Information on the EU General Data Protection Regulation

Data protection information acc. EU General Data Protection Regulation – Status: October 2019

General

We take the protection of your personal data very seriously. Your privacy is an important concern for us.

The following provisions serve to inform you about the processing of personal data in accordance with the requirements of the General Data Protection Regulation (GDPR).
In particular, taking into account the information obligations under Articles 12 to 14 of the GDPR, as well as to inform about the data subject rights existing under the GDPR in accordance with Articles 15 to 22 and Article 34 of the GDPR.

Notes on the responsible body

Responsible for the processing of your personal data is the

alinotec GmbH & Co KG

Hessenring 22

64572 Büttelborn

Tel. +49 6152 80 79 8 0
Fax +49 6152 80 79 8 29

E-mail:  datenschutz@alinotec.de


Information about us as the responsible body as well as our contact details can be found in the
Imprint
.

We process your personal data in accordance with the applicable legal data protection requirements for the purposes listed below for each group of data subjects:

Use of service providers

Some of the aforementioned processes or services are performed by carefully selected and contracted service providers. We transmit or receive personal data from these service providers solely on the basis of a processing contract. If the registered office of a service provider is outside the European Union or the European Economic Area, a third country transfer takes place. Data protection agreements that meet the legal requirements are contractually stipulated with these service providers to establish an appropriate level of data protection, and corresponding guarantees are agreed.

Notice of your rights

You have the right,

  • request confirmation from us as to whether personal data relating to you is being processed by us;if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 DSGVO.
  • to demand the surrender of the data concerning you in the restrictions of Art. 20 DSGVO in a common electronic, machine-readable data format. This also includes handing over (as far as possible) to another responsible person named directly by you. 
  • demand that we correct your data if it is incorrect, inaccurate and/or incomplete. Correction also includes completion by declarations or notification.
  • to demand from us that personal data concerning you be deleted without delay,
    if one of the reasons listed in detail in Art. 17 DSGVO applies.
    Unfortunately, we are not allowed to delete data that is subject to a legal retention period.
    If you would like us to stop contacting you by newsletter or other means, we will store your contact data in this regard on a blacklist.
  • revoke any consent you have given with effect for the future without any disadvantage to you.
  • to demand from us the restriction of processing if one of the conditions listed in Art. 18 DSGVO is met.
  • object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
    We will then no longer process the personal data unless we can prove compelling reasons worthy of protection that outweigh your interests, rights and freedoms,
    or the processing serves the assertion, exercise or defense of legal claims (Art. 21 DSGVO).
  • without prejudice to any other administrative or judicial remedy, and if you consider that the processing of personal data relating to you is in breach of the GDPR, to lodge a complaint with
    • our data protection officer:
      datenschutz@alinotec.de
      or by mail (see imprint)
    • a supervisory authority in the Member State of their residence, workplace or the place of the alleged infringement.

Deletion of your data

Unless otherwise regulated in the more detailed data protection declarations, we will delete your personal data when the contractual relationship with you has ended, you have exercised your right to deletion, all mutual claims have been fulfilled and there are no other statutory retention obligations or statutory justification bases for storage. Retention periods under commercial law for financially relevant data are generally up to 10 years. Remotely, we may retain data for as long as necessary to protect us from claims that may be brought against us. These periods can be up to 30 years.

Definitions

For the purposes of this general information for employees, the term:

  1. Personal data – any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Examples are contact data, communication data, billing data.
  2. Responsible – the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law.

  3. Processor –
    a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.

  4. Recipient
      –  a natural or legal person, public authority, agency or other body to whom personal data is disclosed, whether or not a third party.
  5. Employees – Employees, including temporary workers in relation to the hirer, persons employed for their vocational training, participants in services for participation in working life and in clarifications of occupational aptitude or work testing (rehabilitants), persons employed in recognized workshops for disabled persons, volunteers performing a service in accordance with the Youth Volunteer Service Act or the Federal Volunteer Service Act, persons who are to be regarded as persons similar to employees due to their economic non-independence. These also include employees working from home and those treated as such, federal civil servants, federal judges, soldiers and persons performing civilian service. As well as applicants for employment and persons whose employment has ended.

  6. Third Party –
    a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons who, under the direct responsibility of the controller or the processor, are authorized to process the personal data.
  7. Profiling – any automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person. In particular, to analyze or predict aspects related to job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location of this natural person.

  8. Restriction of processing –
    the marking of stored personal data with the aim of restricting your future processing.

Changes to the privacy policy

We reserve the right to change our privacy policy if necessary and to publish it here. Please check this page regularly. Subject to applicable law, the updated statement will become effective upon publication. If we have already collected data about you that is affected by the change and/or is subject to a legal duty to inform, we will additionally inform you about material changes to our privacy policy.

Privacy policy for website users

Scope

This privacy statement applies to all pages of our online network that link to this statement.
The overarching disclosures can be found on our main privacy page.

Purpose of data collection

The purpose of the data collection is the optimization of the website, the error analysis, the individual tailoring to your needs, the offer to contact you and, if necessary, the sale of goods and services.

General information on data processing

As a matter of principle, we collect and use personal data of our users only to the extent that this is necessary for the provision of a functional website as well as our contents and services or to the extent that you as a user provide us with such data by voluntary input. The collection and use of personal data by you as a user takes place regularly only after consent or for the justification and execution of a legal transaction. An exception applies in those cases where obtaining prior consent is not possible or disproportionate for factual reasons and the processing of the data is permitted by another legal provision.

Legal basis for the processing of your data:

  • Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as the legal basis.
  • When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b DSGVO as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
  • If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 para. 1 lit. f DSGVO as the legal basis for the processing.

Legitimate interests can be in particular:

  • answering inquiries;
  • the implementation of direct marketing measures;
  • the provision of services and/or information intended for you;
  • the processing and transfer of personal data for internal or administrative purposes;
  • the operation and management of our website;
  • the technical support of the users;
  • the prevention and detection of fraud and crime;
  • the protection against payment defaults when obtaining credit information for requests for supplies and services; and/or
  • ensuring network and data security, to the extent that these interests are in each case consistent with applicable law and with the rights and freedom of the user;
  • Achieving efficiency gains by bundling services in individual Group companies (in particular marketing, IT, procurement)

Recipient categories

  • Service providers for website optimization, online marketing service providers and tools, service companies for information and communication technology, companies for software and equipment maintenance, some described in more detail below
  • Social networks and communities
  • Internal recipients according to the “need to know” principle

Usage data/server log files

Each time you visit our website, our systems automatically collect data and information from the computer system of the calling computer.

The following types of data are collected: Browser type, version used, user’s operating system, host name, Internet service provider, user’s IP address, date and time of access, websites from which the user’s system has accessed our website or to which the user has accessed from our website.

Legal basis for the temporary storage of data and of the log files is Art. 6 para. 1 lit. f DSGVO with the above-mentioned legitimate interests.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. Our legitimate interest in data processing also lies in these purposes. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. Furthermore, we reserve the right to check the files if there is a justified suspicion of illegal use or a concrete attack on the pages due to concrete indications. In that case, our legitimate interest is processing for the purpose of investigation and prosecution of such attacks and unlawful uses.

Cookies use

We use cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is revisited. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. The following data is stored and transmitted in the cookies: Language settings, items in a shopping cart, log-in information, etc….

The purpose of using technically necessary or functional cookies is to enable the website to function at all (necessary) or to simplify the use of websites for users (functional). Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. We need cookies for the provision of shopping cart, adoption of language settings, remembering search terms, etc.. The processing is therefore based on Art. 6 para. 1 lit. b or f DSGVO.

We also use cookies on some of our websites, which enable an analysis of the user’s surfing behavior. In this way, entered search terms, frequency of page views, use of website functions, etc. are transmitted. The user data collected in this way is pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data is not stored together with other personal data of the users.

Legal basis for data processing using cookies:  The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR. The legal basis for the processing of personal data using cookies for analysis purposes, if the user has given his consent in this regard, is Art. 6 para. 1 lit. a DSGVO, otherwise Art. 6 para. 1 lit. f GDPR in conjunction with. EC 47.

General statements about WebBeacons / tracking pixels

WebBeacons are invisible graphics with the size of a pixel. These are used by partner companies, in particular for the purpose of tracking a user across various web pages for profiling for use in advertising tailored to the user (targeting). A pixel embedded in the web page is loaded from the partner’s server when the web page is called up. The partner thus receives your IP address, as well as information about your browser and its version, as well as browser plug-ins used (browser fingerprint), about your operating system, and about your network operator.

Contents of external providers

On our website, we use active JavaScript content and fonts, which may also come from external providers such as Google. By calling up our website, these providers may receive information about your visit to our website, for example by transmitting your IP address. You can prevent this transmission by installing a JavaScript blocker such as the browser plugin ‘NoScript’ or disabling JavaScript in your browser. However, this can lead to functional limitations.

Some of our websites integrate third-party content within the offer, such as videos from YouTube, map material from Google Maps, images, texts and multi-media files, RSS feeds or other services from other websites. This always requires a transmission of your IP address to the providers of this content. We cannot make any statement about the use of your data by these providers and also have no influence on the further processing. In particular, not about whether the data is used for other purposes, such as profiling. Please refer to the corresponding data protection notices of the respective third-party providers.
You can protect yourself against further tracking by tracking pixels of these providers by disabling the acceptance of third-party cookies in your browser settings.

Google Analytics

Some of our websites use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics may be merged with other data from Google. The legal basis for the processing of the users’ personal data is Art.6 Para.1 lit. f GDPR. We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for cross-device analysis of visitor flows, which is performed via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data”, “Personal data”.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in abbreviated form, thus excluding the possibility of personal references. Insofar as the data collected about you has a personal reference, this is therefore immediately excluded and the personal data is thus immediately deleted. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield,
https://www.privacyshield.gov/EU-US-Framework
.

Information of the third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001, or Google Analytics of Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
User Terms:
http://www.google.com/analytics/terms/de.html
, Privacy Policy Overview:
http://www.google.com/intl/de/analytics/learn/privacy.html
, and privacy policy:
http://www.google.de/intl/de/policies/privacy
.

You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6 (1) f DSGVO.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de 

To prevent the collection by Google Analytics across devices, you can set an opt-out cookie. Opt-out cookies prevent future collection of your data when visiting this website. You must perform the opt-out on all systems and devices used for this to be fully effective. If you click here, the opt-out cookie will be set: Disable Google Analytics
You can find more information on terms of use and data protection at 
https://www.google.com/analytics/terms/de.html
  or at 
https://www.google.de/intl/de/policies/
 

Google Tag Manager

Google Tag Manager is a solution that allows us to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. Further information on data protection when using Google Tag Manager can be found at https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/
retrieve.

Google Ads Conversion

We use the Google Ad service to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Ads). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the interest of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.

These advertising media are delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as display of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Ads will store a cookie in your PC. These cookies usually expire after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

These cookies allow Google to recognize your Internet browser. Provided that a user visits certain pages of an Ads customer’s website and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked through Ads clients’ websites. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. These evaluations enable us to identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Ads Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address.

You can prevent participation in this tracking process in several ways:

  1. a) by an appropriate setting of your browser software, in particular the suppression of third-party cookies leads to the fact that you do not receive ads from third-party providers;
  2. b) by disabling conversion tracking cookies by setting your browser to refuse cookies from the domain “
    googleadservices.com
    ” are blocked,
    https://www.google.de/settings/ads
    , with this setting being deleted when you delete your cookies;
  3. c) by deactivating the interest-based ads of the providers that are part of the self-regulatory campaign “About Ads” via the link
    http://www.aboutads.info/choices
    whereby this setting will be deleted when you delete your cookies;
  4. d) by permanent deactivation in your browsers Firefox, Internetexplorer or Google Chrome under the link
    http://www.google.com/settings/ads/plugin
    . We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.

The legal basis for the processing of your data is Art.6 Para.1 S.1 lit. f GDPR. You can find more information about data protection at Google here:
http://www.google.com/intl/de/policies/privacy
and
https://services.google.com/sitestats/de.html
. Alternatively, you can visit the Network Advertising Initiative (NAI) website at. http://www.networkadvertising.org visit Google has submitted to the EU-US Privacy Shield,
https://www.privacyshield.gov/EU-US-Framework
.

Google DoubleClick

We use the online marketing tool DoubleClick by Google. DoubleClick uses cookies to serve ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later uses the same browser to visit the advertiser’s website and make a purchase. According to Google, DoubleClick cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address.

You can prevent participation in this tracking process in several ways:

  1. a) by an appropriate setting of your browser software, in particular the suppression of third-party cookies leads to the fact that you do not receive ads from third-party providers;
  2. b) by disabling conversion tracking cookies by setting your browser to refuse cookies from the domain “
    googleadservices.com
    ” are blocked,
    https://www.google.de/settings/ads
    , with this setting being deleted when you delete your cookies;
  3. c) by deactivating the interest-based ads of the providers that are part of the self-regulatory campaign “About Ads” via the link
    http://www.aboutads.info/choices
    whereby this setting will be deleted when you delete your cookies;
  4. d) by permanent deactivation in your browsers Firefox, Internetexplorer or Google Chrome under the link
    http://www.google.com/settings/ads/plugin
    . We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.

The legal basis for the processing of your data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the needs-based operation of our website and its content.

For more information about DoubleClick by Google, please visit
https://www.google.de/doubleclick
and
http://support.google.com/adsense/answer/2839090
as well as on data protection at Google in general:
https://www.google.de/intl/de/policies/privacy
. Alternatively, you can visit the Network Advertising Initiative (NAI) website at. http://www.networkadvertising.org visit Google has submitted to the EU-US Privacy Shield,
https://www.privacyshield.gov/EU-US-Framework
.

Use of Hotjar

We use Hotjar to better understand the needs of our users and to optimize the offering and experience on this website. With the help of Hotjar technology we get a

better understanding of our users’ experiences (e.g., how much time users spend on which pages, which links they click, what they like and don’t like, etc.), and this helps us tailor our offering to our users’ feedback. Hotjar works

with cookies and other technologies to collect data about the behavior of our users and about their end devices, in particular IP address of the device (collected and stored only in anonymized form during your website use), screen size,

Device type (unique device identifiers), information about the browser used, location (country only), language preferred to view our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar

is contractually prohibited from selling the data collected on our behalf.

When visiting a Hotjar-based website, you can prevent Hotjar from collecting your information at any time by going to our opt-out page at https://www.hotjar.com/legal/compliance/opt-out/.

and click Disable Hotjar.

For more information, see the ‘about Hotjar’ section at https://help.hotjar.com/hc/en-us/categories/115001323967-About-Hotjar.

Google ReMarketing

In addition to Adwords Conversion, we use the Google Remarketing application. This is a procedure with which we would like to address you again. Through this application, our advertisements can be displayed to you during your further internet use after visiting our website. This is done by means of cookies stored in your browser, via which your usage behavior is recorded and evaluated by Google when you visit various websites. This allows Google to determine your previous visit to our website. According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data that may be stored by Google. In particular, according to Google, pseudonymization is used in remarketing.

Smartlook

We use the website analysis tool Smartlook from Smartsupp.com s.r.o, Milady Horakove 13, 602 00 Brno, Czech Republic, to perform a so-called session replay. This allows us to analyze the mouse movements and clicks on the website and to see how far down individual pages are scrolled. The recording is anonymous and cannot be subsequently assigned to any users. In addition, end-device specific parameters such as the screen size, language setting of the browser and the device type are also recorded. The use takes place within the scope of a legitimate interest according to Art. 6 para. 1 lit. f) DSGVO, whereby our legitimate interests lie in the analysis of possible sources of errors and the optimized design of the web offer.

The use of Smartlook can be prevented with a so-called “Do-not-Track header”. You can find more information here: https://www.akademie.de/wissen/do-not-track-datenschutz. Going further, an optout can be performed at the link below: Smartlook Opt-Out. Further provisions on data protection can be found in Smartlook’s privacy policy at take out. https://www.smartlook.com/blog/smartlook-protect-user-privacy/

YouTube

On some of our web pages YouTube videos are embedded, which are available on
https://www.youtube.com/
and can be played directly from our website.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, personal data (browser type, browser version, IP address, operating system) is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.

For more information on the purpose and scope of data collection and processing by YouTube, please see the privacy policy. There you will also receive further information about your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield,
https://www.privacyshield.gov/EU-US-Framework
.

Contact form and e-mail contact

A contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. These data are: Name, address, mail address, phone number, etc. At the time of sending the message, the following data is also stored: The IP address, date and time. For the processing of the data, your consent is obtained during the submission process and reference is made to this privacy policy.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data will be used exclusively for the processing of the conversation.

The legal basis for the processing is:

  • For the processing of data transmitted in the course of sending an e-mail, Art. 6 para. 1 lit. f DSGVO with the above-mentioned legitimate interests.
  • If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the submission process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

Newsletter

On our website you have the possibility to subscribe to a free newsletter with promotional content. Our newsletters contain information about our service offerings, promotions, events, contests, job opportunities, articles/articles. Newsletters, on the other hand, do not include messages without promotional information that are sent as part of our contractual or other business relationship. This includes, for example, the sending of service emails with technical notes and queries about orders, events, competition notifications or comparable messages. When registering for the newsletter, the data from the input mask is transmitted to us. In addition, the IP address of the calling computer and the time of the call are collected. For the processing of data, your consent is obtained during the registration process and reference is made to this privacy policy. If you purchase goods on our website via our online store and enter your e-mail address, we reserve the right to send you newsletters with direct advertising for our own similar goods. No data is passed on to third parties in connection with the processing of data for the dispatch of newsletters. The data will be used exclusively for sending the newsletter. The legal basis for the processing of data after registration for the newsletter by the user is, if the user has given his consent, Art. 6 para. 1 lit. a DSGVO and for the dispatch of the newsletter as a result of the sale of goods pursuant to. § 7 III UWG or Art. 6 para. 1 lit. f. (dispatch based on our legitimate business interest).

The collection of the user’s e-mail address is used to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used. The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter. This also accepts a revocation of consent for the newsletter dispatch.

A statistical evaluation of the reading behavior takes place only to the extent that it can be determined whether the recipients have opened the newsletter and clicked on the links. This is a function, but we only use it to check user activity and make optimizations accordingly. For this purpose, the newsletter contains a so-called “web beacon”, a pixel-sized file that is retrieved from our server when the newsletter is opened.
This web beacon is not personalized, so no personal data is collected in the process.

Data collection during registration and registered use

Some of our websites require or offer registration. The data collected in this process is used for the purposes of using the respective websites and services, unless otherwise described and explicitly consented to during registration. The collected data results from the input mask within the registration. All other data that you can enter later to complete your profile are optional and voluntary. After registration, we may inform you about relevant circumstances related to our offer, for which you have registered, by means of the deposited e-mail address. 

Data in user-generated content

If you post comments or contributions, upload files to our servers, publish images or use other services, your IP address and – if you are logged in – your user data will be stored for our security. Due to the large amount of illegal content that is posted on the Internet every day, we reserve the right to use this information to defend ourselves in legal disputes or for criminal prosecution, i.e. also to hand it over to claimants, law enforcement agencies as well as courts.

Comment subscriptions

You can subscribe to follow-up comments on our websites. Unless you are logged in, you will receive a confirmation email as part of a so-called double opt-in process to verify that you are the legal owner of the specified mailbox. You can unsubscribe from the notification at any time. Instructions on how to do this are received in each of the emails. Registered users do not have to go through the double opt-in process, as this takes place during registration.

Credit reports

Furthermore, we reserve the right, in the case of orders or commissions, to pass on personal data to third parties for the purpose of providing creditworthiness information, insofar as this is necessary to protect our legitimate interests. Only the data required for the calculation of the creditworthiness by means of a mathematical-statistical procedure by the credit agency is transmitted. We require creditworthiness information in order to be able to decide on the establishment and implementation of a contractual relationship while safeguarding our legitimate interests.

Data transmission via the Internet

Data transmission via the Internet is fundamentally subject to certain risks. A special encryption of the data is not made, in particular messages from the contact form of our website and messages in the service chat are transmitted unencrypted.
Please keep this in mind when submitting data. If you wish to communicate with us via encrypted e-mail, this is possible via SMIME encryption. Please advise us of the request for encryption, as we regularly send unencrypted, due to the current low market penetration of email encryption methods.

Data sharing

If you provide us with personal data, this will only be passed on to third parties if this is necessary to process the contractual relationship or if another legal reason legitimizes this transfer. However, we provide certain services with the assistance of service providers. We have carefully selected these service providers and taken appropriate measures to protect your personal data.

Storage periods

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage ceases to apply. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.

Privacy policy for social media presences

Facebook Fanpage

We operate one or more corporate websites (“fan pages”) on the professional social media network Facebook, in particular for self-presentation, branding but also for the purpose of customer communication and recruiting.

According to the ruling of the European Court of Justice (ECJ) of 05.06.2018, Az. C-210/16, the operator of social media pages is at least jointly responsible for the data processing at least on Facebook fan pages within the meaning of Art. 26 GDPR.
Although Facebook offers a free service at 
https://www.facebook.com/legal/terms/page_controller_addendum
  but we do not know whether this declaration now meets the requirements of the GDPR. 

We only process your data – apart from any further procedures below – if you contact us via the platform. In this case, Facebook collects your data and makes it available to us. 
In the process, storage and further processing by us may also take place. The processing of your personal data in the event of an inquiry or application is governed by our other related privacy statements. 

The legal basis for the processing of personal data is, depending on the case constellation, the processing for the initiation and execution of a contract with you according to Art. 6 para. 1 lit. b DSGVO or on basis our legitimate interest in communicating with users and our external presentation for the purpose of advertising pursuant to Art. 6 para. 1 lit. f GDPR.
If you have given consent to the provider of the social network to the aforementioned data processing with effect for us, the legal basis is Art. 6 para. 1 lit. a GDPR.

Furthermore, we may collect data from visitors to our company site, provided that the display as a visitor can be defined as processing. However, we do not store this data – subject to further procedures listed below – on our own systems, nor are they systematically processed beyond occasional notice.
Our information regarding the controller, the data protection officer and the declaration of your rights as a data subject apply to these processing steps.

We point out that for any processing beyond this on our fan pages  the privacy policy Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA) or the Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) is applicable.
Facebook is certified under the Privacy Shield: 
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
.
Further, detailed information on Facebook’s data processing and corresponding objection options can be found at 
https://www.facebook.com/about/privacy/
 and at  
https://www.facebook.com/legal/terms/dataprocessing
. Facebook is the provider of this service and is alone competent to provide complete information on data processing on Facebook.
We would like to point out that the assertion of data subject rights and requests for information are best directed to Facebook. Only Facebook has access to your data and can take immediate action to delete, restrict, etc., the data or to provide information. Of course, we will support you in asserting your rights if necessary.
You can find options for opting out at: 
https://www.facebook.com/settings?tab=ads
 and 
http://www.youronlinechoices.com

YouTube Channel Privacy Policy 

We operate one or more corporate websites on the social media network YouTube of Google Inc., in particular for self-presentation, but also for recruiting.

According to the ruling of the European Court of Justice (ECJ) of 05.06.2018, Az. C-210/16, the operator of social media pages is at least jointly responsible for the data processing at least on Facebook fan pages within the meaning of Art. 26 GDPR.
We suspect an analogous applicability of this decision to other social networks, including YouTube. So far, we are not aware that YouTube offers an agreement that meets the requirements of   of Art. 26. 

We would like to point out that you use the YouTube channel offered here and its functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. sharing, liking, disliking, commenting).

We only process your data if you contact us via the YouTube platform. In this case, YouTube collects your data and makes it available to us. 
In the process, storage and further processing by us may also take place. The processing of your personal data is then governed by one of our other privacy statements, depending on which group of data subjects you belong to. 
Furthermore, we may collect data from visitors to our company site, provided that the display as a visitor can be defined as processing. However, we do not store this data on our own systems, nor are they systematically processed beyond an occasional notice.

The legal basis for the processing of personal data is, depending on the case constellation, the processing for the initiation and execution of a contract with you according to Art. 6 para. 1 lit. b DSGVO (e.g. for questions about products or services).
or on basis our legitimate interest in communicating with users and our external presentation for the purpose of advertising pursuant to Art. 6 para. 1 p. 1 lit. f GDPR.
If you have given consent to the provider of the social network to the aforementioned data processing with effect for us, the legal basis is Art. 6 para. 1 lit. a GDPR.

Our information regarding the controller, the data protection officer and the declaration of your rights as a data subject apply to these processing steps.

We point out that for any further processing on our YouTube channel, the privacy policy of Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 or alternatively the Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. is applicable.
We have no sustained knowledge of and no influence on the type and scope of the data processed by Google, the way in which it is processed and used, or the transfer of this data to third parties. We also have no effective control options available to us in this regard.
You can find more information about the processing of personal data by YouTube here: 

Google has committed to the principles of the EU-US Privacy Shield 
https://www.privacyshield.gov/EU-US-Framework
.

Privacy policy for customers (incl. interested parties) and other data subjects

Information on data processing

As a customer and as an interested party or other data subject, we process your personal data primarily for the purpose of establishing and fulfilling a contractual relationship concluded with you or on the basis of a legitimate interest. Your data will be collected, stored and, if necessary, passed on by us to the extent required to provide the contractually agreed service, to provide information, to carry out direct marketing activities or other activities of our business operations. Failure to provide may result in the contract not being able to be concluded. Beyond that, we only process your data if you have consented to the processing or another legal permission exists.

Data processing purposes

We process your personal data to achieve the following purposes in connection with the initiation and implementation of a contractual relationship or other activities in the interest of the company:

  • contract processing (including shipping, after-sales, complaint management)
  • communicating with business partners about products, services and projects, as well as responding to inquiries, customer service
  • the existing customer canvassing, use as a selection criterion for direct marketing, in order to be able to offer you a service adapted to you
  • the credit check
  • the management of our customer and supplier relationships, dealer support
  • the quality management
  • the improvement and development of intelligent and innovative services
  • the customer analysis for market and opinion research
  • the handling of our logistics/materials management
  • reporting on our company
  • compliance with legal or contractual requirements
  • the settlement of disputes, the enforcement of contracts and the assertion, defense and exercise of legal claims, the detection and prosecution of fraudulent and other unlawful acts

Beyond that, we only process your data with your express declaration of consent.

Types of data that we process

The following are processed personal data:

  • Contact information; Name, address, phone number;
  • Identification/payment data; Account number, VAT no.
  • Order data: quantity, turnover, intervals
  • Geodata: Addresses, delivery conditions
  • Image data: Photos and video recordings within the scope of corporate events and trade fair appearances.
  • other data: Other required information related to the business relationship or provided voluntarily and from publicly available sources.

Recipient categories

Personal data will be transferred to group companies, supervisory authorities, legal service providers/auditors within the scope of the given necessities. If we are subject to a legal obligation to do so, we will release your data to the competent authority upon request.

In some cases, we use external service providers based in the European Economic Area to process your data.

These service providers have been carefully selected by us, commissioned in writing and are bound by our instructions. Our service providers are regularly inspected by us. The service providers will not pass this data on to third parties, but will delete it after fulfillment of the contract and completion of legal storage periods, unless you have consented to storage beyond this. 

These are, for example:

  • Bank, payment service provider
  • Logistics company
  • Skilled trades
  • IT service provider
  • Marketing service provider
  • etc.

In the case of orders on account, we reserve the right to carry out an assessment of the credit risk on the basis of mathematical-statistical procedures (scoring). For this purpose, your data, which is necessary for the credit assessment, is transferred to a credit agency (e.g. Schufa, Creditreform, Bürgel, Atradius, Coface). If the credit check is positive, an order on account is possible. If the credit check is negative, we cannot offer you payment on account. You can object to the transmission of this data to the credit agency at any time, but then it will no longer be possible to order on account.

Legal bases of the processing

Legal bases for the processing of your data are in particular:

  1. Art. 6 par. 1 lit. a) on the basis of consent from you, whereby in principle none is required for the conclusion of a contract or the continuation of an existing contract,
  2. Art. 6 par. 1 lit. b) for the establishment, performance and termination of a contractual relationship,
  3. Art. 6 par. 1 lit. c) to fulfill a legal obligation,
  4. Art. 6 par. 1 lit. f) for the protection of a legitimate interest

Legitimate interests

Our legitimate interests in this regard lie in the achievement of the above-mentioned purposes and, in addition, in e.g.:

  • Exercise of our business interest, including direct marketing and credit assessment,
  • the enhancement of efficiency and effectiveness potentials, also in cooperation with partners and, where applicable, affiliated companies,
  • ensuring compliance with safety regulations, requirements, industry standards and contractual obligations,
  • the assertion, exercise or defense of legal claims,
  • the avoidance of damage and/or liability of the company through appropriate measures
  • the implementation of information and communication measures, including those of an advertising nature.
  • the reporting of corporate information.

Data collected from third parties

Where applicable, data is made available to us by third parties, e.g. in the context of recommendations. In this case, it is usually contact data in connection with data on specific product or service needs.

If necessary, we collect data from credit agencies regarding creditworthiness and/or negative features.

Storage duration

After the respective purpose has been achieved, your data will be deleted in compliance with the statutory retention periods.

Privacy policy for applicants

If you apply for a position in our company, we process and store your personal data.
We take your privacy very seriously and would therefore like to inform you at this point about how we handle your applicant data.

Purpose of data collection

Before joining our company or during the application process, we process your personal data exclusively for the purpose of establishing a contractual relationship to the extent required.

Types of data that we process

The following are regularly processed types of personal data:

  • Applicant data; Name Date of birth, curriculum vitae, citizenship/work permit, etc. for selection, recruitment, entry and exit management,
  • private contact details; address, telephone number, e-mail (for the purpose of contact),
  • Data within the scope of personnel screening (e.g. police clearance certificate, background check (ZUP));
  • If applicable, data that are subject to professional secrecy; e.g. data on health suitability and any restrictions
  • other data in the personnel administration: Severe disability (if relevant), driver’s license ownership

We do not need from you no information that is not usable under the General Equal Treatment Act (AGG) (race, ethnic origin, gender, pregnancy, details of physical or mental illness, membership of a trade union, religion or belief, disability, age, sexual identity or sexual life), unless relevant to the advertised position.

We ask that you do not provide such data to us. The same applies to content that is likely to infringe the rights of third parties (e.g. copyrights, ancillary copyrights or other intellectual property rights, personality rights, press law or general rights of third parties).

Legal bases of the processing

  • for the establishment, implementation and termination of a contractual relationship pursuant to Art. 6 para. 1 lit. b DSGVO in conjunction with. § 26 BDSG (version as of 25.5.2018),
  • to fulfill a legal obligation according to Art. 6 para. 1 lit. c GDPR,
  • in the case of processing for the protection of a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR,
  • as well as on the basis of consent from you by voluntarily providing data that is not mandatory for the purpose, such as hobbies in your resume.
    However, this is not generally required for the conclusion of a contract or the continuation of an existing contract. The legal basis is Art. 6 para. 1 lit a DSGVO.

Our legitimate interests in this respect lie, for example, in

  • the optimization of the application processes,
  • Achieving efficiency gains by bundling services in individual Group companies (in particular personnel, IT),
  • ensuring compliance with safety regulations, requirements, industry standards and contractual obligations,
  • the assertion, exercise or defense of legal claims,
  • the prevention of damage and/or liability to the company by taking appropriate measures.

Recipient categories

  • Internal recipients according to the “need to know” principle,
  • Companies affiliated under company law (group companies) as jointly responsible parties:
    The main contents of the regulation of the tasks related to the rights of data subjects can be obtained at the indicated contact address,
    according to Art. 26 par. 3 GDPR, however, these rights can be claimed by data subjects from all companies involved.

Deletion periods

After the respective purpose has been achieved, your data will be deleted. However, data will be retained for as long as necessary to defend legal claims. The storage period is usually 6 months. If your profile was transmitted to us by a personnel service provider and there are commission claims of this service provider, the storage period may last until their fulfillment or expiry. If processing relevant to accounting has been carried out, such as the reimbursement of travel expenses, the data required for this will be deleted in compliance with the statutory retention periods, usually 6 or 10 years. If the application is successful and we conclude a contract with you, we transfer the data collected during the application process to our personnel file.