The protection of your privacy when using our website is very important to us. Therefore we will strictly adhere to the applicable data protection regulations when using your personal data. Therefore we inform you in the following about the collection and use of personal data when using our website.
What is personal data? The term personal data is defined in the German Federal Data Protection Act (BDSG (new)) as well as in the European General Data Protection Regulation (GDPR). According to these regulations, these are individual details about personal or material circumstances of a certain or determinable natural person. This includes for example your name, your address, your telephone number, your e-mail address or your date of birth.
You can visit our website without providing any personal information. We do not store any personal data in this context. In order to improve our offer, we only evaluate statistical data which do not allow any conclusion to your person. If personal data (e.g. name, address or e-mail addresses) is collected through our website, this is always done on a voluntary basis. This data will not be passed to third parties without your explicit consent.
On the following pages we would like to inform you about the processing of your personal data by us and the data protection claims and rights to which you are entitled according to the data protection regulations.
1. Name and contact details of the data controller and of the company Data Protection Officer
The responsible person in terms of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:
Person in charge:
Dr. Björn Metzger
Phone: +49(0)6421 94860 0
2. Provision of the website and creation of log files
Description and scope of data processing
Whenever you visit our website, our system automatically collects data and information from the computer system of the accessing device.
The following data is collected:
- IP address of the requesting device
- Information about the browser type and version being used
- The user’s operating system
- Date and time of access
- Websites from which the user’s system accesses our website
The data are also stored in our system’s log files. The IP addresses of the user or other data that allow the assignment of data to a user are not affected by this. This data will not be stored together with other personal data of the user.
Legal basis for data processing
The legal basis for the temporary storage of data and the log files is Art. 6 Sect. 1 lit. f GDPR.
Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
In these purposes lies our legitimate interest in data processing pursuant to Art. 6 Sect. 1 lit. f GDPR.
Duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose of their collection. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
Possibility of objection and removal
The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Therefore there is no possibility of objection on the part of the user.
3. Email contact and Contact Form
Description and scope of data processing
On our website there is a contact form available which can be used to contact us. If a user makes use of this option, the data entered in the input mask will be submitted to us and then saved. These data are as follows:
Company, name, email address, telephone, message
For the processing of the data your consent is obtained as part of the submission process and reference is made to this data protection declaration.
Alternatively, contact is also possible via the email address provided. In this case, the personal data of the user transmitted by e-mail will be stored.
In this context, there is no data transfer to third parties. The data is used exclusively for processing the conversation.
Legal basis for data processing
The legal basis for the data processing is art. 6, para. 1, lit. a of the GDPR, if there is agreement by the user.
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 Sect. 1 lit. f GDPR. If the e-mail contact aims for the conclusion of a contract, then additional legal basis for the processing is Art. 6 Sect. 1 lit. b GDPR.
Purpose of data processing
The processing of personal data serves us solely to process the establishing contact. Herein also lies the necessary legitimate interest in the processing of the data.
Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The personal data from the contact form of the input form and the data sent by e-mail will be deleted when the respective conversation with the user ends. The conversation ends when it can be concluded from the circumstances that the matter in question has been finally clarified.
Possibility of objection and removal
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. In this case, a further conversation is only possible by post. All personal data stored in the course of contacting us will be deleted in this case.
Cookies store information that is related to the specific terminal device used. However, this does not mean, that we obtain direct knowledge of your identity.
In addition, we also use temporary cookies, which are stored on your device for a specific period of time to optimize user-friendliness. If you visit our site again to use our services, we will automatically recognize that you have already been with us and what inputs and settings you have made so that you don’t have to enter them again.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, deactivating cookies completely may mean that you will not be able to use all the functions of our website.
5. Analysis tools and advertising
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called cookies. These cookies are text files which are stored on your computer and which enable an analysis of your use of this website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. The storage of Google Analytics cookies and the utilization of this analysis tool are based on Art. 6 Sect. 1 lit. f GDPR. The operator of this website has a legitimate interest in the analysis of user patterns in order to optimize the services offered online and the advertising activities.
We have activated the IP anonymization function on this website. That means, your IP address will be truncated by Google within member states of the European Union or in other states which are party to the agreement on the European Economic Area before it is transmitted to the USA.
Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google uses this information by order of the website operator to analyse your usage of this website, compile reports on the website activities and provide further services in relation to website usage and internet usage to the website operator. The IP address transferred by your browser as part of Google Analytics is not consolidated with other data from Google.
You may refuse the generation of cookies by selecting the appropriate settings on your browser, however please note that in case of refusing such cookies you may not be able to use the full functionality of this website. You can also prevent the recording of data generated by the cookie and related to your use of the website (including your IP address) by google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objection to the recording of data
You have the option to prevent the recording of your data by Google Analytics by changing the consent settings under 4. cookies.
For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.
Contract data processing
We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.
Demographic parameters provided by Google Analytics
This website uses the function “demographic parameters” provided by Google Analytics. It makes it possible to generate reports providing information on the age, gender and interests of website visitors. The sources of this information are interest-related advertising by Google as well as visitor data obtained from third party providers. This data cannot be allocated to a specific individual. You have the option to deactivate this function at any time by making pertinent settings changes for advertising in your Google account or you can generally prohibit the recording of your data by Google Analytics as explained in section “Objection to the recording of data.”
Google AdWords and Google Conversion Tracking
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
In conjunction with Google AdWords, we use a tool called Conversion Tracking. If you click on an ad posted by Google, a cookie for Conversion Tracking purposes will be placed. Cookies are small text files the web browser places on the user’s computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we will be able to recognise that the user has clicked on an ad and has been linked to this page.
A different cookie is allocated to every Google AdWords customer. These cookies cannot be tracked via websites of AdWords customers. The information obtained with the assistance of the Conversion cookie is used to generate Conversion statistics for AdWords customers who have opted to use Conversion Tracking. The users receive the total number of users that have clicked on their ads and have been linked to a page equipped with a Conversion Tracking tag. However, they do not receive any information that would allow them to personally identify these users. If you do not want to participate in tracking, you have the option to object to this use by easily deactivating the Google Conversion Tracking cookie via your web browser under user settings. If you do this, you will not be included in the Conversion Tracking statistics.
The storage of “Conversion” cookies and the use of this tracking tool are based on Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user patterns, in order to optimize the operator’s web offerings and advertising.
To review more detailed information about Google AdWords and Google Conversion Tracking, please consult the Data Privacy Policies of Google at: https://policies.google.com/privacy?hl=en.
You can set up your browser in such a manner that you will be notified anytime cookies are placed and you can permit cookies only in certain cases or exclude the acceptance of cookies in certain instances or in general and you can also activate the automatic deletion of cookies upon closing of the browser. If you deactivate cookies, the functions of this website may be limited.
6. Plug-ins and Tools
We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
The purpose of reCAPTCHA is to determine whether data entered on our websites (e.g. information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyses the behaviour of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g. IP address, time the website visitor spent on the site or cursor movements initiated by the user). The data tracked during such analyses are forwarded to Google.
reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is underway.
The data is processed on the basis of Art. 6 Sect. 1 lit. f GDPR. It is in the website operators legitimate interest, to protect the operator’s web content against misuse by automated industrial espionage systems and against SPAM.
For more information about Google reCAPTCHA and to review the Data Privacy Declaration of Google, please follow these links: https://policies.google.com/privacy?hl=en and https://www.google.com/recaptcha/intro/android.html.
7. Rights of the involved person
If personal data of yours are processed, you are affected within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:
Right to information
You can ask the person in charge to confirm whether personal data concerning you will be processed by us.
If such processing has taken place, you can request the following information from the person responsible:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data which are processed;
(3) the recipients or the categories of recipients to whom the personal data concerning you have been or will be disclosed;
(4) the planned duration of the storage of the personal data concerning you or, if it is not possible to give specific details, criteria for determining the duration of storage;
(5) the existence of a right of rectification or erasure of personal data concerning you, a right to limitation of the processing by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) any available information on the origin of the data if the personal data are not collected from the data subject;
(8) the existence of automated decision-making including profiling in accordance with Art. 22 Sect. 1 and 4 GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you are being transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer.
Right to correction
You have the right to ask the data controller to correct and/or complete the data if the personal data processed concerning you is incorrect or incomplete. The data controller must make the correction without delay.
Right to restriction of processing
Under the following conditions, you may request the restriction of the processing of personal data concerning you:
(1) if you dispute the accuracy of the personal data concerning you for a period of time which enables the data controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
(3) the data controller no longer needs the personal data for the purposes of the processing, but you need it for the purpose of asserting, exercising or defending legal claims, or
(4) if you have filed an objection to the processing pursuant to Art. 21 Sect. 1 GDPR and it has not yet been determined whether the legitimate reasons of the data controller outweigh your reasons.
If the processing of personal data relating to you has been restricted, such data – apart from being stored – may only be processed with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by the data controller before the restriction is lifted.
Right to deletion
a) Obligation to delete
You may request the data controller to delete the personal data relating to you without delay and the controller is obliged to delete this data without delay if one of the following reasons applies:
(1) the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent on which the processing was based pursuant to Art. 6 Sect. 1 lit. a or Art. 9 Sect. 2 lit. a GDPR and there is no other legal basis for the processing.
(3) you file an objection against the processing pursuant to Art. 21 Sect. 1 GDPR and there are no overriding legitimate reasons for the processing, or you file an objection against the processing pursuant to Art. 21 Sect. 2 GDPR.
(4) The personal data concerning you have been processed unlawfully.
(5) The deletion of personal data concerning you is required for the fulfilment of a legal duty under the European Union law or a national law the data controller is subject to.
(6) The personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8 Sect. 1 of the GDPR.
(7) Information to third parties
Where the controller has made the personal data concerning you public and is obliged pursuant to Article 17 Sect. 1 GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers, which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
The right to deletion does not exist insofar as the processing is necessary
(1) to exercise the right to freedom of expression and information;
(2) to fulfil a legal obligation required under the law of the Union or of the Member States,
to which the person responsible is subject, or for the performance of an obligation carried out in the public interest or in the exercise of public authority which has been delegated to the person responsible;
(3) for reasons of public interest in the field of public health pursuant to Art. 9 Sect. 2 lit. h and i as well as Art. 9 Sect. 3 GDPR.
(4) for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes according to art. 89, Sect. 1 of the GDPR, insofar as the right mentioned under section a) is likely to render impossible or seriously impair the achievement of the objectives of this processing, or
(5) to assert, exercise or defend legal claims.
Right to information
If you have asserted the right to correction, deletion or restriction of processing towards the responsible person, the latter is obliged to inform all recipients to whom the personal data related to you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or requires a disproportionate effort.
Towards the responsible person you have the right to be informed about these recipients.
Right to data portability
You have the right to receive the personal data concerning you which you have provided to the data controller, in a structured, common and machine-readable format. You are also entitled to transmit those data to another data controller without hindrance from the controller to which the personal data have been provided, where
(1) the processing is based on consent pursuant to Art. 6 Sect. 1 lit. a GDPR or Art. 9 Sect. 2 lit. a GDPR or on a contract pursuant to Art. 6 Sect. 1 lit. b GDPR and
(2) the processing is carried out by using automated processes.
In exercising this right, you also have the right to have the personal data concerning you transferred directly by one data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority conferred on the person responsible.
Right to objection
You have the right to object to the processing of your personal data at any time, for reasons arising from your particular situation, on the basis of Art. 6 Sect. 1 lit. e or f GDPR; this also applies to profiling which is based on these provisions.
The person responsible will no longer process the personal data concerning you, unless he can prove compelling legitimate reasons for the processing, which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
If personal data concerning you are processed for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing purposes; this includes profiling to the extent that it is related to such direct marketing.
If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for these purposes.
You have the right to exercise your right of objection in connection with the use of information society services – notwithstanding Directive 2002/58/EC – by means of automated procedures using technical specifications.
Right to revoke the declaration of consent pursuant to data protection law
You have the right to revoke your declaration of consent pursuant to data protection law at any time. The revocation of your consent does not affect the legality of the processing carried out on the basis of your consent until you revoke it.
Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which has legal effects on you or which significantly affects you in a similar way. This shall not apply if the decision
(1) is necessary for the conclusion or fulfillment of a contract between you and the person responsible,
(2) is authorised by Union or Member State law to which the person responsibl is subject, and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(3) is based on your explicit consent.
However, these decisions may not be based on special categories of personal data according to Art. 9 Sect. 1 of the GDPR, unless Art. 9 Sect. 2 lit. a or g is applied and appropriate measures have been taken for the protection of your rights and freedoms and your legitimate interests.
Regarding the cases mentioned under (1) and (3), the responsible person takes adequate measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the responsible person, to express your own position and to oppose the decision.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
8. Data protection
We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
This website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the website operator. You can recognise an encrypted connection by the fact that the address line of your browser changes from “http://” to “https://” and by the lock icon in your browser line. If the SSL encryption is activated, the data that you transmit to us cannot be read by third parties.