Data protection
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data are all data with which you can be identified personally. You will find detailed information on the subject of data protection in our Data Protec¬tion Statement which follows this text.
Data collection on this website
Who is responsible for the data collection on this website?
The data processing on this website is carried out by the website operator. You will find the operator’s contact data in the section “Information concerning the responsible party” in this data protection statement.
How do we record your data?
Your data are recorded in the first instance when you transmit them to us. For example, they could be data which you enter into a contact form.
Other data are recorded by our IT systems automatically or following your agreement when you visit our website. These are above all technical data (e.g. internet browser, operating system or the time at which you called up our web page). The recording of these data takes place automatically as soon as you enter the website.
What do we use your data for?
Some data are recorded in order to guarantee the problem-free availability of the website. Other data may be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right at all times to receive free of charge information regarding the origin, recipient and purpose of your stored personal data. You also have a right to demand the correction or deletion of these data. If you have granted permission for the data to be processed, you can withdraw this permission at any time with regard to future use. You also have the right under certain circumstances to demand the restriction of the processing of your personal data. In addition you also have a right to complain to the relevant supervisory body.
You may contact us at any time with regard to these or other questions relating to the subject of data protection.
Analysis tools and tools of third-party providers
When you visit this website your surfing behaviour may be evaluated statistically. This takes place primarily with the use of so-called analysis programs.
You will find detailed information about these analysis programs in the following data protection statement.
2. Hosting and content delivery networks (CDN)
External hosting
This website is hosted by an external service provider (hosting provider). The personal data which are recorded on this website are stored on the servers of the hosting provider. These can include, amongst other things, IP addresses, contact enquiries, meta- and communications data, contractual data, contact data, names, website access and other data which are generated via a website.
The use of the hosting provider takes place for the purpose of fulfilling our contracts with our potential and existing customers (Art. 6 para. 1 let. b DSGVO/GDPR) and in the interest of the secure, fast and efficient provision of our online services through a professional provider (Art. 6 para. 1 let. f DSGVO/GDPR).
Our hosting provider will process your data only to the extent that this is necessary for the fulfilment of his service obligations and will follow our instructions with regard to these data.
We use the following hosting provider:
ALL-INKL.COM – Neue Medien Münnich
Hauptstraße 68
02742 Friedersdorf
Conclusion of a contract concerning order processing
In order to guarantee the processing in compliance with the data protection laws, we have entered into an agreement with our hosting provider with regard to the processing of orders.
3. General information and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in line with the legal data protection regulations and this data protection statement.
When you use this website, various person-related data will be recorded. Person-related data are data through which you can be identified personally. The present data protection statement explains which data we record and what we use them for. It also explains how and for what purpose this takes place.
We should like to point out that the transmission of data in the internet (e.g. through e-mail communication) may reveal security gaps. It is not possible to exclude all such security gaps when protecting data from access via third parties.
Information regarding the responsible party
The party responsible for the data processing on this website is:
IntraKey technologies AG
Wiener Straße 114 – 116
D-01219 Dresden
Telephone: +49 351 31558 – 0
E-mail: info@intrakey.de
The responsible party is the natural or legal person who decides alone or jointly with others regarding the purpose and means of processing personal data (e.g. name, e-mail address or similar).
Retention period
Unless some more specific retention period is listed within this data protection statement, your personal data will be stored by us until the purpose of the data processing has lapsed. If you wish to assert a justified request for deletion or to revoke permission for data processing, we shall delete your data provided we have no other legally permissible grounds for storing your personal data (e.g retention periods relating to fiscal or commercial law); in the last-mentioned case the deletion will take place after the cessation of these grounds.
Legally required data protection representative
We have appointed a data protection representative for our company.
IntraKey technologies AG
Gerald Kettner
Wiener Straße 114 – 116
D-01219 Dresden
Telephone: +49 351 31558 – 122
E-mail: datenschutz@intrakey.de
Information regarding the transmission of data to the United States
On our website we also make use of tools by companies based in the United States of America. When these tools are activated, your personal data can be transmitted to the servers of the companies concerned in the United States. We should like to point out that the United States are not a secure third country as defined by the data protection laws of the European Union. United States companies are required to reveal personal data to security authorities and you, as the party concerned, cannot take legal measures against this. It therefore cannot be excluded that United States authorities (e.g. intelligence agencies) may process and evaluate your data which is located on servers in the United States for surveillance purposes, and then store this data permanently. We have no influence over these processing activities.
Withdrawal of your agreement to data processing
Many data processing procedures are only possible with your express permission. You can withdraw permission that has previously been given at any time. The legality of the data processing which was carried out previous to this withdrawal is not affected by the withdrawal.
Right of objection to the recording of data in special cases and objection to direct advertising (Art. 21 DSGVO/ GDPR)
When the data processing takes place on the basis of art. 6 para. 1 let. E or f DSGVO/GDPR, you have the right at all times to object to the processing of your personal data for reasons which result from your particular situa¬tion; this also applies to profiling based on these provisions.
You will find the legal basis for the data processing in this data protection statement. If you submit an objection we shall cease to process the relevant personal data in your case, unless, we can prove compelling reasons for the processing which are worthy of protection, and which override your interests, rights and liberties, or the processing serves the establishment, exercise or defence of legal claims (objection according to art. 21 para. 1 DSGVO/GDPR).
If your personal data are processed for the purposes of direct marketing, you have the right at all times to ob¬ject to the processing of personal data relating to your person for the purposes of advertising of this nature; this also applies in the case of profiling, inasmuch as it is carried out in association with such direct mailing. If you raise an objection, your personal data will subsequently no longer be used for the purposes of direct mai¬ling (objection according to para. 21 section 2 DSGVO/GDPR).
Right of complaint to the relevant supervisory authority
In the case of contraventions of the DSGVO/GDPR, the person affected has the right to lodge a complaint with a supervisory authority, especially in the member state in which he or she normally resides, his or her place of work or the place where the purported contravention took place. The right of complaint exists irrespective or any further legal redress according to administrative law or judicial action.
Right of data transferability
You have the right to have the data which we have automatically processed on the basis of your permission or in fulfilment of a contract handed over to you personally or to a third party in an established, machine-readable format. Inasmuch as you demand the direct transmission of the data to another responsible party, this can only be effected if it is technically possible.
SSL- and/or TLS encryption
This website uses SSL- and/or TLS encryption for security reasons and in order to protect the transmission of confidential content, such as, for example, orders or enquiries which you send to us as website operators. You can recognise an encrypted link because the address line of your browser will change from “http://” to “https://” and because of the lock symbol in your browser heading.
When the SSL- and/or the TLS encryption has been activated, the data that you transmit to us cannot be read by third parties.
Information, deletion and correction
Within the framework of the valid legal regulations you have the right at all times to receive information free of charge about your personal data that are currently being stored, their origin and recipients as well as the purpose of the data processing. If appropriate you also have the right to have these data deleted or corrected. Please contact us at any time if you have any further questions on the subject of personal data.
Right of limitation of processing
You have the right to demand that the processing of your personal data be restricted. Please contact us at any time on this subject. You have a right to demand that the processing be restricted in the following cases:
- If you dispute the correctness of the personal data stored by us, we shall generally require some time in order to examine this claim. For the duration of the examination you have the right to demand that the processing of your personal data be restricted.
- If the processing of your personal data took place /is taking place wrongfully, you can demand the restriction of the data processing instead of their deletion.
- If we no longer require your personal data, but you require them in order to exercise, defend or assert your legal claims, you have the right demand the restriction of the data processing instead of their deletion.
- If you have lodged an objection under Art. 21 para. 1 DSGVO/GDPR, it will be necessary to weigh up your interests against ours. Until it has been determined whose interests prevail, you have the right to demand the restriction of the processing of your data
If you have restricted the processing of your personal data, these data – apart from their storage – may only be processed with your permission or for the assertion, exercise or defence of legal claims, or for the protection of the rights of another natural or legal body or for reasons relating to the important public interests of the European Union or a member state.
Objection to mass advertising
The operators of the website hereby register their objection to the use of contact data published within the framework of the obligation to supply a masthead for the transmission of advertising and information material that have not been expressly requested. The operators of the website expressly reserve the right to take legal steps in the case of the receipt of advertising information which has not been requested, for example in the form of spam e-mails.
4. Data recording on this website
Cookies
Our internet pages use so-called “cookies”. Cookies are small text files and do not damage your terminal in any way. They are stored on your terminal either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are deleted automatically at the end of your visit. Permanent cookies remain stored on your terminal until you delete them yourself or they are deleted automatically by your web browser.
In some cases cookies from third-party companies may be stored on your terminal when you visit our site (third-party cookies). These permit us or you to make use of certain services provided by the third-party company (e.g. cookies for the processing of payment services).
Cookies have a variety of functions. Many cookies are technically necessary because certain website functions would not function without them (e.g. the shopping basket function or the showing of videos). Other cookies serve to evaluate user behaviour or to show advertising.
Cookies which are necessary for the execution of the electronic communications process (necessary cookies), or for the provision of certain functions which you require (functional cookies, e.g. for the shopping basket function), or for the optimization of the website (e.g. cookies for the measurement of the web audience), are stored on the basis of Art. 6 para. 1 let. f DSGVO/GDPR, unless some other legal basis is quoted. The website operator has a justifiable interest in the storage of cookies to ensure the technically error-free and optimized provision of his services. Inasmuch as the permission to store cookies was requested, the storage of the relevant cookies will take place exclusively on the basis of this permission (Art. 6 para. 1 let. a DSGVO/GDPR). Your permission can be withdrawn at any time.
You can adjust your browser settings in such a way that you are informed about the placement of cookies and can permit cookies only on a single occasion; can permit the acceptance of cookies in certain situations; or can exclude their use in general. You can also activate the automatic deletion of the cookies when you close the browser. When the cookies are deactivated it is possible that the functionality of this website may be limited.
Inasmuch as cookies are placed by third-party companies or for the purposes of analysis, you will be specifically informed within the framework of this data protection statement and if necessary your permission will be requested.
Agreement to the use of cookies with Usercentrics
This website uses the cookie-consent technology of von Usercentrics in order to obtain your agreement to the storage of certain cookies on your terminal or the use of certain technologies, and to document them in a manner that is compliant with data protection. This technology is supplied by Usercentrics GmbH, Rosental 4, 80331 Munich, website: https://usercentrics.com/de/ hereafter referred to as “Usercentrics”).
When you enter our website, the following personal data will be transmitted to Usercentrics:
- Your consent and/or your withdrawal of your consent
- Your IP address
- Information concerning your browser
- Information concerning your terminal
- Time of your visit to the website
In addition, Usercentrics will store a cookie in your browser, in order to be able to allocate the consent or its withdrawal. The data that have been recorded in this way will be stored until you request us to delete them; you delete the Usercentrics cookie yourself; or the purpose of the data storage expires. Compulsory statutory storage obligations remain unaffected.
The use of Usercentrics takes place in order to obtain the legally prescribed consent to the use of certain technologies. The legal basis for this is Art. 6 para. 1 S. 1 let. c DSGVO/GDPR.
Contract regarding job processing
We have concluded a job-processing contract with Usercentrics. This is a contract which is prescribed in the interests of data protection and which guarantees that Usercentrics will process the personal data of the visitors to our website only according to our instructions and in compliance with the General Data Protection Regulation (DSGVO/GDPR).
Server log files
The website provider automatically records and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system in use
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
These data are not combined with other data sources.
The recording of these data takes place on the basis of Art. 6 para. 1 let. f DSGVO/GDPR. The website operator has a justified interest in the technically error-free presentation and optimisation of his website. The server log files must be recorded for this purpose.
Contact form
If you send us an enquiry via the contact form, your information as listed in the contact form including your contact data as stated there will be stored by us for the purpose of processing your enquiry and in case any subsequent questions arise. These data will not be passed on to third parties without your permission.
The processing of these data will take place on the basis of Art. 6 para. 1 let. b DSGVO/GDPR, inasmuch as your enquiry is connected to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases the processing will rest on our justified interest in the effective processing of the enquiries directed to us (Art. 6 para. 1 let. f DSGVO/GDPR) or on your permission (Art. 6 para. 1 let. a DSGVO/GDPR) inasmuch as this was requested.
The data you enter in the contact form will remain with us until you request that we delete them, withdraw your permission to store them or the purpose of the data storage has expired (e.g. after the processing of your enquiry has been completed). Compelling legal regulations – in particular retention periods – remain unaffected.
Enquiries via e-mail, telephone or telefax
If you contact us via e-mail, telephone or telefax, your enquiry including all the resulting personal data (name, enquiry) will be stored and processed by us for the purpose of processing your enquiry. These data will not be passed on to third parties without your permission.
The processing of these data will take place on the basis of Art. 6 para. 1 let. b DSGVO/GDPR, inasmuch as your enquiry is connected to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases the processing will rest on our justified interest in the effective processing of the enquiries directed to us (Art. 6 para. 1 let. f DSGVO/GDPR) or on your permission (Art. 6 para. 1 let. a DSGVO/GDPR) inasmuch as this was requested.
The data you transmit to us via contact enquiry will remain with us until you request that we delete them, withdraw your permission to store them or the purpose of the data storage has expired (e.g. after the processing of your enquiry has been completed). Compelling legal regulations – in particular retention periods – remain unaffected.
Registration on this website
You can register on this website in order to make use of additional functions on the page. We shall use the data you enter for this purpose only for the purpose of making use of the offer or service for which you have registered. The mandatory information requested upon registration must be supplied in full. Otherwise we shall refuse the registration.
In the case of important changes, for example to the scope of the offer or in the case of changes that are technically necessary, we shall use the e-mail address given at registration in order to inform you via this channel.
The processing of the data entered at registration takes place for the purpose of implementing the user relationship stated at registration, and if appropriate for the initiation of further contracts (Art. 6 para. 1 let. b DSGVO/GDPR).
The data recorded at registration will be stored by us for as long as you are registered on this website and will then be deleted. Legal retention periods remain unaffected.
5. Social media
Social-media plug-ins with Shariff
On this website we use plug-ins for social media (e.g. XING, LinkedIN).
You can generally recognise the plug-ins by virtue of the relevant social-media logos. In order to guarantee the data protection on this website, we use these plug-ins only together with the so-called “Shariff” solution. This application prevents the plug-ins integrated into the website from transmitting data to the provider concerned as soon as a visitor enters the website for the first time.
A direct connection to the provider’s server will be set up only if you activate the plug-in by clicking the relevant button to show your agreement. As soon as you activate the plug-in, the provider concerned will receive the information that you have visited this website using your IP address. If at the same time you are also logged into your social-media account (e.g. Facebook), the provider concerned will be able to connect your visit to this website with your user account.
Activating a plug-in represents agreement in the sense of Art. 6 para. 1 let. a DSGVO/GDPR. You can withdraw this agreement with regard to the future at any time.
Data processing through social networks
We maintain publicly accessible profiles on social networks. The individual social networks we use can be found below. Social networks can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presence triggers numerous data protection-related processing operations.
In detail: If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data can also be recorded if you are not logged in or do not have an account with the respective social media portal.
In this case, this data is recorded, for example, using cookies that are stored on your device or by recording your IP address. With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.
Please also note that we cannot retrace all processing processes on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.
Legal basis
Our social media presence is intended to ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 Paragraph 1 lit.f GDPR. The analysis processes initiated by the social networks may be based on different legal bases that must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 Para. 1 lit. a GDPR).
Responsible and assertion of rights
If you visit one of our social media sites (e.g. LinkedIN), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can exercise your rights (information, correction, deletion, restriction of processing, data portability and complaint) against us as well as claim against the operator of the respective social media portal (e.g. against Facebook). Please note that, despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely based on the company policy of the respective provider.
Storage period
The data collected directly by us via the social media presence will be deleted from our systems as soon as you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Saved cookies remain on your device until you delete them.
Mandatory legal provisions – especially retention periods – remain unaffected. We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
Social networks in detail
We have a profile on XING. The provider is New Work SE, Dammtorstrasse 30, 20354 Hamburg, Germany. Details on how they handle your personal data can be found in XING’s data protection declaration: https://privacy.xing.com/de/datenschutzerklaerung.
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. 3/5 If you would like to deactivate LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs. Details on how they handle your personal data can be found in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.
YouTube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For details on how they handle your personal data, see the YouTube privacy policy: https://policies.google.com/privacy?hl=de.
6. Analysis tools and advertising
Google Tag Manager
We make use of the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a tool, with the help of which we can incorporate tracking or statistics tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, nor does it store cookies or undertake any independent analyses. It serves only to manage and implement the tools it incorporates. However, the Google Tag Manager does record your IP address, which can also be transmitted to Google’s parent company in the United States.
The use of the Google Tag Manager takes place on the basis of Art. 6 para. 1 let. f DSGVO/GDPR. The website operator has a justified interest in the fast and uncomplicated incorporation and management of various tools on the website. Inasmuch as the corresponding agreement was requested, the processing will take place exclusively on the base of Art. 6 para. 1 let. a DSGVO/GDPR; permission can be withdrawn at any time.
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics permits the operator of the website to analyse the behaviour of the visitors to the website. This means that the website operator receives various user data such as, for example, when the page is called up, the length of stay, the operating systems in use and the origins of the user. If applicable, these data are summarised by Google in a profile which is allocated to the user concerned and/or his or her terminal.
Google Analytics uses technologies which permit the recognition of the user for the purposes of analysing user behaviour (e.g. cookies or device fingerprinting). The information recorded by Google regarding the use of this website is generally transmitted to a Google server in the United States and stored there.
The use of this analysis tool takes place on the basis of Art. 6 para. 1 let. f DSGVO/GDPR. The website operator has a justified interest in the analysis of user behaviour in order to optimise not only web services but also advertising. Inasmuch as the corresponding agreement was requested (e.g. permission to store cookies), the processing will take place exclusively on the base of Art. 6 para. 1 let. a DSGVO/GDPR; the permission can be withdrawn at any time.
The transmission of data to the United States is supported by the standard contract clauses of the EU Commission. You will find the details here:
https://privacy.google.com/businesses/controllerterms/mccs/.
IP anonymisation
On this website we have activated the IP anonymisation function. This means that your IP address will be shortened by Google within the member states of the European Union or in other contractual states to the agreement regarding the European Economic Area before transmission to the United States. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there. On behalf of the operator of this website Google will use this information to evaluate your use of this website, in order to compile reports concerning website activities and to provide the website operator with further services associated with the use of the website and the use of the internet. Google will not combine the IP address transmitted by your browser within the framework of Google Analytics with other data.
Browser plug-in
You can prevent the recording and processing of your data by Google by downloading and installing the browser plug-in available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=de.
You will find further information about the use of user data by Google Analytics in the Google data protection statement:
https://support.google.com/analytics/answer/6004245?hl=de.
Order processing
We have concluded a contract with Google with regard to order processing. We implement in full the rigorous terms of the German data protection authorities in our use of Google Analytics.
Storage duration
Data stored by Google on the user and event level, which are linked with cookies, user identifiers (e.g. user ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID), will be anonymised and/or deleted after 26 months. You will find details of this under the following link:
https://support.google.com/analytics/answer/7667196?hl=de
Mautic
We use the Mautic marketing tool. The provider is Acquia Inc., 53 State St, Boston, Massachusetts02109, USA (hereinafter Mautic). Mautic is a tool for optimizing and automating our marketing activities.
With Mautic we can, among other things, build landing pages and forms, plan, carry out and evaluate marketing campaigns and manage our customer data. We can also analyze the user behavior of our website visitors. Based on this information, further marketing campaigns can be initiated. For example, we can record which customer has downloaded from us and is therefore eligible for certain further marketing measures.
Mautic uses technologies that enable cross-page recognition of the user in order to analyze user behavior (e.g. cookies or device fingerprinting). Website visitors receive an individual ID with which they can be recognized when they visit the website again. Mautic also records the IP address, the language of the user, the URLs visited and the time of access.
Mautic is used on the basis of the legitimate interest of the person responsible in optimizing his marketing campaigns. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be withdrawn at any time.
IP anonymization
We use Mautic with an anonymized IP. Your IP address will be shortened as part of the Mautic application so that it can no longer be directly assigned to you.
Sendinblue
This website uses Sendinblue for the sending of newsletters. The provider is the Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.
Sendinblue services can, among other things, be used to organize and analyze chat functions and the sending of newsletters. The data you enter for chats and the purpose of subscribing to the newsletter are archived on Sendinblue’s servers in Germany.
Data analysis by Sendinblue
Sendinblue enables us to analyze our newsletter campaigns. For instance, it allows us to see whether a newsletter message has been opened and, if so, which links may have been clicked. This enables us to determine, which links drew an extraordinary number of clicks. Moreover, we are also able to see whether once the e-mail was opened or a link was clicked, any previously defined actions were taken (conversion rate). This allows us to determine whether you have made a
purchase after clicking on the newsletter.
Sendinblue also enables us to divide the subscribers to our newsletter into various categories (i.e., to “cluster” recipients). For instance, newsletter recipients can be categorized based on age, gender, or place of residence. This enables us to tailor our newsletter more effectively to the needs of the respective target
groups. If you do not want to permit an analysis by Sendinblue, you must unsubscribe from the newsletter. We provide a link for you to do this in every newsletter message. Moreover, you can also unsubscribe from the newsletter right on the website.
For detailed information on the functions of Sendinblue please follow this link:
https://www.sendinblue.com/newsletter-software/.
Legal basis
The data is processed based on your consent (Art. 6(1)(a) GDPR). You may revoke any consent you have given at any time by unsubscribing from the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place prior to your revocation.
Storage period
The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain
unaffected. After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist, if such action is necessary to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.
For more details, please consult the Data Protection Regulations of Sendinblue at:
https://de.sendinblue.com/datenschutz-uebersicht/.
Data processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
Google Ads
The website operator uses Google Ads. Google Ads is an online advertising program by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads permits us to transmit advertisements in the Google search engine or on the websites of third parties when the user enters certain search keywords into Google (keyword targeting). In addition, targeted advertisements can be transmitted by means of user data available to Google (e.g. location data and interests) (target group targeting). We as a website operator can evaluate these data quantitatively, for example by analysing which search keywords led to the transmission of our advertisements, and how many advertisements led to corresponding clicks.
The use of Google Ads occurs on the basis of Art. 6 para. 1 let. f DSGVO/GDPR. The website operator has a justified interest in marketing his services and products as effectively as possible.
The transmission of data to the United States is supported by the standard contract clauses of the EU Commission. You will find the details here: https://policies.google.com/privacy/frameworks and
https://privacy.google.com/businesses/controllerterms/mccs/.
Google Conversion Tracking
This website uses Google Conversion Tracking. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With the assistance of Google Conversion Tracking, we are in a position to recognize whether the user hascompleted certain actions. For instance, we can analyze the how frequently which buttons on our website have been clicked and which products are reviewed or purchased with particular frequency.
The purpose of this information is to compile conversion statistics. We learn how many users have clicked on our ads and which actions they have completed. We do not receive any information that would allow us to personally identify the users. Google as such uses cookies or comparable recognition technologies for identification purposes. The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.
For more information about Google Conversion Tracking, please review Google’s data protection policy at:
https://policies.google.com/privacy?hl=en
Google DoubleClick
This website uses features of Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter “DoubleClick”). DoubleClick is used to show you interest-based ads across the Google Network. Advertisements can be tailored to the interests of the viewer using DoubleClick. For example, our ads may appear in Google search results or in banners associated with DoubleClick.
To be able to display interest adequate promotional content to users, DoubleClick must recognize the respective visitor so that it can allocate the websites visited, the clicks and other user pattern information to the user. To do this, DoubleClick deploys cookies or comparable recognition technologies (e.g., device
fingerprinting). The recorded information is consolidated into a pseudonym user profile so that the respective user can be shown interest adequate advertising.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.
For further information on how to object to the advertisements displayed by Google, please see the following links:
https://policies.google.com/technologies/ads and
https://adssettings.google.com/authenticated.
7. Newsletter
Newsletter data
It you wish to subscribe to the newsletter we offer on our website, we shall need your e-mail address together with information which will allow us to check that you are the owner of the e-mail address you have submitted and that you agree to the receipt of the newsletter. Further data will not be requested, or will be recorded only on a voluntary basis. We use these data exclusively in order to send the requested information and will not transmit them to third parties.
The processing of the data entered into the registration form for the newsletter takes place exclusively on the basis of your permission (Art. 6 para. 1 let. a DSGVO/GDPR). You can cancel your agreement to the storage of your data, your e-mail address and their use for the dispatch of the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The legitimacy of the data processing procedures which have already taken place remains unaffected by the cancellation.
The data you have stored with us for the purpose of subscribing to the newsletter will be stored by us and/or by the supplier of the newsletter service until you unsubscribe from the newsletter, and will be deleted from the newsletter distribution list after you have cancelled your subscription to the newsletter or after the purpose no longer applies. We retain the right to delete or to block e-mail addresses from our newsletter distribution list at our discretion within the framework of our justified interest according to Art. 6 para. 1 let. f DSGVO/ GDPR.
After you have unsubscribed to our newsletter distribution list, your e-mail address will be deleted by us and/or by the newsletter service provider, in order to prevent further mailings.
8. Plug-ins und Tools
YouTube
This website incorporates videos from the website of YouTube. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our websites on which there is a link to YouTube, a connection will be established to the servers of YouTube. A message will be transmitted to the YouTube server notifying it as to which of our pages you visited.
In addition, YouTube can store various cookies on your terminal or can use comparable technologies for recognition purposes (e.g. device fingerprinting). In this way YouTube can gain information about the visitors to this website. This information will be used, for example, to compile video statistics, to improve the user-friendliness and to prevent attempts at fraud.
When you are logged into your YouTube account, you allow YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
The use of YouTube occurs in the interests of an attractive presentation of our online offers. This represents a justified interest in the sense of Art. 6 para. 1 let. f DSGVO/GDPR. Inasmuch as a corresponding approval was requested, the processing takes place exclusively on the basis of Art. 6 para. 1 let. a DSGVO/GDPR; the permission can be withdrawn at any time.
You will find further information concerning the use of user data in the data protection statement of YouTube under: https://policies.google.com/privacy?hl=de.
Google Maps
This website uses the maps service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
In order to make use of the functions of Google Maps it is necessary to store your IP address. This information is generally transmitted to a server of Google in the United States and is stored there. The operator of this website has no influence over this data transmission.
The use of Google Maps takes place in the interests of an attractive presentation of our online offers and in order to ensure that the places referred to on our website can be easily located. This represents a justified interest in the sense of Art. 6 Abs. 1 let. f DSGVO/GDPR. Inasmuch as a corresponding approval was requested, the processing takes place exclusively on the basis of Art. 6 para. 1 let. a DSGVO/GDPR; the permission can be withdrawn at any time.
The transmission of data to the United States is supported by the standard contract clauses of the EU Commission. You will find the details here: https://privacy.google.com/businesses/gdprcontrollerterms/ and
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
You will find further information concerning the use of user data in the data protection statement of Google:
https://policies.google.com/privacy?hl=de.
Google reCAPTCHA
On this website we use “Google reCAPTCHA” (hereafter referred to as “reCAPTCHA”). The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to check whether the entering of data on this website (e.g. in a contact form) was carried out by a person or by an automated program. To do this reCAPTCHA analyses the behaviour of the visitor to the website by means of certain characteristics. This analysis begins automatically as soon as the visitor enters the website. To carry out the analysis, reCAPTCHA evaluates certain information (e.g. IP address, length of stay of the visitor to the website and/or the mouse movements carried out by the user). The data recorded during the analysis are transmitted to Google.
The reCAPTCHA analyses are carried out entirely in the background. Visitors to the website will not be informed that an analysis is taking place.
The storage and analysis of the data is carried out on the basis of Art. 6 para. 1 let. f DSGVO/GDPR. The website operator has a justified interest in protecting his web offers from improper automated spying and SPAM. Inasmuch as a corresponding approval was requested, the processing takes place exclusively on the basis of Art. 6 para. 1 let. a DSGVO; the permission can be withdrawn at any time.
You will find further information concerning Google reCAPTCHA in the data protection statement of Google and the Google terms of use under the following links: https://policies.google.com/privacy?hl=de and
https://policies.google.com/terms?hl=de.
9. eCommerce and payment providers
Processing of data (customer data and contract data)
We record, process and use personal data only to the extent that they are necessary for the justification, the drafting or changing of the content of the legal relationship (inventory data). This takes place on the basis of Art. 6 para. 1 let. b DSGVO/GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We record, process and use personal data (usage data) relating to the utilisation of this website only to the extent necessary in order to enable the user to make use of the service, or for accounting purposes.
The customer data that have been recorded will be deleted after conclusion of the order or when the business relationship ceases. Legal retention periods remain unaffected.
10. Own services
Handling of applicant data
We offer you the opportunity to apply to us for a job (e.g. via e-mail, by post or via our online application form). You will find information below concerning the handling, purpose and use of your personal data which are recorded during the course of the application process. We confirm that the recording, processing and use of your data will take place in conformity with the currently valid data protection laws and all other legal regulations, and that your data will be treated as strictly confidential.
Extent and purpose of the recording of data
If you send us an application we shall process the relevant personal data (e.g. contact and communication data, application documents, notes made during the course of job interviews etc.), to the extent that this is necessary in order to come to a decision regarding the establishment of an employment relationship. The legal basis for this is § 26 BDSG-neu according to German law (initiation of an employment relationship), Art. 6 para. 1 let. b DSGVO/GDPR (general initiation of a contract) and – inasmuch as you have granted permission – Art. 6 Abs. 1 let. a DSGVO/GDPR. Your permission can be withdrawn at any time. Your personal data will only be transmitted within our company to those persons who are involved in the processing of your application.
Inasmuch as the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG-neu and Art. 6 para. 1 let. b DSGVO/GDPR for the purpose of establishing the employment relationship.
Duration of data storage
If we are unable to offer you a position, you decline the job offer we make or you withdraw your application, we reserve the right to store the data submitted by you on the basis of our justified interest (Art. 6 para. 1 let. f DSGVO) for up to 6 months following the end of the application process (rejection or withdrawal of application). Thereafter the data will be deleted and the physical application documents destroyed. The storage of the data serves in particular to provide evidence in the case of a legal dispute. Should it be clear that the data will be required after the grace period of 6 months has elapsed (e.g. because of a threatened or pending legal dispute), the deletion will only take place when there is no longer a reason to continue to preserve the data.
Furthermore, the data may be stored for a longer period if you have granted corresponding permission (Art. 6 para. 1 let. a DSGVO/GDPR) or if the legal storage requirement prohibits such deletion.
Inclusion in the pool of applicants
If we do not offer you a job, in some cases it may be possible to include you in our pool of applicants. If this is the case, all documents and details relating to your application will be transferred to the pool of applicants so that we can contact you if a suitable vacancy occurs.
Your inclusion in the pool of applicants will occur exclusively with your express permission (Art. 6 para. 1 let. a DSGVO/GDPR). Your granting of such permission is voluntary and is not related to the ongoing application process. The person concerned can withdraw permission at any time. In this case the data will be deleted permanently from the pool of applicants provided that there are no legal reasons for storing the data.
The data will be deleted permanently from the pool of applicants at the latest two years after receipt of permission.
This data protection statement was drawn up using eRecht24 (https://www.e-recht24.de).