Privacy Policy - EU General Data Protection Regulation (GDPR)

I. Name and address of the controller

Managing Director:
Dr. Michael Schnick

Teknoholt GmbH
Oscar-Kjellberg-Straße 20
03238 Finsterwalde
Germany

Phone: +49 (0) 3531 500-146
Fax: +49 (0) 3531 500-299
E-Mail: buero@teknoholt.de
Website: www.kjellberg.de

is the controller within the meaning of the EU General Data Protection Regulation (GDPR) and other applicable national data protection laws.

II. Name and address of the data protection officer

The data protection officer of the controller is:
Wolfram Müller

Hauptstraße 16
03238 Fischwasser
Germany

Phone: +49 (0) 3531 500-231
Fax: +49 (0) 3531 500-299
E-mail: datenschutz@kjellberg.de

III. General information about data processing

1. Scope of the processing of personal data

We collect and use personal data of the users of our website only to the extent required to provide a functional website, our content and services.

In principle, the collection and use of personal data of our users takes place only with their consent. An exception to this principle applies in cases where processing of the data is permitted by law or it is not possible to obtain prior consent on factual grounds.

2. Legal basis for the processing of personal data

The legal basis for the processing of personal data is derived in principle from:

  • Point (a) of Article 6(1) GDPR where the consent of the data subject is obtained.
  • Point (b) of Article 6(1) GDPR where processing is necessary for the performance of a contract to which the data subject is party. This also includes processing operations required in order to take steps prior to entering into a contract.
  • Point (c) of Article 6(1) GDPR where processing is necessary for compliance with a legal obligation.
  • Point (d) of Article 6(1) GDPR where processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person.
  • Point (f) of Article 6(1) GDPR where processing is necessary for the purposes of a legitimate interest pursued by our company or by a third party and the interests or fundamental rights and freedoms of the data subject are not overridden by that interest.

3. Data erasure and storage period

The personal data of users will be deleted or made unavailable once the purpose of storage is no longer applicable. Storage beyond this period can take place if this has been provided for by the European or national legislature in regulations, laws or other provisions of Union law to which the controller is subject. The data will then also be made unavailable or deleted when a storage period stipulated by the aforementioned standards expires, unless there is a necessity for further storage of the data in order to conclude or perform a contract.

IV. Use of our website, general information

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the user’s computer system. The following information is collected:

  1. Information about the browser type, browser language and version used
  2. The user’s operating system
  3. The user’s Internet service provider
  4. The user’s IP address
  5. Date and time of access
  6. Websites from which the user’s system accesses our website
  7. Websites that are accessed by the user’s system from our website
  8. The user’s location (country, region, city)
  9. Information about the device used by the user (device class, device, manufacturer, colour depth of the display, screen resolution, plug-ins used by the browser, Internet speed, use of JavaScript)

The data described is stored in our system’s log files. This data is not stored together with other personal data of the user.

2. Purpose and legal basis for data processing

Temporary storage of the IP address by our system is required to enable delivery of the website to the user’s computer. The user’s IP address must remain stored for the duration of the session.

Storage in log files is undertaken to ensure the functionality of the website. In addition, we also use the data to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.

The legal basis for the temporary storage of data and log files is point (f) of Article 6(1) GDPR.

Collection of your personal data for the provision of our website and storage of the data in log files are essential for the operation of the website. The user therefore has no means of objection.

3. Storage period

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. If your data is collected to ensure provision of the website, the data is deleted when the current session ends.

If your data is stored in log files, it will be deleted after seven days at the latest. Storage beyond this period is possible, in which case the user’s IP addresses are deleted or anonymised, so that any assignment of the accessing client is no longer possible.

V. General information on the use of cookies

We use cookies on our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When you visit a website, a cookie may be stored on your operating system. This contains a specific string of characters that enables unique identification of the browser when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require the ability to identify the browser when the page changes.

The following data is stored and transferred:

  1. Data for A/B tests on the website
  2. First-time or recurring use of the website

The legal basis for the processing of personal data using cookies is derived from point (f) of Article 6(1) GDPR. The purpose of our use of cookies required for technical reasons is to simplify the use of our website.

Please note that some features of our website can only be offered using cookies. We do not use user data collected by cookies required for technical reasons to create user profiles.

Cookies are stored on the user’s computer and transferred from there to our website. As a user, you therefore have control over the use of cookies. You can restrict or disable the transfer of cookies by changing your Internet browser’s settings. Stored cookies can also be deleted there. Please note that if you disable cookies, you may no longer be able to use all of the features of our website.

For more information on cookies not required for technical reasons, see sections X and XI.

VI. Your rights / rights of the data subject

Under the EU General Data Protection Regulation, you have the following rights as a data subject:

1. Right of access – Article 15 GDPR

You have the right to obtain information from us as the controller as to whether we are processing personal data concerning you.

In addition, you also have the ability to obtain access to the following information:

  1. The purpose of data processing
  2. The categories of personal data processed
  3. The recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed
  4. The envisaged period for which the personal data concerning you will be stored, or, if specific information is not possible, the criteria used to determine the storage period
  5. The existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing
  6. The right to lodge a complaint with a supervisory authority
  7. Where the personal data is not collected from the data subject, any available information as to its source
  8. The existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

Finally, you also have the right to obtain information as to whether your personal data is transferred to a third country or to an international organisation. In this case, have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.

You can assert your right to information at: datenschutz@kjellberg.de

2. Right to rectification – Article 16 GDPR

If the personal data processed by us and concerning you is inaccurate or incomplete, you have the right to obtain from us rectification and/or completion. The rectification will be made as quickly as possible and without undue delay.

3. Right to restriction – Article 18 GDPR

The right to restrict the processing of your personal data can be asserted in the following cases:

  1. The accuracy of the personal data is contested for a period enabling the controller to verify the accuracy of the personal data.
  2. The processing is unlawful and the erasure of the personal data is opposed, with the restriction of the use of the personal data being requested instead.
  3. The controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defence of legal claims.
  4. The data subject has objected to processing pursuant to Article 21(1) GDPR and it is not yet clear whether the legitimate grounds of the controller override those of the data subject.

Where processing of personal data concerning you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If a restriction of processing is in place under the principles set out, you will be informed by us before the restriction is lifted.

4. Right to erasure – Article 17 GDPR

If the grounds set out below apply, you can obtain the erasure of personal data concerning you without undue delay. The controller is obliged to erase this data without undue delay. The grounds are:

  1. The personal data concerning you is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
  2. The processing is protected on the basis of consent according to point (a) of Article 6(1) or point (a) of Article 9(2) GDPR and you withdraw consent. Another requirement is that there is no other legal ground for the processing.
  3. You object to the processing (Article 21(1) GDPR) and there are no overriding legitimate grounds for the processing. A further possibility is that you object to the processing pursuant to Article 21(2) GDPR.
  4. The processing of personal data concerning you is unlawful.
  5. The personal data concerning you has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
  6. The personal data concerning you has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Where we have made the personal data concerning you public and are obliged pursuant to Article 17(1) GDPR to erase the personal data, we, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, that personal data.

Please note that the right to erasure does not exist to the extent that processing is necessary:

  1. For exercising the right of freedom of expression and information,
  2. For compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller,
  3. For reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3) GDPR,
  4. For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR in so far as the right referred to in point (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
  5. For the establishment, exercise or defence of legal claims.

5. Right to be informed – Article 19 GDPR

If you have asserted the right to rectification, erasure or restriction of processing, we are obliged to communicate this rectification, erasure or restriction of processing to each recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves a disproportionate effort. You also have the right to be informed about those recipients.

6. Right to data portability – Article 20 GDPR

Under the GDPR, you also have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where

  1. The processing is based on consent pursuant to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR, and
  2. The processing is carried out by automated means

Finally, in the context of exercising the right to data portability, you have the right to have the personal data concerning you transmitted directly from one controller to another, where this is technically feasible and does not adversely affect the freedoms and rights of others.

The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to withdraw the declaration of consent under data protection law – Article 7 GDPR

You have the right to withdraw your declaration of consent under data protection law at any time. Please note that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

8. Right to object – Article 21 GDPR

Furthermore, have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. The right of objection also applies to profiling based on those provisions.

The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

If the personal data concerning you is processed for marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing. This includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.

In the context of the use of information society services, you also have the ability (notwithstanding Directive 2002/58/EC) to exercise your right to object by automated means using technical specifications.

9. Automated individual decision-making, including profiling

Under the EU General Data Protection Regulation, you also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. However, there is an exception to this principle if the decision

  1. Is necessary for entering into, or performance of, a contract between you and the data controller
  2. Is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
  3. Is based on your explicit consent

If processing is carried out in the cases referred to in (1) and (3), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests. This includes at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

Decisions referred to in (1) – (3) shall not be based on special categories of personal data referred to in Article 9(1) GDPR, unless point (a) or (g) of Article 9(2) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

10. Right to lodge a complaint with a supervisory authority – Article 77 GDPR

Finally, if you consider that the processing of personal data relating to you infringes the substance of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

VII. Newsletter

1. General information

You can subscribe to a free newsletter at our website, in which we keep you informed about our latest interesting offers. The advertised goods and services are specified in the declaration of consent. The data that you enter on screen during registration is transmitted to us voluntarily.

Based on the consent obtained from you during the registration process, we then collect the following data: Last name, first name, e-mail address, IP address of the accessing computer, date and time of registration.

Your data in connection with the data processing for sending newsletters will not be passed on. The data will be used exclusively for sending the newsletter.

2. Double opt-in and logging

Registration for our newsletter is on the basis of a so-called double opt-in procedure. After registering, you will receive an e-mail asking you to confirm your registration. This confirmation is required to ensure that no one can register with someone else’s e-mail address.

Newsletter registrations are logged in order to be able to provide evidence of the registration process in accordance with legal requirements. This includes storage of the time of registration and confirmation as well as the IP address.

3. Legal basis

The legal basis for the processing of data is point (a) of Article 6(1) GDPR if the user has given consent. Collection of the user’s e-mail address is for the purpose of sending the newsletter.

4. Erasure, withdrawal and objection

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Your e-mail address will therefore be stored for as long as the newsletter subscription is active. You can end your subscription to the newsletter at any time by withdrawing your consent. Each newsletter contains a link for this purpose.

Please also note that you can object to the future processing of your personal data at any time in accordance with the legal requirements pursuant to Article 21 GDPR. In particular, you can object to processing for direct marketing purposes.

5. Mail service provider

The newsletter is mailed by “ELAINE”, a newsletter mail platform operated by the provider artegic AG, Zanderstrasse 7, 53177 Bonn, Germany. ELAINE is designed for highly individual, targeted communication and true real-time marketing automation. The ELAINE system’s advertising client is completely browser-based and does not use plug-ins or external ActiveX controls. Data processing takes place exclusively in Germany using SSL-encrypted data transmission.

The e-mail addresses of our newsletter recipients, as well as their other data as described in this information, are stored on servers operated by “Mission One” in Germany. “Mission One” uses this information for the sending and analysis of the newsletter on our behalf. However, “Mission One” does not use our newsletter recipients’ data to write to them itself or pass them on to third parties.

You can find more information on data protection at the following link: https://www.artegic.com/privacy/

6. Statistical survey

Please note that we analyse your user behaviour when the newsletter is sent. For this analysis, the e-mails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files stored on our website. For analysis purposes, we link the data set out in point 1 and the web beacons with your e-mail address and an individual ID. Links received in the newsletter also contain this ID.

The data is collected exclusively in pseudonymised form, which means that the IDs are not linked to your other personal data, excluding the possibility of identifying individuals.

VIII. Electronic contact

If you wish to contact us, a contact form is available on our website which you can use to contact us electronically. The data entered on screen is sent to us and stored. This data is: first name, last name, e-mail address, message.

When the message is sent, the following data is also stored:

  1. The user’s IP address
  2. Date and time of registration

It is also possible to contact us via the e-mail address provided. In this case, the user’s personal data sent with the email is stored.

Your data will not be passed on to third parties in this context, the data will be used exclusively for processing the establishment of communication.

The legal basis for the processing of data is point (a) of Article 6(1) GDPR if the user has given consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is point (f) of Article 6(1) GDPR. If the purpose of contact by e-mail is the conclusion of a contract, point (b) of Article 6(1) GDPR constitutes an additional legal basis for processing.

In this context, the purpose of processing of personal data is solely to process the establishment of contact. In the case of contact by e-mail, this is also the necessary legitimate interest in the processing of the data.

If other personal data is processed during the sending process, it will be used only to prevent misuse of the contact form and ensure the security of our information technology systems.

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from the on-screen contact form and data sent by e-mail, this is the case when the conversation with the user has ended. A conversation is ended when it is clear from the circumstances that the matter in question has been concluded.

The additional personal data collected during the sending process will be deleted after a period of no longer than seven days.

You have the ability to withdraw your consent to the processing of your personal data at any time. When you contact us by e-mail, you can also object to the storage of your personal data at any time. Please note however that in this case, the conversation cannot be continued.

To withdraw, please send us an e-mail with the subject “Withdrawal of consent and storage of personal data” to datenschutz@kjellberg.de with the following information:

  • First name (optional during registration)
  • Last name (optional during registration)
  • E-mail address you used to register

All personal data stored in the course of making contact will be deleted in this case.

IX. Web Analytics

1. Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, text files that are stored on your computer and enable analysis of your use of the website. The information generated by cookies about your use of this website is usually sent to a Google server in the United States and stored there. However, if IP anonymisation is enabled on this website, your IP address will be truncated by Google beforehand within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide other services related to website and internet use to the website operator.

The IP address sent by your browser as part of Google Analytics will not be amalgamated with any other data held by Google.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software, but please note that you may not be able to use all features of this website in full if you do so. You can also prevent the collection of data generated by cookies and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

This website uses Google Analytics with the extension “_anonymizeIp()”, which means that IP addresses are truncated for further processing, excluding the possibility of identifying individuals. If the data about you that is collected is specific to the individual, it is therefore immediately excluded and the personal data is deleted without delay.

We use Google Analytics to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our website and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the United States, Google is subject to the EU-US Privacy Shield:

https://www.privacyshield.gov/EU-US-Framework

The legal basis for the use of Google Analytics is point (f) of Article 6(1) GDPR.

Third party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Terms of service:

http://www.google.com/analytics/terms/de.html

Data protection overview:

http://www.google.com/intl/de/analytics/learn/privacy.html

And the privacy policy:

http://www.google.de/intl/de/policies/privacy.

This website also uses Google Analytics for analysis of visitor flows across devices on the basis of a user ID. You can disable cross-device analysis of your usage in your customer account under “My data”, “Personal data”.

2. Use of IP mappers for geolocation

Auf dieser Website werden mit Technologien der freegeoip.net Daten erhoben, um Ihre Standortdaten zur Laufzeit auszuwerten. Diese Daten werden sofort verworfen. Wir nutzen sie This website uses technologies from freegeoip.net to collect data in order to analyse your location data at runtime. This data is discarded immediately. We use it only to enable automatic display of the location-specific version of the website that is relevant to the user. A cookie is used to ensure that users are not requested to redirect the next time they access the site because of their GeoIP location. You can object to the collection of data with effect for the future at any time, for example by installing the script blocker add-on “NoScript” (noscript.net) for your browser.

X. Social Media

1. Use of social media plug-ins

We currently use the following social media plug-ins:

  • Facebook
  • Instagram
  • YouTube
  • Twitter
  • Pinterest
  • LinkedIn
  • Xing

On some of its web pages, the Kjellberg group offers the Facebook “Like” button from Facebook Ireland Ltd, Hanover Reach, 5-7 Hanover Quay 2 Dublin IRELAND and the Google “+1” button from Google Inc., 1600 Amphitheatre Parkway, Mountain View CA 94043, USA. The Facebook Like button allows you to tell your Facebook friends quickly and easily if you like one of our pages.

When you visit a page that includes a Facebook Like button, the same data is transferred to Facebook as if you were visiting facebook.com itself, even if you are not a Facebook user and do not click the Like button. The following data is transferred:

  • IP address
  • Browser version and operating system
  • Origin of visitors (referrer), if you followed a link
  • Screen resolution
  • Installed plug-ins such as Flash or Adobe Reader
  • URL of the page on which the Like button is embedded

You can prevent this transfer of data. To do so, please adjust the security settings in the browser you use (e.g. Internet Explorer, Firefox, Google Chrome, Safari). To find out how this works, please refer to the Help in your browser.

In addition, the data set out in section IV of this policy is transferred. For Facebook and Xing, according to the providers in each case in Germany, the IP address will be anonymised immediately after the data has been collected. When you enable the plug-in, your personal data is transferred to the plug-in provider in question and stored there (by US providers in the USA). Because the plug-in provider uses cookies in particular to collect data, we recommend that you delete all cookies in your browser’s security settings before clicking on the greyed-out box.

We have no influence over the data collected and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and uses it for the purposes of advertising, market research and/or demand-based presentation of its website. Analysis of this kind is used in particular (including for users who are not logged in) to display customised advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, but you must contact the plug-in provider if you want to exercise that right. We use these plug-ins to allow you to interact with the social networks and other users so that we can improve our website and make it more interesting for you as a user. The legal basis for the use of plug-ins is point (f) of Article 6(1) GDPR.

The data is passed on regardless of whether you have an account with the plug-in provider and are logged in. If you are logged in to the plug-in provider, the data we collect from you will be directly assigned to the account you have with the plug-in provider. If you click the enabled button, for example to link to the page, the plug-in provider will also store this information in your user account and share it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before enabling the button, as this will allow you to avoid any assignment to your profile with the plug-in provider.

You can find more information about the purpose and scope of data collection and its processing by the plug-in provider in the providers’ privacy policies, which you can find below and which also provide further information on your rights in this respect and the settings you can use to protect your privacy.

Addresses of the plug-in providers and URL with their information on data protection:

  1. Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
  2. Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google is subject to the EU-US Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework.
  3. Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
  4. Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy.
  5. LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
  6. Instagram; Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland; https://help.instagram.com/519522125107875
  7. Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA; https://policy.pinterest.com/de/privacy-policy
  8. YouTube; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland; https://www.youtube.com/intl/de/about/policies

2. Integration of YouTube videos

Our website uses plug-ins from the YouTube website. The operator of the site is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA

We have integrated YouTube videos into our website, which are stored at http://www.YouTube.com and can be played directly from our website. They are all embedded in “enhanced privacy mode”, which means that no data about you as a user is transferred to YouTube if you do not play the videos. The data set out in paragraph 2 is not transferred until you play the videos. We have no influence over this data transfer.

When you visit the website, YouTube is informed that you have visited the page in question on our website. This happens regardless of whether YouTube provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data is assigned directly to your account. If you do not want the data to be assigned to your profile on YouTube, you will need to log out before enabling the button. YouTube stores your data as usage profiles and uses it for the purposes of advertising, market research and/or demand-based presentation of its website. Analysis of this kind is used in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, but you must contact YouTube if you want to exercise that right.

You can find more information about the purpose and scope of data collection and its processing by YouTube in the privacy policy, which also provides further information on your rights and the settings you can use to protect your privacy:

https://www.google.de/intl/de/policies/privacy

Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield:

https://www.privacyshield.gov/EU-US-Framework

3. Integration of Google Maps

This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use the Google Maps service on this website. This allows us to display interactive maps directly on our website and enables you easily use the maps feature.

When you visit the website, Google is informed that you have visited the page in question on our website. In addition, the data set out in section IV of this policy is transferred. This happens regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data is assigned directly to your account. If you do not want the data to be assigned to your profile on Google, you will need to log out before enabling the button. Google stores your data as usage profiles and uses it for the purposes of advertising, market research and/or demand-based presentation of its website. Analysis of this kind is used in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, but you must contact Google if you want to exercise that right.

You can find more information about the purpose and scope of data collection and its processing by the plug-in provider in the provider’s privacy policies, which also provide further information on your rights in this respect and the settings you can use to protect your privacy:

http://www.google.de/intl/de/policies/privacy

Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield:

https://www.privacyshield.gov/EU-US-Framework

XI. Online advertising

1. Use of Google AdSense

We use the online advertising service Google AdSense on our website, which can be used to present advertising tailored to your interests. We use this service with a view to displaying advertising that might be of interest to you in order to make our website more interesting for you. Statistical information about you is collected for this purpose, and is processed by our advertising partners. The ads can be recognised from the “Google ads” pointer accompanying each ad.

When you visit our website, Google is informed that you have visited our website. This is done by Google using a web beacon to set a cookie on your computer. The data set out in section IV of this policy is transferred. We have no influence over the data collected, nor are we aware of the full scope of data collection and storage period. Your data is transferred to the United States, where it is analysed. If you are logged in with your Google account, your data can be assigned directly to it. If you do not want the data to be assigned to your Google profile, you will need to log out. It is possible that this data may be passed on to Google’s contractual partners, third parties and authorities.

The legal basis for the processing of your data is point (f) of Article 6(1) GDPR.

This website does not use Google AdSense to serve ads from third parties.

You can prevent the installation of cookies from Google AdSense in various ways:

  1. By adjusting your browser settings. In particular, blocking third-party cookies means that you will not be shown ads from third-party providers;
  2. By disabling interest-based ads on Google via the link http://www.google.de/ads/preferences, note that this setting is deleted when you delete your cookies;
  3. By disabling the interest-based ads of the providers that are part of the self-regulation campaign “About Ads” via the link http://www.aboutads.info/choices, note that this setting is deleted when you delete your cookies;
  4. By permanently disabling in your Firefox, Internet Explorer or Google Chrome browser via the link http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all features of this website to their full extent.

Further information on the purpose and scope of data collection and its processing, as well as further information on your rights in this respect and the settings you can use to protect your privacy is available from: Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA; privacy policy for advertising: http://www.google.de/intl/de/policies/technologies/ads

Google is subject to the EU-US Privacy-Shield: https://www.privacyshield.gov/EU-US-Framework

2. Google remarketing

We also use the Google remarketing application. This is a method we use to connect with you again. The application allows our ads to be shown to you as you continue to use the Internet after visiting our website. This is done by storing cookies in your browser that are used by Google to capture and analyse your usage behaviour when you visit different websites. This allows Google to determine your previous visit to our website. According to its own statements, Google does not combine the data collected for the purposes of remarketing with your personal data, which may be stored by Google. In particular, Google says that pseudonymisation is used in remarketing.

3. Facebook Custom Audiences/ Facebook-Pixel

In addition, the website also uses the remarketing feature Custom Audiences from Facebook Inc. (“Facebook”). This enables users of the website to be shown interest-based advertising (“Facebook ads”) when they visit the Facebook social network or other websites that also use the method. We use this service with a view to displaying advertising that is of interest to you in order to make our website more interesting for you.

On the basis of the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool, and the information provided therefore reflects only what we know: through the integration of Facebook Custom Audiences, Facebook is informed that you have accessed a particular page on our website or clicked on one of our ads. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will identify and save your IP address and other identification features.

Users who are logged in can disable the Facebook Custom Audiences feature at https://www.facebook.com/settings/?tab=ads#_

Rechtsgrundlage für die Verarbeitung Ihrer Daten ist Art. 6 Abs. 1 S. 1 lit. a DS-GVO

You can find more information about data processing by Facebook at https://www.facebook.com/about/privacy

4. Google DoubleClick

Google uses the DoubleClick cookie on websites in the Google advertising network (known as publishers) and with certain Google services to help advertisers and publishers serve and manage ads on the web. When you visit a website and view or click an ad served by websites in the Google advertising network, a DoubleClick cookie may be stored in your browser.

This website also uses remarketing with Google Analytics for online advertising. This includes the use of cookies by third parties, including Google. This allows ads to be presented to you on the basis of your previous visits to this website, and also optimised and analysed. With the help of remarketing, information about your online behaviour is collected and stored on a pseudonymous basis for marketing purposes (targeting/retargeting). This information can then be used to display targeted product recommendations as personalised advertising banners on other websites (publishers). Under no circumstances will we combine this information with data from your customer relationship or use it to personally identify you as a visitor to this website.

The data collected is only used to improve the website. You can prevent Google/DoubleClick from collecting usage data by downloading and installing the browser plug-in available under “DoubleClick opt-out extension” at the following link. Alternatively, you can disable DoubleClick cookies by visiting the Network Advertising Initiative’s opt-out page.

XII. A/B testing

This website carries out analyses of user behaviour using so-called A/B testing, which allows us to display our web pages with slightly different content depending on a profile that is assigned. This enables us to analyse our website, improve it regularly and make it more interesting for you as a user.

The legal basis for A/B testing is point (f) of Article 6(1) GDPR.

Google Optimize

Our website uses the web analytics and optimisation service Google Optimize, which is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google Optimize”). We use the Google Optimize service to enhance the attractiveness, content and functionality of our website by displaying new features and content to a percentage of our users and statistically evaluating changes in usage. Google Optimize is a sub-service of Google Analytics (see Google Analytics section).

Google Optimize uses cookies that enable optimisation and analysis of the use of our website. The information generated by these cookies about your use of our website is usually sent to a Google server in the United States and stored there. We use Google Optimize with IP anonymisation enabled, so that your IP address is first truncated by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the United States and truncated there. Google will use this information to evaluate your use of our website, to compile reports on the optimisation test and related website activity and to provide us with other services relating to website activity and Internet usage.

You can prevent the storage of cookies by selecting the appropriate settings in your Internet browser. You can also prevent the collection of data generated by cookies and related to your use of our website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

For more information about data collection and processing by Google, please refer to Google’s privacy policy, which you can find at: http://www.google.com/policies/privacy

XIII. Use of Google Fonts

On the basis of our legitimate interests pursuant to point (f) of Article 6(1) GDPR, we integrate the fonts (“Google Fonts”) of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The objective is to optimise and operate our website economically. You can find the provider’s privacy policy at: https://www.google.com/policies/privacy/,

The opt-out can be set at: https://adssettings.google.com/authenticated

XIV. Social Media presence

We maintain fan pages within various social networks and platforms with the aim of communicating with the customers, prospects and users active on social media and informing them about our services.

Please note that this means that your personal data may be processed outside the European Union, so that risks may arise for you (e.g. in the enforcement of your rights under European/German law). Please note that some US providers are certified under the Privacy Shield Framework and have therefore committed themselves to complying with EU data protection standards.

User data is generally processed for market research and advertising purposes. For example, usage profiles can be created from usage behaviour and the resulting interests of users. These usage profiles can in turn be used for example to serve ads inside and outside the platforms that are believed to be in line with the interests of users. For these purposes, cookies are usually stored on users’ computers, in which the usage behaviour and interests of the users are stored. In addition, data can also be stored in the usage profiles independently of the devices used by users (particularly if the users are members of the platforms in question and are logged in to them).

The processing of users’ personal data is based on our legitimate interests in effective information for users and communication with users pursuant to point (f) of Article 6(1) GDPR. If users are asked for their consent to data processing by their respective providers (for example to give their consent by ticking a check box or confirming a button), the legal basis for the processing is point (a) of Article 6(1), Article 7 GDPR.

For more information on the processing of your personal data and your means of objection, please refer to the links for each of the providers listed below. The right of access and other rights of data subjects can also be asserted with the providers, as only the providers have direct access to users’ data and thus to the relevant information. We are of course available for any questions you may have and will support you if you need help.

Anbieter:

XV. No liability for partner Internet sites

On our pages, we refer to various cooperation partners who themselves offer Internet sites and services. These partners generally have their own privacy policies. These policies are not related to us and we assume no liability for them. Please refer to the partners for information about their data protection practices.

Revised: February 2020, Version 1.0