Data protection information (information obligations according to Art. 13 DSGVO)
With this data protection information we would like to inform you on the one hand about the following:
- Which personal data we collect and use from you
- Whether and, if so, to which third parties these may be passed on
- How long we keep the data
- Which rights you have
If you have any questions about the following privacy notices, you can contact us using the contact details below.
Name and contact details of the responsible person
The responsible body is the natural or legal person who decides alone or together with others on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
The person who is responsible for data processing:
Hohe Straße 30
We take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations as well as this data protection declaration.
Different personal data are collected. Personal data is data with which you can be personally identified. This privacy statement explains what data we collect and how we use it. It also explains how and for what purpose this is done.
We would like to inform you that data transmission over the Internet (e.g. communication by e-mail) may be subject to security vulnerabilities. A complete protection of the data against access by third parties is not possible.
The rights you have as a data subject
In this section we would like to inform you in detail about the rights you are entitled to.
Under the applicable laws, you have different rights with respect to your personal information. If you wish to exercise these rights, please send your request by e-mail or post, clearly identifying yourself, to the above-mentioned data controller
You have the right, within the context of the applicable statutory provisions, at any time to free information about your stored personal data, their origin and recipient and the purpose of data processing and, if applicable, a right to correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint for this and other questions on the subject of personal data. Furthermore, you have the right to appeal to the responsible supervisory authority.
Below you will find a detailed overview of your rights.
The right to confirmation and information
At any time you have the right to receive confirmation from us as to whether personal data concerning you will be processed. If this is the case, you have the right to request from us free information about the personal data stored about you together with a copy of this data. Furthermore, you have the right to the following information:
- the purposes of processing;
- the categories of personal data to be processed;
- Recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
- the existence of a right to rectify or delete personal data concerning you or to limit the processing by the controller or to object to such processing;
- the existence of a right of appeal to a supervisory authority;
- if the personal data is not collected from you, all available information about the origin of the data;
- The existence of automated decision making, including profiling, in accordance with Article 22(1) and (4) of the DS Block Exemption Regulation and, at least in these cases, meaningful information on the logic involved and the scope and intended impact of such processing for you.
When personal data are transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards in accordance with Art. 46 DSGVO in connection with the transfer.
Right to rectification
You have the right to demand from us immediately the correction of incorrect personal data concerning you. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.
Right to be deleted (“right to be forgotten”)
You have the right pursuant to Art. 17 para. 1 DSGVO to request that we delete personal data concerning you without delay and we are obliged to delete personal data without delay if one of the following reasons applies:
- Personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 sentence 1 a) DSGVO or Art. 9 para. 2 a) DSGVO, and there is no other legal basis for the processing.
- You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate reasons for the processing or you object to the processing pursuant to Art. 21 (2) DSGVO.
- Personal data have been processed unlawfully.
- The cancellation of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject.
- The personal data were collected in relation to information society services offered pursuant to Art. 8 (1) DSGVO.
If we have made the personal data public and we are obliged to delete them pursuant to Art. 17 (1) DSGVO, we shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform those responsible for data processing who process the personal data that you have requested them to delete all links to this personal data or copies or replications of this personal data.
Right to limitation of processing
You have the right to demand that we restrict processing if one of the following conditions is met:
- the accuracy of the personal data is disputed by you for a period of time that allows us to verify the accuracy of the personal data,
- the processing is unlawful and you refused to delete the personal data and instead requested that the use of the personal data be restricted;
- we no longer need the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims, or
- you have lodged an objection against the processing pursuant to Art. 21 para. 1 DSGVO, as long as it has not yet been established whether the legitimate reasons of our company outweigh yours.
Right to data transferability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format, and you have the right to transfer such data to another responsible person without our interference, provided that
- the processing is based on a consent pursuant to Art. 6 para. 1 sentence 1 a) DSGVO or Art. 9 para. 2 a) DSGVO or on a contract pursuant to Art. 6 para. 1 sentence 1 b) DSGVO and
- processing is carried out using automated procedures.
In exercising your right to data transfer in accordance with paragraph 1, you have the right to obtain that the personal data be transmitted directly by us to another responsible person, insofar as this is technically feasible.
Right of opposition
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data on the basis of Art. 6 Para. 1 S. 1 e) or f) DSGVO; this also applies to profiling based on these provisions. We no longer process personal data unless we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
If personal data is processed by us for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling, insofar as it is connected with such direct advertising.
You have the right, for reasons arising from your particular situation, to object to the processing of personal data concerning you which is used for scientific or historical research purposes or for statistical purposes.
pursuant to Art. 89 (1) DSGVO, unless the processing is necessary for the performance of a task in the public interest.
Law relating to automated decisions including profiling
You have the right not to be subject to any decision based solely on automated processing, including profiling, that has any legal effect on you or similarly significantly affects you.
There will be no automated decision-making based on the personal data collected.
Right of appeal to a supervisory authority
You have the right to complain to a supervisory authority, in particular in the Member State where you are staying, at your place of work or at the place where the alleged infringement occurred, if you consider that the processing of your personal data is unlawful.
The competent authority is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Phone: 02 11/384 24-0
Fax: 02 11/384 24-10
Data processing, general
Legal basis for processing
If not already mentioned in the individual processing operations under the previous numbers, we will show below the legal bases on which we carry out the data processing.
If we obtain the consent of the data subject for the processing of personal data, Art. 6 Para. 1 lit. a EU Data Protection Basic Regulation (DSGVO) serves as the legal basis.
Art. 6 para. 1 subpara. 1 lit. b DSGVO serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 Para. 1 S 1 lit. c DSGVO serves as the legal basis.
In the event that vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6 para. 1 sentence 1 lit. d DSGVO serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 sentence 1 lit. f DSGVO) serves as the legal basis for the processing.
Your data will be stored for as long as is absolutely necessary to achieve the respective purpose, but at the longest as required by law.
As soon as the storage purpose no longer applies or a storage period prescribed by the aforementioned regulations expires, the personal data will be routinely blocked or deleted, unless there is a necessity for further storage of the data through the conclusion of a contract or fulfilment of a contract.
We make every effort to ensure the security of your data within the framework of the applicable data protection laws and technical possibilities.
We use the SSL (Secure Socket Layer) coding system for the website, but point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.
To secure your data, we maintain technical and organisational security measures in accordance with Art. 32 DSGVO, which we continually adapt to the state of the art.
Furthermore, we do not guarantee that our services will be available at certain times; disruptions, interruptions or failures cannot be ruled out. The servers we use are regularly and carefully backed up.
Disclosure of data to third parties
Basically, we only use your personal data within our company.
If and to the extent that we involve third parties in the performance of contracts (e.g. in the IT area of hosting companies), we will only receive this personal data to the extent that the transmission is necessary for the corresponding service.
In the event that we outsource certain parts of the data processing (“order processing”), this is done on the basis of Art. 28 DSGVO. We contractually oblige the contract processors to use personal data only in accordance with the requirements of the data protection laws and to guarantee the protection of the rights of the data subject.
Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or in connection with the use of third party services or the disclosure / transfer of data to third parties, this is done only to fulfil our (pre)contractual obligations, or on the basis of your consent, or on the basis of a legal obligation or on the basis of our legitimate interests.
If legal or contractual permissions have been granted, we will only process or allow the data in a third country if the special requirements of Art. 44 ff. of the German Data Protection Act are met. DSGVO.
Processing then takes place, for example, on the basis of special guarantees, such as the officially recognised determination of a data protection level corresponding to the EU (e.g. for the USA by the “Privacy Shield”) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).
When you contact us by e-mail, we store your details for processing the inquiry and in the event that follow-up questions arise.
This is also our legitimate interest pursuant to Art. 6 Para. 1 S. 1 f) DSGVO.
We only store and use further personal data if you give your consent or if this is legally permissible without special consent.
The hosting services used by us serve the provision of the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services as well as technical maintenance services that we use for the purpose of operating the website.
In this connection, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors to this online service on the basis of our legitimate interests in the efficient and secure provision of this online service in accordance with Art. 6 Para. 1 S. 1 f) DSGVO in conjunction with Art. 28 DSGVO.
We may collect information when you use this website. We automatically collect information about your usage patterns and your interaction with us, registering information about your computer or mobile device. We collect, store and use data about each access to our online services (server log files). This includes access data:
- Name and URL of the retrieved file
- Date and time of retrieval
- transferred data volume
- Message about successful retrieval (HTTP Response Code)
- Browser type and browser version
- operating system
- Referer URL (i.e. the previously visited page)
- Websites accessed by the user’s system through our website
- Internet service provider of the user
- IP address and the requesting provider
We use this log data without allocation to your person or other profiling for statistical evaluations for the purpose of operating, security and optimisation of our online services, but also for anonymous recording of the number of visitors to our website (traffic) and for the scope and type of use of our website and services, as well as for billing purposes, to measure the number of clicks received from cooperation partners. This information allows us to provide personalized and location-based content and analyze traffic, troubleshoot and correct errors, and improve our services.
This is also our legitimate interest pursuant to Art. 6 Para. 1 S. 1 f) DSGVO.
We reserve the right to subsequently check the log data if there is a justified suspicion of illegal use on the basis of concrete indications. We store IP addresses in the log files for a limited period of time if this is necessary for security purposes or for the provision or billing of a service, e.g. if you use one of our offers. After the order process has been aborted or payment has been received, we delete the IP address if it is no longer required for security purposes. We also store IP addresses if we have the concrete suspicion of a criminal offence in connection with the use of our website. We also store the date of your last visit as part of your account (e.g. when registering, logging in, clicking links, etc.).
To optimise our online offer, we use session cookies. A session cookie is a small text file that is sent by the respective servers when you visit a website and stored temporarily on your hard drive. This file as such contains a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised when you return to our website. These cookies are deleted after you close your browser. These cookies are used, for example, to enable you to use the shopping basket function across several pages.
To a limited extent, we also use persistent cookies (also small text files that are stored on your end device) that remain on your end device and enable us to recognize your browser the next time you visit. These cookies are stored on your hard drive and are deleted automatically after the specified time. Their lifespan is 1 month to 10 years. This enables us to present our services to you in a more user-friendly, effective and secure manner and, for example, to display information on the site that is specifically tailored to your interests.
The following data and information are stored in the cookies:
- language settings
- keywords entered
- Information about the number of visits to our website and the use of individual functions of our website.
You can adjust your browser to inform you about the setting of cookies in advance and to decide in individual cases whether you want to exclude the acceptance of cookies for certain cases or generally, or whether cookies are completely prevented. This can limit the functionality of the website.
Social media, analytics and tools from other providers
While visiting our website your surfing behaviour can be statistically evaluated. This is done primarily with cookies and so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following privacy statement.
You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration.
Google Tag Manager
This website uses the Google Tag Manager. With the Google Tag Manager, website tags can be managed via an interface. The Google Tag Manager tool does not collect personally identifiable information and triggers other tags that may collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will persist for all tracking tags implemented with Google Tag Manager.
The use of Google Analytics with anonymization function
We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”, on our site. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site.
The information generated by these cookies, such as the time, place and frequency of your website visit, including your IP address, is transmitted to and stored by Google in the United States.
We use Google Analytics with an IP anonymization function on our website. In this case, your IP address will already be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and thus anonymized.
Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for us and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.
In addition, Google offers a deactivation option for the most common browsers, which gives you more control over which data is collected and processed by Google. If you activate this option, no information about your website visit will be transmitted to Google Analytics. However, activation does not prevent information from being transmitted to us or to other web analytics services we may use. For more information about the opt-out option provided by Google and how to opt-in, please see the link below: https://tools.google.com/dlpage/gaoptout?hl=de
Use of web analysis service PIWIK
Here you can decide whether a unique web analysis cookie may be stored in your browser in order to enable the operator of the website to collect and analyse various statistical data.
If you wish to opt out, click on the following link to place the Matomo deactivation cookie in your browser.
Your visit to this web site is currently being tracked by Matomo Web Analytics. Click here so that your visit is no longer recorded.
Use of Google-Maps
We use the application “Google Maps” of the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.
Google sets a cookie each time the “Google Maps” component is called up in order to process user settings and data when the page on which the “Google Maps” component is integrated is displayed. As a rule, this cookie is not deleted when you close your browser, but expires after a certain period of time unless you delete it manually beforehand.
If you do not agree with this processing of your data, it is possible to deactivate the “Google Maps” service and thus prevent the transmission of data to Google. To do this, you must deactivate the Java Script function in your browser. However, we would like to point out that in this case you cannot use “Google Maps” or can only use it to a limited extent.
and the additional terms and conditions for “Google Maps”.
Google Web Fonts
This website uses web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google’s servers. This enables Google to know that your IP address has been used to access our website. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
If your browser does not support web fonts, a standard font will be used by your computer.
If you send us enquiries via the contact form, your details from the enquiry form including the contact data you provided there will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. These data will not be passed on without your consent.
The processing of the data entered in the contact form is therefore carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this purpose, an informal e-mail notification to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data entered by you in the contact form will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.