Data Privacy Statement
1. Data protection at a glance
The following information provides a simple overview of what happens with your personal data when you use this website. Personal data are all data that can be used to identify you personally. You can find detailed information on the subject of data protection in the Data Privacy Statement presented below this text.
Data acquisition on this website
Who is responsible for the acquisition of data on this website?
The website operator processes the data on this website. You will find the operator’s contact details in the legal notice on this website.
How do we acquire your data?
One way in which we collect your data is when you provide it to us. This data could be the details you enter on a contact form, for example.
Other data are automatically acquired by our IT systems when you use the website. These are primarily technical data (e.g. Internet browser, operating system or time of page call-up). These data are acquired automatically as soon as you enter this website.
How do we use your data?
Part of the data is collected to ensure that the website is provided without errors. Other data can be used to analyse your user behaviour.
What rights do you have with regard to your data?
You have the right, at any time, to receive information concerning the origin, recipient and purpose of your saved personal data, free of charge. You also have a right to demand the correction or erasure of these data. Please do not hesitate to contact us at the address shown in the legal notice if you have any questions on the subject of data protection. Furthermore, you have a right to complain to the responsible supervisory authority.
And under specific circumstances, you have the right to demand that the processing of your personal data be restricted. You will find detailed information about this under “Right to restriction of processing” in the Data Privacy Statement.
Analytic tools and tools of third parties
You can object to this analysis or prevent it by choosing not to use certain tools. You will find detailed information on these tools and how to raise objections in the following Data Privacy Statement.
General information and required information
The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in compliance with statutory data protection regulations and this Data Privacy Statement.
A variety of personal details are collected when you use this website. Personal data are all data that can be used to identify you personally. This Data Privacy Statement explains which data we collect and what we use them for. It also explains how this happens and for what purpose.
We would like to point out that the transfer of data via the Internet (e.g. in the case of communication by email) may not be completely secure. It is impossible to completely secure information against access by third parties.
Information about the data controller
The controller responsible for data processing on this website is:
GmbH Hermann-Krum-Str. 2
Telephone: +49 (0) 7565 508-0
The controller is the natural or legal person who, solely or as part of a group, decides on the purposes for and means of processing personal data (e.g. names, email addresses and similar).
Statutory data protection officer
We have appointed a data protection officer for our company:
Telephone: +49 (0) 7565 508-0
Withdrawal of your consent to data processing
Many data processing procedures can only take place with your express consent. You can withdraw the consent you have given at any time. To do this, you only need to send us an informal email. The lawfulness of the data processing that has taken place up to the point of your withdrawal remains unaffected.
Right to object to data collection in special cases and to processing for direct marketing (art. 21 GDPR)
IF THE DATA IS PROCESSED ON THE BASIS OF ART. 6 (1) (e) or (f) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS RESULTING FROM YOUR SPECIAL SIITUATION AT ANY TIME; THIS ALSO APPLIES TO PROFILING SUPPORTED BY THESE REGULATIONS. YOU WILL FIND THE RELEVANT LEGAL BASIS FOR A SPECIFIC TYPE OF PROCESSING IN THIS DATA PRIVACY STATEMENT. IF YOU SUBMIT AN OBJECTION, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA AFFECTED UNLESS WE CAN PROVIDE COMPELLING LEGITIMATE REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION AS SPECIFIED IN ART. 21 (1) GDPR).
IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO FORMALLY OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF THIS TYPE OF ADVERTISING AT ANY TIME; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS DONE IN THE CONTEXT OF SUCH DIRECT MARKETING. IF YOU DO OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THE PURPOSES OF DIRECT MARKETING AS A RESULT (OBJECTION AS SPECIFIED IN ART. 21 (2) GDPR).
Right of appeal to the responsible supervisory authority
In the event of violations of the GDPR, the data subject has the right of appeal to a supervisory authority, in particular the supervisory authority in the member state of his/her typical residence, place of work, or the place of the alleged violation. The right of appeal exists without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to demand that we hand over to you or to a third party, in a commonly used, electronic format, any information which we have processed automatically on the basis of your consent or in the fulfilment of a contract. If you demand that we directly transfer the information to another responsible party, this will only be done if it is technically feasible.
SSL or TLS encryption
For security reasons and for the protection of confidential content during transmission, such as orders or enquiries which you send to us as the website operator, this website uses SSL or TLS encryption. You can tell that a connection is encrypted if the browser address bar changes from “http://” to “https://” and also contains a padlock symbol.
When SSL/TSL encryption is activated, the data that you transmit to us cannot be read by third parties.
Information, erasure and rectification
Current statutory regulations mean that you have the right at any time to obtain, free of charge, information about your personal data held by us, its origin and recipient and the purpose for which your data is processed, as well as the right to have this data rectified or erased as required. Please do not hesitate to contact us at the address shown in the legal notice with your questions or concerns regarding personal data.
Right to restriction of processing
You have the right to demand that the processing of your personal data be restricted. You can contact us with further questions about this at the address listed in the legal notice at any time. The right to restriction of processing exists in the following cases:
If you disagree with the accuracy of your personal data stored by us, we normally require some time to verify your claim. While we verify your claim, you have the right to demand that the processing of your personal data be restricted.
If your personal data was/is being processed illegally, you may demand that we restrict the processing of your data instead of its erasure.
If we no longer require your personal data, but you need the data to exercise, defend, or assert legal claims, you have the right to demand that we restrict the processing of your data instead of erasing them.
If you have submitted an objection as specified in Art. 21 (1) GDPR, a trade-off between your interests and our interests must be considered. As long as it has not been determined whose interests take precedence, you have the right to demand that the processing of your data be restricted.
If you have restricted the processing of your personal data, these data may only be processed – with the exception of storing them – with your consent or for the assertion, exercise, or defence of legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the European Union or a member state.
Data acquisition on this website
Some cookies from third-party companies may be stored on your computer if you visit our website (third-party cookies). These allow us or you to use certain services of the third-party company (e.g. cookies to process payment services).
Cookies have various functions. Numerous cookies are required for technical reasons because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behaviour or display advertising.
You can adjust your browser’s settings so that you are notified when cookies are in use and can only permit cookies in individual cases, accept cookies under particular conditions or block them in general. You can also activate the automatic deletion of cookies when you close your browser. If cookies are deactivated, the functionality of this website may be affected.
If cookies from third-party companies are used or cookies are used for purposes of analysis, we will inform you about this separately in accordance with this Data Privacy Statement and ask for your consent if necessary.
Cookie consent with Borlabs Cookie
Our website uses the cookie consent technology developed by Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser and to document these in compliance with data privacy. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter referred to as Borlabs).
When you visit our website, a Borlabs cookie is stored in your browser which stores the consents given by you or the revocation of these consents. These data are not passed on to the providers of Borlabs Cookie.
The data collected are stored until you ask us to delete them or you delete the Borlabs cookie yourself or the purpose for the data storage no longer applies. Mandatory legal storage periods remain unaffected. You can find details on data processing by Borlabs Cookie at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/
Server log files
The provider of this website collects and automatically saves information in server log files which your browser automatically transmits to us. This includes:
- browser type and browser version
- operating system used
- referrer URL
- hostname of the computer requesting access
- time of server request
- IP address
These data are not merged with other data sources.
These data are collected in compliance with art. 6 (1) (f) GDPR. Website operators have a legitimate interest in the technically sound presentation and optimisation of their websites. Server log files must be obtained in order to achieve this.
If you send us enquiries using our contact form, your information from the enquiry form, including the contact details which you enter there, is retained by us for the purpose of processing the enquiry and in case of follow-up questions. We will not forward this information to third parties without your consent.
These data are processed in compliance with art. 6 (1) (b) GDPR if your request is related to the fulfilment of an agreement or if the data is required to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interests in the effective processing of the requests we receive (art. 6 (1) (f) GDPR) or on your consent (art 6 (1) (a) GDPR) if this was requested.
The details entered into the contact form by you remain with us until you instruct us to erase them or withdraw your consent for us to retain them, or the purpose for retaining the data no longer applies (e.g. after your enquiry has been completely dealt with). Mandatory legal provisions, in particular, storage periods, remain unaffected.
Request via email, telephone or fax
If you contact us via email, telephone, or fax, we will save and process your request, including all the personal data it contains (name, request) for the purpose of dealing with your enquiry. We will not forward this information to third parties without your consent.
These data are processed in compliance with art. 6 (1) (b) GDPR if your request is related to the fulfilment of an agreement or if the data is required to carry out pre-contractual measures. In all other cases, the processing is based on your consent (art. 6 (1) (a) GDPR) and/or on our legitimate interests (art. 6 (1) (f) GDPR), since we have a legitimate interest in the effective processing of the requests we receive.
The details entered into the contact form by you will remain with us until you instruct us to erase them or withdraw your consent for us to retain them, or the purpose for retaining the data no longer applies (e.g. after your enquiry has been completely dealt with). Mandatory legal provisions, in particular, legal storage periods, remain unaffected.
Analytics tools and advertising
This website uses functions of the web analysis service, Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics cookies are collected and the analytics tool is used in compliance with art. 6 (1) (f) GDPR. Website operators have a legitimate interest in the analysis of user behaviour in order to optimise their websites and their advertising. If a corresponding consent was requested (e.g. consent for the storage of cookies), processing takes place solely on the basis of art. 6 (1) (a) GDPR; consent can be withdrawn at any time.
We have enabled the IP anonymisation function on this website. This means that within member states of the European Union or in other signatory states to the Agreement on the European Economic Area, your IP address will be abbreviated by Google before transmission to the USA. Only in exceptional circumstances will your full IP address be transmitted to a Google server in the USA and abbreviated there. On behalf of the operators of this website, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide other services connected with website usage and Internet usage to the website operators. The IP address transmitted by your browser in the context of Google Analytics will not be combined with any other data held by Google.
Objection against data collection
You can prevent Google Analytics from acquiring your data by clicking on the link below. This will install an opt-out cookie preventing acquisition of your data when you visit this website in future: Deactivating Google Analytics.
Commissioned data processing
We have a contract with Google concerning the processing of contract information and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographics and interests data in Google Analytics
This website uses the “Demographics and interests” feature of Google Analytics. This can be used to generate reports containing information on the age, gender and interests of the website’s users. This data is taken from interest-based advertising from Google as well as from visitor data from third-party providers. This data cannot be attributed to a particular person. You can deactivate this function at any time in the display settings of your Google account, or refuse the acquisition of your data by Google Analytics in general as described in “Objection to data acquisition”.
Data saved at Google at the user and event level that are linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android Ad ID), will be anonymised or deleted after 14 months. You can find detailed information on this at the following link: https://support.google.com/analytics/answer/7667196?hl=de
5. Plugins and tools
YouTube with extended data protection
This website contains YouTube videos. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in the enhanced data protection mode. According to YouTube, this mode prevents YouTube from retaining information on the visitors to this website before they view the relevant video. On the other hand, the enhanced data protection mode does not necessarily prevent YouTube from forwarding data to YouTube partners. For example, YouTube will establish a connection to the Google DoubleClick network irrespective of whether or not you view a video.
As soon as you start a YouTube video on this website, a connection is established to YouTube servers. This informs the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
And YouTube may also save a variety of cookies on your end device after you have started a video. With the help of these cookies, YouTube receives information on visitors to this website. This information is used to record video statistics, improve user friendliness, and prevent fraud. The cookies remain on your end device until you delete them.
After starting a YouTube video, additional data-processing procedures may be triggered that are beyond our control.
We use YouTube in order to provide an attractive look to our online presence. This represents a legitimate interest according to art. 6 (1) (f) of the GDPR. If a corresponding consent was requested (e.g. consent for the storage of cookies), processing takes place solely on the basis of art. 6 (1) (a) GDPR; consent can be withdrawn at any time.
We use the map service of OpenStreetMap (OSM). The provider is Open-Street-Map Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.
Furthermore, your location can be captured if you have authorised this in your device settings – e.g. on your mobile phone. The provider of this website has no influence on this data transfer. You can find details about this in the privacy statement of OpenStreetMap at the following link: https://wiki.osmfoundation.org/wiki/Privacy_Policy.
We use OpenStreetMap in order to provide an attractive look to our online presence and to make it easy to find places we mention on the website. This represents a legitimate interest according to art. 6 (1) (f) of the GDPR. If a corresponding consent was requested (e.g. consent for the storage of cookies), processing takes place solely on the basis of art. 6 (1) (a) GDPR; consent can be withdrawn at any time.
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to check whether data entry on this website (e.g. on a contact form) is made by a human being or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the visitor to the website by means of various observations. This analysis is started automatically as soon as the website visitor visits the website. For the analysis, reCAPTCHA evaluates various pieces of information (e.g. IP address, length of stay of the website visitor on the website or the mouse movements made by the user). The data collected during the analysis is passed to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not advised that an analysis is taking place.
The storage and analysis of data takes place on the basis of art. 6 (1) (f) GDPR. Website operators have a legitimate interest in protecting their web services from abusive, automated spying and from SPAM. If a corresponding consent was requested (e.g. consent for the storage of cookies), processing takes place solely on the basis of art. 6 (1) (a) GDPR; consent can be withdrawn at any time.