The high demands you place on our products and services are also our guideline for the handling of your data. Our goal is to create and maintain the basis for a trusting business relationship with our customers and partners.
Our data protection declaration explains the type, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online presence and the associated websites, functions and content as well as external online platforms, e.g. our social media profile. (hereinafter jointly referred to as "online offer"). With regard to the terms used, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR), e.g. :
"Processing" - GDPR - Chapter 1 - Article 2 - Paragraph 2,
"Responsible" - GDPR - Chapter 1 - Art. 2 - Paragraph 7,
"Consent" - GDPR - Chapter 1 - Art. 4 - Paragraph 11.
1. Relevant legal bases
In accordance with GDPR Art. 13 we inform you about the legal basis of our data processing. Insofar as the legal basis is not stated in the data protection declaration, the following applies: The legal basis for obtaining approvals is the GDPR Art. 6 para. 1 - a and Art. 7, the legal basis for processing our services and implementing contractual measures as well as for answering enquiries is the GDPR Art. 6 para. 1 - b, the legal basis for processing to fulfil our legal obligations is the GDPR Art. 6 para. 1 - c, and the legal basis for processing to protect our legitimate interests is the GDPR Art. 6 para. 1 - f. If the vital interests of the data subject or another natural person require the processing of personal data, Article 6 paragraph 1 - d of the GDPR serves as the legal basis.
The responsible body in the sense of data protection law is the:
Marcos Richartz Pérez
Im Waldteich 27
You can reach our data protection officer as follows:
Im Waldteich 27
2. Collecting data when you visit our website
If you use our website only for information purposes, i.e. if you do not contact us and provide us with information, we only collect data that your browser transmits to our server (so-called "server log files").
We or our hosting provider and web designer collect data on the basis of our legitimate interests within the meaning of the GDPR Art. 6 Para. 1- f. Data about each access to the server on which this service is located (so-called server log files). Access data are: Name of the page accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type & browser version, user's operating system, referrer URL (referring page), IP address and the requesting provider.
Server log files are stored for a maximum of 7 days for security reasons (e.g. to determine misuse or fraud) and then deleted. Data, the further storage of which is necessary for evidence purposes, is excluded from deletion until the respective incident has been finally clarified.
The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
3. Provision of contractual services
We process inventory data (e.g. names and addresses as well as contact data of users), contract data (e.g. services used, names of contact persons, payment information) for the fulfilment of our contractual obligations and services in accordance with GDPR Art. 6 Para. 1-b. The information marked as mandatory fields in online forms is required for the conclusion of the contract.
The data shall be deleted after expiry of the statutory warranty and comparable obligations; the necessity of storing the data shall be reviewed every three years; in the case of statutory archiving obligations, the data shall be deleted after expiry. Information in the possible customer account is retained until it is deleted.
4. Cooperation with contract processors and third parties
Insofar as we pass on or transmit data to other persons and companies (contractors or third parties) within the scope of our processing, or grant them access to the data in any other way, this shall only take place on the basis of legal permission (e.g. if passing on the data to third parties, e.g. payment service providers, is necessary in accordance with GDPR Art. 6 Para. 1 - b in order to fulfil the contract), if you have consented to this, if there is a legal obligation to do so, or on the basis of our legitimate interests (e.g. when using agencies, web hosts, etc.).
Insofar as we commission third parties with data processing on the basis of a so-called "order processing contract", this is done on the basis of the GDPR Art. 28. The contractors and third parties commissioned by us are subject to a written agreement with us and undertake to comply with the technical and organisational measures pursuant to §9 BDSG.
§ 9 BDSG:
Public and non-public bodies which collect, process or use personal data themselves or on behalf of others shall take the technical and organisational measures necessary to ensure the implementation of the provisions of this Act, in particular the requirements specified in the Annex to this Act. Measures shall only be required if their expenditure is proportionate to the intended protective purpose.
The hosting services we use serve to provide the following services: Web space, computing power, storage space and database services, security services and technical maintenance services that we use to operate this online service.
We or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, prospects and visitors of this online service on the basis of our legitimate interest in the efficient and secure provision of this online service in accordance with GDPR Art. 6 Para. 1 - f in conjunction with. GDPR Art. 28 (Conclusion of the contract processing agreement).
6. Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this happens in connection with the use of third-party services or the transfer of data to third parties, this only happens if this happens to fulfil our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual approvals, we process the data in a third country only if the special requirements of GDPR Art. 44 are fulfilled. This means, for example, that the processing takes place on the basis of special guarantees, such as the officially recognised determination of a data protection level corresponding to the EU (e.g. for the USA by the "Privacy Shield") or the observance of officially recognised special contractual obligations (so-called "standard contractual clauses").
a) What is a cookie?
A cookie is a small file that stores your Internet settings. Almost every website uses cookie technology. It is downloaded from your Internet browser the first time you visit a website. The next time you visit this site on the same device, the cookie and the information it contains will either be sent back to the site that created it (First Party Cookie) or to another site to which it belongs (Third Party Cookie). In this way, the site recognizes that you have already been browsed with that browser and, in some cases, varies the content displayed.
Some cookies are very useful because they can enhance your experience when you return to a website that you have visited several times. For example, if you use the same device and browser as before, cookies store your preferences, such as how you use a page, and tailor the offers displayed to your personal interests and needs.
Cookies can be divided into four categories depending on their function and purpose:
Unconditionally required cookies (cookies without consent):
Unconditionally Required Cookies are required to enable you to navigate a website and use its features. Without these cookies, functionalities cannot be guaranteed, for example that actions carried out during a visit (e.g. text input) remain intact, even when navigating between individual pages of the website.
Performance cookies collect information about how a website is used - for example, which pages a visitor visits most frequently and whether he or she receives error messages from a page. These cookies do not store any information that allows the user to be identified. The collected information is aggregated and thus evaluated anonymously. These cookies are used exclusively to improve the performance of a website and thus the user experience.
Functional cookies enable a website to store information that has already been entered (such as the selection of data in a document) and to offer the user improved, more personal functions. Functional cookies are used, for example, to enable requested functions such as video playback. These cookies collect anonymous information, they cannot track your movements on other websites.
Cookies for marketing purposes:
Cookies for marketing purposes are used to specifically play out advertisements that are relevant to the user and adapted to his interests. They are also used to limit the frequency with which ads appear and to measure the effectiveness of advertising campaigns. They register whether you have visited a website or not. This information may be shared with third parties such as advertisers. Cookies to improve targeting and advertising are often linked to third party site functionality.
If personal data are also processed by individual cookies used by us, they are processed in accordance with GDPR Art. 6 Para. 1 - b either for the execution of the contract or in accordance with GDPR Art. 6 Para. 1 - f to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly, safe and effective design of the website visit.
We may work with advertising partners to help us make our website more interesting for you. To this end, when you visit our website, cookies from partner companies are also stored on your hard drive (third-party cookies). If we cooperate with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the extent of the information collected in each case in the following sections.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or whether to exclude the acceptance of cookies in certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for the respective browsers under the following links:
Please note that if cookies are not accepted, the functionality of our website may be restricted.
b) Cookie consent
When you visit our site for the first time, we ask you for permission to use non-permitted cookies.
We store your consent, rejection, and any changes to your previous decisions for 90 days. This process (called "cookie consent") is pseudonymised, anonymised and stored in encrypted form. These data do not provide any information about your person.
You will find a list of the cookies we use, as well as their name, function, period of validity and, if applicable, the country to which they are transmitted under our cookie information page.
8. Integration of services and contents of third parties
Due to our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online services within the meaning of the GDPR Art. 6 para. 1 - f.), we use content or service offers of third parties within our online services in order to integrate their content and services, e.g. videos or fonts (hereinafter uniformly referred to as "content").
This always presupposes that the third-party providers of this content perceive the IP address of the user, since they cannot send the content to their browser without the IP address. The IP address is therefore required to display this content. We strive to use only those contents whose respective providers use the IP address only for the delivery of the contents. Third party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. Pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain technical information about the browser and operating system, referring websites, visiting times and other information about the use of our online services and may be linked to such information from other sources.
9. Your contact details
When you contact us (e.g. via contact form or e-mail), personal data is collected which you make available to us. You can find out which data is collected on a contact form from the contact form. This data is stored and used exclusively to answer your enquiry or to contact you and the associated technical administration. Legal basis for the processing of the data is our legitimate interest in answering your inquiry according to GDPR Art. 6 Para. 1- f. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Article 6 paragraph 1- b) of the GDPR.
Your data will be deleted after the final processing of your request, i.e. if the circumstances show that the facts have been finally clarified and that there are no legal storage obligations. Everything else applies only if you have expressly agreed to the further use of your data or if we reserve the right to use data beyond what is legally permissible and about which we will inform you below.
10. Use of your data for direct advertising when registering for the e-mail newsletter
If you subscribe to our e-mail newsletter, you will receive regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further possible data is voluntary and serves to enable us to address you personally.
We use the so-called double opt-in procedure for sending the newsletter, i.e. we only send you an e-mail newsletter if you have expressly given us your consent to receive the newsletter after registration. We will send you a confirmation e-mail with the request that you would like to receive our newsletter in the future by clicking on an appropriate link. By activating the confirmation link, you give us your consent to the use of your personal data in accordance with GDPR Art. 6 Para. 1- a.
When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to track any misuse of your e-mail address at a later date.
The data collected by us when you register for the newsletter will only be used to address you in advertising via the newsletter. You can revoke your consent at any time and cancel the newsletter via the link given in the newsletter or by sending a corresponding message to firstname.lastname@example.org . Your e-mail address will be deleted from our newsletter distribution list immediately after you unsubscribe, unless you have expressly consented to the further use of your data or we reserve the right to use additional data which is legally permissible and about which we inform you in this declaration.
11. Newsletter - Dispatch service provider
The dispatch service provider can use the recipient's data in pseudonymised form, i.e. without allocation to a user, to optimise or improve its own services, e.g. for the technical optimisation of dispatch and the presentation of the newsletter or for statistical purposes. However, the dispatch service does not use the data of our newsletter recipients to write them down itself or to pass them on to third parties.
12. Newsletter - measurement of success
The newsletters contain a so-called "web beacon", i.e. a file the size of a pixel, which is downloaded from our server when the newsletter is opened or, if we use a dispatch service provider, from its server. In the course of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of retrieval are first recorded.
This information is used to technically improve the services on the basis of technical data or target groups and their reading behaviour on the basis of their retrieval locations (which can be determined via the IP address) or access times. The statistical surveys also include whether the newsletters are open, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our nor the shipping service provider's intention to monitor individual users. Rather, the evaluations serve us to recognise the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
13. Online presence in social media
We maintain online presences in social networks and platforms to communicate with active customers, interested parties and users and to inform them about our services. Access to the respective networks and platforms is subject to the general terms and conditions and data processing guidelines of the respective operators.
14 Use of Social Media & Services: Social Plugins
On our pages are plugins of the social network Facebook (Facebook Inc., 1601 Willow Road, Menlo Park, California, 94025, USA) integrated.
You can recognize the Facebook plugins by the Facebook logo or the "Like" button or the addition "Social Plug-in from Facebook" or "Facebook Social Plugin". An overview of the Facebook plugins and their appearance can be found here: //developers.facebook.com/docs/plugins/.
When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has visited our website, even if you do not have a Facebook profile or are not logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.
If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook profile. If you click on the "Like" button or make a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options to protect your privacy can be found in Facebook's data protection information:
The data processing operations described are carried out in accordance with Art. 6 Para. 1 - f GDPR on the basis of Facebook's legitimate interests in the display of personalised advertising in order to inform other users of the social network about your activities on our website and to tailor the service to suit your needs.
If you do not want Facebook to be able to assign visits to our pages to your Facebook user account, please log out of your Facebook user account before visiting our website. You can also object to the loading of Facebook plugins and thus the data processing processes described above with add-ons for your browser in the future, e.g. with the script blocker "NoScript" (//noscript.net/).
Facebook Inc. based in the USA is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
Functions and contents of the service Google+ can be integrated within our online offer.
Plugins of the social network Google+, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), can be integrated on our pages.
For example, the plugins can be recognized by buttons with the character "+1" on a white or colored background. An overview of the Google plugins and their appearance can be found here: //developers.google.com/+/plugins
When you visit our website, which contains such a plugin, your browser establishes a direct connection to Google's servers. The content of the plugin is transmitted by Google directly to your browser and integrated into the page. Through the integration, Google receives the information that your browser has called the corresponding page of our website, even if you do not have a profile on Google+ or are not currently logged in to Google+. This information (including your IP address) is transmitted directly from your browser to a Google server in the USA and stored there.
If you have a Google+ profile and are logged in to Google+ before visiting our website, Google can assign the visit to our website directly to your Google+ profile. If you interact with the plugins, for example by pressing the "+1" button, the corresponding information is also transmitted directly to a Google server and stored there. The information is also published on Google+ and displayed to your contacts there.
The data processing operations described are carried out in accordance with Art. 6 Para. 1 - f GDPR on the basis of Google's legitimate interests in the display of personalised advertising in order to inform other users of the social network of your activities on our website and to tailor the service to meet your needs.
If you do not want Google to associate the data collected via our website directly with your profile on Google+, you must log out of Google+ before visiting our website.
You can also object to the loading of Google+ plugins and thus to the data processing operations described above with add-ons for your browser in the future, e.g. with the script blocker "NoScript" (//noscript.net/).
Google LLC, headquartered in the USA, is certified for the us-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google's data protection information: //www.google.com/intl/de/policies/privacy/
Functions and contents of the Twitter service can be integrated within our online offer.
Plugins of the Twitter short message network (Twitter, Inc. 1355 Market St, Suite 900, San Francisco, CA 94103, USA) can be integrated on our pages.
You can recognize the Twitter plugins (tweet button) by the Twitter logo on our site. An overview of tweet buttons can be found here (//about.twitter.com/resources/buttons).
If you visit our website that contains such a plugin, a direct connection will be established between your browser and the Twitter server. Twitter receives the information that you have visited our site with your IP address. If you click the Twitter "tweet" button while logged into your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to assign the visit to our pages to your user account. We would like to point out that, as the provider of the pages, we do not have any knowledge of the content of the data transmitted or its use by Twitter.
If you do not want Twitter to be able to assign visits to our pages, please log out of your Twitter user account before visiting our website.
You can change your Twitter privacy settings in your account settings at //twitter.com/account/settings.
The functions and content of the Instagram service can be integrated into our online offering.
Plugins of the social Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) can be integrated on our pages.
This may include, for example, content such as images, videos or text and buttons with which users express their favor regarding the content, the authors of the content or our contributions.
We integrate the videos of the platform "YouTube" of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Use of YouTube components with extended privacy mode
On our website we use components (videos) of the company YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA, a company of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.
We use the option "extended privacy mode" provided by YouTube.
When you visit a page that has an embedded video, YouTube connects to the YouTube servers and displays the content by notifying your browser on the website.
According to YouTube, in " - advanced privacy mode -" only data is transmitted to the YouTube server, in particular which of our websites you visited when watching the video. If you are logged in to YouTube at the same time, this information will be assigned to your YouTube account. You can prevent this by logging out of your account before visiting our website.
We use components of the supplier Vimeo on our site. Vimeo is a service of Vimeo LCC, 555 West 18th Street, New York, New York 10011, USA.
Each time you visit our Web site that is equipped with such a component, the component causes the browser you are using to download an appropriate representation of the Vimeo component. When you visit our site while logged into Vimeo, Vimeo uses the information collected by the component to identify which specific page you are visiting and associates that information with your personal Vimeo account. If, for example, you click on the "Play" button or make comments, this information is transferred to your personal Vimeo account and stored there. In addition, the information that you have visited our site will be shared with Vimeo. This happens regardless of whether or not you click on the component or comment on it.
If you want Vimeo to prevent this transfer and storage of information about you and your conduct on our website, you must log out of Vimeo before visiting our site.
15. Use of Adobe TypeKit
For the design of our website we use the Typekit service of Adobe on the basis of GDPR Article 6 paragraph 1- f. The purpose and at the same time our legitimate interest in the use of Typekit is to be able to use certain fonts. In the course of providing the Typekit service, no cookies will be placed or used to provide the font. Adobe collects the following information to provide the Typekit Service: the fonts provided, the set ID, the account ID, the service that provides the fonts, the application that requests the fonts, the server that provides the fonts, and the host name of the page on which the fonts are loaded.
16. Right of revocation
They have the right to revoke consents granted pursuant to GDPR Art. 7 para. 3 with effect for the future.
17 Right of appeal
You may object at any time to the future processing of the data relating to you in accordance with GDPR Art. 21. In particular, you may object to the processing of your data for the purposes of direct marketing.
If you wish to exercise your right of objection, simply send an e-mail to: email@example.com
18 Deletion of data
The data processed by us will be deleted or their processing restricted in accordance with GDPR Art. 17 and 18. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them. If the data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be stored for commercial or tax reasons.
According to legal requirements in Germany, data is stored in particular for 6 years in accordance with § 257 para. 1 HGB (German Commercial Code) (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting records, etc.) and for 10 years in accordance with § 147 para. 1 AO (German Tax Code) (books, records, management reports, accounting records, commercial and business letters, documents relevant for taxation, etc.).
19. Rights of the individuals concerned
You have the right to request confirmation as to whether the data in question will be processed and to request information about this data and further information and a copy of the data in accordance with GDPR Art. 15.
In accordance with article 16 of the Data Protection Ordinance, you have the right to request the completion of the data concerning you or the rectification of inaccurate data concerning you.
Pursuant to Article 17 of the GDPR, you have the right to demand that the data concerned be deleted immediately or, alternatively, to demand a restriction on the processing of the data pursuant to Article 18 of the GDPR.
You have the right to demand that the data concerning you which you have provided to us be received in accordance with GDPR Art. 20 and that it be transferred to other persons responsible.
You also have the right, pursuant to GDPR Art. 77, to file a complaint with the competent supervisory authority.
20. Links to Internet pages of other companies
Our website contains links to websites of other companies. We are not responsible for the privacy practices of external websites that you may access through these links. Please inform yourself there about the data protection of the external websites.
21. Change of the data protection information
In order to ensure that our data protection information always complies with the current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection information has to be adapted due to new or changed offers or services.