Data protection declaration
Thank you for visiting our website and for your interest in our company. We understand data protection as a customer-oriented quality feature. The protection of your personal data and the protection of your personal rights are important to us.
With this data protection declaration, we would like to inform all visitors of our website transparently about the type, scope and purpose of the personal data collected, used and processed by us and to inform you about the rights to which you are entitled.
The use of our website is generally possible without the provision of personal data. However, should you make use of our company's services via our website, the processing of your personal data may become necessary. The data collected automatically when you visit our website or when you use our services, personal data entered by you, will be processed in accordance with the current legal provisions for the protection of personal data.
If processing of your personal data is necessary and there is no legal basis for such processing, we will always obtain consent for the necessary purpose of processing. As the company responsible for processing, we have defined technical and organisational measures to ensure the highest possible level of protection of your personal data.
However, we would like to point out that data transmission via the World Wide Web may in principle be subject to security gaps.
If you would like to make use of our company's services and do not want to use the way of data transmission via the World Wide Web, there is also the possibility of contacting us by telephone.
Transparency information for the exercise of the data subject's rights
1.Contact details of the controller
The person responsible within the meaning of the Basic Data Protection Ordinance is:
Alte Brücke 6
+49 2243 92307-0
A data protection officer has been appointed:
Mr. Stephan Hartinger
Phone: 08232 80988-70
2.Collection of general access information
Every time you visit our website, server log file information that your browser transmits to us are automatically recorded. These are:
- IP address (Internet Protocol address) of the accessing computer
- the website from which you are visiting us (referrer)
- the website you are visiting with us
- the date and duration of the visit
- Browser type and browser settings
- operating system
Please note that this data cannot be assigned to a specific person. We use this technical access information exclusively for the following purposes:
- To improve the attractiveness and usability of our websites,
- To detect technical problems on our website at an early stage.
- To deliver the contents of our website correctly,
- and to provide law enforcement agencies with the information necessary for law enforcement in the event of a cyber attack.
This data is stored for a maximum of 7 days as a technical precaution to protect the data processing systems against unauthorized access.
3.Collection and forwarding of personal data
We use your personal data only for the purposes stated on this information page for data protection. The following input masks exist on our website for the collection of personal data:
3.1 Registration on our website
3.1.1 Sending our newsletter
On our website we offer you the opportunity to subscribe to our newsletter, by which we inform you about offers, products and information of the company at regular intervals. To receive our newsletter, you need a valid e-mail address.
In order to receive a personalized newsletter, we need the following information from you: email
After submitting the registration you will receive a confirmation e-mail for legal reasons to complete your registration order for sending the newsletter (double opt-in). The data mentioned here will be used exclusively for sending the newsletter. In order to continuously improve the content of our newsletter and adapt it to the interests of subscribers, a tracking function (SuperMailer) is used for analysis purposes.
This personal data is not passed on to third parties.
If we receive your e-mail address in connection with the sale of a product or service and you have not objected to this, we reserve the right to regularly send you offers for similar products, such as those already purchased, from our range by e-mail.
You have the possibility to cancel the newsletter at any time and to revoke your consent for the use of your data for the newsletter dispatch. There is a link to this in every newsletter.
3.2 Contact fields on our website
3.2.1 Contact by e-mail or contact form
On our website we offer you the possibility to contact us by e-mail and/or via a contact form. If you contact us by e-mail or via a contact form, the personal data transmitted by you will be stored automatically.
Such personal data, which you voluntarily provide to us, will be stored for the purpose of processing your inquiry or contacting the person concerned. This personal data is not passed on to third parties.
4.What are cookies used for?
5.Use and application of tracking, analysis tools and social plugins
This website uses Google Analytics, a web analysis service of Google Inc. "("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
However, by activating IP anonymisation on this website, Google will previously reduce your IP address within Member States of the European Union or in other countries party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Please note that the Google Analytics Code has been extended on this website to make your IP address anonymous/short. Furthermore, we use Google Analytics to evaluate data from Adwords and the double-click cookie. Deactivation is possible via the Ads Preferences Manager: https://adssettings.google.com/authenticated?hl=en
By clicking on the following link you can prevent the collection by Google Analytics. An opt-out cookie is set, which prevents the future collection of your data on this website.
Disable Google Analytics via opt-out cookie
Google AdWords is an Internet advertising service that allows advertisers to place ads in both Google's search engine results and the Google Advertising Network. On the Google Network, ads are distributed to thematically relevant websites using an automatic algorithm and using the previously defined keywords.
The operator of Google AdWords services is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertising on the websites of third parties and in the search engine results of the Google search engine and by displaying third-party advertising on our website.
If you access our website via a Google ad, Google will place a so-called conversion cookie on your information technology system. A conversion cookie loses its validity after thirty days and is not used to identify the person concerned.
If the cookie has not yet expired, the conversion cookie is used to determine whether certain sub-pages, for example shopping baskets from an online shop system, have been called up on our website. The conversion cookie enables both us and Google to track whether a person who has accessed our website via an AdWords ad has generated revenue, i.e. has completed or cancelled a purchase of goods.
The data and information collected through the use of the conversion cookie is used by Google to generate visit statistics for our website. These visit statistics are used by us to determine the total number of users who have been referred to us via AdWords ads.
By means of the conversion cookie, personal information, such as the pages visited, is stored. Personal data, including the IP address of the Internet connection used by the person concerned, is therefore transferred to Google in the United States of America each time he or she visits our Internet pages. This personal data is stored by Google in the United States of America. Google may disclose personal data collected through the technical process to third parties.
You can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.
Using Facebook Social Plugins
Our website uses social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins can be identified by one of the Facebook logos (white "f" on blue tile or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and appearance of Facebook Social Plugins can be viewed here: developers.facebook.com/plugins.
When you visit a website on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the website. We therefore have no influence on the extent of the data that Facebook collects with the help of this plugin and therefore inform you according to our level of knowledge:
By integrating the plugins, Facebook receives the information that you have called up the corresponding page of our website. If you are logged in to Facebook, Facebook can assign your visit to your Facebook account. If you interact with the plugins, for example by pressing the Like button or making a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. If you are not a member of Facebook, it is still possible for Facebook to obtain and store your IP address.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights and setting options for the protection of your privacy can be found in Facebook's data protection information: www.facebook.com/policy.php.
If you are a Facebook member and do not want Facebook to collect data about you via our website and link it to your membership data stored on Facebook, you must log out of Facebook before visiting our website. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: www.facebook.com/settings.
Using the Xing Share Button
6.Deletion, blocking and duration of the storage of personal data
We process and store your personal data only for the period of time required to achieve the respective storage purpose or as provided for by law.
After discontinuation of a storage purpose or after expiry of the storage period provided for by law, the personal data are routinely blocked or deleted for further processing in accordance with the statutory provisions.
7.Data protection rights of the data subject
If you have any questions about your personal data, you can contact us in writing at any time. You have the following rights under GDPR.
7.1 The right to information (subitem Art. 15 GDPR)
You have the right at any time to receive information about which categories and information about your personal data are processed by us for which purpose and how long and according to which criteria these data are stored and whether an automated decision making including profiling is applied in this context. You also have the right to know which recipients or categories of recipients your data have been or are still being disclosed, in particular recipients in third countries or international organisations. In this case you also have the right to be informed about appropriate guarantees in connection with the transmission of your personal data.
In addition to the right of appeal to the supervisory authority and the right to information about the origin of your data, you have the right to have your personal data deleted, corrected and limited or to object to the processing of your personal data.
In all the above cases, you have the right to request a free copy of your personal data processed by us from the data processor. We are entitled to charge an appropriate administration fee for all further copies that you request or that go beyond the data subject's right to information.
7.2 The right to correction (Article 16 GDPR)
You have the right to request the immediate correction of your incorrect personal data and, taking into account the purposes of the processing, to request the completion of incomplete personal data also by means of a supplementary declaration.
If you wish to exercise your right to rectification, you can contact our data protection officer or the data controller at any time.
7.3 The right to cancellation (Art. 17 GDPR)
You have the right to demand the immediate deletion of your data ("right to be forgotten") especially if the storage of the data is no longer necessary, if you revoke your consent to data processing, if your data were processed unlawfully or were collected unlawfully and if there is a legal obligation to delete under EU or national law.
However, the right to oblivion shall not apply if there is a predominant right to freedom of expression or information, if data storage is necessary for the fulfilment of a legal obligation (e.g. storage obligations), if archiving purposes prevent deletion or if storage serves to assert, exercise or defend legal claims.
7.4 The right to restriction (Art. 18 GDPR)
You have the right to request that the controller restrict the processing of your data if you dispute the accuracy of the data, if the processing is unlawful, if you refuse to delete your personal data and instead request that processing be restricted, if the requirements for the purpose of processing cease to apply or if you have objected to the processing in accordance with Article 21(1), as long as it is not yet clear whether there are any legitimate reasons on our part which outweigh yours.
7.5 The right to data transferability (Art. 20 GDPR)
You have the right to the transferability of your personal data, which you have provided to our company in the form of a standard format, so that you can have your personal data forwarded to another person in charge without hindrance, provided, for example, that you have given your consent and the processing is carried out using an automated procedure.
7.6 The right of objection (Art. 21 GDPR)
You have the right to object at any time to the collection, processing or use of your personal data for the purposes of direct advertising or market and opinion research as well as general business data processing, unless we can prove compelling reasons worthy of protection for processing which outweigh your interests, rights and freedoms.
Furthermore, you cannot exercise your right of objection if a legal provision provides for the collection, processing or use of the data or obliges the collection, processing or use.
7.7 Right of appeal to the data protection supervisory authority (Art. 77 DS-GMO in connection with § 19 BDSG)
You are granted the right to complain to the competent supervisory authority if you believe there has been an infringement in the processing of your personal data.
7.8 Right to revoke consent under data protection law (Art. 7 para. 3 DS-GMO)
You can revoke your consent to the processing of your personal data at any time and without giving reasons. This also applies to the revocation of declarations of consent given to us prior to the entry into force of the EU General Data Protection Regulation.
8.Legal basis of the processing
In the processing of personal data for which we obtain the consent of the data subject, Art. 6 paragraph 1, Sentence 1 a) of the Basic Data Protection Ordinance (GDPR) serves as the legal basis.
In the processing of personal data required for the performance of a contract to which the data subject is a party, Article 6, paragraph 1, sentence 1 b) (GDPR) serves as the legal basis. This regulation also covers processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1, sentence 1 c) (GDPR) serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 f) (GDPR) serves as the legal basis for processing. The legitimate interest of our company lies in the performance of our business activities and in the analysis, optimisation and maintenance of the security of our online offer.
9.Transfer of data to third parties
We generally do not sell or rent user data. A transmission to third parties beyond the scope described in this data protection declaration only takes place if this is necessary for the processing of the respective requested service.
We only transfer data if there is a legal obligation to do so. This is the case if state institutions (e.g. law enforcement authorities) request information in writing or a court order is available.
A transfer of personal data to so-called third countries outside the EU/EEA area does not take place.
10.Legal or contractual regulations for the provision of personal data and possible consequences of failure to provide such data
We hereby point out that in certain cases (e.g. tax regulations) the provision of personal data is prescribed by law or may result from contractual regulations (e.g. information on the contractual partner). For example, for a contract to be concluded, it may be necessary for the person/contractual partner concerned to make his/her personal data available so that we can process his/her request (e.g. order) at all. There is an obligation to provide personal data, especially when concluding contracts. If in this case no personal data are provided, the contract cannot be concluded with the person concerned. Before the data subject provides personal data, the data subject may contact our data protection officer or the data controller. The data protection officer or the controller shall then inform the data subject whether the provision of the personal data required is required by law or by contract or is necessary for the conclusion of the contract and whether the data subject's concerns give rise to an obligation to provide the personal data or what consequences the failure to provide the data requested will have for the data subject.
11.Existence of automated decision making
As a responsible company, we do without automatic decision-making or profiling in our business relationships.