Data Protection Declaration
§1 The Responsible Party and the Data Protection Officer
(1)Name and address oft he party responsible
The party responsible within the meaning of the Basic Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations:
T.D.G. Vertriebs GmbH & Co. KG
Alter Wandrahm 10
(2) The Data Protection Officer of the responsible party is:
Beethovenstraße 23, 87435 Kempten
(1) The data protection declaration is based on the terminology used by the European regulator in the adoption of the EU General Data Protection Regulation (hereinafter referred to as "GDPR"). The data protection declaration should be easy to read and understand. To ensure this, the most important terms are explained below:
(2) Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
(3) A data subject is any identified or identifiable natural person whose personal data is processed by the Data Protection Officer.
(4) Processing means any process or series of operations carried out with or without the aid of automated procedures relating to personal data, such as the gathering, collection, organisation, classification, storage, adaptation or alteration, retrieval, retrieval, use, disclosure by transmission, dissemination or any other form of provision, reconciliation or linking, restriction, erasure or destruction.
(5) Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
(6) Pseudonymization means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
(7) The controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
(8) Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
(9) Recipient means a natural or legal person, public authority, agency or other body, to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
(10) A third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
(11) Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
§3 Provision of the Website and Creation of Log Files
(1) When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we automatically collect the following data and information from the computer system of the calling computer each time you visit the website:
· The IP address of the user
· Information about the browser type and version used
· The user’s operating system
· The Internet service provider of the user
· Date and time of access
· Websites from which the user’s system accesses the Website
· Websites accessed by the user’s system via our website
· Content of pages visited (concrete pages)
· Amount of data transmitted in each case
· Search engines used
· Names of downloaded files
The data is stored in the log files of our system. This data is not stored together with other personal data of the user.
When using this general data, we do not draw any conclusions about the data subject. The data is solely evaluated statistically.
(2) The legal basis for the temporary storage of log files is Article 6(1)(f) GDPR.
(3) The temporary storage of the data by the system is necessary to · enable delivery of the website to the user's computer. For this, the IP address of the user must remain stored for the duration of the session. · optimize the content of our website as well as the advertising therein · ensure the functionality of our IT systems and the technology of our website · provide law enforcement authorities with the information necessary for law enforcement in the event of a cyber attack. For these purposes, we also have a legitimate interest in data processing pursuant to Article 6(1)(f) GDPR.
(4) The data will be deleted as soon as they are no longer required for the purpose for which they were collected - in this case at the end of the usage process. In case of storage of the data in log files, this will occur after 3 days at the latest. Storage beyond this period is possible. In this case the IP addresses are deleted or anonymized, so that an assignment of the visiting client is no longer possible.
(5) The collection of data for the provision of the website and the storage of data in log files is absolutely essential for the operation of the website, which is why there is no possibility of objection.
· which allow an analysis of your surfing behavior
· for the integration of user-oriented advertisements and for market research purposes
(5) The legal basis for the processing of personal data using technically necessary cookies is Article 6(1)(f) GDPR. The legal basis for the processing of personal data using cookies for analysis purposes, for advertising purposes, if consent has been given, is Article 6(1)(a) GDPR.
The purpose of using technically unnecessary cookies is to improve the quality of our website and its contents. Through the analysis cookies, we learn how the website is used and can thus continuously optimize our offer. The advertising cookies enable us to integrate advertising according to your interests or display it to you. This information may also be used if you visit the website again with the same device, to recognize you automatically and to make navigation easier for you.
(8) You can adjust the cookie settings here.
§5 Contact Form and Emails
(1) On our website there is a contact form which can be used for electronic contact. If you take this opportunity, the data entered in the input mask will be transmitted to us and stored. These data are:
· Email Address,
At the time the message is sent, the following data is also stored:
· IP Address of the user,
· Date and time of registration
For the processing of the data, your consent will be obtained during the sending process and reference will be made to this data protection declaration.
(2) You are welcome to contact us by e-mail. In this case the personal data transmitted with the e-mail will be stored. If this information concerns communication channels (e.g. e-mail address, telephone number), you also agree that we may contact you via this communication channel to answer your request. In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation.
(3) If the user has given his or her consent, the legal basis for the processing of the data is Article 6(1)(a) GDPR. The legal basis for the processing of data transmitted in the course of sending an e-mail is Article 6(1)(f) GDPR. If the e-mail contact aims at the conclusion of a contract, then the additional legal basis for the processing is Article 6(1)(b) GDPR.
(4) The processing of the personal data from the input mask is solely for the purpose of processing the contact. We will use the data from your e-mail enquiries exclusively for the purpose for which you make them available when contacting us. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems. Herein our legitimate interest lies.
(5) The data will be deleted as soon as they are no longer necessary for the purpose of their collection. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be concluded from the circumstances that the matter in question has been finally clarified. Any additional personal data collected during the sending process will be deleted after a period of seven days at the latest. If the e-mail contact is aimed at the execution of a contract, the data will be deleted after the expiration of the legal (commercial or tax) storage periods required for this purpose.
(6) You have the possibility to revoke your consent to the processing of the e-mail and its content at any time. In such a case the conversation cannot be continued. Please contact the responsible person in accordance with § 1. However, this possibility of revocation only exists if the e-mail contact does not serve the preparation or execution of a contract.
(1) The legal basis for sending the newsletter is Art. 7 (3) UWG. With your consent you can subscribe to our free newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent. For the registration to our newsletter we use a double opt-in procedure. This means that after your registration we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. Moreover, we store your IP addresses and the time of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
(2) The only mandatory information for sending the newsletter is your e-mail address and date of birth. The input of further data (name) is voluntary and will be used to be able to address you personally.
The data will be forwarded to our marketing service provider.
(3) We would like to inform you that we evaluate your user behavior when the newsletter is sent. For this evaluation, the e-mails sent contain web beacons or tracking pixels, which are one-pixel image files stored on our website. For the analysis we link the data [log files] and the web beacons mentioned in § 3 with your e-mail address and an individual ID. The data is only collected pseudonymously, the IDs are not linked to your other personal data, a direct personal reference is excluded. The legal basis for tracking is Article 6 (1)(1)(f) GDPR. These data are evaluated by our marketing service provider. You can object to this tracking at any time by clicking on the separate link provided in each e-mail or by informing us via another contact channel. The information is stored as long as the subscription is active. After you unsubscribe, we store the data purely statistically and anonymously.
(4) For sending the newsletter we use Newsletter2Go from the provider Newsletter2Go GmbH, Köpenicker Str. 126, 10179 Berlin, www.newsletter2go.de. For this purpose, the previously described logged data (IP address, registration/confirmation time) and the email address are stored for the purpose of sending and evaluating the newsletter as well as for the optimization of our own services or for commercial purposes. However, Newsletter2Go does not use the data to contact the recipient directly or to pass it on to other third parties. Further information about Newsletter2Go can be found at https://www.newsletter2go.de/datenschutz/.
(5) The information will be stored for as long as the subscription to the newsletter is active.
(6) The legal basis for the processing of the data after registration for the newsletter by the user is Article 6(1)(1)(a) GDPR. The use of the mailing service Newsletter2Go, the performance of statistical collections and analyses as well as the logging of the registration procedure are based on our legitimate interests according to Article 6(1)(1)(f) GDPR.
(7) The collection of the user's e-mail address serves to deliver the newsletter. The date of birth serves to guarantee the minimum age for consent according to Article 8 GDPR.
(8) The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. Your e-mail address, date of birth as well as other personal data will therefore be stored for as long as the subscription to the newsletter is active.
The other personal data collected during the registration process (IP address, time of registration/confirmation) are as a rule deleted after a period of seven days.
(9) The other personal data collected during the registration process (IP address, time of registration/confirmation) are as a rule deleted after a period of seven days.
Hereby a revocation of the consent to store the personal data collected during the registration process (IP address, time of registration/confirmation) is also possible.
With revocation of the newsletter, we simultaneously delete your data in Newsletter2Go and the statistical analyses. A separate revocation of the dispatch by Newsletter2Go or the statistical analysis is unfortunately not possible.
(1) We offer you the opportunity to register on our website by providing personal data. The data is entered into an interface and transmitted to us and saved. This data is not transferred to third parties, provided that no legal obligation exists for transferring the data or the transferring of data serves a criminal or legal prosecution. The following data is collected during the registration process:
· Email Address
· Self-chosen password
· Freely chosen username
· IP Address
· Date and time of registration
· Phone number
All data can be managed and changed in the protected customer area.
(2) For registration, we use a double-opt-in procedure. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to register. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. Furthermore, we store your IP address and the time of registration and confirmation. The purpose of this procedure is to be able to verify your registration and, if necessary, to clarify any possible misuse of your personal data.
(3) Upon consent of the user, the legal basis for the processing of the data is Article 6(1)(1)(a) GDPR. If the registration serves the completion of a contract to which you are party or the implementation of pre-contractual measures, the additional legal basis for the processing of data is Article 6(1)(1)(b) GDPR.
(4) Registration is necessary for the fulfillment of the contract or the execution of pre-contractual measures.
(5) The data will be deleted as soon as they are no longer necessary for the purpose of their collection. This is the case for data collected during the registration process for the purpose of fulfilling a contract or for the implementation of pre-contractual measures if the data is no longer necessary for the implementation of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations. Continuing obligations require the storage of personal data during the term of the contract. Furthermore, warranty periods must be observed and the data must be stored for tax purposes. Which storage periods are to be adhered to cannot be determined globally, but must be determined for each individual contract and contracting party in each individual case.
(6) If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, an early deletion of the data is only possible if no contractual or legal obligations prevent a deletion. Furthermore, you are free to have the personal data provided during registration completely deleted from the data stock of the data controller by declaring the revocation to the data controller according to § 1 via e-mail or by post. In this case your data will be deleted immediately.
§8 SSL Encryption
Our website uses SSL encryption in case of transmission of confidential or personal data. This encryption is used, for example, for payment transactions and inquiries to us via this website. In order to ensure that this encryption is actually active, it must be monitored by you. The status of the encryption is indicated by the browser line, which changes from "http://" to https:// in the case of encryption. In the case of encryption, your data cannot be read by third parties. If the encryption is not active, please contact us confidentially via another contact option.
(1) If you would like to order in our webshop, it is necessary for the conclusion of the contract that you enter your personal data, which we need for the completion of your order. The data required for the processing of the contracts are specifically marked, further details are voluntary. The data are entered into an interface and transmitted to us and stored. The following data is collected within the scope of the web shop:
· IP Address
· Date and time of order
· Address (applicable when different from delivery address)
· Email Address
· Telephone Number
(2) A transfer of the data to third parties occurs only if the transfer is necessary for the purpose of the closing of the contract or for account purposes and/or for the collection of the payment or if you have expressly consented. In this regard, we only transfer the data required in each case. The data recipients are:
· The respective delivery/shipping company (forwarding of name, address)
· Collection companies, as far as the payment must be collected (forwarding of name, address, order details)
· Payment service provider - depending on the selection of the payment means.
(3) You can voluntarily create a customer account through which we can store your data for future purchases. When you create an account under "My account", the data you have provided will be stored revocably.
(4) The legal basis is Article 6(1)(b) GDPR. With regard to voluntary data, the legal basis for the processing of the data is Article 6(1)(a) GDPR.
(5) The collected mandatory data are required for the fulfilment of the contract with the user (for sending the goods and confirming the contents of the contract). We therefore use the data to answer your inquiries, to process your order, in the recovery of a claim and for the purpose of technical administration of the websites. The voluntary information is provided to prevent misuse and, if necessary, to investigate criminal offences. We may also process the information you provide to inform you of other interesting products in our portfolio or to send you e-mails containing technical information.
(6) The data will be deleted as soon as they are no longer necessary for the purpose of their collection. We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years after the execution of the contract. However, after 10 years we will restrict the processing, i.e. your data will only be used to comply with the legal obligations. If there is a continuing obligation between us and the user, we store the data for the entire duration of the contract and for ten years thereafter (see above). With regard to the voluntarily provided data, we will delete the data at the end of 10 years after the execution of the contract, unless another contract is concluded with the user during this time; in this case, the data will be deleted at the end of 10 years after the execution of the last contract.
(7) If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, an early deletion of the data is only possible if no contractual or legal obligations prevent a deletion. Otherwise, you are free to have the personal data provided during registration completely deleted from the database of the data controller according to § 1. With regard to the voluntary data, you can at any time declare your revocation to the data controller according to § 1. In this case the voluntary data will be deleted immediately.
§10 Payment Services
(1) We have integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed via private or business PayPal accounts. In addition, PayPal offers the option of processing virtual payments via credit cards if you do not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also acts as a trustee and provides buyer protection services. PayPal's European operating company is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
(2) If you select "PayPal" as a payment option in our online shop during the order process, the data of the data subject are automatically transmitted to PayPal. By selecting this payment option, the person concerned consents to the transfer of personal data required for payment processing.
(3) The personal data transmitted to PayPal is generally first name, last name, address, e-mail address, IP address, telephone number, mobile phone number or other data required for payment processing. Personal data in connection with the respective order are also necessary for the processing of the purchase contract.
(4) The purpose of data transmission is to process payments and prevent fraud. We will provide PayPal with personal data, especially if there is a legitimate interest in the transfer.
(5) PayPal may pass on personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfil contractual obligations or if the data is to be processed on behalf of PayPal.
(6) The data subject has the option to revoke his/her consent to the handling of personal data with PayPal at any time. A revocation does not affect personal data which must be processed, used or transmitted for (contractual) payment processing.
10.2 Credit Card, Direct ebanking, and Purchase on Account
(1) We have integrated components on this website for payment by credit card, direct bank transfer and purchase on account, which enable cashless payment for products and services on the Internet.
The operating company is Unzer GmbH.
(2) If you select "credit card", "purchase on account" or " direct bank transfer" as payment option during the ordering process in our online store, your data will be automatically transmitted to the credit card company. By selecting this payment option, you agree to the transmission of personal data required for the processing of payments.
(3) When you make a purchase via credit card, you transmit your name, credit card number, verification number and expiration date of the credit card to the credit card company. The credit card company then carries out the payment to us after technical verification. For purchase completion via direct bank transfer you transmit your name and your account data.
(4) The transmission of the data is only for the purpose of payment processing.
(5) Further information can be found at www.unzer.com.
§11 Personal Data Transfer to Third Parties
11.1 Links to external websites
This website contains links to external sites. We are responsible for our own content. We have no influence over the contents of external links and are therefore not responsible for them, in particular we do not adopt their contents as our own. If you are directed to an external site, the data protection declaration provided there applies. If you notice any illegal activities or contents on this page, please inform us. In this case, we will check the content and react accordingly (notice and take down procedure).
11.2 Rented server space
We hereby point out that we use a rented server space of the provider domainfactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning, www.df.eu. By visiting the website, the provider of the server space therefore receives diverse information. This information is automatically stored by the provider in server log files (see § 3), which are automatically transmitted by your browser. Further information about the data can be found in § 3.
11.3 Embedding of YouTube Videos
We have integrated YouTube videos into our online offer, which are stored on http://www.YouTube.com and can be played directly from our website. YouTube is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. You Tube LLC is a subsidiary of Google Inc. By visiting this website, YouTube receives the information that you have accessed the corresponding subpage of our website. The following data is transmitted:
· Device-specific information, such as the hardware used, the version of the operating system, unique device identification and information about the mobile network including your telephone number.
· Log data in the form of server logs. These include, but are not limited to, details of how the services were used, such as search queries, IP address, hardware settings, browser type, browser language, date and time of your request, source page, cookies that uniquely identify your browser or Google Account.
· Location-related information. Google may collect information about your actual location. This includes, for example, your IP address, your WLAN access points or cell tower.
· Further information on the data collected by Google, INC can be found at the following link: https://policies.google.com/privacy?hl=en&gl=en
This is independent of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. The legal basis for processing personal data is Article 6(1)(1)(f) GDPR. The integration of the videos serves to make the website clearer for the user and to increase the search engine ranking of the website on Google. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented configuration of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. Herein also lies our legitimate interest.
§12 Web Analysis by Google Analytics
(1) We use the service of Google Inc. (Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to analyze the surfing behavior of our users. The software places a cookie on your computer (see § 4 for cookies). If individual pages of our website are accessed, the following data is stored:
· Two bytes of the IP address of the user's calling system
· The accessed website
· Entry pages, exit pages,
· Session duration and bounce rate
· The frequency with which the website is accessed
· Country and region of origin, language, browser, operating system, screen resolution, use of Flash or Java
· Search engines and keywords used
(2) The information generated by the cookie about the use of this website by users is usually transferred to a Google server in the USA and stored there.
(3) The legal basis for the processing of personal data is Article 6(1)(1)(a) GDPR.
(4) On our behalf, Google will use this information to evaluate your use of the website and to compile reports on website activity. We are able to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness.
(5) The data will be deleted as soon as they are no longer required for our recording purposes, which in our case is after 14 months.
(6) The cookies used are stored on your computer and transmitted to our site. Cookies that have already been saved can be deleted at any time. You can revoke your consent to the processing of personal data at any time by preventing the storage of cookies through a dedicated setting in your browser software (deactivation or restriction); we would like to inform you, however, that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available through Google under the following link. The current link is: "http://tools.google.com/dlpage/gaoptout?hl=en."
§13 Google Adwords Conversion Tracking
(1) We use the Google Conversion Tracking service on our website to evaluate Google AdWords. It is an analysis service of Google Inc. (Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to analyze the surfing behavior of our users. The software sets a cookie on your computer (for cookies see § 4), known as a "conversion cookie". If individual pages of our website are called up, information is stored by Google. The information generated by the cookie about the use of this website by the user is generally transferred to a Google server in the USA and stored there. If you visit particular pages of our website and the cookie has not yet expired, we and Google can recognize that the ad has been clicked and you have been redirected to our site.
(2) However, we ourselves do not receive any personal data.
(3) The information collected through the conversion cookie is used to compile statistics for us. This tells us the number of users who have clicked on our ad and been directed to a page with a conversion tracking tag. By analyzing the collected data, we are able to compile information about the use of our ads.
(4) The legal basis for the processing of personal data is your consent in accordance with Article 6 (1)(1)(a) GDPR.
(5) The cookie loses its validity after 30 days. As we do not collect any data ourselves, we do not store any. If Google Inc. collects data, we have no influence on the deletion periods.
(6) The cookies used are stored on your computer and transmitted by it to our site. You have the possibility to revoke your consent to the processing of your personal data at any time by preventing the storage of cookies through a dedicated setting in your browser software (deactivation or restriction); however, we would like to inform you that in this case you may not be able to use all functions of this website to their full extent.
§14 Facebook, Custom Audiences und Facebook Marketing Service (Tracking Pixel)
(1) Within our online offer, due to our legitimate interests in the analysis, optimization and commercial operation of our online offer, and for these purposes the "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook") is used.
(2) With the help of the Facebook pixel, Facebook is able to determine the visitors of our online offer as a target group for the presentation of ads ("Facebook ads"). Accordingly, we use the Facebook pixel in order to display the Facebook Ads placed by us solely to those Facebook users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook ("custom audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of users and do not appear as harassment. The Facebook Pixel also enables us to track the effectiveness of Facebook Ads for statistical and market research purposes by seeing whether users are redirected to our website after clicking on a Facebook Ad ("conversion").
(3) The Facebook pixel is integrated directly by Facebook when you visit our website and can store a cookie, i.e. a small file on your device. If you then log in to Facebook or visit Facebook while logged in, the visit to our online offer will be noted in your profile. The data collected about you is anonymous to us, so we cannot draw conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and can be used by Facebook as well as for our own market research and advertising purposes. If we send data to Facebook for comparison purposes, it is encrypted locally on the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of comparing the data with the data similarly encrypted by Facebook.
(4) Furthermore, when using the Facebook pixel, we use the additional function "enhanced matching" ( in this case, data such as telephone numbers, email addresses or Facebook IDs of users) to create target groups ("Custom Audiences" or "Look Alike Audiences") and send them to Facebook (encrypted). Further information on "extended matching": https://www.facebook.com/business/help/611774685654668.
(5) The legal basis for the processing of data is Article 6 (1)(1)(a) GDPR.
(6) Also based on your consent in accordance with Article 6 (1)(a) GDPR, we use the "Custom Audiences from File" procedure of the social network Facebook, Inc. In this case, the email addresses of the newsletter recipients are uploaded to Facebook. The upload process is encrypted. The upload is used solely to determine recipients of our Facebook ads. We want to ensure that the ads are only displayed to users who have an interest in our information and services.
(7) The processing of data by Facebook takes place within the framework of Facebook's data use policy. Accordingly, general information on the display of Facebook Ads is provided in the Facebook Data Usage Policy: https://www.facebook.com/policy.php. Special information and details about the Facebook pixel and its functionality can be found in the Facebook help area: https://www.facebook.com/business/help/651294705016616.
(8) You have the possibility to withdraw your consent to the processing of personal data at any time by preventing the storage of cookies through a dedicated setting in your browser software (deactivation or restriction); however, we would like to inform you that in this case you may not be able to use all functions of this website to their full extent. To adjust the types of advertisements displayed to you within Facebook, you can go to the page set up by Facebook and follow the instructions on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.
(1) Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Article 6 (1)(f) GDPR), we use the marketing and remarketing services ("Google Marketing Services") of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google").
(2) Google's marketing services allow us to better target ads for and on our website to show only ads that potentially match the interests of our customers. For example, if a user is shown ads for products that he or she has been interested in on other websites, this is called "remarketing". For these purposes, a "web beacon" is integrated into the website when calling up our and other websites on which Google marketing services are active. With their help, an individual cookie is stored on your device (instead of cookies, comparable technologies can also be used). This file records which websites you have visited, what content you are interested in and which offers you have clicked on, as well as technical information about the browser and operating system, referring websites, visiting time and other information about the use of the online offer. Your IP address is also recorded, within the scope of Google Analytics, we disclose that the IP address is shortened within member states of the European Union or in other signatory states to the Agreement on the European Economic Area and only in exceptional cases is it transferred in full to a Google server in the USA and shortened there. The IP address will not be merged with your data within other Google offers. Google may also combine the above-mentioned information with information from other sources. If you subsequently visit other websites, the ads tailored to your interests can be displayed.
(3) User data is processed pseudonymously within the framework of Google Marketing Services, i.e. Google does not store and process the name or e-mail address, but the relevant data cookie-related within pseudonymous user profiles. From Google's perspective, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who that cookie owner is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymization. The information collected about you by Google Marketing Services is transmitted to Google and stored on Google's servers in the USA. By storing the data under a pseudonym, your interests as a user are appropriately protected.
(4) We may also use the "Google Tag Manager" to integrate and manage the Google analysis and marketing services into our website.
(5) The legal basis for the processing of the data is your consent under Article 6 (1)(1)(a) GDPR.
(6) The responsible party is Google Ireland Ltd, Gordon House, 4 Barrow Street, Dublin, Ireland, Fax: +353 (1) 436 1001.
(7) If you would like to object to interest-based advertising by Google Marketing Services, you can use the settings and opt-out options provided by Google: http://www.google.com/ads/preferences. You have the possibility to withdraw your consent to the processing of personal data at any time by preventing the storage of cookies through a dedicated setting in your browser software (deactivation or restriction); however, we would like to inform you that in this case you may not be able to use all functions of this website to their full extent.
§16 Google Adwords Conversion with Remarketing
(1) This website uses Google Adwords. It is a service for the integration of advertisements of Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
(2) Google AdWords enables an advertiser to define keywords that are used to display an ad in Google's search engine results solely when a keyword-relevant search result is retrieved with the search engine. In the Google advertising network, the ads are distributed to topic-relevant websites using an automatic algorithm and in accordance with the previously defined keywords.
(3) Google Adwords serves the purpose of advertising our website by displaying interest-based advertising on third party sites, in the results of the Google search engine and through third-party ads on our site. We thereby pursue the interest to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs. These advertising materials are delivered by Google via "Ad Servers". For this purpose, we use ad server cookies, through which certain parameters can be measured to measure success, such as the display of the ads or clicks by users. If you reach our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies generally lose their validity after 30 days. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be contacted) are generally stored as analysis values for this cookie.
(4) These cookies enable Google to recognize your internet browser (see also § 4). If a user visits certain pages of the website of an AdWords client and the cookie stored on their computer has not yet expired, Google and the client can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Adwords client. Cookies cannot be tracked through the websites of Adwords clients. We receive only statistical evaluations from Google. By means of these evaluations we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, in particular we cannot identify the users on the basis of this information. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and save your IP address. We ourselves do not collect and process any personal data in the advertising measures mentioned above.
(5) Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the data collected, nor do we know the full extent of the data collection and the storage period. Your data will be transferred to the USA and evaluated there. Through the integration of AdWords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. Furthermore, both Google and we receive information via the conversion cookie as to whether you have generated sales if you have reached our website via an AdWords advertisement.
(6) Remarketing: In addition to Adwords Conversion we use the application Google Remarketing. This is a function that enables us to display advertising to Internet users who have previously visited our website. This is to show you advertisements that are relevant to your interests. This is done by means of cookies stored in your browser, which are used by Google to record and evaluate your usage behavior when you visit various websites. Each time a website on which the Google Remarketing service has been integrated is called up, the browser of the data subject automatically identifies itself to Google, so that Google can determine your previous visit to our website. Within the scope of this technical procedure, Google obtains knowledge of personal data, i.e. your IP address or your surfing behaviour. A combination of the data collected in the course of remarketing with your personal data, which may be stored by Google, does not, according to Google's own statements, take place. However, this data is also transmitted to Google in the USA and stored there.
(7) The legal basis for the processing of the data is your consent under Article 6 (1)(1)(a) GDPR.
(8) You can prevent participation in this tracking procedure in various ways. You can revoke your consent to the processing of your personal data at any time by preventing the storage of cookies through a dedicated setting in your browser software (deactivation or restriction); we would like to inform you, however, that in this case you may not be able to use all the functions of this website to their full extent:
· by setting your browser software accordingly, in particular the suppression of third-party cookies, means that you will not receive advertisements from third-party providers; however, in this case you may not be able to use all functions of our websites.
· by disabling cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads, this setting will be cleared when you delete your cookies.
· by deactivating the interest-based ads of providers that are part of the self-regulation campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies.
· by permanently deactivating it in your Firefox, Internet Explorer or Google Chrome browser under the link http://www.google.com/settings/ads/plugin. We would like to inform you that in this case you may not be able to use all the functions of this offer to their full extent.
(9) The responsible party is Google Ireland Ltd, Gordon House, 4 Barrow Street, Dublin, Ireland, Fax: +353 (1) 436 1001. For more information on data protection at Google, please visit http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.besuchen.
§18 Employment Opportunities
(1) We advertise employment opportunities on our website.
(2) You can send us your application documents by e-mail. In this context, we process the information we receive from you and also the following:
· Email address
· If necessary, further information, which is transmitted via e-mail
(3) We do not conduct research about you on the Internet (background checks).
(4) During the application process, we will not use any information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, nor will we use genetic data, biometric data to unambiguously identify a natural person, health data or data concerning sexual life, sexual orientation, pregnancy or family planning, age or gender. We ask you from the outset not to send us any such information. Exceptions to this are information about gender and possible severe disabilities. This information is necessary for us to take and comply with the legal requirements for protective measures etc. However, you are under no circumstances obliged to provide us with such information.
(5) Your data will initially be processed solely for the purpose of carrying out the application procedure. If your application is successful, the data will become part of the human resources file and can be used to carry out and terminate the employment relationship. If we are currently unable to offer you employment, we will process your data in order to defend ourselves against possible legal claims, in particular due to an alleged discrimination in the application procedure. As far as you receive cost reimbursements, the corresponding booking documents will be processed to fulfill the commercial and tax storage obligations. The legal basis for the data processing is therefore Article 6 (1)(b) GDPR, insofar as the data processing serves to decide on the establishment of an employment relationship and insofar as the data are then included in the employment relationship. If the storage serves to secure claims, the legal basis is Article 6 (1)(f) GDPR. A legitimate interest here is the receipt of evidence documents for possible defense. We process information and documents that are not required for the above-mentioned purposes on the basis of your implied consent in accordance with Article 6 (1)(a) GDPR, which you have given us by sending them to us. If you receive reimbursements from us, the legal basis is Article 6 (1)(c) GDPR.
(6) We store the data required for a successful application and for the employment relationship until the end of the employment relationship and for up to 3 years thereafter. We will continue to process the data relating to an application which we had to decide to reject for a period of 6 months after the rejection has been sent in order to protect our legitimate interests. In the event of a claim being made against us in the course of a process, we will store the data until the process is completed. This also applies accordingly to data received voluntarily. If you receive reimbursements of costs, the corresponding accounting documents will be kept for the fulfilment of the commercial and tax law retention obligations until 31 March of the eleventh calendar year after payment at the latest, in the case of commercial and business letters and other tax-relevant documents the seventh calendar year after their creation.
(7) You have the right to revoke the data you have voluntarily provided, which you can exercise at any time by contacting the person responsible according to § 1.
§19 Rights of the Data Subject
If your personal data are processed, under the applicable law of the GDPR , you have the following rights:
- The right of access
- The right to rectification
- The right to restriction of processing
- The right to erasure (right to be forgotten)
- The right to information
- The right to data portability
- The right to object to the processing
- The right of withdrawal of data protection consent
- The right not to apply an automated decision
- The right of appeal to a supervisory authority
19.1 The Right of Access
(1) You can ask the controller to confirm whether personal data concerning you will be processed by us. If such processing has taken place, you can request information from the controller free of charge at any time about the personal data stored about you and about the following information:
a) the purposes for which the personal data are processed;
b) the categories of personal data processed;
c) the recipients or categories of recipients to whom the personal data concerning you have been or are still being disclosed;
d) the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
e) the existence of a right to rectification or deletion of personal data concerning you, a right to limitation of the processing by the controller or a right to object to such processing;
f) the existence of a right of appeal to a supervisory authority;
g) any available information on the origin of the data if the personal data are not collected from the data subject;
h) the existence of automated decision-making, including profiling referred to in Article 22(1) and (4) GDPR, and - at least in these cases - meaningful information on the logic involved and the significance and envisaged effects of such processing for the data subject.
(2) You have the right to request information as to whether the personal data concerning you are transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transmission.
19.2 The Right to Rectification
You have the right to obtain from the controller immediate rectification and/or completion if the personal data processed concerning you are incorrect or incomplete.
19.3 The Right to Restriction of Processing
(1) Under the following conditions, you may request the controller to immediately restrict the processing of your personal data:
a) if you dispute the accuracy of the personal data concerning you for a period of time that enables the data controller to verify the accuracy of the personal data;
b) the processing is unlawful and you oppose the deletion of the personal data and instead request that the use of the personal data be restricted;
c) the controller no longer needs the personal data for the purposes of the processing, but you need them to establish, exercise or defend legal claims, or
d) if you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override your grounds.
(2) Where the processing of your personal data has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the processing restriction has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
19.4 The Right to Erasure (Right to be Forgotten)
(1) You have the right to obtain from the controller the erasure of your personal data without undue delay, where one of the following grounds applies:
a) Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
b) You withdraw consent on which the processing is based according to point (a) of Article 6(1) GDPR, or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing.
c) You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR.
d) Your personal data have been unlawfully processed.
e) Your personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
f) Your personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
(2) Where the controller has made your personal data public and is obliged pursuant to Article 17(1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers who are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
(3) The right to erasure shall not apply to the extent that processing is necessary
a) for exercising the right of freedom of expression and information;
b) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
c) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) GDPR as well as Article 9(3) GDPR;
d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
e) for the establishment, exercise or defence of legal claims.
19.5 The Right to Notification of Erasure or Rectification
The controller shall communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject requests it.
19.6 The Right to Data Portability
(1) You have the right to receive the your personal, which you have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where
a) the processing is based on consent pursuant to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR; and
b) the processing is carried out by automated means.
(2) In exercising your right to data portability pursuant to paragraph 1, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This shall not adversely affect the rights and freedoms of others.
(3) The right of portability shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. In order to exercise the right of data portability, the data subject may at any time contact the controller.
19.7 The Right to Object to the Processing
(1) You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
(2) The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
(3) Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, your personal data shall no longer be processed for such purposes.
(4) In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
(5) In order to exercise the right to object to processing, the data subject may at any time contact the controller.
19.8 The Right of Withdrawal of Data Protection Consent
You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. To withdraw your consent, contact the controller.
19.9 Automated Individual Decision-Making, Including Profiling
(1) You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
a) is necessary for entering into, or performance of, a contract between you and a data controller;
b) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
c) is based on your explicit consent.
(2) However, these decisions shall not be based on special categories of personal data referred to in Article 9(1) GDPR, unless point (a) or (g) of Article 9(2) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
(3) In the cases referred to in points (a) and (c) of paragraph 1, the data controller shall implement suitable measures to safeguard the your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
(4) If the data subject wishes to assert their rights relating to automated decisions, he or she may contact the controller at any time.
19.10 The Right of Appeal to a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or suspect infringement, if you believe that the processing of your personal data is contrary to the GDPR. The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.