§ 2 Name and address of the data protection officer
The data protection officer of the data controller is:
Tel: +49 (0)7151 36900 0
§ 3 General information on data processing
3.1 Scope of personal data processing
We only ever collect and use personal data of our users where this is necessary for the provision of a functional website and of our content and services. As a general rule, personal data of a user is only collected and used with his or her consent. An exception to this is cases where it is not possible to obtain consent beforehand due to practical reasons and where data processing is permitted by law.
3.2 Legal basis for the processing of personal data
Where we obtain consent from the data subject for the processing of personal data, Article 6(1)(a) EU-GDPR serves as the legal basis for the processing of personal data.
Article 6(1)(b) EU-GDPR serves as the legal basis for the processing of personal data that is required for the performance of a contract to which the data subject is party. This also applies to data processing that is required in order to take steps prior to entering into a contract. Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) EU-GDPR serves as the legal basis.
If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) EU-GDPR serves as the legal basis for the processing.
3.3 Data erasure and storage period
The personal data of the data subject is erased or blocked as soon as the purpose of storage ceases to apply. Storage can also take place if this has been provided for by the European or national legislators in Union regulations, laws or other provisions to which the data controller is subject. Blockage or erasure of the data shall also take place if a storage period prescribed by the specified standards expires, unless further storage of the data is required in order to conclude or perform a contract.
§ 4 Rights of the data subject
Every data subject has the right of access in accordance with Article 15 EU-GDPR, the right to rectification according to Article 16 EU-GDPR, the right to erasure based on Article 17 EU-GDPR, the right to restriction of processing according to Article 18 EU-GDPR, the right to object in accordance with Article 21 EU-GDPR and the right to data portability based on Article 20 EU-GDPR. The restrictions set out in Sections 34 and 35 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) apply to the right of access and the right to erasure. Furthermore, the data subject has the right to lodge a complaint with a data protection supervisory authority (Article 77 EU-GDPR in conjunction with Section 19 BDSG).
You have the right to withdraw your consent to the processing of personal data by us at any time. This also applies to the withdrawal of consent given prior to the EU-GDPR coming into force, i.e. before 25 May 2018. Please note that the withdrawal of consent only applies to future processing. Any processing that took place before consent was withdrawn is not affected by this. The withdrawal of consent is not subject to any condition as to form and should be addressed to the data controller.
§ 5 Provision of the website and generation of log files
5.1. Description and scope of data processing
Every time our website is accessed, our system automatically records data and information about the computer system of the computer accessing the website. If the website is merely used for informative reasons, we shall only collect the personal data that your browser transmits to our server. In this case, the following data is collected:
- IP address
- Date and time of access
- Time zone difference compared to Greenwich Mean Time (GMT)
- Contents of the request (specific page)
- Access status/http status code
- The volume of data transferred in each case
- Websites from which the user's system accesses our webpage
- Websites that are accessed by the user's system via our website
- Information on the browser type and the version used
- The user's operating system
- The data is also saved in our system's log files.
5.2 Legal basis for data processing
The legal basis for the temporary storage of data is Article 6(1)(f) EU-GDPR.
5.3 Purpose of data processing
Temporary storage of the IP address by the system is required in order to enable the website to be delivered to the user's computer. To this end, the user's IP address must remain stored for the duration of the session.
These purposes also include our legitimate interest in data processing based on Article 6(1)(f) EU-GDPR.
5.4 Storage period
The data is erased once it is no longer required in order to achieve the purpose for which it was collected. Where data is collected for the purpose of making the website available, this applies when the current session ends. The IP address in the log files of our system is stored for 7 days and then automatically deleted.
5.5 Opportunity for objection and removal
Operation of the website requires data to be recorded in order to make the website available and saved in log files. Consequently, there is no opportunity for the user to object to this.
6.1 Description and scope of data processing
6.2 Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6(1)(f) EU-GDPR.
6.3 Purpose of data processing
The user data collected using cookies required for technical reasons is not used to create user profiles.
These purposes also include our legitimate interest in processing personal data based on Article 6(1)(f) EU-GDPR.
6.4 Storage period, opportunity for objection and removal
The following cookies are set by this website:
§ 7 Contact form/product enquiry form and email contact
7.1 Description and scope of data processing
Our website contains a contact form/product enquiry form that can be used to contact us electronically. If a user makes use of this option, the data entered into the form is sent to us and stored.
You can also contact us via the email address provided. If you do this, your personal data that is sent with the email will be stored.
No data is passed on to third parties in connection with this. The data is used exclusively for processing the conversation.
7.2 Legal basis for data processing
The legal basis for the processing of data subject to the user's consent is Article 6(1)(a) EU-GDPR.
The legal basis for the processing of data transmitted when sending an email is Article 6(1)(f) EU-GDPR. If the purpose of the email contact is to conclude a contract, the additional legal basis for the processing is Article 6(1)(b) EU-GDPR.
7.3 Purpose of data processing
We process the personal data submitted in the form solely for the purpose of processing the contact request. Where we are contacted via email, this also includes the necessary legitimate interest in processing the data.
The other personal data that is processed during the submission process is used to prevent misuse of the contact form/product enquiry form and to ensure the safety and security of our IT systems.
7.4 Storage period
The data is erased once it is no longer required in order to achieve the purpose for which it was collected. Accordingly, personal data submitted in the contact form/product enquiry form and personal data sent via email is erased once the conversation with the user has ended. The conversation is deemed to have ended when the circumstances make it clear that the matter in question has been fully clarified and concluded.
The additional personal data collected during the submission process is deleted after a period of no more than seven days.
7.5 Opportunity for objection and removal
The user may revoke his or her consent to the processing of personal data at any time. If the user contacts us via email, he or she may object to the storage of personal data at any time. In such a case, the conversation cannot be continued. The withdrawal of consent is not subject to any condition as to form and should be addressed to the data controller.
In this case, all personal data that was saved during establishment of contact shall be deleted.
§ 8 Newsletter
On our website we offer the option of subscribing to a free newsletter. When a user signs up for the newsletter, the data from the submission form is sent to us.
The only mandatory information required for sending out the newsletter is your email address. The provision of further, separately marked data is voluntary and is used to enable us to address you personally. Following your confirmation, we will save your email address for the purpose of sending the newsletter.
This website uses CleverReach to send newsletters. CleverReach is provided by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. It is a service that is used to organise and analyse the sending of newsletters. The data you enter in order to subscribe to the newsletter (e.g. your email address) is stored on the CleverReach servers in Germany and/or Ireland.
The newsletters that we send using CleverReach enable us to analyse the behaviour of the newsletter recipients. For instance, it lets us determine how many recipients have opened the email containing the newsletter, and how often the various links in the newsletter have been clicked. With the aid of conversion tracking, we can also analyse whether clicking a link in the newsletter is followed by a predefined action (e.g. purchasing a product on our website). You can find more information about the data analysis with CleverReach newsletters here: https://www.cleverreach.com/en/features/reporting-tracking.
The data is processed on the basis of your consent (Article 6(1)(a) GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The lawfulness of the data processing operations performed prior to this remains unaffected by your withdrawal of consent.
If you do not want your data to be analysed by CleverReach, you must unsubscribe from the newsletter. We provide a link in every newsletter email via which you can unsubscribe. You can also unsubscribe from the newsletter directly on our website.
The data that you have submitted to us for the purpose of receiving the newsletter will be saved by us until you unsubscribe from the newsletter and will be erased from our servers and the CleverReach servers after you have unsubscribed. Data that we have stored for other purposes remains unaffected by this.
Conclusion of a contract via order processing
We have concluded a contract with CleverReach for order processing and fully implement the strict requirements of the German data protection authorities in our use of CleverReach.
§ 9 Use of service providers in connection with the website
In some cases, we make use of external service providers in order to process your data on our website. We take great care when selecting and commissioning these service providers. They are bound by our instructions and are reviewed on a regular basis.
Only the necessary data is transferred in each case. Data protection is taken into account in contractual agreements – data processing done on behalf of the data controller – which set out technical and organisational measures in particular for protecting your data.
Where service providers are based outside the EU or the EEA (so-called "third countries"), a data processing agreement has been concluded with you.
Automated decisions in individual cases
No automated decisions are made in individual cases.
Obligation to provide data
As part of your contractual relationship with the data controller, you only have to provide the personal data that is required in order to initiate and conduct a contractual relationship, or the data that the data controller is legally required to collect.
If you do not provide the necessary personal data, the data controller may not be able to provide the corresponding services, e.g. sending a product enquiry.
§ 10 Use of Google Analytics
1. This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files stored on your computer that facilitate the analysis of your usage of the website. The information on your use of this website generated by the cookie is generally transmitted to a Google server in the United States and stored there. If IP anonymization is activated on this website, Google will first shorten your IP address within the member states of the European Union or other signatories of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and then shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, put together reports on website activities, and provide additional services to the website operator in conjunction with website usage and Internet usage.
2. The IP address transmitted by our browser within the context of Google Analytics is not combined with other Google data.
3. You can prevent the storage of cookies by setting your browser software accordingly; we would, however, like to remind you that if you do so, you may not be able to use all of the features of this website to their full extent. You can also stop Google from collecting and processing the data generated by the cookie and related to your usage of the website (incl. your IP address) by downloading and installing the browser plug-in available for download at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
You can prevent the collection of data by Google Analytics by clicking on the link below. An opt-out cookie will then be set that prevents the future collection of your data upon visiting this website: Deactivate Google Analytics
4. This website uses Google Analytics with the “_anonymizelp()” expansion. This means a shortened version of your IP address is processed, so it cannot be traced back to you. This prevents data collected through the IP address from being traced back to you and any personal information collected is thus immediately deleted.
5. We use Google Analytics to analyse the usage of our website and regularly enhance it. The statistics gathered help us enhance our offerings and make them more attractive for you as a user. In exceptional cases where your personal information is transmitted to the United States, Google has agreed to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework. The legal basis for use of Google Analytics is Section 6 paragraph 1 item 1f of the GDPR.
§ 11 Google Web Fonts
This website uses web fonts provided by Google in order to display fonts in a consistent manner. When you access a webpage, your browser loads the necessary web fonts in its browser cache so that it can display text and fonts correctly.
Your browser must establish a connection with the Google servers in order to do this. As a result, Google is able to identify that our website was accessed via your IP address. Google Web Fonts are used in the interests of providing a consistent, appealing presentation of our online content. This constitutes a legitimate interest within the meaning of Article 6(1)(f) EU-GDPR.
If your browser does not support web fonts, your computer will use a standard font.
§ 12 Google reCAPTCHA
We use „Google reCAPTCHA“ (hereinafter referred to as „reCAPTCHA“) on our websites. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to determine whether data entered on our websites (e.g. information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyses the behaviour of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g. IP address, time the website visitor spent on the site or cursor movements initiated by the user). The data tracked during such analyses are forwarded to Google.
reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is underway.
The data is processed on the basis of Art. 6 Sect. 1 lit. f GDPR. It is in the website operators legitimate interest, to protect the operator’s web content against misuse by automated industrial espionage systems and against SPAM.
§ 13 Integration of YouTube videos
We have integrated YouTube videos into our online offerings that are stored on https://www.youtube.com and can be played directly from our website. These are all integrated in “Extended Data Protection Mode”, meaning that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data described in Section 2 be transmitted. We have no influence on this data transmission.
Through your visit to the website, YouTube will be informed that you pulled up the corresponding subpage of our website. The data mentioned above is also transmitted. This will occur regardless of whether YouTube makes a user account available through which you are logged in or if there is no user account at all. If you are logged into Google, your data will be directly assigned to your account. If you don’t want the information assigned directly to your profile with YouTube, you will have to log out before activating the button. YouTube stores your data as a usage profile and uses it for advertising, market research, and/or user-friendly configuration of its website. Such usage serves particularly (also for users who are not logged in) the purpose of providing customised needs-based advertising and in order to inform other users of the social network of your activities on our website. You have the right to deny permission for such a user profile to be formed, but in order to assert this right you must contact YouTube.
Further information on the purpose and scope of data collection and its processing through YouTube can be found in the data protection declaration. There you will also receive further information on your rights and setting options for protecting your privacy: https://www.google.de/intl/en/policies/privacy
. Google also processes your personal data in the United States and has agreed to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework
§ 14 LinkedIn Insight Tag
This website uses LinkedIn Insight Tag, a tracking and analytics tool, provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland.
The LinkedIn Insight Tag enables the collection of data regarding members’ visits to our website, including the URL, referrer, IP address, device and browser characteristics, timestamp, and page views.
This data is encrypted, then anonymized within seven days, and the anonymized data is deleted within 90 days.
LinkedIn does not share the personal data with the website owner, it only provides aggregated reports about the website audience and ad performance. LinkedIn also provides retargeting for website visitors, enabling the website owner to show personalized ads off its website by using this data, but without identifying the member.
The purpose of the data collection is to analyze visits to our website and campaign results to provide you with interesting information. The legal basis for the processing of personal data is Article 6 (1) (f) GDPR.
LinkedIn members can control the use of their personal data for advertising purposes through their account settings.
§ 15 HubSpot CRM
We use Hubspot CRM on this website. The provider is Hubspot Inc. 25 Street, Cambridge, MA 02141 USA 9 / 20 (hereafter Hubspot CRM).
Hubspot CRM enables us, among other things, to manage existing and potential customers and customer contacts, to communicate with you and to plan and execute marketing activities in line with your interests. Hubspot CRM enables us to capture, sort and analyze customer interactions via email, social media, or phone across multiple channels. The personal data collected in this way can be evaluated and used for communication with the potential customer or marketing measures (e.g., newsletter mailings). Hubspot CRM also enables us to collect and analyze the user behavior of our contacts on our website.
The use of Hubspot CRM is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the most efficient customer management and customer communication. If consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent may be revoked at any time.