Privacy

In accordance with the legal requirements of data protection law (in particular in accordance with the new version of the Federal Data Protection Act and the European General Data Protection Regulation 'GDPR'), we would like to inform you below about the type, scope and purpose of the processing of personal data by our company. This Privacy Policy also applies to our websites and social media profiles. With regard to the definition of terms such as "personal data" or "processing", we refer to Art. 4 GDPR.

Name and contact details of the controller(s):

Our controller within the meaning of Art. 4 no. 7 GDPR, is the managing director as listed in the imprint at the beginning.

The data protection officer is also listed there.

Types of data, purposes of processing and categories of data subjects

In the following, we inform you about the type, scope and purpose of the collection, processing and use of personal data.

1. Types of data we process

Inventory data (name, address, etc.), contact details (telephone number, e-mail, fax, etc.), payment data (bank details, account details, payment history, etc.), contract data (subject of the contract, duration, etc.),

2. Purposes of processing pursuant to Art. 13 (1) (c) GDPR

Execution of contracts, Optimize the website technically and economically, enable easy access to the website, Fulfilment of contractual obligations, Fulfilment of legal retention obligations, Design website user-friendly, Economic operation of advertising and website, Marketing / sales / advertising, Handling an application process, Customer service and customer care, Handling contact requests, Providing websites with functions and content, uninterrupted, secure operation of our website,

3. Categories of data subjects pursuant to Art. 13 para. 1 e) GDPR

Visitors/users of the website, customers, prospects, applicants, employees,

The data subjects are collectively referred to as "Users".

Legal bases for the processing of personal data

Below we inform you about the legal bases for the processing of personal data

If we have obtained your consent for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a) GDPR is the legal basis.

If the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures that are taken at your request, Art. 6 para. 1 sentence 1 lit. b) GDPR is the legal basis.

If the processing is necessary for the fulfilment of a legal obligation to which we are subject (e.g. statutory retention obligations), the legal basis is Art. 6 para. 1 sentence 1 lit. c) GDPR.

If the processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6 para. 1 sentence 1 lit. d) GDPR is the legal basis.

If the processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party and your interests or fundamental rights and freedoms do not prevail in this regard, Art. 6 para. 1 sentence 1 lit. f) GDPR is the legal basis.

Disclosure of personal data to third parties and processors

As a matter of principle, we do not pass on any data to third parties without your consent. If this is the case, then the disclosure takes place on the basis of the aforementioned legal bases, e.g. in the case of the disclosure of data to online payment providers for the performance of a contract or on the basis of a court order or because of a legal obligation to hand over the data for the purpose of criminal prosecution, to avert danger or to enforce intellectual property rights.

We also use processors (external service providers, e.g. for web hosting of our websites and databases) to process your data. If data is passed on to the processors within the framework of a data processing agreement, this is always done in accordance with Art. 28 GDPR. In doing so, we carefully select our processors, monitor them regularly and have been granted the right to issue instructions with regard to the data. In addition, the processors must have taken appropriate technical and organizational measures and comply with the data protection regulations in accordance with the new version of the Federal Data Protection Act (BDSG) and the GDPR

Data transfer to third countries

The adoption of the European General Data Protection Regulation (GDPR) has created a uniform basis for data protection in Europe. Your data will therefore mainly be processed by companies to which GDPR applies. If the processing takes place by third-party services outside the European Union or the European Economic Area, they must meet the special requirements of Art. 44 et seq. GDPR. This means that the processing is carried out on the basis of special guarantees, such as the determination of a level of data protection equivalent to that of the EU or the observance of officially recognised special contractual obligations, the so-called "standard contractual clauses".

Insofar as we obtain your explicit consent to the transfer of data to the USA due to the invalidity of the so-called "Privacy Shield" pursuant to Art. 49 para. 1 sentence 1 lit. a) GDPR, we would like to point out the risk of secret access by US authorities and the use of the data for surveillance purposes, possibly without legal remedies for EU citizens.

Deletion of data and storage period

Unless expressly stated in this privacy policy, your personal data will be deleted or blocked as soon as the consent given to the processing is revoked by you or the purpose for which it was stored no longer applies or the data is no longer required for the purpose, unless its further storage is necessary for evidentiary purposes or this is contrary to statutory retention obligations. These include, for example, retention obligations under commercial law for business letters pursuant to Section 257 (1) of the German Commercial Code (HGB) (6 years) as well as retention obligations under tax law pursuant to Section 147 (1) of the German Fiscal Code (AO) for receipts (10 years). When the prescribed retention period expires, your data will be blocked or deleted, unless storage is still necessary for the conclusion of a contract or for the fulfilment of a contract.

Existence of automated decision-making

We do not use automated decision-making or profiling.

Provision of our website and creation of log files

If you only use our website for informational purposes (i.e. no registration and no other transmission of information), we only collect the personal data that your browser transmits to our server. If you choose to view our website, we collect the following data:

•IP address;

• User's Internet service provider;

• Date and time of retrieval;

•Browser;

• Language and browser version;

• Content of the retrieval;

•Time zone;

• Access status/HTTP status code;

•Amount;

• Websites from which the request comes;

•Operating system.

This data will not be stored together with any other personal data of yours.

This data serves the purpose of the user-friendly, functional and secure delivery of our website to you with functions and content as well as their optimisation and statistical evaluation.

The legal basis for this is our legitimate interest in data processing in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR, which also lies in the above purposes.

For security reasons, we store this data in server log files for a storage period of 8 days. At the end of this period, they will be automatically deleted, unless we need to retain them for evidentiary purposes in the event of attacks on the server infrastructure or other legal violations.

Cookies

We use so-called cookies when you visit our website. Cookies are small text files that your internet browser stores and stores on your computer. When you return to our website, these cookies provide information to automatically recognise you. Cookies also include so-called "user IDs", where user information is stored by means of pseudonymised profiles. When you visit our website, we inform you by means of a reference to our privacy policy about the use of cookies for the aforementioned purposes and how you can object to them or prevent their storage ("opt-out").

A distinction is made between the following types of cookies:

• Necessary, essential cookies: Essential cookies are cookies that are absolutely necessary for the operation of the website, to store certain functions of the website such as logins, shopping cart or user input, e.g. regarding the language of the website.

• Session cookies: Session cookies are required to recognise multiple use of an offer by the same user (e.g. if you have logged in to determine your login status). When you return to our site, these cookies provide information to automatically recognise you. The information obtained in this way is used to optimize our offers and to provide you with easier access to our site. If you close the browser or log out, the session cookies are deleted.

• Persistent cookies: These cookies remain stored even after the browser is closed. They are used to store logins, measure reach and for marketing purposes. These are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete cookies at any time in your browser's security settings.

• Third-party cookies (especially from advertisers): You can configure your browser settings according to your preferences and e.g. Refuse to accept third-party cookies or all cookies. However, we would like to point out at this point that you may not be able to use all the functions of this website. You can read more about these cookies in the respective privacy policies of the third parties.

Categories of data: user data, cookies, user ID (including pages visited, device information, access times and IP addresses).

Purposes of processing: The information obtained in this way serves the purpose of optimising our web offers technically and economically and to provide you with easier and secure access to our website.

Legal basis: If we process your personal data with the help of cookies on the basis of your consent ("opt-in"), then Art. 6 para. 1 sentence 1 lit. a) GDPR is the legal basis. Otherwise, we have a legitimate interest in the effective functionality, improvement and economic operation of the website, so that in this case Art. 6 para. 1 sentence 1 lit. f) GDPR is the legal basis. The legal basis is also Art. 6 para. 1 sentence 1 lit. b) GDPR if the cookies are set to initiate contracts, e.g. for orders.

Storage/deletion: The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

Cookies are otherwise stored on your computer and transmitted from it to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Here you will find information on how to delete cookies by browser at the time of creating this homepage:

Chrome: https://support.google.com/chrome/answer/95647

Safari: https://support.apple.com/de-at/guide/safari/sfri11471/mac

Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen

Internet Explorer: https://support.microsoft.com/de-at/help/17442/windows-internet-explorer-delete-manage-cookies

Microsoft Edge: https://support.microsoft.com/de-at/help/4027947/windows-delete-cookies

Objection and "opt-out": You can generally prevent cookies from being stored on your hard drive, regardless of consent or legal permission, by selecting "do not accept cookies" in your browser settings. However, this may result in a functional limitation of our offers. You can opt-out of the use of third-party cookies for advertising purposes via this American website (https://optout.aboutads.info ) or this European website. https://optout.aboutads.info) or this European website (https://www.youronlinechoices.com/de/praferenzmanagement ).

Execution of contracts

We process inventory data (e.g. company, title/degree, names and addresses as well as contact details of users, e-mail), contract data (e.g. services used, names of contact persons) and payment data (e.g. bank details, payment history) for the purpose of fulfilling our contractual obligations (knowing who is the contractual partner; justification, content and execution of the contract; Checking for plausibility of the data) and services (e.g. contacting customer service) in accordance with Art. 6 para. 1 sentence 1 lit b) GDPR. The entries marked as mandatory in online forms are required for the conclusion of the contract.

As a matter of principle, this data will not be passed on to third parties unless it is necessary for the pursuit of our claims (e.g. handover to a lawyer for debt collection) or for the fulfilment of the contract (e.g. transfer of data to payment providers) or there is a legal obligation to do so in accordance with Art. 6 para. 1 sentence 1 lit. c) GDPR.

We may also process the data you provide in order to inform you about other interesting products from our portfolio or to send you e-mails with technical information.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case for inventory and contract data if the data is no longer required for the execution of the contract and no claims can be asserted under the contract because they are time-barred (warranty: two years / standard limitation period: three years). Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, if the contract is terminated after three years, we will restrict the processing, i.e. Your data will only be used to comply with legal obligations. Information in the user account will remain until it is deleted.

Contact via contact form

/ e-mail / fax / post

If you contact us via contact form, fax, post or e-mail, your details will be processed for the purpose of processing the contact request.

The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. a) GDPR if you have given your consent. The legal basis for the processing of data transmitted in the course of a contact request or e-mail, letter or fax is Art. 6 para. 1 sentence 1 lit. f) GDPR. The controller has a legitimate interest in the processing and storage of the data in order to be able to answer user inquiries, to preserve evidence for liability reasons and, if necessary, to be able to comply with its statutory retention obligations for business letters. If the contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b) GDPR.

We may store your information and contact request in our Customer Relationship Management System ("CRM System") or a comparable system.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been conclusively clarified. Enquiries from users who have an account or contract with us will be stored for a period of two years after the end of the contract. In the case of statutory archiving obligations, the deletion takes place after their expiry: end of the retention period under commercial law (6 years) and tax law (10 years).

You have the option of revoking your consent to the processing of your personal data at any time in accordance with Art. 6 (1) sentence 1 (a) GDPR. If you contact us by e-mail, you can object to the storage of your personal data at any time.

Contacting us by phone

If you contact us by phone, your telephone number will be processed for the purpose of processing the contact request and its processing and will be temporarily stored or displayed in the RAM / cache of the telephone device / display. The data is stored for liability and security reasons, in order to be able to provide proof of the call, as well as for economic reasons to enable a callback. In the case of unauthorized advertising calls, we block the phone numbers.

Rechtsgrundlage für die Verarbeitung der Telefonnummer ist Art. 6 Abs. 1 S. 1 lit. f) DS-GVO. Zielt der Kontakt auf den Abschluss eines Vertrages ab, so ist zusätzliche Rechtsgrundlage für die Verarbeitung Art. 6 Abs. 1 lit. b) DS-GVO.

Der Gerätecache speichert die Anrufe 10 Tage und überschreibt bzw. löscht sukzessiv alte Daten, bei Entsorgung des Gerätes werden alle Daten gelöscht und der Speicher ggf. zerstört. Gesperrte Telefonnummer werden jährlich auf die Notwendigkeit der Sperrung geprüft.

Sie können die Anzeige der Telefonnummer verhindern, indem Sie mit unterdrückter Telefonnummer anrufen.

Data protection for applications and in the application process

Applications sent to the controller electronically or by post will be processed electronically or manually for the purpose of handling the application process.

We expressly point out that application documents with "special categories of personal data" according to Art. 9 GDPR (e.g. a photo that provides conclusions about your ethnic origin, religion or marital status) are undesirable, with the exception of a possible severe disability, which you wish to disclose of your own free will. You should submit your application without this data. This does not affect your chances of being applied.

The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b) GDPR and § 26 BDSG new.

Wird nach Abschluss des Bewerberverfahrens, ein Arbeitsverhältnis mit dem Bewerber / der Bewerberin eingegangen, werden die Bewerberdaten unter Beachtung einschlägiger Datenschutzvorschriften gespeichert. Wird Ihnen nach Abschluss des Bewerberverfahrens keine Stelle angeboten, so wird Ihr eingereichtes Bewerbungsschreiben samt Unterlagen 6 Monate nach Versand der Absage gelöscht, um etwaigen Ansprüchen und Nachweispflichten nach AGG genügen zu können.

Rechte der betroffenen Person

Widerspruch oder Widerruf gegen die Verarbeitung Ihrer Daten

Insofar as the processing is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a), Art. 7 GDPR, you have the right to withdraw your consent at any time. This does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.

Insofar as we base the processing of your personal data on the balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR, you can object to the processing. This is the case, in particular, if the processing is not necessary for the performance of a contract with you, which is described by us in the following description of the functions. If you wish to object, we will ask you to explain the reasons why we should not process your personal data as we do. In the event of your justified objection, we will review the situation and will either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we continue the processing.

You can object to the processing of your personal data for advertising and data analysis purposes at any time. You can exercise your right to object free of charge. You can inform us about your objection to advertising using the contact details printed at the beginning of the imprint.

Right of access

You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed. If this is the case, you have a right to information about your personal data stored by us in accordance with Art. 15 GDPR. This includes, in particular, information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data, if it was not collected directly from you.

Right to rectification

You have the right to have incorrect data corrected or correct data completed in accordance with Art. 16 GDPR.

Right to erasure

You have the right to have your data stored by us deleted in accordance with Art. 17 GDPR, unless statutory or contractual retention periods or other legal obligations or rights to further storage preclude this.

Right to restriction

You have the right to request a restriction in the processing of your personal data if one of the conditions in Art. 18 (1) (a) to (d) GDPR is met:

• If you contest the accuracy of the personal data concerning you for a period enabling the Controller to verify the accuracy of the personal data;

• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of the personal data instead;

• the controller no longer needs the personal data for the purposes of the processing, but you need it for the establishment, exercise or defence of legal claims, or

• if you have objected to the processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your reasons.

Right to data portability

You have a right to data portability in accordance with Art. 20 GDPR, which means that you can receive the personal data we hold about you in a structured, commonly used and machine-readable format or request that it be transmitted to another controller.

Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. As a general rule, you can contact the supervisory authority for this purpose, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

Data integrity

In order to protect all personal data transmitted to us and to ensure that data protection regulations are complied with by us, but also by our external service providers, we have taken appropriate technical and organizational security measures. Therefore, among other things, all data between your browser and our server is transmitted encrypted via a secure SSL connection.

Since all information is not an officially confirmed and sworn translation, only the German references on this homepage are legally binding.

Last updated: 11.04.2024