Thank you for visiting our website. It is very important for us to protect your data. That is why we want to explain below how we process your personal data.
DATA CATEGORIES, DATA SOURCES
In principle, we process the personal data that you communicate to us when you submit a query, as part of a pre-contractual legal relationship, or in terms of a contractual relationship. In individual cases and if required in order to fulfill a contract, we also process data taken lawfully from publicly accessible sources (e.g., commercial register, debtors’ list, Internet) or data transmitted lawfully by third parties (e.g., credit agencies).
This can be personal data (name, date of birth, authorized representative), address details (address, email address, contact), financial details (name of account holder, IBAN, BIC), contractual data (term of contract, benefits acquired, cancellations), communication details (correspondence, email communication), advertising data (advertising correspondence), and other comparable categories of personal data.
GENERAL PROCESSING OF VISITOR DATA
In principle, the use of our website is possible without providing any personal information.
Note however that access details are also collected in this case and stored in the server log files. This includes the following data in particular:
- browser type / browser version,
- operating system,
- website from which you visit us,
- date and time of your visit,
- your IP address.
We evaluate this information in anonymized form only in order to defend against attacks and to improve our website (processing of personal data in the balancing of interests in accordance with Art. 6 Par. 1 letter f of the GDPR); we subsequently delete this data. This data cannot be traced back to you by us, nor is it associated with any other data.
However, we reserve the right to subsequently evaluate the data if there is sound evidence of unlawful use.
If you get in touch with us by email or using the online form provided, we will process the data communicated by you for the purpose of responding to your query. We will then delete this data after your query has been fully processed unless contractual or statutory retention periods prevent us from doing so.
PROCESSING OF PERSONAL DATA AFTER CONSENT (ART. 6 PAR. 1 (1) LETTER A OF THE GDPR)
In individual cases, we obtain your consent for specific purposes expressly required for the collection of data (e.g., query via contact form, opening customer account, subscription to newsletter).
Data shall be processed only if you give us your consent. It may be the case that your matter cannot be processed without your consent and thus must be predicated thereupon. Data is processed solely on the basis of the purpose(s) expressly specified.
You can revoke consent previously given at any time with future effect. The withdrawal of your consent has no impact on the lawfulness of the processing operations carried out before this declaration.
If you send us a query via our contact form, we will process the data entered by you based on your consent in accordance with Art. 6 Par. 1 (1) letter a of the GDPR in order to handle your query. In principle, we delete your data after the query has been fully processed unless contractual or statutory retention periods prevent us from doing so. If you communicate information relevant to the contract, we will transfer this data to our inventory system.
You can revoke your consent at any time with future effect in relation to all contact details specified.
If you have registered for our newsletter, we will process the data specified by you based on your consent in accordance with Art. 6 Par. 1 (1) letter a of the GDPR in order to regularly send you our newsletter. You just need to specify an email address in order to register. You can provide additional information voluntarily.
You can revoke your consent at any time with future effect. A link is included at the bottom of every newsletter email which you can use to revoke your consent. Of course, you can also revoke your consent using the other contact options provided.
PROCESSING OF PERSONAL DATA TO EXECUTE A CONTRACT (ART. 6 PAR. 1 LETTER B OF THE GDPR)
If you conclude a contract with us, we will use personal data provided that this is required to execute the contract or to implement pre-contractual measures. The purposes of data processing are based on the specific contents of the contract which can be read in the contract documents.
PROCESSING OF PERSONAL DATA IN THE BALANCING OF INTERESTS (ART. 6 PAR. 1 LETTER F OF THE GDPR)
We process personal data in the balancing of interests provided that this is required to safeguard our interests or those of third parties.
Examples of such purposes include:
- safeguarding IT security and the integrity of our systems,
- preventing or investigating offenses,
- asserting or defending legal claims.
Cookies may be used on different web pages when you visit our site. These are small text files that are stored on your computer and also help to make your visit to our website more pleasant.
- allow visitors to use certain functions,
- (pseudonymized) analysis of usage behavior in order to optimize our website,
- increase appeal and user-friendliness of our website,
- improve our website and design it to cater for user requirements.
Cookies are used in the context of so-called usage profiles. Here, you are allocated a pseudonym under which the usage data is stored. Your IP address is stored in truncated form only so that a personal assignment of the usage profile is no longer possible.
Most of the cookies we use are deleted by your computer as soon as you close your browser (session cookies). Other types of cookies can remain on your computer and allow us to recognize your computer the next time you visit our site via the usage profile created (permanent cookies).
We have included social plug-ins on some pages of our site; however, these are disabled by default for privacy reasons. In principle, no data shall be transmitted to social media services (e.g., Facebook) when a user visits our website. Profiling by third parties is thus excluded.
However, users have the option of activating the social plug-ins with one click and thus granting their consent to communication with the respective social network. If a social plug-in is activated, certain data will be transmitted to the respective social network, e.g., IP address of the user, information about the browser used and the operating system, the website accessed, and the date and time. As part of this communication, data is also downloaded from a server of the social media provider to our website.
The respective provider of the social plug-in receives information about which particular websites the user visits, regardless of whether or not he/she is logged in to the provider of the social media plug-in (e.g., Facebook). The provider can also process this data outside the European Union and may also be able to create individualized usage profiles. We have no influence on the type, scope, and purpose of the data processing by the provider of the respective social media service.
Facebook: Our website uses social plug-ins (“plug-ins”) from the social network facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).
The plug-ins can be recognized by the Facebook logo or are indicated with the additional text “Facebook Social Plug-in”. The list and appearance of the Facebook social plug-ins can be viewed here: developers.facebook.com/plugins. If you visit a page of our website that contains such a plug-in, your browser will establish a direct connection to Facebook’s servers only if the user has activated the “Facebook” button by clicking it. The content of the plug-in is then transmitted from Facebook to your browser, where it is incorporated into the website. By activating the plug-in, Facebook receives notification that you have accessed the corresponding page of our website. If you are logged in to Facebook, Facebook will then be able to allocate the visit to your Facebook account. If you interact with the plug-ins, for example, by clicking the “Like” button or by entering a comment, this information will be transmitted directly from your browser to Facebook and saved there. If you are not a member of Facebook, it is still possible that Facebook will collect and store your IP address. For more information about the purpose and scope of data collection, the further processing and use of information by Facebook, the rights you have in this regard, and the privacy options available to you, please refer to the privacy information of Facebook: facebook.com/about/privacy. If you are a Facebook member and do not wish for Facebook to use our Internet presence as a way to collect details about you and to link this information with the membership data about you which Facebook has stored, then you must log out of Facebook before visiting our website. You also have the option of blocking Facebook social plug-ins via add-ons for your browser, e.g., via the “Facebook Blocker”.
Vimeo: On some of our web pages, we use a plug-in from the provider Vimeo, LLC based in 555 West 18th Street, New York, New York 10011 (“Vimeo”).
When you access a page that contains such a plug-in, a connection to the Vimeo servers will be established and the plug-in will be shown. Here, the page you visit will be transmitted to the Vimeo server. If you are logged in to your Vimeo user account during the visit, the website access will be assigned accordingly. Other information, such as clicking the start button, may also be assigned to your user account. You can prevent this by signing out of your account before visiting our site and deleting the cookies set by Vimeo.
Google Maps: We use a plug-in from the Internet service “Google Maps” on our website. Google Maps is operated by Google Inc., based in the USA, CA 94043, 1600 Amphitheatre Parkway, Mountain View.
CREATION OF PSEUDONYMIZED USAGE PROFILES FOR WEB ANALYSIS
This website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, text files which are stored on your computer and make it possible to analyze your use of the website. The information that is generated by the cookie about your use of this website is usually transmitted to a Google server in the USA where it is saved. If IP anonymization is activated on this website, your IP address will be truncated beforehand by Google within Member States of the European Union or in the countries and territories of other signatories of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.
You can prevent the collection of data by Google Analytics by clicking the following link. This places an opt-out cookie, which prevents the future collection of your data when visiting this website:
Deactivating Google Analytics
Please note that if you delete your cookies, the opt-out cookie will also be deleted and may have to be reactivated by you afterwards.
DISCLOSURE OF DATA
We share data with third parties if and to the extent that we have assigned such parties to perform certain tasks. Data shall be shared only in such cases where this is required to perform the assigned tasks.
We work with the following companies:
- IH Management GmbH, Bergstr. 8, 45770 Marl
- DATEV eG, Paumgartnerstr. 6 – 14, 90429 Nürnberg
LENGTH OF DATA STORAGE
Your personal data shall be deleted by us without delay as soon as it is no longer required for the fulfillment of contractual or legal obligations.
Personal data shall be stored at least for as long as it is required to fulfill contractual obligations and to exercise contractual rights. This period may stretch beyond the actual term of the contract because the data may still be relevant even after the contract ends with respect to statutes of limitations. Furthermore, data can only be deleted once any retention periods under fiscal and commercial law have lapsed.
Refer to the corresponding section for criteria relevant to the length of storage of cookies.
RIGHTS OF DATA SUBJECTS
As a person affected by the processing of personal data (“data subject”), you have the following rights:
You have the right to request confirmation as to whether personal data is being processed. If this is the case, you have a right to access personal data and you have a right to access the information listed in Art. 15 of the GDPR.
You have a right to request that the controller correct inaccurate personal data concerning you and supplement any incomplete personal data without delay (Art. 16 of the GDPR).
You have the right to request that the controller delete personal data concerning you without delay provided that one of the reasons listed in Art. 17 of the GDPR applies, e.g., if the data is no longer required for the purposes pursued (right to deletion).
You have the right to request that the controller restrict the processing of data if one of the prerequisites listed in Art. 18 of the GDPR applies, i.e. if you have objected to its processing for the duration of the check by the controller.
You have the right – for reasons arising from your particular situation – to object to the processing of your personal data at any time. The controller will then no longer process your personal data, unless they can prove that there are compelling legitimate grounds for its processing that outweigh your interests, rights, and freedoms or the processing serves to establish, exercise, or defend legal claims (Art. 21 of the GDPR).
With respect to exercising your rights, you can get in touch with us at any time using the contact options available on our website.
The quickest way to contact us is at:
RIGHT TO OBJECT TO DIRECT MARKETING
In individual cases, we process personal data for the purpose of direct marketing. In this case, you have the right to object to the processing of your personal data for the purpose of such marketing at any time (Art. 21 of the GDPR).
Where you object to the processing for purposes of direct marketing, your personal data will no longer be processed for these purposes.
You can informally submit your objection at any time by using one of the contact options provided in this Data Privacy Statement or in the “Impressum” section of our website.
RIGHT OF COMPLAINT
Without prejudice to any other administrative or judicial remedy, you have the right to file a complaint with a supervisory authority if you believe that the processing of your personal data infringes upon the GDPR (Art. 77 of the GDPR). You can exercise this right with a supervisory authority in the Member State of your habitual residence, place of work, or place of the alleged infringement. The State Commissioner for Data Protection Baden-Württemberg is the supervisory authority in Baden-Württemberg.
More information is available from the service portal of the Federal State of Baden-Württemberg at:
< service-bw.de/leistung/-/sbw/Datenschutzkontrolle++Datenschutzbeschwerde+einreichen+personenbezogen-713-leistung-0 >
Of course, you can always get in touch with us directly if you are dissatisfied or have questions about data protection. The quickest way to reach our internal contact for data protection is using the following contact details:
OBLIGATION TO PROVIDE DATA
Certain personal data is required in order to execute a contractual relationship. In most cases, a contract cannot be concluded unless you provide us with the data marked as required.