controller the confirmation as to whether or not personal data concerning him or her are being processed.
  • Right of access
    Each data subject shall have the right granted by the European legislator to obtain from the controller free information about his or her personal data stored at any time and a copy of this information. Furthermore, the European legislator grants access to the following information: the purposes of the processing; the categories of personal data concerned; the recipients; where possible, the envisaged period for which the personal data will be stored; the existence of the right to request rectification or erasure; the right to lodge a complaint with a supervisory authority; where the personal data are not collected from the data subject, any available information as to their source; and the existence of automated decision-making.
  • Right to rectification
    Each data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
  • Right to erasure (right to be forgotten)
    Each data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies: the personal data are no longer necessary in relation to the purposes for which they were collected; the data subject withdraws consent; the data subject objects to the processing; the personal data have been unlawfully processed; erasure is required for compliance with a legal obligation; the personal data have been collected in relation to the offer of information society services.
  • Right of restriction of processing
    Each data subject shall have the right to obtain from the controller restriction of processing where: the accuracy of the personal data is contested; the processing is unlawful and the data subject opposes the erasure; the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; or the data subject has objected to processing pursuant to Art. 21(1) GDPR pending the verification.
  • Right to data portability
    Each data subject shall have the right to receive the personal data concerning him or her in a structured, commonly used and machine-readable format. The data subject shall have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
  • Right to object
    Each data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on Art. 6(1)(e) or (f) GDPR. We shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject.
  • Automated individual decision-making, including profiling
    Each data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her, or similarly significantly affects him or her.
  • Right to withdraw data protection consent
    Each data subject shall have the right granted by the European legislator to withdraw his or her consent to processing of his or her personal data at any time.

Data Protection Provisions for AddThis

The controller has integrated components of the company AddThis on this website. AddThis is a so-called bookmarking provider. The service enables simplified bookmarking of internet pages via buttons. By hovering over the AddThis component with the mouse or by clicking on it, a list of bookmarking and sharing services is displayed. AddThis is used on over 15 million websites, and the buttons are displayed, according to the operating company, over 20 billion times per year.

The operating company of AddThis is AddThis, Inc., 1595 Spring Hill Road, Suite 300, Vienna, VA 22182, USA.

Each time one of the individual pages of this website is called up on which an AddThis component has been integrated, the internet browser on the information technology system of the data subject is automatically prompted to download from AddThis data for the purpose of online advertising and the settlement of commissions. The applicable data protection provisions of AddThis may be accessed under http://www.addthis.com/privacy/privacy-policy.

Data Protection Provisions for Google AdSense

The controller has integrated Google AdSense on this website. Google AdSense is an online service which enables the placement of advertising on third-party sites. Google AdSense is based on an algorithm that selects advertisements displayed on third-party sites to match with the content of the respective third-party site. Google AdSense allows an interest-based targeting of the internet user, which is implemented by means of generating individual user profiles.

The operating company of Google AdSense is Alphabet Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of the Google AdSense component is to integrate advertisements on our website. Google AdSense places a cookie on the information technology system of the data subject. By setting the cookie, Alphabet Inc. is enabled to analyse the use of our website. With each call-up to one of the individual pages of this Internet site, the Internet browser on the information technology system of the data subject will automatically submit data through the Google AdSense component for the purpose of online advertising and the settlement of commissions to Alphabet Inc. Google AdSense uses so-called counting pixels. A counting pixel is a miniature graphic embedded in internet pages to enable a log file recording and a log file analysis through which a statistical analysis may be performed.

Google AdSense is further explained under the following link: https://www.google.com/adsense/start/.

Data Protection Provisions for Matomo

The controller has integrated the Matomo component on this website. Matomo is an open-source software tool for web analysis. Web analysis is the collection, gathering and evaluation of data on the behaviour of visitors to internet sites. A web analysis tool collects, inter alia, data about the website from which a person has come to a website (so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analyses are mainly used for the optimisation of a website and in order to carry out a cost-benefit analysis of internet advertising.

The software is operated on the server of the controller, the data protection-sensitive log files are stored exclusively on this server.

Matomo sets a cookie on the information technology system of the data subject. With each call-up to one of the individual pages of this Internet site, the Internet browser on the information technology system of the data subject is automatically prompted by the Matomo component to submit data for the purpose of online analysis to our server. The data subject may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the Internet browser used and may thus permanently deny the setting of cookies.

Furthermore, the data subject has the possibility of objecting to a collection of data relating to a use of this Internet site that are generated by Matomo as well as the processing of these data by Matomo and the chance to preclude any such. For this, the data subject must set "Do Not Track" in their browser.

Opt out of Matomo tracking here

Data Protection Provisions for Google Remarketing

The controller has integrated Google Remarketing services on this website. Google Remarketing is a feature of Google AdWords, which allows an enterprise to display advertising to internet users who have previously resided on the enterprise's internet site. The integration of Google Remarketing therefore allows an enterprise to create user-based advertising and thus shows relevant advertisements to interested internet users.

The operating company of the Google Remarketing services is the Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google Remarketing is the insertion of interest-relevant advertising. Google Remarketing allows us to display ads via the Google advertising network or to have them displayed on other internet sites, which are tailored to the individual needs and interests of internet users.

Further information and the actual data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/.

Data Protection Provisions for Pinterest

The controller has integrated components of Pinterest Inc. on this website. Pinterest is a so-called social network. A social network is an internet social meeting place, an online community that usually allows users to communicate with each other and interact in a virtual space. Through each call-up to one of the individual pages of this Internet site on which a Pinterest component (Pinterest plug-in) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download from Pinterest a display of the corresponding Pinterest component. More information about Pinterest is available at https://pinterest.com.

The applicable data protection provisions of Pinterest may be accessed under https://about.pinterest.com/privacy-policy.

Data Protection Provisions for Facebook

The controller has integrated components of the enterprise Facebook on this website. Facebook is a social network. The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a person lives outside of the USA or Canada, the controller of the personal data is the Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and into which a Facebook component (Facebook plug-ins) was integrated, the web browser on the information technology system of the data subject is automatically prompted to download display of the corresponding Facebook component from Facebook through the Facebook component. The applicable data protection provisions of Facebook may be accessed at https://de-de.facebook.com/about/privacy/.

Legal Basis for the Processing

Art. 6(1)(a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6(1)(b) GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services. If we are subject to a legal obligation by which processing of personal data is required, such as for the fulfilment of tax obligations, the processing is based on Art. 6(1)(c) GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1)(d) GDPR. Finally, processing operations could be based on Art. 6(1)(f) GDPR. This legal basis is used for processing operations which are not covered by any of the above-mentioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

Legitimate Interests Pursued by the Controller or by a Third Party

Where the processing of personal data is based on Article 6(1)(f) GDPR our legitimate interest is to carry out our business in favour of the well-being of all our employees and the shareholders.

Period for which the Personal Data will be Stored

The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfilment of the contract or the initiation of a contract.

Provision of Personal Data as Statutory or Contractual Requirement

We clarify that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary to conclude a contract that the data subject provides us with personal data, which must subsequently be processed by us. The data subject is, for example, obliged to provide us with personal data when our company signs a contract with him or her. The non-provision of the personal data would have the consequence that the contract with the data subject could not be concluded.

Existence of Automated Decision-Making

As a responsible company, we do not use automatic decision-making or profiling.

Right to Lodge a Complaint with a Supervisory Authority

You have the right pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful.

Last updated: 06.07.2022

Werbung:
✕