Purposes and legal basis of processing and duration of storage

In the following, we inform you about the various purposes for which we process personal data, on which legal basis such processing takes place and how long we store the data.

Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a DSGVO (hereinafter also referred to as “GDPR”) GDPR as the legal basis for the processing of personal data. In the processing of personal data necessary for the performance of a contract of which the data subject is a party, Art. 6 para. 1 lit. b GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual measures. Insofar as the processing of personal data is required to fulfill a legal obligation that our company is subject to, Art. 6 para. 1 lit. c GDPR as legal basis. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interest, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR as legal basis for processing.

We adhere to the principles of data avoidance and data minimization. Therefore, we only store your personal data for as long as is necessary to achieve the purposes mentioned here or as provided for by the various storage periods provided for by law. After discontinuation of the respective purpose or expiration of these deadlines, the corresponding data are routinely and according to the legal regulations blocked or deleted.

Data processing in the case of general use of our Internet pages and as part of our activity.

General access to our website

Each time you visit our website, we automatically collect data and information from the calling device and store this data and information in the log files of the server. The (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrers), (4) the sub-web pages, which can be accessed via (5) the date and time of access to the website, (6) an Internet Protocol (IP) address, (7) the Internet service provider of the accessing system and (8) other similar data and information used in the event of attacks on our information technology systems. For security purposes, that is, in order to understand the attack in case of attacks on our platforms, we store this data including the IP address for a period of 14 days and then anonymize the IP addresses or delete the data. The IP address is needed during the connection to transfer the contents of our platform to your browser. The legal basis for the processing and subsequent storage of the IP address is a legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. The legitimate interest in transmitting the IP address is that it is necessary to display the contents of the platform; without transmission of the IP address, a display of the website is not possible. The legitimate interest in limited storage is our security interests.

Advertising objection

If we receive an objection from you for advertising purposes, we may put your personal contact information (name, address, telephone number, fax number, e-mail address) on a blacklist to ensure that we no longer send you any unwanted advertising. Legal basis is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR, where the legitimate interest is that we can meet our obligations arising from your advertising conflict. The data will be stored for this purpose until you expressly revoke the advertising conflict in writing.

Contact form and e-mail contact

On our website contact forms are available, which can be used for electronic contact. By clicking the “Send” button, you consent to the transmission of the data entered in the input mask to us. In addition, we save the date and time of your contact. Alternatively, contact via the provided e-mail address is possible. In this case, the user’s personal data submitted by e-mail and our response will be stored. The personal data transmitted to us voluntarily serve us to process your request and to contact you. The legal basis for the transmission of data is Art. 6 para. 1 lit. a GDPR. We use the data for this purpose until the conversation with you ends. The conversation ends when it can be inferred from the circumstances that the facts are finally clarified.

Data processing via entrepreneurs or employees of companies

We process personal data of entrepreneurs (data relating to entrepreneurs is only personal data if the entrepreneur is a natural person) or employees of companies. The respective companies or entrepreneurs may be in a contractual or pre-contractual relationship with us, but in some cases we may also process data from companies and their employees if there is no such pre-contractual relationship. In the following sections we inform you about the purpose, the respective legal basis as well as the storage duration of these processes of entrepreneurs or company employees as well as the data categories, as far as we do not collect the personal data from the data subject. The data will be deleted as soon as they are no longer necessary for the achievement of the respective purpose, that is, there is no longer a contract with the business partners or customers and we no longer intend to enter into a contract with the respective business partner or customer, none there is no longer a legitimate interest and, moreover, we are no longer required by law to keep records in which personal data may be contained.

Data processing for contract management and preparation purposes

We process personal data for the purpose of contract management, that is, so that we can provide our business partners or customers with the contractual services as well as for the purpose of appropriate contract preparation. If the business partner or customer is a natural person, the legal basis is that the processing for the performance of a contract or for carrying out pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR is required. If we process personal data of employees of the business partner or customer, the legal basis is a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the performance of our business and that of the business partner or customer. There is no conflicting interest on the part of the person concerned, because from the point of view of our business partner or customer, the processing is required by us in the context of the existing employment relationship with the person concerned (§ 26 BDSG-new). For this purpose, we store personal data for the duration of the contract.

Incidentally, we store accounting documents for a period of ten years and business letters, that is, any message relating to the preparation, execution or cancellation of a business, for a period of six years, in order to fulfill our statutory retention obligations under section 257 (1) 2 HGB and § 147 AO, whereby the deadline begins with the end of the calendar year in which the business letter was received or sent, or the accounting voucher arose. Legal basis is Art. 6 para. 1 lit. c GDPR.

Business and Customer Care

We process the personal data of our business partners or customers, prospective customers and / or their employees as contact persons received in connection with our activity, during the initiation, conclusion and execution of a contract as well as after the end of the contract or, if no contract It is possible, for the purpose of business and customer service, and in the case of a renewed inquiry of the business partner or customer or prospective customer, on the basis of the previous contracts, the offers or inquiries received to be able to provide appropriate services themselves. Legal basis is a legitimate interest under Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the execution of our business. For this purpose, we store personal data as long as we assume that the respective customer can conclude another or initial contract with us in the future, which is the case until the respective business partner or customer tells us that under no circumstances make a contract with us.

Data processing for general advertising purposes

We process personal data of our business partners or customers as well as other companies and companies that are not in business relationship with us and in this context, if necessary also from the respective contact persons for the purpose of sending direct mailings, as far as legally permissible. As far as we did not collect these data directly from the respective data subject, we can also take contact data of the data subject from public sources, in particular the website of the respective company and branch directories. In connection with these direct marketing purposes, we can also consider the previous contracts of our business partners or customers and company specifics such as industry affiliation or company size of the respective company / entrepreneur in order to make the approach and advertising as appropriate. Legal basis is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the processing of personal data for the purpose of direct advertising itself (see recital 47 GDPR). The persons concerned have the right to object at any time to the processing of personal data concerning them for the purpose of such advertising. You can raise this objection at any time under the contact details specified in clause 1. We store the data for this purpose as long as we are interested in contracting with the company in question or until an appeal has been declared.

Cookies and similar technologies

We use cookies in our websites. Cookies are text files that are stored and stored on a computer system via an Internet browser. We use such cookies both as technical means to provide services on our Internet pages, for example, enable certain functionalities, as well as to analyze the website behavior of our visitors and building on this the user-friendly design of our offers. For this purpose, we can also use other techniques, such as tracking pixels or a code in apps. Some of the cookies we use are deleted after the end of the browser session, ie after closing your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). The exact storage period of a cookie, unless specified below, can be taken from the respective cookie by having the cookie displayed in your browser. You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Failure to accept cookies may limit the functionality of our website. In the following, we will discuss specific cookies and similar technologies.

Technically necessary cookies

We use technical cookies. These are those that are required solely to collect some information on our web pages in order to provide a service requested or desired by you as a user. This includes navigation or session cookies that allow smooth navigation and use of the website (for example, allowing access to the restricted area); Analysis cookies set by us to collect aggregated information about the number of visitors and their user behavior; Functional cookies that allow you to navigate according to a few selected criteria in order to optimize your service. The legal basis for these cookies is a legitimate interest according to Art. 6 para. 1 lit. f GDPR, namely the pursuit of our business purposes.

Cookies and technologies that we use via third party providers

We also use cookies or other techniques provided to us by external providers in various areas. In the following we inform you about the respective providers and how you can object to the cookie or the corresponding technology. In general, in the case of websites, you can make a corresponding setting in your browser.

Consent with Borlabs Cookie

Our website uses Borlabs Cookie’s consent technology to obtain your consent to the storage of certain cookies in your browser or the use of certain technologies and to document this consent in accordance with data protection regulations. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany (hereinafter referred to as Borlabs). When you visit our website, a Borlabs cookie is stored in your browser, which saves the consents you have given or any revocations of these consents. This data is not shared with the provider of Borlabs Cookie. The collected data is stored until you request its deletion, delete the Borlabs cookie yourself, or the purpose for data storage no longer applies. Mandatory legal retention periods remain unaffected. Details on data processing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/. The Borlabs Cookie Consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6(1)(c) GDPR.

SSL/TLS Encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock symbol in your browser’s address bar. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Use of Google Analytics

We also use cookies or other techniques provided to us by external providers in various areas. In the following we inform you about the respective providers and how you can object to the cookie or the corresponding technology. In general, in the case of websites, you can make a corresponding setting in your browser. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google information.

Disable Google Analytics

The storage of cookies can be prevented by a corresponding setting of your browser software. However, we point out that in this case you may not be able to use all functions of this website in full. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading the available under the following link browser plugin and install: browser add-on to disable Google Analytics.

For more information about Terms of Use and Privacy, please visit https://www.google.com/analytics/terms/en.html or https://www.google.com/intl/de/analytics/privacyoverview.html. Please note that on this website Google Analytics has been extended by the code “gat.-anonymizeIp ();” in order to ensure an anonymous collection of IP addresses (so-called IP-Masking). The legal basis for the use of Google Analytics is a legitimate interest according to Art. 6 para. 1 lit. f GDPR, namely the pursuit of our business purposes.

External links and links

From own contents, cross-references (“links”) on the contents prepared by external offerers, are to be distinguished. By setting a link to other websites (“hyperlinks”), we do not endorse or endorse this website, as we can not constantly control the content on these pages. Furthermore, the company is not responsible for the availability of this website or its content. The use of hyperlinks to this content is at the user’s own risk. We are not liable for any direct or indirect damages incurred by the user from the use and existence of the information on these websites. Furthermore, we are not liable for the virus-free nature of this information retrieved by the user.

Rights of the person concerned

If personal data is processed by you, you are i.S.d. GDPR and you have the following rights to the responsible person:

Right to information

You may request confirmation from us as to whether personal information concerning you is processed by us. If such processing is available, you can request information from us via the following information:

1. the purposes for which the personal data are processed;

2. the categories of personal data that are processed;

3. the recipients or the categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;

4. the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;

5. the right of rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

6. the existence of a right of appeal to a supervisory authority;

7. all available information on the source of the data, if the personal data are not collected from the data subject;

You have the right to request information about whether the personal data relating to you are transferred to a third country or an international organization. In this regard, you can request the appropriate warranties in accordance with. Art. 46 GDPR to be informed in connection with the transfer. This right to information may be limited to the extent that it is likely to render statistical information impossible or seriously impaired, and that the restriction is necessary for statistical purposes.

Right to rectification

You have a right to rectification and / or completion to the controller, if the personal data you process is incorrect or incomplete. The person in charge must make the correction without delay. This right of rectification may be limited to the extent that it is likely to render statistical information impossible or seriously impaired, and that the restriction is necessary for statistical purposes.

Right to restriction of processing

You may request the restriction of the processing of your personal data under the following conditions:

1. if you contest the accuracy of your personal information for a period of time that enables us to verify the accuracy of your personal information;

2. the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data;

3. We no longer need your personal information for the purposes of processing, but you need it to assert, exercise or defend your rights, or

4. if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether our legitimate reasons prevail over your reasons.

If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State. If the limitation of the processing according to the o.g. If conditions are restricted, you will be informed by us before the restriction is lifted. This right to restriction of processing may be limited to the extent that it is likely to render the realization of statistics impossible or seriously impaired and the restriction necessary for the performance of statistics.

Right to cancellation

Obligation to delete

You may require us to immediately delete your personal information and we are required to delete that information immediately, if any of the following is true:

1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

2. You revoke your consent, to which the processing acc. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.

3. You place acc. Art. 21 para. 1 GDPR objection to the processing and there are no prior justifiable reasons for the processing, or you lay gem. Art. 21 para. 2 GDPR objection to processing.

4. Your personal data have been processed unlawfully.

5 The deletion of personal data concerning you is required to fulfill a legal obligation under Union or national law to which we are subject.

6. The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

Information to third parties

Have we made the personal data concerning you public and we are acc. Article 17 (1) of the GDPR, we shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you have been identified as being affected by the technology and implementation costs Person requested by them to delete all links to such personal data or to make copies or replicas of such personal data.

Exceptions

The right to erasure does not exist if the processing is necessary:

1. to exercise the right to freedom of expression and information;

2. to fulfill a legal obligation which requires processing under the law of the Union or of the Member States to which the controller is subject or for the performance of a public interest mission or exercise of public authority delegated to the controller;

3. for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;

4. for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or

5. to assert, exercise or defend legal claims.

Right to Data Portability

You have the right to receive personally identifiable information you provide to us in a structured, common and machine-readable format. You also have the right to transfer this data to another person without hindrance, provided that:

1. the processing on a consent acc. Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract acc. Art. 6 para. 1 lit. b GDPR is based and

2. the processing is done by automated means.

In exercising this right, you also have the right to obtain that personal data relating to you be transmitted directly from one controller to another controller, as far as technically feasible. Freedoms and rights of other persons may not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority that has been delegated to us.

Right to object

For reasons arising from your particular situation, you have the right at any time against the processing of personal data relating to you, which pursuant to Art. 6 para. 1 lit. e or f GDPR takes an objection; this also applies to profiling based on these provisions. We will then no longer process your personal information, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes. Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to opt-out by means of automated procedures that use technical specifications. You also have the right, for reasons that arise from your particular situation, in the processing of personal data relating to you for statistical purposes. Art. 89 para. 1 GDPR is to be contradicted. The right of objection may be limited insofar as it presumably makes the realization of statistical purposes impossible or seriously impaired and the restriction is necessary for the fulfillment of statistical purposes.

Right to revoke the data protection consent declaration

You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data concerning you is against the GDPR violates. The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

Modification of the privacy policy; change of purpose

We reserve the right to change this privacy policy in accordance with the data protection regulations. The current version can be found here at this point or another corresponding, easy to find place on our website. If we intend to process your data for other purposes, ie those for which it was collected, we will inform you in advance in accordance with the law.

Facebook / Instagram / social media plugins

Our website uses social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are marked with a Facebook logo or the addition “Facebook Social Plugin”. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser, which integrates it into the website. By integrating the plugins, Facebook receives the information that you have accessed the corresponding page on our website. If you are logged into Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plugins, for example press the “Like” button or leave a comment, the relevant information is sent directly from your browser to Facebook and saved there. The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your related rights and setting options to protect your privacy can be found in Facebook’s data protection information. If you do not want Facebook to collect data about you via our website, you must log out of Facebook before visiting our website.

Google Web Fonts

This page uses web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit.f GDPR. If your browser does not support web fonts, a standard font will be used by your computer. Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s data protection declaration: https://www.google.com/policies/privacy/.

Google Maps

This website uses Google Maps API to visually display geographic information. When using Google Maps, Google also collects, processes and uses data about the use of the map functions by visitors. You can find more information about data processing by Google in the Google data protection information. There you can also change your personal data protection settings in the data protection center.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The purpose of reCAPTCHA is to check whether the data input on our websites (e.g. in a contact form) is done by a human being or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For analysis purposes, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place. The data processing is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting his web offers from abusive automated spying and from SPAM. Further information on Google reCAPTCHA and the Google privacy policy can be found in the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.