Right to file complaints with regulatory authorities

In the event of infringements of the GDPR, the persons concerned shall have the right to appeal to a supervisory authority, particularly in the member state of their habitual residence, workplace or place of presumed infringement. The right of appeal shall be without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to have data which we process automatically based on your consent or in fulfillment of a contract delivered to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another data controller, this will only be completed if technically feasible.

Information, Correction, and Deletion

As permitted by law, you have the right to be provided with information about your personal data that is stored as well as its origin, the recipient, and the purpose for which it has been processed at any time free of charge. You also have the right to have this data corrected or deleted. You can contact us at any time concerning this and any other questions you may have on the subject of personal data.

Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time to do this. The right to restrict data processing exists in the following cases:

• If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the examination, you have the right to demand the restriction of the processing of your personal data.
• If the processing of your personal data was done/is done unlawfully, you may request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need it for the exercise, defense, or assertion of legal claims, you have the right to demand the restriction of the processing of this data instead of deletion.
• If you have objected according to Art. 21 Para. 1 GDPR, a balance must be made between your interests and ours. As long as it is not yet clear whose interests take presidense, you have the right to demand that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, this data – apart from being stored – may be processed only with your consent or for the purpose of asserting, exercising, or defending rights; protecting the rights of another natural or legal person; or on the grounds of an important public interest of the European Union or of a Member State.

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and the protection of the transmission of confidential content, such as the orders or inquiries you send to us as the site operators. You can recognize an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar.

If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

Objection to Advertising Emails

We hereby object to using contact data published in the context of legal notice requirements for sending promotional and informational materials that were expressly not requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is delivered.

4. Data Collection on this Website

Cookies

Our websites use cookies. Cookies are small data packages and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.

Cookies can come from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies enable the integration of certain third-party services within websites (e.g. cookies for processing payment services).

Cookies perform various functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or the display of videos). Other cookies can be used to evaluate user behavior or for advertising purposes.

Cookies that are necessary to carry out the electronic communication process, provide certain functions that you have requested (e.g., the shopping cart function), or optimize the website (e.g., cookies to measure web audience) (necessary cookies) are stored based on Art. 6 Para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the optimized provision of its services without technical errors. If consent to the storage of cookies and comparable recognition technology has been requested, processing takes place exclusively based on this consent (Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 of the Telecommunications Digital Services Data Protection Act (TDDDG); consent can be revoked at any time.

You can configure your browser so that you are informed when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies in certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. Disabling cookies may limit the functionality of this website.

This Privacy Policy explains which cookies and services are used on this website.

Consent with Compliance

Our website uses the consent technology from Complianz to obtain your consent to store certain cookies on your device or the use of specific technologies and document them in compliance with data protection regulations. The provider of this technology is Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, The Netherlands (hereinafter referred to as “Complianz”).

Complianz is hosted on our servers, so no connection is made to the servers of the Complianz provider. Complianz then stores a cookie in your browser to be able to assign the issued consents or their revocation to you. The data collected in this way will be stored until you ask us to delete it, delete the Complianz cookie yourself, or the purpose for data storage no longer applies. Mandatory statutory retention requirements remain unaffected.

Complianz is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 Para. 1 lit. c GDPR.

Server Log Files

The website provider automatically collects and stores information in server log files, which your browser automatically transmits to us. These include:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data will not be combined with data from other sources.

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically correct display and optimization of its website; for this purpose, the server log files must be recorded.

Contact Form

If you use our contact form to send us an inquiry, we will store the details you enter on the form, including your contact details, in order to address your inquiry and to ask any follow-up questions that may arise. We do not pass on these data without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR, if your request relates to the execution of a contract or is required to carry out pre-contractual activities. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was requested; consent can be revoced at any time.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage is no longer applicable (e.g., after processing your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected.

Request by email, phone, or fax

If you contact us by email, phone, or fax, your request, including all ensuing personal data (name, request), is stored and processed by us to process your request. We do not pass on these data without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR, if your request relates to the execution of a contract or is required to carry out pre-contractual activities. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was requested; consent can be revoced at any time.

We will retain the data you provide on the contact form until its deletion is requested, your consent for storage is revoked, or the purpose for its storage is no longer applicable (e.g., after the handling of your request has been completed). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected.

5. Newsletter

Newsletter Data

If you would like to receive our newsletter, we require a valid email address and information that enables verification that you are the owner of the provided email address and you agree to receive this newsletter. No additional data are collected, or they are only collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties.

We will therefore process any data you enter onto the contact form only with your consent per Art. 6 1 lit. a GDPR).  You can revoke your consent to the storage of the data as well as the use of your email address for receiving the newsletter at any time (by clicking the “unsubscribe” link in the newsletter). The data processing operations already carried out remain legally unaffected by the cancellation.

The data you provide for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest based on Art. 6 Para. 1 lit. f GDPR.

Data that we have stored for other purposes remains unaffected by this.

After you have unsubscribed from the newsletter distribution list, your email address may be saved in a blacklist either with us or the newsletter service provider if this is necessary to prevent future mailings. The data from the blacklist is only used for this purpose and is not combined with other data. This serves both your interest and our interest in complying with the legal requirements for sending newsletters (legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR). Storage on the blacklist is not limited in time.You may object to the storage if your interests outweigh our legitimate interests.

6. Plugins and Tools

YouTube with Extended Data Protection

This website integrates videos from YouTube. Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, is the provider of the page.

We use YouTube in the extended data protection mode. In this mode, YouTube, according to them, does not store any information about visitors to this website before they watch the video. The disclosure of data to YouTube partners is, however, not mandatorily excluded by the extended data protection mode. With this, YouTube establishes a connection to the Google DoubleClick network, regardless of whether you are viewing a video or not.

You will be linked to the YouTube servers as soon as you start a YouTube video on our website. This informs the YouTube server about which of our pages you have visited. If you are logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

In addition, YouTube can save various cookies on your device after starting a video or using comparable recognition technologies (e.g. device fingerprinting). This enables YouTube to receive information about visitors to this website. Such information is used to gather video statistics, improve user-friendliness, and prevent attempted fraud, among other things.

If applicable, starting a YouTube video may trigger further data processing operations. We have no control over this.

YouTube is used in the interest of establishing a respectible online presence. This constitutes a legitimate interest pursuant to Art. 6 Para. 1 lit. f GDPR. If corresponding consent has been requested, processing proceeds exclusively based on Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TDDDG, insofar as the consent includes cookie storage or access to information in the user’s end device (e.g., device fingerprinting) within the meaning of TDDDG. Consent can be revoked at any time.

For more information about privacy at YouTube, please see their privacy policy: https://policies.google.com/privacy?hl=de.

The company is certified according to the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States that ensures compliance with European data protection standards for data processing in the United States. Each DPF-certified company undertakes to comply with these data protection standards. Further information can be obtained from the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Web Fonts (local hosting)

This page uses web fonts provided by Google for a uniform representation of fonts. Google fonts are installed locally. This does not establish a connection to Google services.

Further information on Google Fonts can be found at  https://developers.google.com/fonts/faq and in Google’s Privacy Policy at: https://www.google.com/policies/privacy/hl=de.

Font Awesome (local hosting)

This page uses Font Awesome for uniform representation of fonts. Font Awesome is installed locally. There is no connection to Fonticons, Inc. servers.

Further information about Font Awesome can be found in Font Awesome’s Privacy Policy at: https://fontawesome.com/privacy.

Google Maps

This site uses the Google Maps service. The provider is Google Ireland Limited (hereinafter referred to as “Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

It is necessary to store your IP address to use Google Maps. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google may use Google Web Fonts to display fonts uniformly. When you access Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

The use of Google Maps serves to make our website appealing and locate the sites indicated on the website with ease. This constitutes a legitimate interest pursuant to Art. 6 para 1 lit. f GDPR. If corresponding consent has been requested, processing proceeds exclusively based on Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TDDDG, insofar as the consent includes cookie storage or access to information in the user’s end device (e.g., device fingerprinting) within the terms of TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. More information can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For information on the handling of user data, please refer to Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.

The company is certified according to the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States that ensures compliance with European data protection standards for data processing in the United States. Each DPF-certified company undertakes to comply with these data protection standards. Further information can be obtained from the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Friendly Captcha

We use Friendly Captcha (hereinafter referred to as “Friendly Captcha”) on this website. The provider is Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany.

Friendly Captcha is used to check whether the data entered on this website (e.g., on a contact form) have been entered by a human or by an automated program. For this purpose, Friendly Captcha analyzes the behavior of the website visitor on the basis of various characteristics. For analysis, Friendly Captcha evaluates various information (e.g., anonymised IP address, referrer, visit time, etc.). Further information can be found at: https://friendlycaptcha.com/legal/privacy-end-users/.

The data is stored and analyzed based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting their website from abusive automated crawling and SPAM. If corresponding consent has been requested, processing proceeds exclusively based on Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TDDDG, insofar as the consent includes cookie storage or access to information in the user’s end device (e.g., device fingerprinting) within the terms of TDDDG. Consent can be revoked at any time.

Order Processing

We have concluded a contract for order processing (AVV) to use the above-mentioned service. This is a contract prescribed by data protection laws, which ensures that the provider only processes the personal data of our website visitors per our instructions and in compliance with the GDPR.

7. Audio and Video Meetings

Data Processing

We use online conference tools, among other things, to communicate with our customers. The specific tools we use are listed below. If you communicate with us by video or audio conference via the Internet, your personal data will be collected and processed by us and the provider of the respective conference tool.

The conference tools collect all data that you provide/enter to use the tools (email address and/or your telephone number). Furthermore, the conference tools process the duration of the conference, start and end (time) of participation in the conference, number of participants, and other “context information” in connection with the communication process (metadata).

The provider of the tool also processes all technical data necessary for the processing of online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection.

If content is exchanged, uploaded or otherwise provided within the tool, it will also be stored on the tool provider’s servers. This content includes, but is not limited to, cloud recordings, chat/instant messages, voice mail uploaded photos and videos, files, whiteboards, and other information shared while using the service.

Please note that we do not have full control over the data processing operations of the tools used. Our options depend to a large extent on the corporate policy of the respective provider. Further information on data processing by the conference tools can be found in the privacy statements of the tools used, which we have listed below this text.

Purpose and Legal Basis

The conference tools are used to communicate with prospective or existing contractual partners or offer certain services to our customers (Art. 6 Para. 1 lit b GDPR). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us or our company (legitimate interest within the terms of Art. 6 Para. 1 lit. f GDPR). Insofar as consent has been requested, the use of the relevant tools is based on this consent; the consent can be revoked at any time with effect for the future.

Storage Period

The data we collected directly via the video and conference tools will be deleted from our systems as soon as you request deletion, revoke your consent to storage, or the purpose for data storage no longer pertains. Stored cookies remain on your device until you delete them. The statutory retention periods remain unaffected.

We have no influence on the storage period of your data, which is stored by conference tool operators for their own purposes. For details on this, please inquire directly with the conference tool operators.

Conference tools used

We use the following conference tools:

TeamViewer

Our software support uses TeamViewer. The provider is TeamViewer Germany GmbH, Jahnstr. 30, 73037 Göppingen, Germany. For details on data processing, please refer to TeamViewer’s Privacy Policy: https://www.teamviewer.com/de/datenschutzerklaerung/.

Order Processing

We have concluded a contract for order processing (AVV) to use the above-mentioned service. This is a contract prescribed by data protection laws, which ensures that the provider only processes the personal data of our website visitors per our instructions and in compliance with the GDPR.

Microsoft Teams

We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. For details on data processing, please refer to the Microsoft Teams Privacy Policy: https://privacy.microsoft.com/de-de/privacystatement.

The company is certified according to the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States that ensures compliance with European data protection standards for data processing in the United States. Each DPF-certified company undertakes to comply with these data protection standards. Further information can be obtained from the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Order Processing

We have concluded a contract for order processing (AVV) to use the above-mentioned service. This is a contract prescribed by data protection laws, which ensures that the provider only processes the personal data of our website visitors per our instructions and in compliance with the GDPR.

8. Social Media

Social media elements with Shariff

This website uses elements of social media (e.g., Facebook, X, Instagram, Pinterest, XING, LinkedIn, Tumblr).

You can usually identify the social media elements by the respective social media logos. To ensure data protection on this website, we only use these elements together with the Shariff solution. This application prevents the social media elements integrated on this website from transferring your personal data to the respective provider the first time you visit the site.

Only when you activate the respective social media element by clicking on the corresponding button will a direct connection to the provider’s server be established (consent). As soon as you activate the social media element, the respective provider receives the information that you have visited this website with your IP address. If you are logged into your respective social media account (e.g., Facebook) at the same time, the respective provider can assign the visit to this website to your user account.

Activating the plugin constitutes consent within the terms of Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 Telecommunications Digital Services Data Protection Act (TDDDG). This consent may be revoked at any time with future effect.

The service is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6 Para. 1 lit. c GDPR.