Data protection is very important to us. It is possible to use these websites without giving personal data. However, if an individual wants to use some of our special services via our website, processing of personal data may be required. If the processing of personal data is required and there is no legal basis for such processing, we shall generally obtain consent from the affected person.
The processing of personal data, e.g. name, address, e-mail address or telephone number of affected person, is always effected in accordance with the General Data Protection Regulation and country-specific data protection regulations applicable for the company. With this privacy statement our company wants to inform the public about the type, extent and purpose of the personal data we collect, use and process. In addition, this privacy statement explains the rights affected individuals have.
Tel.: +49 711 21 74 91 500
Fax.: +49 711 21 7491 790
Christoph Lermen, Michael Schmitz, Thomas Raith
Name and address of Data Protection Officer
§ 1 INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA
(1) In the following we shall provide information about the collection of personal data with the use of our website. Personal data is all data that can be personally identified to you, e.g. name, address, e-mail addresses, user behaviour.
(2) When making contact with us by e-mail or using a contact form, the data you share with us (your e-mail address, if nec. your name and telephone number) is saved by us in order to answer your questions. We delete the data made available in this connection after the storage is no longer required or limit the processing if statutory retention periods exist.
(3) If we want to rely on commissioned service providers for individual functions of our offer or use your data for advertising purposes, we shall inform you about the respective processes in detail below. We shall also mention the defined criteria of the storage period.
§ 2 YOUR RIGHTS
(1) You have the following rights with regard to the relevant personal data:
- Right to information
- Right to correction or deletion
- Right to confirmation
- Right to restriction of processing
- Right to object to processing
- Right to data portability
- Right to file a complaint with the responsible regulatory authority
§ 3 COLLECTION OF PERSONAL DATA WHEN VISITING OUR WEBSITE
(1) When you visit our website to purely obtain information, i.e. if you do not register or transfer information to us in some other manner, we shall only collect the personal data that your browser transfers to our server. If you want to look at our website, we shall collect the following data, which we require for technical reasons, in order to display our website to you and guarantee stability and security (legal basis is Art. 6 Section 1 Clause 1 lit. f GDPR).
- IP address
- Date and time of request
- Timezone difference to Greenwich Mean Time (GMT)
- Content of request (specific page)
- Access status/HTTP status code
- Data volume transferred
- Website from which the request comes
- Operating system and its interface
- Language and version of browser software.
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk assigned to the browser used by you and through which certain information is sent to the place that sets the cookie (here by us). Cookies cannot run any programmes or transfer viruses to your computer. They serve to make the Internet offering more user-friendly and effective.
- The website uses the following types of cookies, whose scope and operating principles are explained below:
- Transient cookies (see b)
- Persistent cookies (see c)
- Transient cookies are automatically deleted when you close the browser. They include in particular session cookies. They store a so-called session ID, with which different requests of your browser can be assigned to the joint session. They allow your computer to be recognised again when you return to our website. The session cookies are deleted when you log out or close the browser.
- Persistent cookies are automatically deleted after a defined period that may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
- You can configure your browser settings according to your needs and, e.g. refuse to accept third-party cookies or all cookies. Please be aware that with this setting you may not be able to use all functions of this website.
- The flash cookies used are not collected by your browser, but by your flash plug-in. We also use HTML5 storage objects that are stored on your end device. These objects store the necessary data irrespective of the browser you use and have no automatic expiry date. If you do not want the processing of flash cookies, you have to install a corresponding add-on, e.g. “Better Privacy” for Mozilla Firefox (https://addons.mozilla.ord/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. We also recommend that you manually delete your cookies and the browser history on a regular basis.
§ 4 OTHER FUNCTIONS AND OFFERS OF OUR WEBSITE
Besides using our website for information purposes, we also offer different services that you can use if they are of interest to you. For this, you generally have to specify further personal data, which we shall use for the provision of the respective service and for which the previously mentioned principles of data processing shall apply.
(1) Contact option via the website
Owing to legal regulations, our website contains information that makes fast electronic contact with our company possible. Personal data transferred voluntarily by an affected person to the authority responsible for processing shall be stored for the purpose of processing or establishing contact with the affected person. This personal data shall not be passed on to third parties.
(2) External service providers
Sometimes we employ external service providers for processing your data. These external service providers have been carefully selected and commissioned by us, are bound to our instructions and are monitored regularly.
(3) Disclosure of your personal data to third parties
We may also pass on your personal data to third parties when sales campaigns, competitions, contracts or similar services are offered by us together with partners. You obtain more information about this when you provide your personal data or below in the description of the offer.
(4) Data protection regulations in application procedures
The authority responsible for processing collects and processes the personal data of applicants for the purpose of handling the application procedure. The processing may also be effected by electronic means. This is the case particularly when an applicant sends corresponding application documents by electronic means, e.g. by e-mail or via a web form on the Internet page, to the authority responsible for the processing. If the authority responsible for the processing concludes an employment contract with an applicant, the data transferred shall be stored for the purpose of handling the employment relationship in compliance with the statutory regulations. If an employment contract is not concluded with the applicant by the authority responsible for the processing, then the application documents are automatically deleted two months after announcement of the rejection decision, insofar as a deletion is not contrary to other legitimate interests of the authority responsible for the processing. Other legitimate interest in this sense is, e.g. a burden of proof in proceedings in accordance with the General Equality Act (AGG).
(5) Integration of Google Maps
- We use Google Maps on this website. This means that we can show you interactive maps directly in the website and enable comfortable use of the map function.
- By visiting the website Google obtains information that you requested the corresponding subpage of our website. The data collected when visiting our website is also transferred. This happens irrespective of whether Google provides a user account, via which you are logged in, or if there is no user account. If you are logged in to Google, your data is assigned directly to your account. If you do not want the assignment to your Google profile, you must log out before activating the button. Google saves your data as usage profiles and uses them for the purposes of advertising and market research and/or adapting the design of its website to suit market needs. An evaluation is carried out particularly (even for users who are not logged in) for providing appropriate advertising and in order to inform other users of the social network about your activities on our website. You have a right to object to the creation of these usage profiles, whereby you must file the objection directly with Google.
- More information about the purpose and extent of the data collection and its processing by the plug-in provider is available in the provider’s privacy statements. There you also obtain information about your rights and setting options for the protection of your privacy: http://www.google.de/intl/de/policies/privacy. Google processes your personal data also in the USA and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
§ 5 DATA PROTECTION REGULATIONS FOR THE USE OF SOCIAL MEDIA
(1) Data protection regulations for the use of Facebook
The authority responsible for processing has integrated components of Facebook on this website. Facebook is a social network.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The authority responsible for the processing of personal data if an affected person lives outside the USA or Canada is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
(2) Data protection regulations for the use of Instagram
The authority responsible for processing has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and also share such data on other social networks.
The operating company of the Instagram service is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.
More information and the applicable data protection regulations of Instagram can be viewed online at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.
(3) Data protection regulations for the use of Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and make possible an analysis of the website usage by you. The information generated by the cookie about your usage of this website is generally transferred to a Google server in the USA and stored there. In the case of activation of the IP anonymisation on this website, your IP address is shortened beforehand by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. Google uses this information on behalf of the operator of this website in order to evaluate your usage of the website, to compile reports about the website activities and to provide services associated with the website usage and Internet usage to the website provider.
- The IP address transferred from your browser within the framework of Google Analytics is not merged with other data of Google.
- You can prevent the storage of cookies with a corresponding setting on your browser software; however, please be aware that with this setting you may not be able to fully use all functions of this website. You can also prevent the collection of data (incl. your IP address) generated by the cookie and related to your usage of the website by Google, as well as the processing of this data, by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
- This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in a shortened form. A personal reference is thus not possible. If a personal reference can be made to the data collected about you, this is eliminated immediately and the personal data is promptly deleted.
- We use Google Analytics in order to be able to analyse and regularly improve the use of our website. Using the statistics we can improve our offering and make the website more interesting for you as a user. For exceptions where personal data is transferred to the USA, Google is subject to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6Section 1 Clause 1 lit. f GDPR.
- Information of third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 User Conditions: http://www.google.com/analytics/terms/de.html. Data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy statement: http://www.google.de/intl/de/policies/privacy.
- This website also uses Google Analytics to analyse visitor flows across all devices, which is performed via a user ID.
(4) Data protection regulations for the use of YouTube
The authority responsible for the processing has integrated YouTube components on this website. YouTube is an Internet video portal that allows video publishers to post video clips for free and other users to view, rate and comment on these video clips for free. YouTube permits the publication of all types of videos, which is why both complete films and TV programmes, but also music videos, trailers or videos made by the users themselves, can be called up via the Internet portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time one of the individual pages of this website is called up, which is operated by the authority responsible for the processing and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the IT system of the affected person is automatically triggered by the respective YouTube component to download a visualisation of the corresponding YouTube component from YouTube. More information about YouTube can be found online at https://www.youtube.com/yt/about/de/. Within the framework of this technical process, YouTube and Google become aware of what specific subpage of our website is visited by the affected person.
If the affected person is logged in to YouTube at the same time, YouTube recognises with the request of a subpage, which contains a YouTube video, which specific subpage of our website is visited by the affected person. This information is collected by YouTube and Google and assigned to the respective YouTube account of the affected person.
YouTube and Google always obtain information via the YouTube component that the affected person visited our website, if the affected person is logged in to YouTube when requesting our website; this happens irrespective of whether the affected person clicks on the YouTube video or not. If the affected person does not want such information transferred to YouTube and Google, this can be prevented by logging out of the YouTube account before requesting our website.
The data protection regulations published by YouTube, which can be viewed online at https://www.google.de/intl/de/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.
(5) Data protection regulations for the use of Vimeo
Our website uses embedded videos from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages that has a Vimeo plug-in, a connection to the Vimeo servers is established. The Vimeo server is informed about which of our pages you visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transferred to the Vimeo server in the USA.
If you are logged in to your Vimeo account, you allow Vimeo to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account.
More information about the handling of user data can be found in the privacy statement of Vimeo online at: https://vimeo.com/privacy.
(1) With your consent you can subscribe to our newsletter with which we inform you about current interesting offers. The goods and services advertised are mentioned in the declaration of consent.
(2) We use the so-called double opt-in method for our newsletter registration. This means that we send you an e-mail to the specified e-mail address after your registration, in which we ask you to confirm that you want to receive the newsletter. If you do not confirm your registration within 24 hours, your information is blocked and automatically deleted after one month. We also save your IP addresses and times of registration and confirmation. The purpose of this method is to be able to prove your registration and if necessary clarify any misuse of your personal data.
(3) Your e-mail address is the only mandatory disclosure for sending the newsletter. The provision of other, separately marked details is voluntary and is used in order to address you personally. After your confirmation we save your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 Section 1 Clause 1 lit. a GDPR.
(4) You may revoke your consent for sending the newsletter at any time and unsubscribe from the newsletter. You can cancel the subscription by clicking on the link in every newsletter e-mail, using this form on the website, sending an e-mail to email@example.com or a message to the contact details specified in the disclaimer.
(5) Please be aware that we evaluate your user behaviour when sending the newsletter. For this evaluation the e-mails sent contain so-called web beacons or tracking pixels, which represent single-pixel image files that are saved on our website. For the evaluations we link the data mentioned on our website and the web beacons to your e-mail address and an individual ID. The data is collected in a strictly pseudonymous form, the IDs are thus not linked to your other personal data, a direct personal reference is not possible. You may object to this tracking at any time by clicking on the separate link provided in every e-mail or contacting us via a different method. The information is only saved for as long as you are subscribed to the newsletter. After you unsubscribe from the newsletter we only save the data for statistical purposes and in an anonymous form.
This website uses the services of MailChimp for sending newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
MailChimp is a service which helps organise and analyse the sending of newsletters, among other items. When you enter data for the purposes of receiving the newsletter (e.g. e-mail address), this data is stored on the servers of MailChimp in the USA.
MailChimp has a certification according to the “EU-US Privacy Shield”. The “Privacy Shield” is an agreement between the European Union (EU) and the USA, which should guarantee compliance with European data protection standards in the USA.
More information can be found in the data protection regulations of MailChimp that can be viewed online at: https://mailchimp.com/legal/terms/.
Conclusion of a data processing agreement
We concluded a so-called “Data Processing Agreement” with MailChimp, in which we obligate MailChimp to protect the data of our customers and not to forward it to third parties. This contract can be viewed under the following link: https://mailchimp.com/legal/forms/data-processing-agreement/sample-agreement/.
§ 7 DATA PROTECTION REGULATIONS FOR THE USE OF EXTERNAL PAYMENT PROVIDERS
(1) We offer several payment methods and employ the services of different payment providers. Depending on which method of payment you choose, different data is transferred to the respective payment provider. The legal basis for the transfer is Art. 6 Section 1 Clause 1 lit. a GDPR. Our payment providers are listed below.
If you decide to use PayPal for the payment, then your personal data is transferred to PayPal. You must open a PayPal account for using PayPal. With the use or opening of a PayPal account, your name, address, telephone number and e-mail address are transferred to PayPal. The legal basis for the transfer of data is Article 6 Section 1 lit. a GDPR (consent) and Article 6 Section 1 lit. b GDPR (processing for fulfilling a contract). The operator of the PayPal payment service is: PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg E-mail: firstname.lastname@example.org With the PayPal payment option you consent to the transfer of personal data such as name, address, telephone number and e-mail address to PayPal. Other data collected by PayPal can be found in the respective privacy statement of PayPal. This can be viewed online at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
We offer payment using PayPal, and other payment providers, on our website. The provider of this payment method is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”).
If you choose payment via PayPal, the payment data you entered is transferred to PayPal.
The transfer of your data to PayPal is effected based on Art. 6 Section 1 lit. a GDPR (consent) and Art. 6 Section 1 lit. b GDPR (processing for fulfilling a contract). You have the option to revoke your consent for data processing at any time. A revocation does not have an impact on the effectiveness of past data processing methods.
§ 8 OBJECTION TO OR REVOCATION OF CONSENT FOR PROCESSING OF YOUR DATA
(1) You may revoke the consent you gave for processing your data at any time. This revocation influences the permissibility of the processing of your personal data, after you have expressed this to us.
(2) If we support the processing of your personal data for the balancing of interests, you may file an objection to the processing. This is the case if the processing is not required particularly for the fulfilment of a contract with you, which is represented by us in the following description of the function. When exercising your right to such a refusal, we kindly ask for reasons why we should not process your personal data. In the case of your justified objection, we check the facts and circumstances and will cease or adjust the data processing or show you our legitimate reasons for continuing the processing.
(3) You may object to the processing of your personal data for the purposes of advertising and data analysis at any time. You may inform us about your objection for advertising purposes using the following contact details:
Tel.: +49 711 21 74 91 500
Fax.: +49 711 21 7491 790