Collection, Processing and use of personal data
Personal data means all information relating to an identified or identifiable natural person (e.g. name, address, telephone number, date of birth or email address).
When we process personal data this means, for instance, that we collect, store and use this data, transfer it to others or erase it.
Essentially, you can use our online service without disclosing any personal data. However, the use of certain functions may require the disclosure of personal data, such as for registration or making contact. Mandatory information is generally marked with an asterisk (*). If you do not wish to provide us with the data that we require, we are afraid to inform you that you will not be able to use the corresponding services.
Withdrawal of consent
You may withdraw your consent at any time with effect for the future. You can show that you have withdrawn consent in the private sphere settingsby cancelling your selection.
Purposes of processing
We process your personal data for the following purposes and on the grounds of the lawful bases mentioned. If the data processing is based on a balancing of interests, we will also explain the legitimate interest we are pursuing in processing your data:
Purpose of processing
Lawful basis for the processing and indication of the legitimate interest, where relevant
Provision of this online service and performance of the contract
Performance of the contract
Personalisation of the service
Performance of the contract or consent
Analysis of the service to investigate user behaviour
Consent / balancing of interests; we have a legitimate interest in analysing user behaviour in our online service so that it can be continually improved or adapted to the needs of our users.
Email dispatch of information after the recipients have given their consent by email
Performance of the contract or consent
Investigating faults and guaranteeing system security including discovering and following up instances of forbidden access and attempts to access our web servers
Fulfilment of our legal obligations in the area of data security as well as the balancing of interests; we have a legitimate interest in rectifying faults, in guaranteeing system security and in discovering and following up forbidden access attempts or instances of access.
Safeguarding and defending our rights
Balancing of interests; we have a legitimate interest in asserting and defending our rights.
On request you can obtain information from us concerning our balancing of interests. Simply use the information in the Contact section for this purpose.
Please note that you have a right to object to the processing of data for the purpose of direct marketing or for personal reasons (see section on rights of data subjects).
Disclosure of data to third parties
Furthermore, data can be transferred to third parties if we should be obliged to do so due to the legal requirements or due to an enforceable order from the authorities or a court of law.
We reserve the right to use service providers for collecting and processing data. We will only provide service providers with personal data that they need for their specific activity. Thus your email address, for instance, can be passed on to a service provider so that the service provider can deliver a newsletter you have subscribed to. Service providers may also be engaged to provide server capacities. Service providers are usually engaged as “processors” who may only process personal data of the users of this online service if this is done in accordance with our instructions.
Providers of IT services (technical support), Germany / UK
Transfer of data to countries not belonging to the EEA
We also transfer personal data to third parties and processors headquartered in countries that do not belong to the EEA. In this case, before such a transfer takes place, we ensure that either the recipient’s country has an adequate level of data protection (e.g. due to an adequacy decision on the part of the EU Commission for the country in question pursuant to Article 45 of the General Data Protection Regulation (GDPR)), through self-certification by the recipient for the EU-US-Privacy Shield in connection with the corresponding adequacy decision of the Commission pursuant to Article 45 of the GDPR, or by agreeing the EU Commission’s standard contractual clauses with the recipient pursuant to Article 46 of the GDPR), or if we have the express consent of our users.
The third parties and processors in question are located in the following countries:
We can provide you with an overview of the recipients in third countries and a copy of the specific provisions agreed to ensure an adequate level of data protection. Please use the information in the contact section for this purpose.
Duration of the data storage and retention periods
We store your data for as long as necessary in order to provide our online service and the associated functions and for as long as we have a legitimate interest in continuing to store the data. In all other cases we erase your personal data with the exception of data that we are obliged to retain in order to comply with statutory retention periods (in relation to taxation or commercial law; one example being invoices).
Data that is subject to a retention period is blocked until the end of the period.
The following specific retention periods apply to the personal data processed within the framework of this online service:
log files: 7 to 10 days
Every time you use the internet your internet browser automatically sends us certain information which we store in what are known as log files.
We store the log files for 7 to 10 days for the sole purpose of investigating faults and for security reasons (e.g. to clarify hacking attacks). The data is then erased. Log files which have to be kept for a longer period for reasons of evidence are not erased until the matter in question has been finally clarified and they may be passed on to the investigative authorities in individual cases.
The following information, in particular, is stored in log files:
The IP address (internet protocol address) of the end device from which the online service was accessed.
The internet address of the website from which the online service was requested (the URL of origin or referrer URL)
The name of the service provider through whom access to the online service takes place
The name of the files or information retrieved
The date, time and duration of the retrieval
The data volume transmitted
The operating system and information on the Internet browser being used, including add-ons installed (such as for the Flash Player)
The http status code (e.g. “Request successful” or “Requested file not found”)
In addition, log files are also used for web analysis
What are cookies?
Cookies are small text files that are sent out on a visit to a website and are stored in the user’s browser. If the website in question is accessed again, the user’s browser sends back the contents of the cookies thus allowing the user to be recognised. Certain cookies are automatically erased at the end of the browser session (known as session cookies). Others are stored in the user’s browser for a specified period or are stored permanently and are then automatically erased (known as temporary or permanent cookies).
What data is stored in the cookies?
No personal data is generally stored in cookies, but only an online identifier.
How can you prevent cookies being used and how can you erase cookies?
You can deactivate the storage of cookies through your browser settings and at any time erase cookies already stored in your browser (see section entitled Technical instructions). However, please note that this online service might not work without cookies or only with restricted functions.
Please note as well that objections to the creation of user profiles partly work through an “opt-out cookie”. If you erase all cookies, an objection may no longer be considered and you will have to raise the objection again.
What sort of cookies do we use?
Some cookies are necessary so that we can safely provide our online service. This category includes, for instance,
Cookies that serve to identify or authenticate our users;
Cookies that temporarily store certain user entries (e.g. contents of a shopping cart or of an online form);
Cookies that store certain user preferences (e.g. search settings or language settings);
Cookies that store data in order to guarantee the undisturbed reproduction of video and audio contents.
We use functional cookies in order to record the behaviour of our users (e.g. which advertising banners they click on, which sub-pages they visit, what search queries they make) and to evaluate this behaviour in statistical form.
You can withdraw your consent at any time with effect for the future. You can show that you have withdrawn consent in the private sphere settings by cancelling your selection.
We need statistical information concerning the use of our online service in order to make it more user friendly, to carry out measurements of reach and to conduct market research.
For this purpose, we employ the following web analysis tools. The usage profiles created with the aid of functional cookies or by evaluating the log files are not brought together with personal data.
The providers of the tools only process data as processors according to our instructions and not for their own purposes.
The tools either do not use the users’ IP addresses at all or shorten them immediately after collection.
For each tool you can find information on the provider in question and also how you can object to the collection and processing of data by the tool.
In the case of tools that work with opt-out cookies it must be noted that the opt-out function relates to the device or browser and generally only applies to the end device or browser currently being used. If you use several end devices or browsers, you have to set the opt-out on each individual end device and in each browser being used.
Google Analytics is provided by Google Ireland Limited Gordon House, Barrow Street Dublin 4. Ireland. We use Google Analytics with the additional function offered by Google for the anonymisation of IP addresses. This means that, as a rule, Google already shortens the IP address within the EU and only in exceptional cases does it wait until the address reaches the USA and that in all cases the IP address is only stored in a shortened format.
The LinkedIn Insight Tag is provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, and captures the URL, the referrer URL, the IP address, device and browser characteristics, time stamp and page views. The data is anonymised within seven days and erased within 90 days.
We do not receive any personal data, but only summarised reports concerning the target group for the website (demography) and the ad performance.
Members of LinkedIn can control the use of their personal data for advertising purposes in their account settings. In order to deactivate the Insight-Tag on our website (“opt-out”) click here.
If you fill in a “lead form” on the LinkedIn website, we will process your personal data so that we can provide you with the information you request. If you give your consent, we will transfer the information you enter on the lead form to our customer database (CRM system) and link it with any other information we may have from you so that in future we can make you offers appropriate to your interests.
You can object to the collection and evaluation of your data by the LinkdIn Insight Tag by deactivating this tool in the private sphere settings.
Google Ads Remarketing
Google Ads Remarketing is provided by Google Ireland Limited Gordon House, Barrow Street Dublin 4. Ireland. We use the remarketing function within the Google service. In this way we can present you with ads based on your interests on other websites within the Google advertising network. Your surfing behaviour on our website is analysed for this purpose.
You can object to the collection and evaluation of your data by this tool by deactivating the tool in the private sphere settings.
Google Conversion Tracking
This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The use of Google conversion tracking is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is based exclusively on Art. 6 (1) lit. a DSGVO; the consent can be revoked in the private sphere settings at any time.
This website uses the Google Tag Manager. With this service website tags can be managed via an interface. The Google Tag Manager only implements tags. This means that no cookies are used and no personal data is captured. The Google Tool Manager triggers other tags which, in turn, may capture data. However, the Google Tag Manager does not access this data. If a deactivation has been carried out on domain or cookie level, this remains valid for all tracking tags insofar as they are implemented with the Google Tag Manager.
We point out that the use of an adblocker may adversely affect the functioning of opt-out cookies. In certain cases it may therefore happen that the corresponding tools continue to collect data despite an opt-out cookie having been stored. In this case, you can restore the function by configuring the adblocker accordingly or by deinstalling it.
Newsletter with registration and right of cancellation
We offer you the option of subscribing to a newsletter. You may withdraw the corresponding consent at any time. Information about this can be found in the section entitled “Your right to withdraw consent”.
Newsletter without registration
Insofar as we receive your email address in connection with the sale of a product or service and you have raised no objection, we reserve the right to send you regular offers by email for similar products and services from our portfolio. You can object to this at any time without incurring any costs; information about this can be found in the section concerning your right to object to direct marketing.
Right of users
How can you assert your rights?
To assert your rights, please use the information in the section entitled contact. Please ensure that we can clearly identify you.
As an alternative, you can also use the settings in your user account to rectify the data you entered on registration or for your objection to advertising.
Please note that initially your data will only be blocked if its erasure is prevented due to mandatory retention periods.
Your right to be informed and right to rectification
You can ask us to confirm whether we are processing your personal data and you have a right to information regarding the data belonging to you that we process. If your data should be inaccurate or incomplete, you can demand that your data is rectified or completed. If we have passed on your data to third parties, we will inform them of the rectification insofar as this is required by law.
Your right to erasure or right to be forgotten
You can ask us to immediately erase your personal data if the legal conditions have been fulfilled. This is particularly the case if
Your personal data is no longer needed for purposes for which it was collected;
The lawful basis for the processing was entirely your consent and this has been withdrawn;
You have objected to the processing of your data for advertising purposes (“objection to advertising”);
The lawful basis for your objection to the processing of your data was a balancing of interests for personal reasons and we cannot prove that there are overriding legitimate grounds for processing;
Your personal data has been processed unlawfully; or
Your personal data have to be erased in order to comply with legal requirements.
If we have passed on your data to third parties, we will inform them of the erasure insofar as this is required by law.
Please note that your right to erasure is subject to restrictions. For instance, we are not allowed to erase data that we are required to keep due to statutory retention periods. Data that we need in order to assert, exercise or defend legal rights are also excepted from your right to erasure.
Your right to the restriction of processing
You can ask us to restrict the processing of your data if the legal conditions have been fulfilled. This is particularly the case if
You contest the accuracy of your personal data and then for as long as until we have had the opportunity to verify its accuracy;
Your data has been processed unlawfully and you ask for its processing to be restricted instead of its erasure (see previous section);
We no longer need your data for purposes of processing, but you need the data in order to assert, exercise or defend your legal rights;
You have raised an objection for personal reasons and then for as long as until it is definite that your interests are predominant.
If you have the right to demand that the processing of your data is restricted, we will mark the data concerned in order to thus ensure that it is only processed within the narrow limits that apply to such restricted data (particularly to defend legal rights or with your consent).
Your right to data portability
You have the right to obtain in a portable format personal data that you have given us in order to perform the contract or on the basis of consent. In this case you may also demand that we send this data directly to a third party insofar as this is technically feasible.
Your right to withdraw consent
If you have given us your consent to process your data, you may withdraw such consent at any time with effect for the future. The legality of the processing of your data until the time when consent is withdrawn will not be affected.
Your right to object to direct marketing
Furthermore, you can raise an objection at any time to the processing of your personal data for advertising purposes (“objection to advertising”). Please take into account that, for organisational reasons, there may be an overlap between your withdrawal of consent and the use of your data in the context of an ongoing campaign.
Your right to object for personal reasons
You have the right to object to data processing by ourselves for reasons resulting from your particular situation, as long as the lawful basis is a legitimate interest. We will then cease the processing of your data unless we can prove compelling essential reasons for continuing the processing – in accordance with the legal requirements – which override your rights.
Right to complain to the supervisory authority
You have the right to submit a complaint to a data protection authority. For this purpose you may contact the competent data protection authority in the place where you live or in your federal state, or you may contact the data protection authority responsible for us. This is: