1. Who is responsible and how can I contact the data protection officer?
Zum Kalkofen 24
2. What rights do you have?
You are entitled to the following rights with regard to your personal data:
- Right to information (Art. 15 GDPR),
- Right to correction (Art. 16 GDPR),
- Right to deletion (Art. 17 GDPR),
- Right to restrict processing (Art. 18 GDPR),
- Right to transferability (Art. 20 GDPR),
- Right to object to processing (Art. 21 GDPR),
You can also complain about us to a data protection supervisory authority in accordance with Art 77 GDPR.
If you have given us your consent, you can revoke it at any time without this affecting the legitimacy of the processing that has taken place up to the revocation.
3. For which purposes and on what legal basis do we process personal data?
Visits to our website
When you visit our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to us. This data is:
- IP address
- Date and time of the request
- Content of the request (specific page)
- Access status/HTTP status code
- Website from which the request originates (so-called “Referrer”)
- Operating system and its interface
- Language and version of the browser software.
We also store this data, incl. IP address, in log files.
This information is required on a technical level so that we can display our website, ensure stability and security, and optimise our services.
The legal basis is Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest is derived from the aforementioned purposes.
We delete this data no later than after seven days. Any storage for a longer period will only take place after the personal data has been deleted or made anonymous. In the case of IP addresses, anonymisation may be achieved by applying an appropriate truncation.
If you contact us through the e-mail addresses we have provided, we will store the personal data you have specified in order to respond to your enquiries. Your data may be stored in a customer relationship management system ("CRM system") or comparable software.
The legal basis is Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest is derived from the aforementioned purposes. If the purpose of the contact is to conclude a contract or if the contact is made within the framework of an existing contractual relationship, the legal basis is Art. 6 para. 1 lit. b GDPR.
The data will be deleted when the request has been conclusively processed, provided that we are not legally obliged to store it or require the data to fulfil a contract. You can also object to the processing of your data at any time if this is done on the basis of a legitimate interest.
If you send us your application, we will process the data you provide us in order to fulfil our (pre)contractual obligations as part of the application process. If your application is successful, we will further process the data for the purpose of fulfilling the employment relationship.
This is based on Art. 6 para. 1 lit. b GDPR and § 26 German Federal Data Protection Act. If you provide us with special categories of personal data on a voluntary basis, e.g. health data or religious affiliation, Art. 9 para. 2 lit. b GDPR additionally forms the legal basis.<br/> If your application is unsuccessful, we will delete your data after six months at the latest. The data will be stored until then in order to respond to any issues regarding the application procedure and to fulfil our duty of proof under the AGG (Equal Treatment Law). We will delete your data immediately should you withdraw your application.
If you use our contact form, we shall use the data you provide in order to respond to your request, whereby only a valid e-mail address is required and the other details are voluntary. Your data may be stored in a customer relationship management system ("CRM system") or comparable software.
Your data will be processed for the purpose of contacting us pursuant to Art. 6 para. 1 lit. b GDPR in so far as your request relates to the fulfilment of contractual obligations or the initiation of a contract. In other cases, the legal basis is Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest is derived from the aforementioned purposes.
The personal data we collect for the use of the contact form will be automatically deleted after your request has been processed, provided that we are not legally obliged to store it or require the data to fulfil the contract. You can also object to the processing of your data at any time if this is done on the basis of a legitimate interest.
4. Data collection on our website
Some of these web pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies are kept on your end device until you delete them. These cookies allow us to recognise your browser the next time you visit our website.
Cookies which are required to execute the electronic communication process or to provide certain functions desired by you (e.g. shopping cart function), are stored in accordance with Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the provision of their services in a technically error-free and optimised manner. Insofar as other cookies (e.g. cookies to analyse your surfing behaviour) are stored, these will be treated separately in this data privacy declaration.
Server log files
The provider of the pages automatically collects and saves information in so-called server log files that your browser automatically shares with us. This information is:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the computer used
- Time of the server request
- IP address
A combination of this data with other data sources is not performed.
This data is collected in accordance with Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of their website – the server log files must be collected for this purpose.
5. Analysis tools and advertising
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer to help with the analysis of how you use the website. The information generated by the cookie about your use of this website is generally transmitted to and stored by Google on a server in the USA.
Google Analytics cookies are stored in accordance with Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both their website and their advertising.
We have activated the IP anonymisation function on this website. As a result, your IP address will be truncated by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide additional services to the website provider associated with website use and Internet use. The IP address transmitted by your browser as part of Google Analytics will not be associated with other data held by Google.
You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as prevent the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection against data collection
You can prevent collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be saved that prevents the future collection of your data upon further visits to this website:
Google Analytics is disabled Enable now.
Contracted data processing
We have concluded a contract with Google for contracted data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic characteristics of Google Analytics
This website uses the "demographic features" function of Google Analytics. This allows reports to be created that contain information about the age, gender and interests of visitors to the site. This data is derived from interest-based advertising by Google as well as from visitor data from third-party providers. This data cannot be assigned to a specific person. You can disable this function at any time from the ad settings in your Google Account or opt out of the collection of your data by Google Analytics as described in "Objection against data collection".
If you would like to subscribe to the newsletter advertised on the website, we require an e-mail address from you as well as some details allowing us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Additional data is not collected or if it is, only on a voluntary basis. We use this data solely for the purpose of sending the requested information and do not pass it on to third parties.
The data entered in the newsletter registration form will be processed exclusively subject to your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of your data, e-mail address and its use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legitimacy of the data processing operations already performed remains unaffected by the revocation.
We will store the data you have provided us for the purpose of subscribing to the newsletter until you cancel your subscription to the newsletter and delete it thereafter. This will not affect data stored by us for other purposes (e.g. e-mail addresses for the member area).
This website uses CleverReach for sending newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service that can be used to organise and analyse the sending of newsletters. The data you enter to subscribe to our newsletter (e.g. e-mail address) will be stored on CleverReach's servers in Germany / Ireland.
The newsletters we send using CleverReach allow us to analyse the behaviour of the newsletter recipients. It is possible, for example, to analyse how many recipients have opened the newsletter message and how often a link has been clicked on in the newsletter. The so-called conversion tracking can also be used to analyse whether a pre-defined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. For more information on data analysis through CleverReach newsletters, please visit: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.
The data will be processed subject to your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legitimacy of the data processing operations already performed remains unaffected by the revocation.
You must unsubscribe from the newsletter if you do not wish CleverReach to analyse your data. We provide an appropriate link for this in every newsletter message. You can also unsubscribe from the newsletter directly on the website.
We will store the data you have provided us for the purpose of subscribing to the newsletter until you cancel your subscription to the newsletter and delete it from both our servers and CleverReach's servers following the unsubscription. This will not affect data stored by us for other purposes (e.g. e-mail addresses for the member area).
Please refer to CleverReach's data protection policy for more information: https://www.cleverreach.com/de/datenschutz/.
Conclusion of a contract for order data processing
We have concluded a contract with CleverReach for contracted data processing and fully implement the strict requirements of the German data protection authorities when using CleverReach.
6. Plugins and tools
Our website uses plugins from YouTube, a site operated by Google. This website is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited.
If you are logged into your YouTube account, you allow YouTube to associate your surfing behaviour directly with your personal profile. This can be prevented by logging out of your YouTube account.
YouTube is used in the interest of presenting our online services in an appealing manner. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Google Web Fonts
This site uses so-called web fonts provided by Google to display fonts uniformly. Google Fonts are installed locally. No connection is made to Google servers.
This website uses the map service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Your IP address will have to be saved so that you can use Google Maps. The information is generally transmitted to and stored by Google on a server in the USA. The provider of this website has no influence over this data transmission.
Google Maps is used in the interest of presenting our online services in an appealing manner and in order to make it easier to find the locations indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.