Privacy Statement

Personal data (hereinafter mostly referred to as "data") are processed by us only within the scope of necessity and for the purpose of providing a functional and user-friendly website, including its content and the services offered thereon.

Pursuant to Article 4 (1) of Regulation (EU) 2016/679, that is to say the General Data Protection Regulation (hereinafter referred to as the "GDPR"), "processing" means any process carried out with or without the aid of automated procedures or any such process series of operations relating to personal data, such as collecting, organizing, storing, adapting or modifying, reading out, querying, using, disclosing through transmission, dissemination or any other form of provision, matching or linking, restriction, deletion or annihilation.

The following privacy policy informs in particular about the nature, extent, purpose, duration and legal basis of the processing of personal data, as far as we either alone or together with others decide on the purposes and means of processing. In addition, we inform about the third-party components that we use for optimization purposes and to increase the quality of use, insofar as third parties process data in their own responsibility.

Our privacy policy is structured as follows:

I. Information about us as Responsible Provider
II. Rights of Users and Stakeholders
III. Information about Data Processing

I. Information about us as Responsible Provider

Responsible provider of this website in terms of data protection and the data protection officer is listed with other legal information in the Legal Information.

II. Rights of Users and Stakeholders

In view of the data processing described in more detail below, users and data subjects have the right

  • upon confirmation of the processing of the data in question, for information on the processed data, for further information on data processing and for copies of the data (see also Art. 15 GDPR);
  • for correction or completion of incorrect or incomplete data (see also Art. 16 GDPR);
  • for immediate deletion of the data concerning them (see also Art. 17 GDPR), or, alternatively, if further processing pursuant to Art. 17 (3) GDPR is required, to restriction of processing in accordance with Art. 18 GDPR
  • on receipt of the data concerning them and provided by them and on the transmission of this data to other providers / controllers (see also Art. 20 GDPR);
  • on complaint to the supervisory authority, if they consider that the data concerning them are processed by the provider in breach of data protection regulations (see also Art. 77 GDPR).

In addition, the provider is obliged to disclose any correction or deletion of data or the restriction of processing, pursuant to Articles 16, 17 para. 1, 18 GDPR, to all recipients, to whom data has been disclosed by the provider. However, this obligation does not exist insofar as this notification is impossible or disproportionate. Notwithstanding, the user has a right to be informed about these recipients.

Likewise, according to Art. 21 GDPR, users and data subjects have the right to object to the future processing of data concerning them, provided that the data is processed in accordance with Art. 6 para. 1 lit. f) GDPR by the provider . In particular, an objection to the processing of data for direct marketing purposes is permitted.

III. Information About Data Processing

Personal data processed using our website will be deleted or blocked as soon as the purpose of the storage is omitted, the deletion of the data does not conflict with any statutory storage requirements and subsequently no other specifications on individual processing methods are provided.

Server Data

For technical reasons, in particular to ensure a secure and stable website, meta data which is transmitted through the Internet browser to us is saved. With these so-called server log files information, such as type and version of the Internet browser, the operating system, the website from which a user changed to our website (referrer URL), the website(s) of our website that is visited, the date and time of access and the IP address of the Internet connection, from which the use of our Internet presence takes place.

This data will be stored temporarily. Thereby, the data will not be stored collectively with other data.

This storage is based on the legal basis of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.

The data will be deleted at the latest after sixty days, as far as no further storage for preservation of evidence is necessary. Otherwise, the data will be wholly or partially exempted from deletion until the final clarification of an incident.

Cookies

We use cookies on our website. What cookies are, what types of cookies exist, how and for what purposes we use them, and how you can adjust the usage of cookies on your device, can be found in our Cookie Policy.

Contract Execution

The data transmitted by for the use of our goods and / or service offer are processed by us for the purpose of contract execution and are required to that extent. Contract processing and execution are not possible without provision of the data.

The legal basis for processing is Art. 6 para. 1 lit. b) GDPR.

Upon completed contract execution the data is deleted, but we must comply with the tax, regulatory and commercial retention periods.

Customer Account / Registration Function

If a customer account is created or requested via our website, we will gather, use and save the data entered during registration (e.g. name, address or e-mail address) exclusively for pre-contractual services, for the fulfillment of the contract or for the purpose of customer care (e.g. to provide an overview of previous orders with us or to offer the so-called memo function). At the same time we then save the IP address and the date of registration plus the time. Of course, a transfer of this data to third parties will not take place.

As part of the further registration process, reference is made to this privacy policy. The data collected by us is used exclusively for the provision of the customer account.

Insofar as consent to this processing is provided, Art. 6 para. 1 lit. a) GDPR is the legal basis for processing.

If the opening of the customer account additionally serves pre-contractual measures or the fulfillment of the contract, then the legal basis for this processing is also Art. 6 para. 1 lit. b) GDPR.

Consent to the creation and maintenance of the customer account can be withdrawn at any time with effect for the future, in accordance with Art. 7 para. 3 GDPR. To do so, the data subject only has to inform us about its withdrawal in writing.

The data collected will be deleted as soon as the processing is no longer necessary. However, we must observe tax, regulatory and commercial retention periods.

Newsletter

We provide a free newsletter for customers and interested parties. We use the data collected exclusively for sending the newsletter – it is therefore not disclosed to third parties.

The legal basis here is Art. 6 para. 1 lit. a) GDPR.

In accordance with Art. 7 para. 3 GDPR, consent to the newsletter can be revoked at any time with effect for the future. For this, the data subject only has to inform us about its withdrawal in writing or press the unsubscribe link contained in each newsletter.

Contact Requests / Contact Options

If we are contacted via contact form or e-mail, the data provided will be used to process the request. The data is necessary for processing and answering the inquiry – without provision of this data we can not answer the inquiry or at best only to a limited extent.

The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR.

The data will be deleted, provided that the request has been finally answered and the deletion does not conflict with any statutory storage requirements, such as a subsequent contract execution.

Google AdWords mit Conversion-Tracking

Our website uses Google AdWords and conversion tracking. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google).

Google's certification under the EU-US Privacy Shield warrants that Google complies with EU privacy rules when processing US data.

We use conversion tracking to provide targeted promotion of our site. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our site.

If you click on an ad placed by Google, the conversion tracking we use stores a cookie on your device. These so-called conversion cookies expire after 30 days and do not otherwise identify you personally.

If the cookie is still valid and you visit a specific page of our website, both we and Google can evaluate that you clicked on one of our ads placed on Google and that you were then forwarded to our website.

The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and what visitors do once there. In addition, we receive information about the number of users who clicked on our advertisement(s) as well as about the pages on our site that are subsequently visited. Neither we nor third parties who also use Google AdWords will be able to identify you from this conversion tracking.

You can also prevent or restrict the installation of cookies by making the appropriate settings in your browser. Likewise, you can use the browser to delete cookies that have already been stored. However, the steps and measures required vary, depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser or contact its maker for support.

In addition, Google provides further information with regard to its data protection practices, in particular information on how you can prevent the use of your data:

Google Remarketing

We use the remarketing function on our website. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google).

Google's certification under the EU-US Privacy Shield warrants that Google complies with EU privacy rules when processing US data.

We use this feature to deliver interest-based, personalized advertising on third-party websites that also participate in Google's advertising network.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our site.

To allow this advertising service to function, Google stores a cookie with a sequence of numbers on your device via your browser when you visit our website. This cookie records both your visit and the use of our website in anonymous form. However, personal data will not be passed on. If you subsequently visit a third-party website that also uses the Google advertising network, advertising may appear that refers to our website or our offers there.

To permanently disable this feature, Google provides a browser plugin for most common browsers.

Likewise, the use of cookies from certain providers, e.g. via https://www.youronlinechoices.com/uk/your-ad-choices or https://www.networkadvertising.org/choices can be deactivated by opt-out.

Cross-device marketing allows Google to track your usage patterns across multiple devices, so you may see interest-based, personalized advertising even when you switch devices. However, this requires that you have agreed to link your browsing history to your existing Google account.

Google offers more information about Google Remarketing at https://www.google.com/privacy/ads.

Matomo

In our website we use Matomo. This is an open source software with which we can analyze the use of our website. Matomo processes IP address, the website(s) that have been visited, the website from which our website was entered (referrer URL), the time on our website and the frequency of access to one of our websites.

To record this data Matomo stores a cookie on the respective device via the Internet browser.

Legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis and optimization of our website.

However, we use Matomo with the anonymization function "Automatically Anonymize Visitor IPs". This anonymization feature shortens the IP address by two bytes, which makes it impossible to associate it to the data subject or the Internet connection it has used.

If the data subject does not agree with this processing, it has the option of preventing the cookie from being stored in its Internet browser. For more information, see "Cookies" above.

In addition, the data subject has the option of terminating the analysis of the usage behavior by opting out. By confirming the link hereafter a cookie is stored the respective device via the Internet browser, which prevents further analysis. It is needed to press the link below again if the cookies stored on the device are deleted.

Google Maps

Google-Maps is provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereafter referred to as "Google."

On our website we link to Google maps. By following this link our website is left and a pre-filled page for generating route descriptions to us is visited. As with all external links, the privacy policy of the external site applies from the moment the link is clicked.

Google's certification under the EU-US Privacy Shield warrants that Google complies with EU privacy rules when processing US data.

Online Job Applications / Publication of Job Advertisements

We offer the opportunity to apply for a job via our website. Thereby the application data will be collected and processed electronically by us for executing the application process.

Legal basis for this processing is § 26 Abs. 1 S. 1 BDSG i.V.m. Art. 88 para. 1 GDPR.

If an employment contract is concluded, we will save the data submitted in the application in the personal file for the purpose of the normal organizational and administrative process – of course, taking into account the wider legal obligations.

Legal basis for this processing is also § 26 Abs. 1 S. 1 BDSG i.V.m. Art. 88 para. 1 GDPR.

When an application is rejected, we will automatically delete the data submitted to us two months after notification of the rejection. However, the deletion does not take place if longer data retention periods of up to four months or until the completion of legal proceedings are required by law, for example because of the burden of proof under the AGG.

Legal basis in this case is Art. 6 (1) lit. f) DSGVO and § 24 Abs. 1 Nr. 2 BDSG. Our legitimate interest lies in legal defense and enforcement.

If the data subject expressly agreed to a longer storage of data, for example, for inclusion in an applicant or interest database, the data will be further processed on the basis of this consent. Legal basis is then Art. 6 para. 1 lit. a) GDPR. Of course, consent can be revoked at any time according to Art. 7 para. 3 GDPR. To do so, the data subject only has to inform us about its withdrawal in writing.

This privacy policy is based on the sample privacy policy by the Law Firm Weiß & Partner.