Privacy Policy

Privacy Policy 

 

Thank you for your interest in our company. We prioritize data protection and are pleased to provide you with information regarding our policies.

Our website can be accessed without the need for personal data. However, if you wish to utilize specific services offered by our company via our website, it may require the processing of personal data. In such cases, we obtain consent from the individual concerned if there is no legal basis for the processing.

Cookies

Our website utilizes cookies, which are text files stored on a computer system via an internet browser. Cookies play a vital role in enhancing user experience on websites. They contain a unique identifier known as a Cookie-ID, enabling websites and servers to distinguish individual browsers. This identification allows us to provide more user-friendly services that would otherwise not be feasible.

Through the use of cookies, we can optimize the information and offers on our website to better suit user interests. For instance, cookies facilitate the recognition of website users, eliminating the need for them to repeatedly enter access data. In an online store, cookies help maintain a virtual shopping cart, remembering items selected by the customer.

Users have the option to prevent the setting of cookies on our website by adjusting their internet browser settings. This action allows individuals to permanently object to the use of cookies. Additionally, existing cookies can be deleted through internet browsers or other software programs. However, it’s important to note that disabling cookies may limit the functionality of certain features on our website.

Collection of general data and information

The website collects a number of general data and information every time a person or an automated system accesses the website. These general data and information are stored in the log files of the server. The following information can be recorded: (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrer), (4) the sub-websites that are accessed via an accessing system on our website, (5) the date and time of an access to the Internet site, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information which serve to prevent danger in the event of attacks on our information technology systems.

When using these general data and information, we do not draw any conclusions about the person concerned. This information is rather required to: (1) deliver the contents of our website correctly, (2) optimize the contents of our website as well as the advertising for it, (3) to ensure the permanent functionality of our information technology systems and the technology of our website as well as, (4) to provide law enforcement agencies with the necessary information for prosecution in case of a cyber attack.

These anonymously collected data and information are therefore statistically evaluated by us on the one hand and on the other hand with the aim to increase data protection and data security in our company in order to ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by a person concerned.

Registration on our website

The data subject has the possibility to register on the Internet site of the data controller by providing personal data. The personal data transmitted to the data controller is determined by the input mask used for registration. The personal data entered by the data subject are collected and stored solely for internal use by the data controller and for the data subject’s own purposes. The data controller may arrange for the transfer to one or more processors, such as a parcel service provider, who shall also use the personal data exclusively for internal use attributable to the data controller.

Furthermore, by registering on the Controller’s website, the IP address assigned to the data subject by the Internet Service Provider (ISP), the date and time of registration are stored. This data is stored with the aim of preventing the misuse of our services and, if necessary, to enable the investigation of criminal offences. To this extent, the storage of this data is necessary to protect the person responsible for processing. As a matter of principle, this data will not be passed on to third parties unless there is a legal obligation to do so or the passing on of the data serves criminal prosecution.

The registration of the data subject under voluntary disclosure of personal data serves the purpose of the data controller to offer the data subject content or services which, due to the nature of the matter, can only be offered to registered users. Registered persons are free to modify the personal data provided during registration at any time or to have them completely deleted from the data stock of the data controller.

Upon request, the data controller shall provide any data subject at any time with information on the personal data stored about the data subject. In addition, the data controller shall correct or delete personal data at the request or notification of the data subject, provided that this does not conflict with any statutory storage obligations. The entire staff of the data controller is available to the data subject as contact persons in this context.

Subscription to our newsletter

The website offers users the opportunity to subscribe to our company newsletter. Which personal data is transmitted to the person responsible for processing when ordering the newsletter can be seen from the input mask used for this purpose. We inform our customers and business partners at regular intervals by means of a newsletter about company offers. In principle, the newsletter of our company can only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers to receive the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address registered for the first time by a person concerned for the purpose of receiving the newsletter using the double opt-in procedure. This confirmation mail is used to check whether the owner of the e-mail address has authorized the receipt of the newsletter as the person concerned.

When registering for the newsletter, we also store the IP address assigned by the Internet Service Provider (ISP) of the computer system used by the person concerned at the time of registration as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of a data subject’s e-mail address at a later date and therefore serves to provide legal protection for the data controller.

The personal data collected during registration for the newsletter is used exclusively for sending our newsletter. In addition, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or for registration, as might be the case if there are changes to the newsletter offer or if technical conditions change. The personal data collected within the scope of the newsletter service will not be passed on to third parties. The subscription to our newsletter can be cancelled by the person concerned at any time. The consent to the storage of personal data, which the person concerned has given us for the newsletter service, can be revoked at any time. For the purpose of revoking the consent, a corresponding link is included in every newsletter. It is also possible to unsubscribe from the newsletter at any time directly on the website of the data controller or to inform the data controller in another way.

Newsletter tracking

The newsletters contain so-called counting pixels. A counting pixel is a miniature graphic embedded in such e-mails sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. By means of the embedded pixel-code, we can identify whether and when an e-mail was opened by a person concerned and which links contained in the e-mail were called up by the person concerned.

Such personal data collected via the embedded pixel-code in the newsletters is stored and evaluated by the data controller in order to optimize the newsletter delivery and to adapt the content of future newsletters even better to the interests of the data subject. This personal data is not passed on to third parties. Affected persons are entitled to revoke the separate declaration of consent submitted in this regard via the double opt-in procedure at any time. After revocation, these personal data will be deleted by the data controller.

Contact possibility via the website

Due to legal regulations, the website contains information that enables a quick electronic contact to our company as well as a direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the data controller by e-mail or via a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data transmitted voluntarily by a data subject to the data controller are stored for the purposes of processing or contacting the data subject. This personal data is not disclosed to third parties.

Rights of the data subject

Your rights to our processing of your personal data are as follows:

a) The right of access to your personal data;

b) The right to correct your personal data;

c) The right to delete your personal data;

d) The right to limit the processing of your personal data;

e) The right to the portability of your personal data;

f) The right to withdraw consent to the processing of personal data where the lawfulness of processing is based on consent to the processing of personal data;

g) The right to object to the processing of your personal data;

h) The right to file a complaint about the processing of your personal data.

You can claim all your rights by contacting us via online form or via email address data@ourdomainname.

Below is a detailed explanation of the content of your individual rights.

Right of access to personal data: ability to ask us at any time to confirm whether or not your personal data is processed and, if they are, for what purposes, to what extent, to what extent they are made available, the time they will be processed, whether the processing of your personal data takes place for automated decision-making, including profiling, and, finally, whether there is a right to repair, erase, limit processing, or objection.

Right to correct personal data: ability to ask us at any time to correct or supplement your personal data in case it is inaccurate or incomplete.

Right to delete your personal data: our duty to delete your personal data if: a) they are no longer needed for the purposes for which they were collected or otherwise processed; b) You have objections to processing on your part and there are no legitimate reasons for processing; c) processing is unlawful; d) there is our legal obligation to delete your personal data.

Right to limit the processing of your personal data: in case of any disputed questions regarding the processing of your personal data, we are obliged to restrict the processing of your personal data. This limitation means that we will mark the personal data you have selected and ensure that they are not processed other than storing them. This does not apply if any of the exceptions provided by law are met.

Right to the portability of your personal data: if you have provided us with your personal data, you have the right to require us to forward this data directly to another personal data administrator in a structured, commonly used, and machine-readable format, provided that: a) the processing of personal data is carried out in our company in an automated manner; while b) processing is based on consent to the processing of personal data or to the conclusion or performance of the contract.

Right to withdraw consent to the processing of personal data: for certain categories of personal data (such as processing of email addresses by data subjects for the company’s marketing purposes), it is essential that you consent to the processing of personal data for one or more specific purposes. If you have been authorized to process selected categories of personal data whose processing is not necessary for the purposes of fulfilling the contract, fulfillment of the company’s legal duty, protection of important interests of the company or other natural person, fulfillment of a public service task or public authority, or for the purpose of protecting the legitimate interests of the company, you are entitled to withdraw your consent to the processing of your personal data at any time. If you would like to withdraw your consent to the processing of selected categories of personal data to which you have previously given your explicit consent, it is sufficient to send an email in which you are declining your consent to the processing of selected personal data categories to data@ourdomainname with the personal details you do not want us to continue processing. To speed up processing your application, we recommend that you enter the “Revocation of consent to the processing of personal data” in the subject of the e-mail message.

Right to object to the processing of your personal data: possibility of raising your objection against the processing of your personal data, which we continue to process after the termination of service under the legal title of legitimate interest. The legitimate interest of the company may be, for example, the retention of personal data in order to effectively defend the company in the event of a dispute with the client. For these purposes, the company is authorized to retain the personal data of the client even after a reasonable period of time after termination of the service, as the personal data of the client may enable the company to defend its rights and legitimate interests in any dispute.

The company is not authorized to continue processing your personal data unless it demonstrates serious legitimate processing grounds that outweigh your interests or rights, or for the determination, performance, or defense of legal claims.

If we process your personal data solely for the purpose of direct marketing, you are entitled to object at any time to such processing of personal data. If you make such an objection, our company will no longer process your personal data for direct marketing purposes.

Privacy policy on the use and application of Google Analytics

The data controller has implemented Google Analytics, a web analysis service, on this website. Google Analytics collects and evaluates visitor behavior data to optimize the site and analyze internet advertising effectiveness. The IP address of visitors from the EU or EEA member states is anonymized. Google uses cookies to track website usage, collecting personal data like access time and location. This data is stored in the US and may be shared with third parties. Users can opt out of Google Analytics tracking by adjusting browser settings or installing a browser add-on. More information is available in Google’s privacy policy and terms of service.

Legal basis of the processing

Art. 6 I lit. a GDPR serves our company as a legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the person concerned is a party, as is the case, for example, with processing operations necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing operations which are necessary for the implementation of pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation which makes it necessary to process personal data, for example to fulfil tax obligations, the processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company was injured and his name, age, health insurance details or other vital information had to be passed on to a doctor, hospital or other third party. The processing would then be based on Art. 6 I lit. d GDPR. Finally, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations based on this legal basis which are not covered by any of the above legal bases if the processing is necessary to safeguard a legitimate interest of our company or of a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the person responsible (Recital 47 Sentence 2 GDPR).

Legitimate interests in the processing pursued by the controller or a third party

If the processing of personal data is based on Article 6 I lit. f GDPR, our legitimate interest is to carry out our business activities for the benefit of all our employees and shareholders.

The duration for which personal data are stored

The criterion for the duration of storage of personal data is the respective legal retention period. After this period has expired, the corresponding data is routinely deleted if it is no longer required for the fulfillment or initiation of a contract.

In the future, we may make any changes to our privacy policy, and these changes will be posted on our website.

Updated 01.01.2024