Data privacy

 

Thank you for visiting our website. The way your data is handled is important to us. As such, this privacy policy provides detailed information about how your data is used when you visit our website.

 

Legal basis for processing

Art. 6 (1) sentence 1 (a) GDPR serves as the legal basis for processing upon which we obtain consent for specific processing purposes. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case (e.g.) with processing required for the delivery of goods or the provision of other services or consideration, processing is based on Art. 6 sentence 1 (b) GDPR. The same applies to processing necessary for the performance of pre-contractual measures, for example in the case of enquiries about our products or services. If our company is subject to a legal obligation requiring the processing of personal data, e.g. the fulfilment of tax obligations, processing is based on Art. 6 sentence 1 (c) GDPR. In rare cases, the processing of personal data may become necessary to protect the vital interests of the data subject or another natural person. sentence 1 (d) GDPR. Finally, processing operations may be based on Art. 6 sentence 1 (f) GDPR. Processing not covered by any of the aforementioned legal bases is based on this provision insofar processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not take priority.

 

Right to information and right to rectification, blocking, deletion or objection

Upon written request, we will provide information to you about the personal data we store about you. You also have the right to have this data rectified, blocked or deleted or to object to its processing. Such requests are to be made in writing to the address specified in the legal notice on our website.

 

Lawfulness of processing

You have the right, in accordance with Art. 18 of the GDPR, to demand the restriction of processing of your personal data in cases where the accuracy of the data is disputed by you, where the processing of data is unlawful but you object to its deletion, where we no longer need the data, but you require it to assert, exercise or defend legal claims, or where you have objected to processing in accordance with Art. 21 of the GDPR;

 

Transfer of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only disclose your personal data to third parties if:

  • you have expressly consented to this according to Art. 6 (1) sentence 1 (a) of the GDPR,
  • disclosure is required under Art. 6 (1) 1 f) of the GDPR for the assertion, exercising or defence of legal claims and there is no reason to believe that you have an overriding interest in not disclosing your data,
  • in the event that disclosure under Art. 6 (1) 1 c) of the GDPR is a statutory obligation; and
  • this is legally permissible and required for the processing of a contractual relationship in accordance with Art. 6 (1) sentence 1 (b) of the GDPR.

 

Rights of the data subject

You have the right:

  • to request information about the personal data processed by us under Art. 15 of the GDPR. In particular, you may obtain information about the purposes of processing; the category of personal data; the categories of recipients to whom your data have been or will be disclosed; the planned retention period; the existence of a right to correction, deletion, restriction of processing or objection; the existence of a right of appeal; the origin of your data, if not collected by us; the existence of automated decision-making including profiling and, where appropriate, meaningful information about the details of the above;
  • to immediately request the completion or correction of incorrect personal data stored by us in accordance with Art. 16 of the GDPR;
  • in accordance with Art. 17 of the GDPR, to demand the deletion of personal data stored by us, unless its processing is required for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
  • in accordance with Art. 18 of the GDPR, to demand the restriction of processing of your personal data in cases where the accuracy of the data is disputed by you, where the processing of data is unlawful but you object to its deletion, where we no longer need the data, but you require it to assert, exercise or defend legal claims, or where you have objected to processing in accordance with Art. 21 of the GDPR;
  • in accordance with Art. 20 of the GDPR, to receive the personal data that you have provided to us in a structured, current and machine-readable format, or to request its transfer to another data controller;
  • in accordance with Article 22 of the GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you;
  • in accordance with Art. 7 (3) of the GDPR, to revoke the consent provided to us at any time. As a result, we would no longer be allowed to continue the processing of data based on this consent, and;
  • in accordance with Art. 77 of the GDPR, you have the right to complain to a supervisory authority without prejudice to any other administrative or judicial remedy. As a general rule, a data subject may contact the supervisory authority of their usual place of residence or work or the place of the alleged violation if they believe that the processing of personal data concerning them is contrary to the GDPR.

 

Right to withdraw consent

If your personal data is processed on the basis of legitimate interests, you have the right to object to the processing of your personal data in accordance with Art. 21 of the GDPR, provided there are reasons for this that arise from your particular situation or the objection is against direct marketing. In the latter case, you have a general right of objection, which we will implement without you having to specify your particular situation. If you would like to make use of your right to withdraw consent or object to processing, it is sufficient to send an email to the address in the legal notice of our website.

 

General collection of data

When you access our website or retrieve a file, data about this process is stored in a log file on our web server. The following data can be recorded in detail:

  • IP address (where possible, stored anonymously)
  • Domain name of the website from which you arrived
  • Name of the retrieved files
  • Date and time of your visit
  • Name of your internet service provider
  • Information about your operating system and browser version

We only save IP addresses for data security reasons, to guarantee the stability and security of our system (legal basis: Art. 6 (1) lit f GDPR). However, statistical evaluations of data may be carried out on an anonymous basis.

 

Newsletter

We send newsletters with advertising information only with the consent of the recipient or on the basis of statutory authorisation.Registration for our newsletter takes place via a double opt-in procedure. After registering, you will receive an email asking you to confirm your registration.
This confirmation is necessary to verify you as the owner of the email address.
The registration process is logged to enable us to prove the registration in accordance with legal requirements.
This includes the storage of the times of registration and confirmation as well as of your IP address. Other data that you provided when registering for the newsletter will also be saved.
Aside from your email address, your information (e.g. your name) will only be used to personalise the newsletter.
You can cancel the receipt of the newsletter at any time. A link to cancel the newsletter can be found in every newsletter email.

 

Contact form

If you send us queries via the contact form, we will collect and process the data entered on the form, including the contact details you provide, in order to answer your query and address any follow-up questions. Your data will only be used for the purpose of answering and processing your question. In this case, data processing is performed pursuant to Art. 6 (1) sentence 1 a) of the GDPR on the basis of your voluntary consent. You can object to this at any time (right to withdraw consent).

 

Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their place of residence, their place of work or the place of the alleged infringement, if they are of the opinion that the processing of their personal data violates the EU General Data Protection Regulation (GDPR).

 

Right to data portability

You have the right to receive the personal data you provided to us in a structured, current and machine-readable format.

 

Confidentiality of your customer access details

If you have been given access to a password-protected area of our website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

 

Comment function

On individual pages or posts, there is a voluntary comment function for users wishing to share their opinion on the respective page or post. The comment will be reviewed and, if approved, will appear publicly on the page where the comment was posted. Users are not entitled to have their comments approved. The commenter must provide a name, which can be a pseudonym. The commenter must also provide an email address. This will be used to inform them about the status of their comment, particularly if they have asked a question in the comment and are waiting for an answer. The email address will not be displayed publicly, passed on to third parties or analysed manually. The IP address of the commenter will only be saved in an anonymised form. The comment will be stored permanently until such time as the commenter (or an administrator) deletes it. The email address you provide when making a comment will only be stored for the purpose of sending you a notification in the event of a response. Any other data you provide alongside the comment will be published with the comment. If you are asked for a name, you can also use a pseudonym.

 

SSL encryption

This website uses SSL (Secure Socket Layer) encryption for the transmission of data from your browser to our server and to servers that provide files that are integrated on our website.
With SSL, data is transmitted in encrypted form. The data cannot be changed and the sender can be identified.
The presence of SSL encryption is indicated by the prefix "https" at the start of your browser address bar.

 

References to third party websites

References to third party websites are provided on this website in the form of links. Data will only be transferred to the link destination when you click on such a link. This is a technically necessary process. The transmitted data include, in particular: your IP address, the time at which you clicked the link, the page on which you clicked the link, information about your internet browser. If you do not want this data to be transferred to the link destination, do not click on the link.

 

Links to other websites

From time to time, our website / app may contain links to third party websites or to other websites operated by us. If you follow a link to one of these websites, please note that these websites have their own data privacy policies and that we do not accept any responsibility or liability for these policies. Please review these privacy policies before disclosing any personal information to these websites.

 

DoubleClick

DoubleClick from Google ("DoubleClick") is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). DoubleClick uses cookies to maximise the relevance of advertisements displayed to the user. As part of this process, Google records the advertisements that are shown to you and which of them you call up. The use of DoubleClick cookies enables Google and its advertising network to place advertisements based on your previous visits to websites (or apps). The information generated by the cookies is transmitted by Google to a server in the USA for analysis and is stored there. You can prevent the storage of cookies by adjusting the corresponding settings in your browser. You can also prevent Google from collecting and processing cookie-generated data about your use of the website. To do this, please click on the following link: Data protection information for DoubleClick and Google. Please note that when this tool is integrated, it is possible, under the Cloud Act, for American secret services to gain access to personal data that is exchanged with Google on the basis of the Internet Protocol.

 

Use of Facebook's visitor statistics function

We use the visitor statistics function (remarketing function) "Custom Audiences" from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"), also known as Facebook Pixel. This function enables us to display personalised, interest-based Facebook advertising to users of this website when they visit the social network Facebook. The function can only be activated with your consent. If it is activated, a direct connection to a Facebook server will be established when you visit this website. Through this connection, the Facebook server will obtain information about which web pages have been visited by you. Facebook assigns this information to your personal Facebook account. To find out more about the collection and use of data by Facebook, your rights in this regard, and options for protecting your privacy, please see Facebook's privacy policy at https://www.facebook.com/about/privacy/. If you do not wish Facebook to assign the information collected to your Facebook user account, you can deactivate the remarketing function “Custom Audiences” here. To do so, you will first need to log into Facebook.
If you do not have a Facebook account, you can deactivate usage-based Facebook advertising here: http://www.youronlinechoices.com/de/praferenzmanagement/. Please note that when this tool is integrated, it is possible, under the Cloud Act, for American secret services to gain access to personal data that is exchanged with Google on the basis of the Internet Protocol.Cookies used (with lifespan in brackets): ATN (2 years), AA003 (2 months), _fbp (3 months), fr (3 months)

 

Google Maps form

We offer an input form that allows you to display the position of an address on the map, e.g. for route planning. The underlying map software is provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information you enter, including your IP address and the address of the page on which the form is located, will only be transferred to Google when you submit the form. By using the form, you consent to the collection, processing and use of the data by Google and its representatives. Google Maps Terms of Use. Google data privacy policy
Please note that when this tool is integrated, it is possible, under the Cloud Act, for American secret services to gain access to personal data that is exchanged with Google on the basis of the Internet Protocol.

 

Google fonts

This website uses particular fonts from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When you call up a page, your browser loads these fonts. Your IP address and the page (internet address) you have visited are transmitted to a Google server. Further information about the handling of user data can be found at https://developers.google.com/fonts/faq and in Google's privacy policy at: https://www.google.com/policies/privacy/. Please note that when this tool is integrated, it is possible, under the Cloud Act, for American secret services to gain access to personal data that is exchanged with Google on the basis of the Internet Protocol.

 

Use of Facebook's visitor statistics function

We use the visitor statistics function (remarketing function) "Custom Audiences" from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"), also known as Facebook Pixel. This function enables us to display personalised, interest-based Facebook advertising to users of this website when they visit the social network Facebook. The function can only be activated with your consent. If it is activated, a direct connection to a Facebook server will be established when you visit this website. Through this connection, the Facebook server will obtain information about which web pages have been visited by you. Facebook assigns this information to your personal Facebook account. To find out more about the collection and use of data by Facebook, your rights in this regard, and options for protecting your privacy, please see Facebook's privacy policy at https://www.facebook.com/about/privacy/. If you do not wish Facebook to assign the information collected to your Facebook user account, you can deactivate the remarketing function “Custom Audiences” here. To do so, you will first need to log into Facebook.
If you do not have a Facebook account, you can deactivate usage-based Facebook advertising here: http://www.youronlinechoices.com/de/praferenzmanagement/. Please note that when this tool is integrated, it is possible, under the Cloud Act, for American secret services to gain access to personal data that is exchanged with Google on the basis of the Internet Protocol.Cookies used (with lifespan in brackets): ATN (2 years), AA003 (2 months), _fbp (3 months), fr (3 months)

 

Google Maps

This website uses the Google Maps software from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). By using this website, you consent to the collection, processing and use of data, including data that may be automatically collected, by Google and its representatives. Google Maps Terms of Use. Additional information can be found in Google's privacy policy. Google Maps reloads Google fonts in order to be able to display maps correctly. The Google fonts are also loaded from a Google server. More information about these Google fonts can be found at https://developers.google.com/fonts/faq. Please note that when this tool is integrated, it is possible, under the Cloud Act, for American secret services to gain access to personal data that is exchanged with Google on the basis of the Internet Protocol.

 

YouTube videos

We have integrated YouTube videos into some parts of our website. These are stored on the servers of the provider YouTube and can be played from our website via the embedding function. For embedded videos, the option for advanced data protection is activated. When you play these videos, YouTube cookies and DoubleClick cookies are stored on your computer. Data may be transferred to Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google") as the YouTube operator.

When playing videos stored on YouTube, the following data (as a minimum) are transmitted to Google as the operator of YouTube and of the DoubleClick network: IP address and cookie, the address of the page called up on our website, system date and time of the call-up, name of your browser.

These data are transferred regardless of whether or not you have a logged-in Google user account. If you are logged in, Google may assign these data directly to your account. If you do not wish these data to be assigned to your profile, you must log out before pressing the play button for the video.

YouTube/Google saves these data in the form of a user profile and may use the data for advertising, market research and/or to facilitate the user-oriented design of their websites. These data are also analysed for the purposes of providing customised advertising and informing other social network users about your activity on our website. You have the right to object to the creation of such a user profile, whereby you must contact Google as the operator of YouTube to exercise this right.

Further information on the purpose and scope of data collection and processing by Google can be found on this information page. Please note that when this tool is integrated, it is possible, under the Cloud Act, for American secret services to gain access to personal data that is exchanged with Google on the basis of the Internet Protocol.

 

Google Tag Manager

Our website uses Google Tag Manager, which is provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Tag Manager is an auxiliary service and does not itself process any personal data. The tool activates other components, which may in turn collect data under certain circumstances. Google Tag Manager does not access these data. If deactivation occurs at domain or cookie level, it remains in use for all tracking tags implemented by Google Tag Manager. More information about Google Tag Manager can be found in Google's privacy policy. Please note that when this tool is integrated, it is possible, under the Cloud Act, for American secret services to gain access to personal data that is exchanged with Google on the basis of the Internet Protocol.

 

Google Analytics

We use the analysis service Google Analytics. This web analysis service is operated by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We use Google Analytics to evaluate the use of our website and to compile reports on user activities.
This analysis tool works on the basis of cookies. A cookie is a file that is sent when you visit a website and temporarily stored your hard drive to enable your use of the website to be analysed. The information stored by the cookie is usually transferred to a Google server in the USA and stored there.
In Member States of the EU or in other states party to the Agreement on the European Economic Area, the IP address is truncated before sending as part of the IP anonymisation process. Google uses the transmitted information on our behalf to compile a report on how the website is used. We have concluded a data processing contract with Google. If you wish to disable the use of cookies, you may do so by changing the settings of the internet browser on your computer. The web browser is the program you use to open and display web pages (e.g. Internet Explorer, Mozilla Firefox, Opera or Safari). You can also prevent the Google cookie from collecting and processing your data by downloading and installing the browser plug-in offered by Google under the following link: https://tools.google.com/dlpage/gaoptout?hl=de. You can prevent the collection of your data by Google Analytics by clicking on the following link. This will cause an "opt-out cookie" to be set, which will prevent the collection of your data when visiting this website in future: Deactivate Google Analytics
Other information on the terms of use and privacy policies of Google and Google Analytics can be found at http://www.google.com/analytics/terms/de.html and at https://www.google.de/intl/de/policies/. Please note that on this website, Google Analytics is used with the "anonymizeIp" extension. This ensures that IP addresses are recorded anonymously.
Information on cookies:
Classification for consent: Marketing
Cookies used (with lifespan in brackets): _ga (2 years), _gid (1 day), _gat_UA- * (1 minute), _ utma (2 years), _utmb (30 minutes), _utmc (session), _utmt (10 minutes ), _utmz (6 months)
Please note that when this tool is integrated, it is possible, under the Cloud Act, for American secret services to gain access to personal data exchanged with Google on the basis of the Internet Protocol.

 

Security notice

We use appropriate technical and organisational measures to secure our website and other IT systems against loss, destruction, unauthorised access, unauthorised changes and unauthorised dissemination of your data. Complete protection against all risks is not always practically feasible, despite due care. Because we cannot guarantee the complete security of your data when communicating by email, we recommend that you send confidential information by post.

 

Changes to this data privacy policy

We reserve the right to change this data protection declaration due to changes in the legal situation, this website or the type of data collection taking place. However, this right to change only applies to declarations on data processing. Where the consent of the user is required or where parts of the data privacy policy regulate the contractual relationship with users, the data protection declaration will only be changed with the user's consent.

As such, please familiarise yourself with this data privacy policy as required, especially if you intend to provide personal data.

This website has been checked and scanned with the data protection tool wwwschutz. The data protection declaration was created with wwwschutz.

 

Your point of contact

If you have questions about the collection, processing or use of your personal data, about the disclosure, rectification, blocking or deletion of data or about the withdrawal of consent or objection to a specific use of data, please contact us directly.

You can reach the data protection officer
Mr. Erich Zimmermann
by e-mail at e.zimmermann@zida-datenschutz.de

Postal address of the data protection officer:

Erich Zimmermann
c/o ZiDa-Datenschutz GmbH
Waldhofer Str. 102
69123 Heidelberg
Germany

Website of the data protection officer:
www.zida-datenschutz.de


TOP!