§ 1 Information on the collection of personal data
(1) In the following we inform you about the collection of personal data when using our website. Personal data is any data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.
(2) The party responsible pursuant to Art.4 (7) of the Basic EU Data Protection Regulation (DS-GVO) is
Denkendorfer Str. 11
Authorized to represent: Tobias Gulde, Mark Müller, Frank Sterr, Jan Vermaaten
Fax: 0711- 722465-29
(see our imprint).
(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your questions. We will delete the data that is produced in this context once it is no longer required to be stored, or restrict all processing if there are legal storage obligations.
(4) If we wish to revert to contracted service providers for individual functions of our content or to use your data for advertising purposes, we will inform you below in detail about the respective processes. We will thereby also specify the criteria for the storage period.
§ 2 Your rights
(1) You have the following rights against us with regard to your own personal data:
-Right of access,
-Right to rectification or deletion,
-Right to restrict processing,
-Right to object to the processing,
-Right to data portability.
(2) You also have the right to file a complaint with a data protection supervisory authority about our processing of your personal data.
§ 3 Collection of personal data when you visit our website
(1) If you only use the website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security (legal basis is Art. 6(1), line 1 lit. f DS-GVO):
-date and time of the request
-time zone difference to Greenwich Mean Time (GMT)
-content of the request (concrete page)
-access status/HTTP status code
-amount of data transferred in each case
-website from which the request originates
-operating system and its interface
-language and version of the browser software.
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the location that sets the cookie (here by us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective overall.
a) This website uses the following types of cookies, whose scope and function are explained below:
-transient Cookies (see b)
-persistent cookies (see c).
b) Transient cookies are automatically deleted when you close your browser. In particular, these include the session cookies. They store a so-called session ID, with which various requests from your browser can be assigned to the shared session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close your browser.
c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
d) You can configure your browser settings according to your wishes and, for instance, refuse the acceptance of third-party cookies or all cookies. We would like to point out that you may then not be able to use all the functions of this website.
e) The Flash cookies used are not recorded by your browser, but by your Flash plug-in. Furthermore, we use HTML5 storage objects, which are stored on your end device. These objects store the required data irrespective of the browser you are using and do not have an automatic expiration date. If you do not wish the Flash cookies to be processed, you need to install an appropriate add-on, e.g. the Adobe Flash killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using the private mode in your browser. We also recommend that you regularly delete your cookies and browser history manually.
§ 4 Further functions and offers on our website
(1) In addition to the purely informational use of our website, we offer various services that you can use in case of interest. For this purpose, you must generally provide further personal data which we use to provide the respective service and to which the aforementioned data processing principles apply.
(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions, and are checked regularly.
(3) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, contracts or similar services in conjunction with partners. You will receive further relevant information when you enter your personal data or in the description of the offer below.
(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.
§ 5 Objection against or revocation of consent to the processing of your data
(1) If you have given your consent to the processing of your data, you may revoke this at any time. Such a revocation influences the permissibility of the processing of your personal data after you have given it to us.
(2) Insofar as we base the processing of your personal data on a balancing of interests, you may object to the processing. This is the case if the processing is, in particular, not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. In case you exercise such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of a justified objection, we will examine the situation and either discontinue or adapt the data processing or point out our legitimate reasons worthy of protection on the basis of which we will continue the processing.
(3) Naturally, you may object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your advertising objection under the following contact data:
Denkendorfer Str. 11
Authorized to represent: Tobias Gulde, Mark Müller, Frank Sterr, Jan Vermaaten
Fax: 0711- 722465-29
§ 6 Use of Google Analytics
(1) This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, which are text files placed on your computer, to enable the website to analyze how users use the site. As a rule, the information generated by the cookie about your use of the website will be transmitted to and a Google server in the United States and stored there. If IP anonymisation is activated on this website, however, within member states of the European Union or in other signatory states to the Agreement on the European Economic Area, your IP address will be shortened beforehand by Google. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA where it will be shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services to the website operator, relating to website activity and internet usage.
(2) The IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data.
#a) the transmission to Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google
#b) Google from collecting and processing the data generated by the cookie and related to your use of the website (including your IP address)
by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
(4) This website uses Google Analytics with the extension “_anonymizeIp()”. This shortens the processing of IP addresses, thus excluding the possibility of direct personal references. If the data collected about you is related to a person, this is thus excluded immediately and the personal data is deleted promptly.
(5) We use Google Analytics to be able to analyse and regularly improve the use of our website. We can to improve our offer by means of the statistics obtained and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield,
The legal basis for the use of Google Analytics is Art. 6(1) line 1 lit. f DS-GVO.
(7) This website also uses Google Analytics for a cross-device analysis of visitor flows conducted through a User ID. You can deactivate the cross-device analysis of your use in your customer account under “My data”, “Personal data”.
§ 7 Integration of YouTube videos
(1) We have included YouTube videos in our online content which are stored at http://www.YouTube.com and can be played directly from our website. These are all integrated in the “extended data protection mode”, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only once you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transfer.
(2) When visiting the Website, YouTube receives notification that you have accessed the corresponding subpage of our Website. In addition, the data specified under § 3 of this declaration will be transmitted. This occurs regardless of whether YouTube provides a user account to which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not wish your profile to be associated with YouTube, you must log out before activating the button. YouTube stores your data as user profiles and utilizes this for advertising and market research purposes and/or the needs-oriented design of its website. In particular, such evaluation is carried out (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
§ 8 Use of Social Media Plug-ins/Links
(1) We currently implement the following social media plug-ins and links: Facebook, Google+, Xing, LinkedIn. We thereby use the so-called two-click solution. This means that when you visit our site, initially, no personal data is passed on to the providers of the plug-ins/links. You can recognize the provider of the plug-in/link by the mark on the box above its initial letter or the logo. We give you the option of communicating directly with the provider of the plug-in/link by means of the button. Only when you click on the marked field and thereby activate it, will the plug-in provider/provider of the link be notified that you have called up the corresponding website of our online service. In addition, the data mentioned under § 3 of this declaration will be transmitted. In the cases of Facebook and Xing, the IP address is anonymized immediately after collection, according to information provided by the respective providers in Germany. By activating the plug-in/link, personal data is transferred from you to the respective link/plug-in provider and stored there (in the case of US providers in the USA). Since the link/plug-in provider collects data primarily via cookies, we recommend that you delete all cookies via the security settings of your browser before clicking on the grayed-out box.
(2) We have no influence on the collected data and data processing procedures, nor are the full scope of data collection, the purposes of processing, or the storage periods known to us. Neither do we have any information on the deletion of the collected data by the link/plug-in provider.
(3) The link/plug-in provider stores the data collected on you as user profiles and utilizes this for advertising and market research purposes and/or for the needs-oriented design of its website. In particular, such evaluation is carried out (even for users who are not logged in) to display demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you need to contact the respective link/plug-in provider to exercise this right. Through the plug-ins/links, we offer you the opportunity to interact with social networks and other users so that we can improve our services and make them more interesting for you as a user. The legal basis for the use of plug-ins/links is Art. 6(1), line 1 lit. f DS-GVO.
(4) The data transfer occurs regardless of whether you have an account with the link/plug-in provider and are logged in there. If you are logged in with the link/plug-in provider, your data collected by us will be assigned directly to your existing account with the link/plug-in provider. If you click on the activated button and, for instance, link the page, the link/plug-in provider will also store this information in your user account and communicate it publicly to your contacts. We recommend you log out regularly after using a social network, but especially before activating the button, as you can thus avoid assigning your profile to the link/plug-in provider.
(5) Further information on the purpose and scope of data collection its processing by the link/plug-in provider can be found in the following data protection declarations of such providers. There you will also find further information on your rights relating thereto and on setting options to protect your privacy.
(6) Addresses of the respective link/plug-in providers and URL with their data protection information:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications, and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=en. Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
c) Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy.
d) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
§ 9 Weighing of interests
If, contrary to their statement, the above-mendionend tracking software or plug-ins not meet the European data protection standards with regard to the lawful processing of Art. 6 of the DSGVO, the following weighing of interests can be made in support:
The processing of the data is lawful if it is required to safeguard the legitimate interests of the responsible party or a third party, insofar as that the interests or fundamental rights and freedoms of the affected person, which demand the protection of personal data, do not prevail. The legitimate interests include legal as well as factual, economic or ideational interests.
The purpose of data processing is the retrievability of the website and the analysis of user behaviour.
The tracking software and plug-ins used are suitable for achieving this purpose.
The necessity exists as they are necessary to achieve the purpose.
They are appropriate as they are reasonable for the user and the adequate level of data protection is not jeopardized.
Last update: 11.07.2018