Privacy Policy

1. An over­view of data protection

General infor­ma­tion

The following infor­ma­tion will provide you with an easy to navi­gate over­view of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to perso­nally iden­tify you. For detailed infor­ma­tion about the subject matter of data protec­tion, please consult our Data Protec­tion Decla­ra­tion, which we have included beneath this copy.

Data recording on this website

Who is the respon­sible party for the recording of data on this website (i.e., the “controller”)?

The data on this website is processed by the operator of the website, whose contact infor­ma­tion is avail­able under section “Infor­ma­tion about the respon­sible party (referred to as the “controller” in the GDPR)” in this Privacy Policy.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance be infor­ma­tion you enter into our contact form.

Other data shall be recorded by our IT systems auto­ma­ti­cally or after you consent to its recording during your website visit. This data comprises prima­rily tech­nical infor­ma­tion (e.g., web browser, opera­ting system, or time the site was accessed). This infor­ma­tion is recorded auto­ma­ti­cally when you access this website.

What are the purposes we use your data for?

A portion of the infor­ma­tion is gene­rated to guarantee the error free provi­sion of the website. Other data may be used to analyze your user patterns.

What rights do you have as far as your infor­ma­tion is concerned?

You have the right to receive infor­ma­tion about the source, reci­pi­ents, and purposes of your archived personal data at any time without having to pay a fee for such disclo­sures. You also have the right to demand that your data are recti­fied or eradi­cated. If you have consented to data proces­sing, you have the option to revoke this consent at any time, which shall affect all future data proces­sing. Moreover, you have the right to demand that the proces­sing of your data be restricted under certain circum­s­tances. Further­more, you have the right to log a comp­laint with the compe­tent super­vi­sing agency.

Please do not hesi­tate to contact us at any time if you have ques­tions about this or any other data protec­tion related issues.

Analysis tools and tools provided by third parties

There is a possi­bi­lity that your brow­sing patterns will be statis­ti­cally analyzed when your visit this website. Such analyses are performed prima­rily with what we refer to as analysis programs.

For detailed infor­ma­tion about these analysis programs please consult our Data Protec­tion Decla­ra­tion below.

2. Hosting

External Hosting

This website is hosted by an external service provider (host). Personal data collected on this website are stored on the servers of the host. These may include, but are not limited to, IP addresses, contact requests, meta­data and commu­ni­ca­tions, contract infor­ma­tion, contact infor­ma­tion, names, web page access, and other data gene­rated through a web site.

The host is used for the purpose of fulfil­ling the contract with our poten­tial and exis­ting custo­mers (Art. 6(1)(b) GDPR) and in the inte­rest of secure, fast, and effi­cient provi­sion of our online services by a profes­sional provider (Art. 6(1)(f) GDPR).

Our host will only process your data to the extent necessary to fulfil its perfor­mance obli­ga­tions and to follow our inst­ruc­tions with respect to such data.

We are using the following host:

1&1 IONOS SE
Elgen­dorfer Str. 57
56410 Monta­baur

Data proces­sing

We have concluded a data proces­sing agree­ment (DPA) with the above-mentioned provider. This is a contract mandated by data privacy laws that guaran­tees that they process personal data of our website visi­tors only based on our inst­ruc­tions and in compli­ance with the GDPR.

3. General infor­ma­tion and manda­tory information

Data protec­tion

The opera­tors of this website and its pages take the protec­tion of your personal data very seriously. Hence, we handle your personal data as confi­den­tial infor­ma­tion and in compli­ance with the statu­tory data protec­tion regu­la­tions and this Data Protec­tion Declaration.

Whenever you use this website, a variety of personal infor­ma­tion will be collected. Personal data comprises data that can be used to perso­nally iden­tify you. This Data Protec­tion Decla­ra­tion explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the infor­ma­tion is collected.

We here­with advise you that the trans­mis­sion of data via the Internet (i.e., through e-mail commu­ni­ca­tions) may be prone to secu­rity gaps. It is not possible to comple­tely protect data against third-party access.

Infor­ma­tion about the respon­sible party (referred to as the “controller” in the GDPR)

The data proces­sing controller on this website is:

PYREG GmbH
Trink­born­straße 15-17
56281 Dörth

Phone: 06747 95388 0
E-mail: info@pyreg.de

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the proces­sing of personal data (e.g., names, e-mail addresses, etc.).

Storage dura­tion

Unless a more specific storage period has been speci­fied in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justi­fied request for dele­tion or revoke your consent to data proces­sing, your data will be deleted, unless we have other legally permis­sible reasons for storing your personal data (e.g., tax or commer­cial law reten­tion periods); in the latter case, the dele­tion will take place after these reasons cease to apply.

Desi­gna­tion of a data protec­tion officer

We have appointed a data protec­tion officer for our company.

defensIT UG (haftungs­be­schränkt)
Olek­sandr Zinchenko
Fran­kenstr. 2
56068 Koblenz
www.defensit.de

Phone: 0261-9888964-22
E-mail: oleksandr.zinchenko@defensit.de

Infor­ma­tion on data transfer to the USA and other non-EU countries

Among other things, we use tools of compa­nies domic­iled in the United States or other from a data protec­tion perspec­tive non-secure non-EU coun­tries. If these tools are active, your personal data may poten­ti­ally be trans­ferred to these non-EU coun­tries and may be processed there. We must point out that in these coun­tries, a data protec­tion level that is compa­rable to that in the EU cannot be guaran­teed. For instance, U.S. enter­prises are under a mandate to release personal data to the secu­rity agen­cies and you as the data subject do not have any liti­ga­tion options to defend yourself in court. Hence, it cannot be ruled out that U.S. agen­cies (e.g., the Secret Service) may process, analyze, and perma­nently archive your personal data for surveil­lance purposes. We have no control over these proces­sing activities.

Revo­ca­tion of your consent to the proces­sing of data

A wide range of data proces­sing tran­sac­tions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without preju­dice to the lawful­ness of any data collec­tion that occurred prior to your revocation.

Right to object to the collec­tion of data in special cases; right to object to direct adver­ti­sing (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCES­SING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUA­TION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVI­SIONS. TO DETER­MINE THE LEGAL BASIS, ON WHICH ANY PROCES­SING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTEC­TION DECLA­RA­TION. IF YOU LOG AN OBJEC­TION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSI­TION TO PRESENT COMPEL­LING PROTEC­TION WORTHY GROUNDS FOR THE PROCES­SING OF YOUR DATA, THAT OUTWEIGH YOUR INTE­RESTS, RIGHTS AND FREE­DOMS OR IF THE PURPOSE OF THE PROCES­SING IS THE CLAI­MING, EXER­CISING OR DEFENCE OF LEGAL ENTI­T­LE­MENTS (OBJEC­TION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVER­TI­SING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCES­SING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVER­TI­SING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFI­LIATED WITH SUCH DIRECT ADVER­TI­SING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSE­QUENTLY NO LONGER BE USED FOR DIRECT ADVER­TI­SING PURPOSES (OBJEC­TION PURSUANT TO ART. 21(2) GDPR).

Right to log a comp­laint with the compe­tent super­vi­sory agency

In the event of viola­tions of the GDPR, data subjects are enti­tled to log a comp­laint with a super­vi­sory agency, in parti­cular in the member state where they usually main­tain their domicile, place of work or at the place where the alleged viola­tion occurred. The right to log a comp­laint is in effect regard­less of any other admi­nis­tra­tive or court procee­dings avail­able as legal recourses.

Right to data portability

You have the right to demand that we hand over any data we auto­ma­ti­cally process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine read­able format. If you should demand the direct transfer of the data to another controller, this will be done only if it is tech­ni­cally feasible.

SSL and/or TLS encryption

For secu­rity reasons and to protect the trans­mis­sion of confi­den­tial content, such as purchase orders or inqui­ries you submit to us as the website operator, this website uses either an SSL or a TLS encryp­tion program. You can reco­gnize an encrypted connec­tion by checking whether the address line of the browser swit­ches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If the SSL or TLS encryp­tion is acti­vated, data you transmit to us cannot be read by third parties.

Infor­ma­tion about, recti­fi­ca­tion and eradi­ca­tion of data

Within the scope of the appli­cable statu­tory provi­sions, you have the right to at any time demand infor­ma­tion about your archived personal data, their source and reci­pi­ents as well as the purpose of the proces­sing of your data. You may also have a right to have your data recti­fied or eradi­cated. If you have ques­tions about this subject matter or any other ques­tions about personal data, please do not hesi­tate to contact us at any time.

Right to demand proces­sing restrictions

You have the right to demand the impo­si­tion of restric­tions as far as the proces­sing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restric­tion of proces­sing applies in the following cases:

• In the event that you should dispute the correct­ness of your data archived by us, we will usually need some time to verify this claim. During the time that this inves­ti­ga­tion is ongoing, you have the right to demand that we restrict the proces­sing of your personal data.
• If the proces­sing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restric­tion of the proces­sing of your data in lieu of deman­ding the eradi­ca­tion of this data.
• If we do not need your personal data any longer and you need it to exer­cise, defend or claim legal enti­t­le­ments, you have the right to demand the restric­tion of the proces­sing of your personal data instead of its eradication.
• If you have raised an objec­tion pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been deter­mined whose inte­rests prevail, you have the right to demand a restric­tion of the proces­sing of your personal data.

If you have restricted the proces­sing of your personal data, these data – with the excep­tion of their archi­ving – may be processed only subject to your consent or to claim, exer­cise or defend legal enti­t­le­ments or to protect the rights of other natural persons or legal enti­ties or for important public inte­rest reasons cited by the Euro­pean Union or a member state of the EU.

Rejec­tion of unso­li­cited e-mails

We here­with object to the use of contact infor­ma­tion published in conjunc­tion with the manda­tory infor­ma­tion to be provided in our Site Notice to send us promo­tional and infor­ma­tion mate­rial that we have not expressly requested. The opera­tors of this website and its pages reserve the express right to take legal action in the event of the unso­li­cited sending of promo­tional infor­ma­tion, for instance via SPAM messages.

4. Recording of data on this website

Cookies

Our websites and pages use what the industry refers to as “cookies.” Cookies are small text files that do not cause any damage to your device. They are either stored tempora­rily for the dura­tion of a session (session cookies) or they are perma­nently archived on your device (perma­nent cookies). Session cookies are auto­ma­ti­cally deleted once you termi­nate your visit. Perma­nent cookies remain archived on your device until you actively delete them, or they are auto­ma­ti­cally eradi­cated by your web browser.

In some cases, it is possible that third-party cookies are stored on your device once you enter our site (third-party cookies). These cookies enable you or us to take advan­tage of certain services offered by the third party (e.g., cookies for the proces­sing of payment services).

Cookies have a variety of func­tions. Many cookies are tech­ni­cally essen­tial since certain website func­tions would not work in the absence of the cookies (e.g., the shop­ping cart func­tion or the display of videos). The purpose of other cookies may be the analysis of user patterns or the display of promo­tional messages.

Cookies, which are required for the perfor­mance of elec­tronic commu­ni­ca­tion tran­sac­tions (required cookies) or for the provi­sion of certain func­tions you want to use (func­tional cookies, e.g., for the shop­ping cart func­tion) or those that are necessary for the opti­miz­a­tion of the website (e.g., cookies that provide measurable insights into the web audi­ence), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a diffe­rent legal basis is cited. The operator of the website has a legi­ti­mate inte­rest in the storage of cookies to ensure the tech­ni­cally error free and opti­mized provi­sion of the operator’s services. If your consent to the storage of the cookies has been requested, the respec­tive cookies are stored exclu­si­vely on the basis of the consent obtained (Art. 6(1)(a) GDPR); this consent may be revoked at any time.

You have the option to set up your browser in such a manner that you will be noti­fied any time cookies are placed and to permit the accep­t­ance of cookies only in specific cases. You may also exclude the accep­t­ance of cookies in certain cases or in general or acti­vate the delete func­tion for the auto­matic eradi­ca­tion of cookies when the browser closes. If cookies are deac­ti­vated, the func­tions of this website may be limited.

In the event that third-party cookies are used or if cookies are used for analy­tical purposes, we will sepa­r­ately notify you in conjunc­tion with this Data Protec­tion Policy and, if appli­cable, ask for your consent.

Consent with Borlabs Cookie

Our website uses the Borlabs consent tech­no­logy to obtain your consent to the storage of certain cookies in your browser or for the use of certain tech­no­lo­gies and for their data privacy protec­tion compliant docu­men­ta­tion. The provider of this tech­no­logy is Borlabs – Benjamin A. Born­schein, Rüben­kamp 32, 22305 Hamburg, Germany (herein­after referred to as Borlabs).

Whenever you visit our website, a Borlabs cookie will be stored in your browser, which archives any decla­ra­tions or revo­ca­tions of consent you have entered. These data are not shared with the provider of the Borlabs technology.

The recorded data shall remain archived until you ask us to eradi­cate them, delete the Borlabs cookie on your own or the purpose of storing the data no longer exists. This shall be without preju­dice to any reten­tion obli­ga­tions mandated by law. To review the details of Borlabs’ data proces­sing poli­cies, please visit https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

We use the Borlabs cookie consent tech­no­logy to obtain the decla­ra­tions of consent mandated by law for the use of cookies. The legal basis for the use of such cookies is Art. 6(1)(c) GDPR.

Server log files

The provider of this website and its pages auto­ma­ti­cally collects and stores infor­ma­tion in so-called server log files, which your browser commu­ni­cates to us auto­ma­ti­cally. The infor­ma­tion comprises:

• The type and version of browser used
• The used opera­ting system
• Referrer URL
• The host­name of the acces­sing computer
• The time of the server inquiry
• The IP address

This data is not merged with other data sources.

This data is recorded on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legi­ti­mate inte­rest in the tech­ni­cally error free depic­tion and the opti­miz­a­tion of the operator’s website. In order to achieve this, server log files must be recorded.

Contact form

If you submit inqui­ries to us via our contact form, the infor­ma­tion provided in the contact form as well as any contact infor­ma­tion provided therein will be stored by us in order to handle your inquiry and in the event that we have further ques­tions. We will not share this infor­ma­tion without your consent.

The proces­sing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the execu­tion of a contract or if it is necessary to carry out pre-contrac­tual measures. In all other cases the proces­sing is based on our legi­ti­mate inte­rest in the effec­tive proces­sing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agree­ment (Art. 6(1)(a) GDPR) if this has been requested.

The infor­ma­tion you have entered into the contact form shall remain with us until you ask us to eradi­cate the data, revoke your consent to the archi­ving of data or if the purpose for which the infor­ma­tion is being archived no longer exists (e.g., after we have concluded our response to your inquiry). This shall be without preju­dice to any manda­tory legal provi­sions, in parti­cular reten­tion periods.

Request by e-mail, tele­phone, or fax

If you contact us by e-mail, tele­phone or fax, your request, inclu­ding all resul­ting personal data (name, request) will be stored and processed by us for the purpose of proces­sing your request. We do not pass these data on without your consent.

These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfill­ment of a contract or is required for the perfor­mance of pre-contrac­tual measures. In all other cases, the data are processed on the basis of our legi­ti­mate inte­rest in the effec­tive hand­ling of inqui­ries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained.

The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after comple­tion of your request). Manda­tory statu­tory provi­sions – in parti­cular statu­tory reten­tion periods – remain unaffected.

The comment func­tion on this website

When you use the comment func­tion on this website, infor­ma­tion on the time the comment was gene­rated and your e-mail-address and, if you are not posting anony­mously, the user­name you have selected will be archived in addi­tion to your comments.

Storage of the IP address

Our comment func­tion stores the IP addresses of all users who enter comments. Given that we do not review the comments prior to publi­shing them, we need this infor­ma­tion in order to take action against the author in the event of rights viola­tions, such as defa­ma­tion or propaganda.

Storage period for comments

Comments and any affi­liated infor­ma­tion shall be stored by us and remain on this website until the content the comment pertained to has been deleted in its enti­rety or if the comments had to be deleted for legal reasons (e.g., insul­ting comments).

Legal basis

Comments are stored on the basis of your consent (Art. 6(1)(a) GDPR). You have the right to revoke at any time any consent you have already given us. To do so, all you are required to do is sent us an informal noti­fi­ca­tion via e-mail. This shall be without preju­dice to the lawful­ness of any data collec­tion that occurred prior to your revocation.

5. Analysis tools and advertising

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The Google Tag Manager is a tool that allows us to inte­grate tracking or statis­tical tools and other tech­no­lo­gies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any inde­pen­dent analyses. It only manages and runs the tools inte­grated via it. However, the Google Tag Manager does collect your IP address, which may also be trans­ferred to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legi­ti­mate inte­rest in the quick and uncom­pli­cated inte­gra­tion and admi­nis­tra­tion of various tools on his website. If the rele­vant consent has been requested, the proces­sing is carried out exclu­si­vely on the basis of Art. 6(1)(a) GDPR; the consent can be revoked at any time.

Google Analy­tics

This website uses func­tions of the web analysis service Google Analy­tics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analy­tics enables the website operator to analyze the beha­vior patterns of website visi­tors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized opera­ting system and the user’s origin. Google may conso­li­date these data in a profile that is allo­cated to the respec­tive user or the user’s device.

Further­more, Google Analy­tics allows us to record your mouse and scroll move­ments and clicks, among other things. Google Analy­tics uses various mode­ling approa­ches to augment the collected data sets and uses machine lear­ning tech­no­lo­gies in data analysis.

Google Analy­tics uses tech­no­lo­gies that make the reco­gni­tion of the user for the purpose of analy­zing the user beha­vior patterns (e.g., cookies or device finger­prin­ting). The website use infor­ma­tion recorded by Google is, as a rule trans­ferred to a Google server in the United States, where it is stored.

This analysis tool is used on the basis of Art. 6(1)(f) GDPR. The operator of this website has a legi­ti­mate inte­rest in the analysis of user patterns to opti­mize both, the services offered online and the operator’s adver­ti­sing acti­vi­ties. If a corre­spon­ding agree­ment has been requested (e.g., an agree­ment to the storage of cookies), the proces­sing takes place exclu­si­vely on the basis of Art. 6(1)(a) GDPR; the agree­ment can be revoked at any time.

Data trans­mis­sion to the US is based on the Stan­dard Contrac­tual Clauses (SCC) of the Euro­pean Commis­sion. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anony­miz­a­tion

On this website, we have acti­vated the IP anony­miz­a­tion func­tion. As a result, your IP address will be abbre­viated by Google within the member states of the Euro­pean Union or in other states that have rati­fied the Conven­tion on the Euro­pean Economic Area prior to its trans­mis­sion to the United States. The full IP address will be trans­mitted to one of Google’s servers in the United States and abbre­viated there only in excep­tional cases. On behalf of the operator of this website, Google shall use this infor­ma­tion to analyze your use of this website to gene­rate reports on website acti­vi­ties and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address trans­mitted in conjunc­tion with Google Analy­tics from your browser shall not be merged with other data in Google’s possession.

Browser plug-in

You can prevent the recording and proces­sing of your data by Google by down­loading and instal­ling the browser plugin avail­able under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more infor­ma­tion about the hand­ling of user data by Google Analy­tics, please consult Google’s Data Privacy Decla­ra­tion at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing

We have executed a contract data proces­sing agree­ment with Google and are imple­men­ting the strin­gent provi­sions of the German data protec­tion agen­cies to the fullest when using Google Analytics.

Demo­gra­phic para­me­ters provided by Google Analytics

This website uses the “demo­gra­phic charac­te­ris­tics” func­tion of Google Analy­tics, to be able to display to the website visitor compa­tible ads within the Google adver­ti­sing network. This allows reports to be created that contain infor­ma­tion about the age, gender, and inte­rests of the website visi­tors. The sources of this infor­ma­tion are inte­rest-related adver­ti­sing by Google as well as visitor data obtained from third-party provi­ders. This data cannot be allo­cated to a specific indi­vi­dual. You have the option to deac­ti­vate this func­tion at any time by making perti­nent settings changes for adver­ti­sing in your Google account or you can gene­rally prohibit the recording of your data by Google Analy­tics as explained in section “Objec­tion to the recording of data”.

Archi­ving period

Data on the user or inci­dent level stored by Google linked to cookies, user IDs or adver­ti­sing IDs (e.g., Double­Click cookies, Android adver­ti­sing ID) will be anony­mized or deleted after 2 months. For details, please click the following link: https://support.google.com/analytics/answer/7667196?hl=en

Hotjar

This website utilizes Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Busi­ness Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com).

Hotjar is a tool used to analyze your user patterns on this website. Hotjar allows us to for instance record your mouse and scroll move­ments as well as your click. During this process, Hotjar also has the capa­bi­lity to deter­mine how long your cursor remained in a certain posi­tion. Based on this infor­ma­tion, Hotjar compiles so-called Heat­maps, that make possible to deter­mine which parts of the website the website visitor reviews with preference.

We are also able to deter­mine how long you have stayed on a page of this website and when you left. We can also deter­mine at which point you suspended making entries into a contact form (so-called conver­sion funnels).

Further­more, Hotjar can be deployed to obtain direct feed­back from website visi­tors. This func­tion aims at the impro­ve­ment of the website offe­rings of the website operator.

Hotjar uses tech­no­lo­gies that make it possible to reco­gnize the user for the purpose of analy­zing the user patterns (e.g., cookies or the deploy­ment of device fingerprinting).

The use of this analysis tool is based on Art. 6(1)(f) GDPR. The website operator has a legi­ti­mate inte­rest in the analysis of user patterns, in order to opti­mize the operator’s web offe­rings and adver­ti­sing. If a corre­spon­ding agree­ment has been requested (e.g., an agree­ment to the storage of cookies), the proces­sing takes place exclu­si­vely on the basis of Art. 6(1)(a) GDPR; the agree­ment can be revoked at any time.

Deac­ti­va­tion of Hotjar

If you would like to deac­ti­vate the recording of data by Hotjar, please click on the link below and follow the inst­ruc­tions provided under the link: https://www.hotjar.com/opt-out.

Please keep in mind that you will have to sepa­r­ately deac­ti­vate Hotjar for every browser and every device.

For more detailed infor­ma­tion about Hotjar and the data to be recorded, please consult the Data Privacy Decla­ra­tion of Hotjar under the following link: https://www.hotjar.com/privacy.

Data proces­sing

We have concluded a data proces­sing agree­ment (DPA) with the above-mentioned provider. This is a contract mandated by data privacy laws that guaran­tees that they process personal data of our website visi­tors only based on our inst­ruc­tions and in compli­ance with the GDPR.

Google Conver­sion-Tracking

This website uses Google Conver­sion Tracking. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the assi­s­tance of Google Conver­sion Tracking, we are in a posi­tion to reco­gnize whether the user has completed certain actions. For instance, we can analyze the how frequently which buttons on our website have been clicked and which products are reviewed or purchased with parti­cular frequency. The purpose of this infor­ma­tion is to compile conver­sion statis­tics. We learn how many users have clicked on our ads and which actions they have completed. We do not receive any infor­ma­tion that would allow us to perso­nally iden­tify the users. Google as such uses cookies or compa­rable reco­gni­tion tech­no­lo­gies for iden­ti­fi­ca­tion purposes.

We use Google Conver­sion Tracking on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legi­ti­mate inte­rest in the analysis of the user patterns with the aim of opti­mi­zing both, the operator’s web presen­ta­tion and adver­ti­sing. If a respec­tive decla­ra­tion of consent was requested (e.g., concer­ning the storage of cookies), proces­sing shall occur exclu­si­vely on the basis of Art. 6(1)(a) GDPR; the given consent may be revoked at any time.

For more infor­ma­tion about Google Conver­sion Tracking, please review Google’s data protec­tion policy at: https://policies.google.com/privacy?hl=en

6. Plug-ins and Tools

Vimeo

This website uses plug-ins of the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

If you visit one of the pages on our website into which a Vimeo video has been inte­grated, a connec­tion to Vimeo’s servers will be estab­lished. As a conse­quence, the Vimeo server will receive infor­ma­tion as to which of our pages you have visited. Moreover, Vimeo will receive your IP address. This will also happen if you are not logged into Vimeo or do not have an account with Vimeo. The infor­ma­tion recorded by Vimeo will be trans­mitted to Vimeo’s server in the United States.

If you are logged into your Vimeo account, you enable Vimeo to directly allo­cate your brow­sing patterns to your personal profile. You can prevent this by logging out of your Vimeo account.

Vimeo uses cookies or compa­rable reco­gni­tion tech­no­lo­gies (e.g. device finger­prin­ting) to reco­gnize website visitors.

The use of Vimeo is based on our inte­rest in presen­ting our online content in an appe­aling manner. Pursuant to Art. 6(1)(f) GDPR, this is a legi­ti­mate inte­rest. If a corre­spon­ding agree­ment has been requested, the proces­sing takes place exclu­si­vely on the basis of Art. 6(1)(a) GDPR; the agree­ment can be revoked at any time.

Data trans­mis­sion to the US is based on the Stan­dard Contrac­tual Clauses (SCC) of the Euro­pean Commis­sion and, according to Vimeo, on “legi­ti­mate busi­ness inte­rests”. Details can be found here: https://vimeo.com/privacy.

For more infor­ma­tion on how Vimeo handles user data, please consult the Vimeo Data Privacy Policy under: https://vimeo.com/privacy.

7. Online-based Audio and Video Confe­rences (Confe­rence tools)

Data proces­sing

We use online confe­rence tools, among other things, for commu­ni­ca­tion with our custo­mers. The tools we use are listed in detail below. If you commu­ni­cate with us by video or audio confe­rence using the Internet, your personal data will be collected and processed by the provider of the respec­tive confe­rence tool and by us. The confe­ren­cing tools collect all infor­ma­tion that you provide/access to use the tools (email address and/or your phone number). Further­more, the confe­rence tools process the dura­tion of the confe­rence, start and end (time) of parti­ci­pa­tion in the confe­rence, number of parti­ci­pants and other “context infor­ma­tion” related to the commu­ni­ca­tion process (meta­data).

Further­more, the provider of the tool processes all the tech­nical data required for the proces­sing of the online commu­ni­ca­tion. This includes, in parti­cular, IP addresses, MAC addresses, device IDs, device type, opera­ting system type and version, client version, camera type, micro­phone or loud­speaker and the type of connection.

Should content be exch­anged, uploaded, or other­wise made avail­able within the tool, it is also stored on the servers of the tool provider. Such content includes, but is not limited to, cloud record­ings, chat/ instant messages, voice­mail uploaded photos and videos, files, white­boards, and other infor­ma­tion shared while using the service.

Please note that we do not have complete influ­ence on the data proces­sing proce­dures of the tools used. Our possi­bi­li­ties are largely deter­mined by the corpo­rate policy of the respec­tive provider. Further infor­ma­tion on data proces­sing by the confe­rence tools can be found in the data protec­tion decla­ra­tions of the tools used, and which we have listed below this text.

Purpose and legal bases

The confe­rence tools are used to commu­ni­cate with prospec­tive or exis­ting contrac­tual part­ners or to offer certain services to our custo­mers (Art. 6(1)(b) GDPR). Further­more, the use of the tools serves to gene­rally simplify and acce­le­rate commu­ni­ca­tion with us or our company (legi­ti­mate inte­rest in the meaning of Art. 6(1)(f) GDPR). Insofar as consent has been requested, the tools in ques­tion will be used on the basis of this consent; the consent may be revoked at any time with effect from that date.

Dura­tion of storage

Data collected directly by us via the video and confe­rence tools will be deleted from our systems immedia­tely after you request us to delete it, revoke your consent to storage, or the reason for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Manda­tory legal reten­tion periods remain unaffected.

We have no influ­ence on the dura­tion of storage of your data that is stored by the opera­tors of the confe­rence tools for their own purposes. For details, please directly contact the opera­tors of the confe­rence tools.

Confe­rence tools used

We employ the following confe­rence tools:

Micro­soft Teams

We use Micro­soft Teams. The provider is Micro­soft Corpo­ra­tion, One Micro­soft Way, Redmond, WA 98052-6399, USA. For details on data proces­sing, please refer to the Micro­soft Teams privacy policy: https://privacy.microsoft.com/en-us/privacystatement.

Data proces­sing

We have concluded a data proces­sing agree­ment (DPA) with the above-mentioned provider. This is a contract mandated by data privacy laws that guaran­tees that they process personal data of our website visi­tors only based on our inst­ruc­tions and in compli­ance with the GDPR.

8. Custom Services

Job Appli­ca­tions

We offer website visi­tors the oppor­tu­nity to submit job appli­ca­tions to us (e.g., via e-mail, via postal services on by submit­ting the online job appli­ca­tion form). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunc­tion with the appli­ca­tion process. We assure you that the collec­tion, proces­sing and use of your data will occur in compli­ance with the appli­cable data privacy rights and all other statu­tory provi­sions and that your data will always be treated as strictly confidential.

Scope and purpose of the collec­tion of data

If you submit a job appli­ca­tion to us, we will process any affi­liated personal data (e.g., contact and commu­ni­ca­tions data, appli­ca­tion docu­ments, notes taken during job inter­views, etc.), if they are required to make a decision concer­ning the estab­lish­ment or an employ­ment rela­ti­onship. The legal grounds for the afore­men­tioned are § 26 GDPR according to German Law (Nego­tia­tion of an Employ­ment Rela­ti­onship), Art. 6(1)(b) GDPR (General Contract Nego­tia­tions) and – provided you have given us your consent – Art. 6(1)(a) GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with indi­vi­duals who are involved in the proces­sing of your job application.

If your job appli­ca­tion should result in your recruit­ment, the data you have submitted will be archived on the grounds of § 26 GDPR and Art. 6(1)(b) GDPR for the purpose of imple­men­ting the employ­ment rela­ti­onship in our data proces­sing system.

Data Archi­ving Period

If we are unable to make you a job offer or you reject a job offer or with­draw your appli­ca­tion, we reserve the right to retain the data you have submitted on the basis of our legi­ti­mate inte­rests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the appli­ca­tion proce­dure (rejec­tion or with­drawal of the appli­ca­tion). After­wards the data will be deleted, and the physical appli­ca­tion docu­ments will be destroyed. The storage serves in parti­cular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g., due to an impen­ding or pending legal dispute), dele­tion will only take place when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your agree­ment (Article 6(1)(a) GDPR) or if statu­tory data reten­tion requi­re­ments preclude the deletion.

Admis­sion to the appli­cant pool

If we do not make you a job offer, you may be able to join our appli­cant pool. In case of admis­sion, all docu­ments and infor­ma­tion from the appli­ca­tion will be trans­ferred to the appli­cant pool in order to contact you in case of suitable vacancies.

Admis­sion to the appli­cant pool is based exclu­si­vely on your express agree­ment (Art. 6(1)(a) GDPR). The submis­sion agree­ment is volun­tary and has no rela­tion to the ongoing appli­ca­tion proce­dure. The affected person can revoke his agree­ment at any time. In this case, the data from the appli­cant pool will be irre­vo­cably deleted, provided there are no legal reasons for storage.

The data from the appli­cant pool will be irre­vo­cably deleted no later than two years after consent has been granted.

9. Our social media appearances

Data proces­sing through social networks

We main­tain publicly avail­able profiles in social networks. The indi­vi­dual social networks we use can be found below.

Social networks such as Face­book, Twitter etc. can gene­rally analyze your user beha­vior compre­hen­si­vely if you visit their website or a website with inte­grated social media content (e.g. like buttons or banner ads). When you visit our social media pages, nume­rous data protec­tion-rele­vant proces­sing opera­tions are trig­gered. In detail:

If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circum­s­tances, your personal data may also be recorded if you are not logged in or do not have an account with the respec­tive social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.

Using the data collected in this way, the opera­tors of the social media portals can create user profiles in which their prefe­rences and inte­rests are stored. This way you can see inte­rest-based adver­ti­sing inside and outside of your social media presence. If you have an account with the social network, inte­rest-based adver­ti­sing can be displayed on any device you are logged in to or have logged in to.

Please also note that we cannot retrace all proces­sing opera­tions on the social media portals. Depen­ding on the provider, addi­tional proces­sing opera­tions may there­fore be carried out by the opera­tors of the social media portals. Details can be found in the terms of use and privacy policy of the respec­tive social media portals.

Legal basis

Our social media appearances should ensure the widest possible presence on the Internet. This is a legi­ti­mate inte­rest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on diver­gent legal bases to be speci­fied by the opera­tors of the social networks (e.g. consent within the meaning of Art. 6 (1) (a) GDPR).

Respon­si­bi­lity and asser­tion of rights

If you visit one of our social media sites (e.g., Face­book), we, toge­ther with the operator of the social media plat­form, are respon­sible for the data proces­sing opera­tions trig­gered during this visit. You can in principle protect your rights (infor­ma­tion, correc­tion, dele­tion, limi­ta­tion of proces­sing, data porta­bi­lity and comp­laint) vis-à-vis us as well as vis-à-vis the operator of the respec­tive social media portal (e.g. Facebook).

Please note that despite the shared respon­si­bi­lity with the social media portal opera­tors, we do not have full influ­ence on the data proces­sing opera­tions of the social media portals. Our options are deter­mined by the company policy of the respec­tive provider.

Storage time

The data collected directly from us via the social media presence will be deleted from our systems as soon as you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Manda­tory statu­tory provi­sions – in parti­cular, reten­tion periods – remain unaffected.

We have no control over the storage dura­tion of your data that are stored by the social network opera­tors for their own purposes. For details, please contact the social network opera­tors directly (e.g. in their privacy policy, see below).

Indi­vi­dual social networks

Face­book

We have a profile on Face­book. The provider of this service is Face­book Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook’s state­ment the collected data will also be trans­ferred to the USA and to other third-party countries.

We have signed an agree­ment with Face­book on shared respon­si­bi­lity for the proces­sing of data (Controller Addendum). This agree­ment deter­mines which data proces­sing opera­tions we or Face­book are respon­sible for when you visit our Face­book Fanpage. This agree­ment can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can custo­mize your adver­ti­sing settings inde­pendently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads.

Data trans­mis­sion to the US is based on the Stan­dard Contrac­tual Clauses (SCC) of the Euro­pean Commis­sion. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Details can be found in the Face­book privacy policy: https://www.facebook.com/about/privacy/.

Twitter

We use the short message service Twitter. The provider is Twitter Inter­na­tional Company, One Cumber­land Place, Fenian Street, Dublin 2, D02 AX07, Ireland.

You can custo­mize your Twitter privacy settings in your user account. Click on the following link and log in: https://twitter.com/personalization.

Data trans­mis­sion to the US is based on the Stan­dard Contrac­tual Clauses (SCC) of the Euro­pean Commis­sion. Details can be found here: https://gdpr.twitter.com/en/controller-to-controller-transfers.html.

For details, see the Twitter Privacy Policy: https://twitter.com/privacy.

LinkedIn

We have a LinkedIn profile. The provider is the LinkedIn Ireland Unli­mited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses adver­ti­sing cookies.

If you want to disable LinkedIn adver­ti­sing cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data trans­mis­sion to the US is based on the Stan­dard Contrac­tual Clauses (SCC) of the Euro­pean Commis­sion. Details can be found here: https://www.linkedin.com/legal/l/dpa und https://www.linkedin.com/legal/l/eu-sccs.

For details on how they handle your personal infor­ma­tion, please refer to LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

Vimeo

We have a profile on Vimeo. The provider is Vimeo, Inc., 555 West 18th Street, New York 10011, USA.

Data trans­mis­sion to the US is based on the Stan­dard Contrac­tual Clauses (SCC) of the Euro­pean Commis­sion and, according to Vimeo, on “legi­ti­mate busi­ness inte­rests”. Details can be found here: https://vimeo.com/privacy.

Details on how they handle your personal data can be found in the Vimeo privacy policy: https://vimeo.com/privacy.