Data Protection at a Glance
1. General information on data processing
This website collects a series of general data and information each time a website is accessed by a data subject or an automated system. This general data and information is stored in the log files of the web server. The types and versions of browsers used, the operating system used by the accessing system, the website from which an accessing system accesses our website (so-called referrers), the sub-websites that are accessed via an accessing system on our website, the date and time of access to the website, an Internet protocol address (IP address), the Internet service provider of the accessing system and other similar data and information that serve to avert danger in the event of attacks on our information technology systems can be collected.
When using these general data and information, no conclusions are drawn about the data subject. Rather, this information is needed to correctly deliver the content of our website, to optimize the content of the website and the advertising for it, to ensure the long-term functionality of our information technology systems and the technology of our website, as well as to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. Therefore, this anonymously collected data and information is, on the one hand, statistically analyzed and, on the other hand, evaluated with the aim of increasing the data protection and data security of the enterprise so as to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from any personal data provided by a data subject.
1.1 Scope of the processing of personal data
As a matter of principle, we collect and use personal data of our users only to the extent necessary to provide a functional website and our content and services. The collection and use of personal data of our users is regularly only carried out with the consent of the user. An exception applies in those cases where it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by legal regulations.
1.2 Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) DS-GVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures. If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) c DS-GVO serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) lit. f DS-GVO serves as the legal basis for the processing.
1.3 Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Blocking or deletion of data also takes place when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
2. Provision of the website and creation of log files
2.1 Description and scope of data processing
Each time our website is called up, our system automatically collects data and information from the computer system of the calling computer.
THE FOLLOWING DATA IS COLLECTED:
- Information about the browser type and the version used
- The operating system of the user
- The Internet service provider of the user
- The IP address of the user
- Date and time of access
Websites from which the user’s system accesses our website
- Websites that are accessed by the user’s system via our website
- The log files contain IP addresses or other data that allow an assignment to a user. This could be the case, for example, if the link to the website from which the user arrives at the website or the link to the website to which the user goes contains personal data.
- The data is also stored in the log files of our system. Storage of this data together with other personal data of the user does not take place.
2.2 Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Art. 6 (1) lit. f DS-GVO.
2.3 Purpose of the data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes are also our legitimate interest in data processing according to Art. 6 Para. 1 lit. f DSGVO.
2.4 Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
2.5 Possibility of objection and removal
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
The data subject can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.
3.1 Description and scope of data processing
THE FOLLOWING DATA IS STORED AND TRANSMITTED IN THE COOKIES:
- Language settings
- Log-in information
In this way, the following data can be transmitted:
- Search terms entered
- Frequency of page views
- Use of website functions
The user data collected in this way is pseudonymized by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the users.
3.2 Legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) lit. f DS-GVO. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 (1) lit. a DS-GVO if the user has given his consent in this regard.
3.3 Purpose of data processing
WE REQUIRE COOKIES FOR THE FOLLOWING APPLICATIONS:
- Acceptance of language settings
- Remembering search terms
- The user data collected by technically necessary cookies are not used to create user profiles.
The analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer. In these purposes also lies our legitimate interest in the processing of personal data according to Art. 6 para. 1 lit. f DS-GVO.
3.4 Duration of storage, possibility of objection and elimination
4.1 Description and scope of data processing
The newsletter dispatch is based on registration of the user on the website. On our website there is the possibility to subscribe to a free newsletter. In the process, the data from the input mask is transmitted to us when registering for the newsletter.
IN THE MINIMUM CASE THE REGISTRATION CONCERNS THE E-MAIL ADDRESS OF THE USER, HOWEVER, FURTHER VOLUNTARY DATA CAN BE PROVIDED FOR PERSONALIZATION:
- telephone number
THE FOLLOWING DATA ARE ALSO COLLECTED DURING REGISTRATION:
- IP address of the calling computer
- date and time of registration
The newsletter dispatch is based on the sale of goods or services.
If you purchase goods or services on our website and provide your e-mail address, this may subsequently be used by us to send a newsletter. In such a case, only direct advertising for our own similar goods or services will be sent via the newsletter.
No data will be passed on to third parties in connection with the processing of data for the dispatch of newsletters. The data is used exclusively for sending the newsletter.
4.2 Legal basis for data processing
The newsletter dispatch is based on registration of the user on the website. The legal basis for the processing of the data after the user has registered for the newsletter is Art. 6 (1) lit. a DS-GVO if the user has given his consent. The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) UWG in conjunction with. Art. 6 para. 1 lit. f DS-GVO.
4.3 Purpose of the data processing
The collection of the user’s e-mail address serves to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used.
4.4 Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user’s e-mail address is stored for as long as the subscription to the newsletter is active. The other personal data collected during the registration process is usually deleted after a period of seven days.
4.5 Possibility of objection and removal
The subscription to the newsletter can be cancelled by the affected user at any time. For this purpose, a corresponding link can be found in each newsletter. This also enables revocation of consent to the storage of personal data collected during the registration process.
5. Contact form and e-mail contact
5.1 Description and scope of data processing
A contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored.
THESE DATA ARE:
- e-mail address
- telephone number
THE FOLLOWING DATA IS ALSO STORED AT THE TIME THE MESSAGE IS SENT:
- IP address of the user
- date and time of registration
With the submission via an account form, the data is transferred to Mailchip (The Rocket Science Group, LLC) and Hubspot. The data is used for processing the conversation and, depending on the request of the inquirer, for further marketing activities.The shipping service provider is used on the basis of our legitimate interests pursuant to Art. 6 (1) lit. f DSGVO and a contract processing agreement pursuant to Art. 28 (3) p. 1 DSGVO.
5.2 Legal basis for data processing
The legal basis for the processing of data is Art. 6 para. 1 lit. a DS-GVO if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f DS-GVO. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DS-GVO.
5.3 Purpose of the data processing
The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
5.4 Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5.5 Possibility of objection and removal
The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the course of contacting us will be deleted in this case.
6. Rights of the data subject
If personal data of yours is processed, you are a “data subject” within the meaning of the DS-GVO and you are entitled to the following rights vis-à-vis us as the controller. You can exercise your rights by contacting our data protection officer or the service center staff, stating your request.
6.1 Right of access
Every person affected by the processing of personal data has the right to receive information free of charge from the controller at any time about the personal data stored about him or her, as well as a copy of this data. You may request confirmation from the controller as to whether personal data concerning you are being processed by us.
6.2 Right to rectification
Every person affected by the processing of personal data has the right to demand that inaccurate personal data concerning him or her be corrected without delay. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request that incomplete personal data be completed, including by means of a supplementary declaration.
6.3 Right to restriction of processing
Any person affected by the processing of personal data has the right to request the controller to restrict processing if one of the conditions provided for by the legislator in Article 18 (1) of the GDPR is met.
6.4 Right to erasure
Any person affected by the processing of personal data has the right to demand from the controller that the personal data concerning him or her be erased without undue delay, if one of the grounds referred to in Art. 17(1) DS-GVO applies.
6.5 Right to data portability
Every person affected by the processing of personal data has the right to receive the personal data concerning him or her, which has been provided by the data subject to a controller, in a structured, commonly used and machine-readable format. He or she also has the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6(1)(a) DS-GVO or Art. 9(2)(a) DS-GVO or on a contract pursuant to Art. 6(1)(b) DS-GVO and the processing is carried out with the help of automated procedures.
6.6 Right of objection
Any person affected by the processing of personal data has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(e) or (f) DS-GVO. This also applies to profiling based on these provisions.
The company shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defense of legal claims.
If the company processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data processed for such marketing. This also applies to profiling, insofar as it is related to such direct marketing. If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
6.7 Right to revoke the declaration of consent under data protection law
Every person affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time.
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
6.8 Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
7. Data protection for the use of HubSpot
We use HubSpot for our online marketing and sales activities.
THE PURPOSE OF OUR USE OF HUBSPOT IS, AMONG OTHER THINGS:
- Email marketing (newsletters as well as automated mailings, e.g. to provide downloads).
- Contact management (CRM)
- Reporting (traffic sources, hits, etc. …)
- Landing pages and contact forms
Contact: HubSpot, Unter den Linden 26, 10117 Berlin, Phone: +49 30 56796549.
Upon instruction by email to [email protected], your Hubspot entry will be completely deleted.
HubSpot is subject to TRUSTe ‘s Privacy Seal as well as the “U.S. – Swiss Safe Harbor” Framework. Furthermore, the data protection agreement with HubSpot, which can be accessed here (please insert this link at this point: https://legal.hubspot.com/dpa), contains the standard contractual clauses pursuant to Art. 46 para. 2 c DSGVO.
Information from HubSpot regarding EU data protection regulations can be found here.
More information about the cookies used by HubSpot can be found here.
The controller has integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analysis service. Web analysis is the collection, compilation and evaluation of data about the behavior of visitors to websites. A web analysis service collects, among other things, data about which website a data subject came to a website from (so-called referrers), which sub-pages of the website were accessed or how often and for how long a sub-page was viewed. A web analysis is predominantly used for the optimization of a website and for the cost-benefit analysis of internet advertising.
The operating company of the Google Analytics component is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The controller uses the addition “_gat._anonymizeIp” for web analysis via Google Analytics. By means of this additive, the IP address of the Internet connection of the data subject is shortened and anonymized by Google if access to our websites takes place from a member state of the European Union or from another state party to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us showing the activities on our websites, and to provide other services related to the use of our website.
Google Analytics sets a cookie on the information technology system of the data subject. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyze the use of our website. By each call of one of the individual pages of this website, which is operated by the controller and on which a Google Analytics component has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to track the origin of visitors and clicks and subsequently enable commission calculations.
By means of the cookie, personal information, for example the access time, the place from which an access originated and the frequency of visits to our website by the data subject, is stored. Each time the data subject visits our website, this personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may disclose this personal data collected via the technical procedure to third parties.
The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
The controller has integrated Google AdWords on this website. Google AdWords is an Internet advertising service that allows advertisers to place ads in Google’s search engine results as well as in the Google advertising network. Google AdWords allows an advertiser to specify certain keywords in advance, by means of which an ad is displayed in Google’s search engine results exclusively when the user retrieves a keyword-relevant search result using the search engine. In the Google advertising network, the ads are distributed on topic-relevant websites by means of an automatic algorithm and in compliance with the previously defined keywords.
The operating company of the Google AdWords services is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and to display third-party advertising on our website.
If a data subject accesses our website via a Google ad, a so-called conversion cookie is stored by Google on the data subject’s information technology system. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. The conversion cookie is used to track whether certain subpages, for example the shopping cart from an online store system, have been called up on our website, provided that the cookie has not yet expired. Through the conversion cookie, both we and Google can track whether a data subject who arrived at our website via an AdWords ad generated a sale, i.e. completed or cancelled a purchase of goods.
The data and information collected through the use of the conversion cookie are used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other advertisers of Google AdWords receive information from Google by means of which the data subject could be identified.
By means of the conversion cookie, personal information, such as the web pages visited by the data subject, is stored. Each time the data subject visits our websites, personal data, including the IP address of the internet connection used by the data subject, is therefore transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may disclose this personal data collected via the technical procedure to third parties.
The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the data subject. In addition, a cookie already set by Google AdWords can be deleted at any time via the internet browser or other software programs.
Furthermore, the data subject has the option to object to interest-based advertising by Google. To do this, the data subject must call up the link www.google.de/settings/ads from any of the internet browsers he or she uses and make the desired settings there.
Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/.