Pri­va­cy Policy

1. An over­view of data protection

Gene­ral information

The fol­lowing infor­ma­ti­on will pro­vi­de you with an easy to navi­ga­te over­view of what will hap­pen with your per­so­nal data when you visit this web­site. The term “per­so­nal data” com­pri­ses all data that can be used to per­so­nal­ly iden­ti­fy you. For detail­ed infor­ma­ti­on about the sub­ject mat­ter of data pro­tec­tion, plea­se con­sult our Data Pro­tec­tion Decla­ra­ti­on, which we have inclu­ded bene­ath this copy.

Data record­ing on this website

Who is the respon­si­ble par­ty for the record­ing of data on this web­site (i.e., the “con­trol­ler”)?

The data on this web­site is pro­ces­sed by the ope­ra­tor of the web­site, who­se con­ta­ct infor­ma­ti­on is avail­ab­le under sec­tion “Infor­ma­ti­on about the respon­si­ble par­ty (refer­red to as the “con­trol­ler” in the GDPR)” in this Pri­va­cy Policy.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance be infor­ma­ti­on you enter into our con­ta­ct form.

Other data shall be recor­ded by our IT sys­tems auto­ma­ti­cal­ly or after you con­sent to its record­ing during your web­site visit. This data com­pri­ses pri­ma­ri­ly tech­ni­cal infor­ma­ti­on (e.g., web brow­ser, ope­ra­ting sys­tem, or time the site was acces­sed). This infor­ma­ti­on is recor­ded auto­ma­ti­cal­ly when you access this website.

What are the pur­po­ses we use your data for?

A por­ti­on of the infor­ma­ti­on is gene­ra­ted to gua­ran­tee the error free pro­vi­si­on of the web­site. Other data may be used to ana­ly­ze your user patterns.

What rights do you have as far as your infor­ma­ti­on is concerned?

You have the right to recei­ve infor­ma­ti­on about the source, reci­pi­ents, and pur­po­ses of your archi­ved per­so­nal data at any time without having to pay a fee for such dis­clo­sures. You also have the right to demand that your data are rec­ti­fied or era­di­ca­ted. If you have con­sen­ted to data pro­ces­sing, you have the opti­on to revo­ke this con­sent at any time, which shall affect all future data pro­ces­sing. Moreo­ver, you have the right to demand that the pro­ces­sing of your data be restric­ted under cer­tain cir­cum­s­tan­ces. Fur­ther­mo­re, you have the right to log a com­p­laint with the com­pe­tent super­vi­sing agency.

Plea­se do not hesi­ta­te to con­ta­ct us at any time if you have ques­ti­ons about this or any other data pro­tec­tion rela­ted issues.

Ana­ly­sis tools and tools pro­vi­ded by third parties

The­re is a pos­si­bi­li­ty that your brow­sing pat­terns will be sta­tis­ti­cal­ly ana­ly­zed when your visit this web­site. Such ana­ly­ses are per­for­med pri­ma­ri­ly with what we refer to as ana­ly­sis programs.

For detail­ed infor­ma­ti­on about the­se ana­ly­sis pro­grams plea­se con­sult our Data Pro­tec­tion Decla­ra­ti­on below.

2. Hos­ting

All-Inkl

We host our web­site with All-Inkl. The Pro­vi­der is the ALL-INKL.COM – Neue Medi­en Mün­nich, owner: René Mün­nich, Haupt­stra­ße 68, 02742 Frie­ders­dorf, Ger­ma­ny (her­ein­af­ter “All-Inkl”). For details, plea­se visit the pri­va­cy poli­cy of All-Inkl: https://all-inkl.com/datenschutzinformationen/.

The use of All-Inkl is based on Art. 6(1)(f) GDPR. We have a legi­ti­ma­te inte­rest in the most reli­able repre­sen­ta­ti­on of our web­site. If appro­pria­te con­sent has been obtai­ned, the pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent inclu­des the sto­rage of coo­kies or the access to infor­ma­ti­on in the user’s end device (e.g., device fin­ger­prin­ting) wit­hin the mea­ning of the TTDSG. This con­sent can be revo­ked at any time.

Data pro­ces­sing

We have con­clu­ded a data pro­ces­sing agree­ment (DPA) with the abo­ve-men­tio­ned pro­vi­der. This is a con­tract man­da­ted by data pri­va­cy laws that gua­ran­tees that they pro­cess per­so­nal data of our web­site visi­tors only based on our inst­ruc­tions and in com­pli­an­ce with the GDPR.

3. Gene­ral infor­ma­ti­on and man­da­to­ry information

Data pro­tec­tion

The ope­ra­tors of this web­site and its pages take the pro­tec­tion of your per­so­nal data very serious­ly. Hence, we hand­le your per­so­nal data as con­fi­den­ti­al infor­ma­ti­on and in com­pli­an­ce with the sta­tu­to­ry data pro­tec­tion regu­la­ti­ons and this Data Pro­tec­tion Declaration.

Whenever you use this web­site, a varie­ty of per­so­nal infor­ma­ti­on will be collec­ted. Per­so­nal data com­pri­ses data that can be used to per­so­nal­ly iden­ti­fy you. This Data Pro­tec­tion Decla­ra­ti­on exp­lains which data we collect as well as the pur­po­ses we use this data for. It also exp­lains how, and for which pur­po­se the infor­ma­ti­on is collected.

We here­with advi­se you that the trans­mis­si­on of data via the Inter­net (i.e., through e‑mail com­mu­ni­ca­ti­ons) may be pro­ne to secu­ri­ty gaps. It is not pos­si­ble to com­ple­te­ly pro­tect data against third-par­ty access.

Infor­ma­ti­on about the respon­si­ble par­ty (refer­red to as the “con­trol­ler” in the GDPR)

The data pro­ces­sing con­trol­ler on this web­site is:

Gre­gor J. Enck, Wirt­schafts­prü­fer, Steu­er­be­ra­ter
Hen­rik Her­mann Evers, Wirt­schafts­prü­fer, Steu­er­be­ra­ter
Cars­ten Hil­ge­fort, Dipl.-Kfm. Steu­er­be­ra­ter
Bether Stra­ße 62 — 64
49661 Clop­pen­burg

Pho­ne: 04471/180 46–0
E‑mail: info@niehauspartner.de

The con­trol­ler is the natu­ral per­son or legal enti­ty that sin­gle-han­ded­ly or joint­ly with others makes decisi­ons as to the pur­po­ses of and resour­ces for the pro­ces­sing of per­so­nal data (e.g., names, e‑mail addres­ses, etc.).

Sto­rage duration

Unless a more spe­ci­fic sto­rage peri­od has been spe­ci­fied in this pri­va­cy poli­cy, your per­so­nal data will remain with us until the pur­po­se for which it was collec­ted no lon­ger app­lies. If you assert a jus­ti­fied request for dele­ti­on or revo­ke your con­sent to data pro­ces­sing, your data will be dele­ted, unless we have other legal­ly per­mis­si­ble rea­sons for sto­ring your per­so­nal data (e.g., tax or com­mer­cial law reten­ti­on peri­ods); in the lat­ter case, the dele­ti­on will take place after the­se rea­sons cea­se to apply.

Gene­ral infor­ma­ti­on on the legal basis for the data pro­ces­sing on this website

If you have con­sen­ted to data pro­ces­sing, we pro­cess your per­so­nal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if spe­cial cate­go­ries of data are pro­ces­sed accord­ing to Art. 9 (1) DSGVO. In the case of expli­cit con­sent to the trans­fer of per­so­nal data to third coun­tries, the data pro­ces­sing is also based on Art. 49 (1)(a) GDPR. If you have con­sen­ted to the sto­rage of coo­kies or to the access to infor­ma­ti­on in your end device (e.g., via device fin­ger­prin­ting), the data pro­ces­sing is addi­tio­nal­ly based on § 25 (1) TTDSG. The con­sent can be revo­ked at any time. If your data is requi­red for the ful­fill­ment of a con­tract or for the imple­men­ta­ti­on of pre-con­trac­tu­al mea­su­res, we pro­cess your data on the basis of Art. 6(1)(b) GDPR. Fur­ther­mo­re, if your data is requi­red for the ful­fill­ment of a legal obli­ga­ti­on, we pro­cess it on the basis of Art. 6(1)© GDPR. Fur­ther­mo­re, the data pro­ces­sing may be car­ri­ed out on the basis of our legi­ti­ma­te inte­rest accord­ing to Art. 6(1)(f) GDPR. Infor­ma­ti­on on the rele­vant legal basis in each indi­vi­du­al case is pro­vi­ded in the fol­lowing para­graphs of this pri­va­cy policy.

Desi­gna­ti­on of a data pro­tec­tion officer

We have appoin­ted a data pro­tec­tion offi­cer for our company.

Manu­el Böck­mann
Bether Stra­ße 62 — 64
49661 Clop­pen­burg

Pho­ne: 04471/18046–0
E‑mail: info@niehaus-stb.de

Infor­ma­ti­on on data trans­fer to the USA and other non-EU countries

Among other things, we use tools of com­pa­nies domic­i­led in the United Sta­tes or other from a data pro­tec­tion per­spec­ti­ve non-secu­re non-EU coun­tries. If the­se tools are acti­ve, your per­so­nal data may poten­ti­al­ly be trans­fer­red to the­se non-EU coun­tries and may be pro­ces­sed the­re. We must point out that in the­se coun­tries, a data pro­tec­tion level that is com­pa­ra­ble to that in the EU can­not be gua­ran­te­ed. For instance, U.S. enter­pri­ses are under a man­da­te to release per­so­nal data to the secu­ri­ty agen­ci­es and you as the data sub­ject do not have any liti­ga­ti­on opti­ons to defend yourself in court. Hence, it can­not be ruled out that U.S. agen­ci­es (e.g., the Secret Ser­vice) may pro­cess, ana­ly­ze, and per­ma­nent­ly archi­ve your per­so­nal data for sur­veil­lan­ce pur­po­ses. We have no con­trol over the­se pro­ces­sing activities.

Revo­ca­ti­on of your con­sent to the pro­ces­sing of data

A wide ran­ge of data pro­ces­sing tran­sac­tions are pos­si­ble only sub­ject to your express con­sent. You can also revo­ke at any time any con­sent you have alrea­dy given us. This shall be without pre­ju­di­ce to the law­ful­ness of any data collec­tion that occur­red pri­or to your revocation.

Right to object to the collec­tion of data in spe­cial cases; right to object to direct adver­ti­sing (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PRO­CES­SED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PRO­CES­SING OF YOUR PER­SO­NAL DATA BASED ON GROUNDS ARI­SING FROM YOUR UNI­QUE SITUA­TI­ON. THIS ALSO APP­LIES TO ANY PRO­FILING BASED ON THE­SE PRO­VI­SI­ONS. TO DETER­MI­NE THE LEGAL BASIS, ON WHICH ANY PRO­CES­SING OF DATA IS BASED, PLEA­SE CON­SULT THIS DATA PRO­TEC­TION DECLA­RA­TI­ON. IF YOU LOG AN OBJEC­TION, WE WILL NO LON­GER PRO­CESS YOUR AFFEC­TED PER­SO­NAL DATA, UNLESS WE ARE IN A POSI­TI­ON TO PRE­SENT COM­PEL­LING PRO­TEC­TION WORTHY GROUNDS FOR THE PRO­CES­SING OF YOUR DATA, THAT OUT­WEIGH YOUR INTE­RESTS, RIGHTS AND FREE­DOMS OR IF THE PUR­PO­SE OF THE PRO­CES­SING IS THE CLAI­MING, EXER­CIS­ING OR DEFENCE OF LEGAL ENTI­T­LE­MENTS (OBJEC­TION PUR­SUANT TO ART. 21(1) GDPR).

IF YOUR PER­SO­NAL DATA IS BEING PRO­CES­SED IN ORDER TO ENGA­GE IN DIRECT ADVER­TI­SING, YOU HAVE THE RIGHT TO OBJECT TO THE PRO­CES­SING OF YOUR AFFEC­TED PER­SO­NAL DATA FOR THE PUR­PO­SES OF SUCH ADVER­TI­SING AT ANY TIME. THIS ALSO APP­LIES TO PRO­FILING TO THE EXTENT THAT IT IS AFFI­LIA­TED WITH SUCH DIRECT ADVER­TI­SING. IF YOU OBJECT, YOUR PER­SO­NAL DATA WILL SUB­SE­QUENT­LY NO LON­GER BE USED FOR DIRECT ADVER­TI­SING PUR­PO­SES (OBJEC­TION PUR­SUANT TO ART. 21(2) GDPR).

Right to log a com­p­laint with the com­pe­tent super­vi­so­ry agency

In the event of vio­la­ti­ons of the GDPR, data sub­jects are enti­t­led to log a com­p­laint with a super­vi­so­ry agen­cy, in par­ti­cu­lar in the mem­ber sta­te whe­re they usual­ly main­tain their domic­i­le, place of work or at the place whe­re the alle­ged vio­la­ti­on occur­red. The right to log a com­p­laint is in effect regard­less of any other admi­nis­tra­ti­ve or court pro­cee­dings avail­ab­le as legal recourses.

Right to data portability

You have the right to demand that we hand over any data we auto­ma­ti­cal­ly pro­cess on the basis of your con­sent or in order to ful­fil a con­tract be han­ded over to you or a third par­ty in a com­mon­ly used, machi­ne read­a­ble for­mat. If you should demand the direct trans­fer of the data to ano­t­her con­trol­ler, this will be done only if it is tech­ni­cal­ly feasible.

SSL and/or TLS encryption

For secu­ri­ty rea­sons and to pro­tect the trans­mis­si­on of con­fi­den­ti­al con­tent, such as purcha­se orders or inqui­ries you sub­mit to us as the web­site ope­ra­tor, this web­site uses eit­her an SSL or a TLS encryp­ti­on pro­gram. You can reco­gni­ze an encryp­ted con­nec­tion by che­cking whe­ther the address line of the brow­ser swit­ches from “http://” to “https://” and also by the appearan­ce of the lock icon in the brow­ser line.

If the SSL or TLS encryp­ti­on is acti­va­ted, data you trans­mit to us can­not be read by third parties.

Infor­ma­ti­on about, rec­ti­fi­ca­ti­on and era­di­ca­ti­on of data

Wit­hin the scope of the app­li­ca­ble sta­tu­to­ry pro­vi­si­ons, you have the right to at any time demand infor­ma­ti­on about your archi­ved per­so­nal data, their source and reci­pi­ents as well as the pur­po­se of the pro­ces­sing of your data. You may also have a right to have your data rec­ti­fied or era­di­ca­ted. If you have ques­ti­ons about this sub­ject mat­ter or any other ques­ti­ons about per­so­nal data, plea­se do not hesi­ta­te to con­ta­ct us at any time.

Right to demand pro­ces­sing restrictions

You have the right to demand the impo­si­ti­on of restric­tions as far as the pro­ces­sing of your per­so­nal data is con­cer­ned. To do so, you may con­ta­ct us at any time. The right to demand restric­tion of pro­ces­sing app­lies in the fol­lowing cases:

  • In the event that you should dis­pu­te the cor­rect­ness of your data archi­ved by us, we will usual­ly need some time to veri­fy this claim. During the time that this inves­ti­ga­ti­on is ongo­ing, you have the right to demand that we restrict the pro­ces­sing of your per­so­nal data.
  • If the pro­ces­sing of your per­so­nal data was/is con­duc­ted in an unlaw­ful man­ner, you have the opti­on to demand the restric­tion of the pro­ces­sing of your data in lieu of deman­ding the era­di­ca­ti­on of this data.
  • If we do not need your per­so­nal data any lon­ger and you need it to exer­cise, defend or claim legal enti­t­le­ments, you have the right to demand the restric­tion of the pro­ces­sing of your per­so­nal data ins­tead of its eradication.
  • If you have rai­sed an objec­tion pur­suant to Art. 21(1) GDPR, your rights and our rights will have to be weig­hed against each other. As long as it has not been deter­mi­ned who­se inte­rests pre­vail, you have the right to demand a restric­tion of the pro­ces­sing of your per­so­nal data.

If you have restric­ted the pro­ces­sing of your per­so­nal data, the­se data – with the excep­ti­on of their archi­ving – may be pro­ces­sed only sub­ject to your con­sent or to claim, exer­cise or defend legal enti­t­le­ments or to pro­tect the rights of other natu­ral per­sons or legal enti­ties or for important public inte­rest rea­sons cited by the Euro­pean Uni­on or a mem­ber sta­te of the EU.

Rejec­tion of unso­li­ci­ted e‑mails

We here­with object to the use of con­ta­ct infor­ma­ti­on publis­hed in con­junc­tion with the man­da­to­ry infor­ma­ti­on to be pro­vi­ded in our Site Noti­ce to send us pro­mo­tio­nal and infor­ma­ti­on mate­ri­al that we have not express­ly reques­ted. The ope­ra­tors of this web­site and its pages reser­ve the express right to take legal action in the event of the unso­li­ci­ted sen­ding of pro­mo­tio­nal infor­ma­ti­on, for instance via SPAM messages.

4. Record­ing of data on this website

Coo­kies

Our web­sites and pages use what the indus­try refers to as “coo­kies.” Coo­kies are small text files that do not cau­se any dama­ge to your device. They are eit­her stored tem­pora­ri­ly for the dura­ti­on of a ses­si­on (ses­si­on coo­kies) or they are per­ma­nent­ly archi­ved on your device (per­ma­nent coo­kies). Ses­si­on coo­kies are auto­ma­ti­cal­ly dele­ted once you ter­mi­na­te your visit. Per­ma­nent coo­kies remain archi­ved on your device until you actively dele­te them, or they are auto­ma­ti­cal­ly era­di­ca­ted by your web browser.

In some cases, it is pos­si­ble that third-par­ty coo­kies are stored on your device once you enter our site (third-par­ty coo­kies). The­se coo­kies enab­le you or us to take advan­ta­ge of cer­tain ser­vices offe­red by the third par­ty (e.g., coo­kies for the pro­ces­sing of pay­ment services).

Coo­kies have a varie­ty of func­tions. Many coo­kies are tech­ni­cal­ly essen­ti­al sin­ce cer­tain web­site func­tions would not work in the absence of the coo­kies (e.g., the shop­ping cart func­tion or the dis­play of vide­os). The pur­po­se of other coo­kies may be the ana­ly­sis of user pat­terns or the dis­play of pro­mo­tio­nal messages.

Coo­kies, which are requi­red for the per­for­mance of elec­tro­nic com­mu­ni­ca­ti­on tran­sac­tions, or for the pro­vi­si­on of cer­tain func­tions you want to use (e.g., for the shop­ping cart func­tion) or tho­se that are necessa­ry for the opti­miz­a­ti­on (requi­red coo­kies) of the web­site (e.g., coo­kies that pro­vi­de mea­sura­ble insights into the web audi­ence), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a dif­fe­rent legal basis is cited. The ope­ra­tor of the web­site has a legi­ti­ma­te inte­rest in the sto­rage of requi­red coo­kies to ensu­re the tech­ni­cal­ly error free and opti­mi­zed pro­vi­si­on of the operator’s ser­vices. If your con­sent to the sto­rage of the coo­kies and simi­lar reco­gni­ti­on tech­no­lo­gies has been reques­ted, pro­ces­sing occurs exclu­si­ve­ly on the basis of the con­sent obtai­ned (Art. 6(1)(a) GDPR and § 25 (1) TTDSG); this con­sent may be revo­ked at any time.

You have the opti­on to set up your brow­ser in such a man­ner that you will be noti­fied any time coo­kies are pla­ced and to per­mit the accep­t­ance of coo­kies only in spe­ci­fic cases. You may also exclu­de the accep­t­ance of coo­kies in cer­tain cases or in gene­ral or acti­va­te the dele­te func­tion for the auto­ma­tic era­di­ca­ti­on of coo­kies when the brow­ser clo­ses. If coo­kies are deac­ti­va­ted, the func­tions of this web­site may be limited.

In the event that third-par­ty coo­kies are used or if coo­kies are used for ana­ly­ti­cal pur­po­ses, we will sepa­r­ate­ly noti­fy you in con­junc­tion with this Data Pro­tec­tion Poli­cy and, if app­li­ca­ble, ask for your consent.

Con­sent with Usercentrics

This web­site uses the con­sent tech­no­lo­gy of User­centrics to obtain your con­sent to the sto­rage of cer­tain coo­kies on your device or for the use of spe­ci­fic tech­no­lo­gies, and to docu­ment the for­mer in a data pro­tec­tion com­pli­ant man­ner. The par­ty offe­ring this tech­no­lo­gy is User­centrics GmbH, Send­lin­ger Stra­ße 7, 80331 Mün­chen, Ger­ma­ny, web­site: https://usercentrics.com/ (her­ein­af­ter refer­red to as “User­centrics”).

Whenever you visit our web­site, the fol­lowing per­so­nal data will be trans­fer­red to Usercentrics:

  • Your declaration(s) of con­sent or your revo­ca­ti­on of your declaration(s) of consent
  • Your IP address
  • Infor­ma­ti­on about your browser
  • Infor­ma­ti­on about your device
  • The date and time you visi­ted our website

Moreo­ver, User­centrics shall store a coo­kie in your brow­ser to be able to allo­ca­te your declaration(s) of con­sent or any revo­ca­ti­ons of the for­mer. The data that are recor­ded in this man­ner shall be stored until you ask us to era­di­ca­te them, dele­te the User­centrics coo­kie or until the pur­po­se for archi­ving the data no lon­ger exists. This shall be without pre­ju­di­ce to any man­da­to­ry legal reten­ti­on periods.

User­centrics uses coo­kies to obtain the decla­ra­ti­ons of con­sent man­da­ted by law. The legal basis for the use of spe­ci­fic tech­no­lo­gies is Art. 6(1)© GDPR.

Data pro­ces­sing

We have con­clu­ded a data pro­ces­sing agree­ment (DPA) with the abo­ve-men­tio­ned pro­vi­der. This is a con­tract man­da­ted by data pri­va­cy laws that gua­ran­tees that they pro­cess per­so­nal data of our web­site visi­tors only based on our inst­ruc­tions and in com­pli­an­ce with the GDPR.

Ser­ver log files

The pro­vi­der of this web­site and its pages auto­ma­ti­cal­ly collects and stores infor­ma­ti­on in so-cal­led ser­ver log files, which your brow­ser com­mu­ni­ca­tes to us auto­ma­ti­cal­ly. The infor­ma­ti­on comprises:

  • The type and ver­si­on of brow­ser used
  • The used ope­ra­ting system
  • Refer­rer URL
  • The host­na­me of the acces­sing computer
  • The time of the ser­ver inquiry
  • The IP address

This data is not mer­ged with other data sources.

This data is recor­ded on the basis of Art. 6(1)(f) GDPR. The ope­ra­tor of the web­site has a legi­ti­ma­te inte­rest in the tech­ni­cal­ly error free depic­tion and the opti­miz­a­ti­on of the operator’s web­site. In order to achie­ve this, ser­ver log files must be recorded.

Con­ta­ct form

If you sub­mit inqui­ries to us via our con­ta­ct form, the infor­ma­ti­on pro­vi­ded in the con­ta­ct form as well as any con­ta­ct infor­ma­ti­on pro­vi­ded the­r­ein will be stored by us in order to hand­le your inqui­ry and in the event that we have fur­ther ques­ti­ons. We will not share this infor­ma­ti­on without your consent.

The pro­ces­sing of the­se data is based on Art. 6(1)(b) GDPR, if your request is rela­ted to the exe­cu­ti­on of a con­tract or if it is necessa­ry to car­ry out pre-con­trac­tu­al mea­su­res. In all other cases the pro­ces­sing is based on our legi­ti­ma­te inte­rest in the effec­ti­ve pro­ces­sing of the requests addres­sed to us (Art. 6(1)(f) GDPR) or on your agree­ment (Art. 6(1)(a) GDPR) if this has been reques­ted; the con­sent can be revo­ked at any time.

The infor­ma­ti­on you have ent­e­red into the con­ta­ct form shall remain with us until you ask us to era­di­ca­te the data, revo­ke your con­sent to the archi­ving of data or if the pur­po­se for which the infor­ma­ti­on is being archi­ved no lon­ger exists (e.g., after we have con­clu­ded our respon­se to your inqui­ry). This shall be without pre­ju­di­ce to any man­da­to­ry legal pro­vi­si­ons, in par­ti­cu­lar reten­ti­on periods.

Request by e‑mail, tele­pho­ne, or fax

If you con­ta­ct us by e‑mail, tele­pho­ne or fax, your request, inclu­ding all resul­ting per­so­nal data (name, request) will be stored and pro­ces­sed by us for the pur­po­se of pro­ces­sing your request. We do not pass the­se data on without your consent.

The­se data are pro­ces­sed on the basis of Art. 6(1)(b) GDPR if your inqui­ry is rela­ted to the ful­fill­ment of a con­tract or is requi­red for the per­for­mance of pre-con­trac­tu­al mea­su­res. In all other cases, the data are pro­ces­sed on the basis of our legi­ti­ma­te inte­rest in the effec­ti­ve hand­ling of inqui­ries sub­mit­ted to us (Art. 6(1)(f) GDPR) or on the basis of your con­sent (Art. 6(1)(a) GDPR) if it has been obtai­ned; the con­sent can be revo­ked at any time.

The data sent by you to us via con­ta­ct requests remain with us until you request us to dele­te, revo­ke your con­sent to the sto­rage or the pur­po­se for the data sto­rage lap­ses (e.g. after com­ple­ti­on of your request). Man­da­to­ry sta­tu­to­ry pro­vi­si­ons — in par­ti­cu­lar sta­tu­to­ry reten­ti­on peri­ods — remain unaffected.

5. Social media

Face­book

We have inte­gra­ted ele­ments of the social net­work Face­book on this web­site. The pro­vi­der of this ser­vice is Meta Plat­forms Ire­land Limi­ted, 4 Grand Canal Squa­re, Dub­lin 2, Ire­land. Accord­ing to Facebook’s state­ment the collec­ted data will be trans­fer­red to the USA and other third-par­ty coun­tries too.

An over­view of the Face­book social media ele­ments is avail­ab­le under the fol­lowing link: https://developers.facebook.com/docs/plugins/.

If the social media ele­ment has been acti­va­ted, a direct con­nec­tion bet­ween your device and the Face­book ser­ver will be estab­lis­hed. As a result, Face­book will recei­ve infor­ma­ti­on con­fir­ming your visit to this web­site with your IP address. If you click on the Face­book Like but­ton while you are log­ged into your Face­book account, you can link con­tent of this web­site to your Face­book pro­fi­le. Con­se­quent­ly, Face­book will be able to allo­ca­te your visit to this web­site to your user account. We have to empha­si­ze that we as the pro­vi­der of the web­site do not recei­ve any infor­ma­ti­on on the con­tent of the trans­fer­red data and its use by Face­book. For more infor­ma­ti­on, plea­se con­sult the Data Pri­va­cy Poli­cy of Face­book at: https://de-de.facebook.com/privacy/explanation.

If your appro­val (con­sent) has been obtai­ned the use of the abo­ve­men­tio­ned ser­vice shall occur on the basis of Art. 6 Sect. 1 lit. a GDPR and § 25 TTDSG (Ger­man Telecom­mu­ni­ca­ti­ons Act). Such con­sent may be revo­ked at any time. If your con­sent was not obtai­ned, the use of the ser­vice will occur on the basis of our legi­ti­ma­te inte­rest in making our infor­ma­ti­on as com­pre­hen­si­ve­ly visi­ble as pos­si­ble on social media.

Inso­far as per­so­nal data is collec­ted on our web­site with the help of the tool descri­bed here and for­war­ded to Face­book, we and Meta Plat­forms Ire­land Limi­ted, 4 Grand Canal Squa­re, Grand Canal Har­bour, Dub­lin 2, Ire­land are joint­ly respon­si­ble for this data pro­ces­sing (Art. 26 DSGVO). The joint respon­si­bi­li­ty is limi­ted exclu­si­ve­ly to the collec­tion of the data and its for­war­ding to Face­book. The pro­ces­sing by Face­book that takes place after the onward trans­fer is not part of the joint respon­si­bi­li­ty. The obli­ga­ti­ons incum­bent on us joint­ly have been set out in a joint pro­ces­sing agree­ment. The wor­d­ing of the agree­ment can be found under: https://www.facebook.com/legal/controller_addendum. Accord­ing to this agree­ment, we are respon­si­ble for pro­vi­ding the pri­va­cy infor­ma­ti­on when using the Face­book tool and for the pri­va­cy-secu­re imple­men­ta­ti­on of the tool on our web­site. Face­book is respon­si­ble for the data secu­ri­ty of Face­book pro­ducts. You can assert data sub­ject rights (e.g., requests for infor­ma­ti­on) regar­ding data pro­ces­sed by Face­book direct­ly with Face­book. If you assert the data sub­ject rights with us, we are obli­ged to for­ward them to Facebook.

Data trans­mis­si­on to the US is based on the Stan­dard Con­trac­tu­al Clau­ses (SCC) of the Euro­pean Com­mis­si­on. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.

Lin­kedIn

This web­site uses ele­ments of the Lin­kedIn net­work. The pro­vi­der is Lin­kedIn Ire­land Unli­mi­ted Com­pa­ny, Wil­ton Pla­za, Wil­ton Place, Dub­lin 2, Ireland.

Any time you access a page of this web­site that con­tains ele­ments of Lin­kedIn, a con­nec­tion to LinkedIn’s ser­vers is estab­lis­hed. Lin­kedIn is noti­fied that you have visi­ted this web­site with your IP address. If you click on LinkedIn’s “Recom­mend” but­ton and are log­ged into your Lin­kedIn account at the time, Lin­kedIn will be in a posi­ti­on to allo­ca­te your visit to this web­site to your user account. We have to point out that we as the pro­vi­der of the web­sites do not have any know­ledge of the con­tent of the trans­fer­red data and its use by LinkedIn.

If your appro­val (con­sent) has been obtai­ned the use of the abo­ve­men­tio­ned ser­vice shall occur on the basis of Art. 6 (1)(a) GDPR and § 25 TTDSG (Ger­man Telecom­mu­ni­ca­ti­ons Act). Such con­sent may be revo­ked at any time. If your con­sent was not obtai­ned, the use of the ser­vice will occur on the basis of our legi­ti­ma­te inte­rest in making our infor­ma­ti­on as com­pre­hen­si­ve­ly visi­ble as pos­si­ble on social media.

Data trans­mis­si­on to the US is based on the Stan­dard Con­trac­tu­al Clau­ses (SCC) of the Euro­pean Com­mis­si­on. Details can be found here: https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=en.

For fur­ther infor­ma­ti­on on this sub­ject, plea­se con­sult LinkedIn’s Data Pri­va­cy Decla­ra­ti­on at: https://www.linkedin.com/legal/privacy-policy.

6. Ana­ly­sis tools and advertising

Goog­le Tag Manager

We use the Goog­le Tag Mana­ger. The pro­vi­der is Goog­le Ire­land Limi­ted, Gor­don House, Bar­row Street, Dub­lin 4, Ireland

The Goog­le Tag Mana­ger is a tool that allows us to inte­gra­te tracking or sta­tis­ti­cal tools and other tech­no­lo­gies on our web­site. The Goog­le Tag Mana­ger its­elf does not crea­te any user pro­files, does not store coo­kies, and does not car­ry out any inde­pen­dent ana­ly­ses. It only mana­ges and runs the tools inte­gra­ted via it. Howe­ver, the Goog­le Tag Mana­ger does collect your IP address, which may also be trans­fer­red to Google’s parent com­pa­ny in the United States.

The Goog­le Tag Mana­ger is used on the basis of Art. 6(1)(f) GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in the quick and uncom­pli­ca­ted inte­gra­ti­on and admi­nis­tra­ti­on of various tools on his web­site. If appro­pria­te con­sent has been obtai­ned, the pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent inclu­des the sto­rage of coo­kies or the access to infor­ma­ti­on in the user’s end device (e.g., device fin­ger­prin­ting) wit­hin the mea­ning of the TTDSG. This con­sent can be revo­ked at any time.

Goog­le Analytics

This web­site uses func­tions of the web ana­ly­sis ser­vice Goog­le Ana­ly­tics. The pro­vi­der of this ser­vice is Goog­le Ire­land Limi­ted (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ireland.

Goog­le Ana­ly­tics enab­les the web­site ope­ra­tor to ana­ly­ze the beha­vi­or pat­terns of web­site visi­tors. To that end, the web­site ope­ra­tor recei­ves a varie­ty of user data, such as pages acces­sed, time spent on the page, the uti­li­zed ope­ra­ting sys­tem and the user’s ori­gin. This data is sum­ma­ri­zed in a user-ID and assi­gned to the respec­ti­ve end device of the web­site visitor.

Fur­ther­mo­re, Goog­le Ana­ly­tics allows us to record your mou­se and scroll move­ments and clicks, among other things. Goog­le Ana­ly­tics uses various mode­ling approa­ches to aug­ment the collec­ted data sets and uses machi­ne lear­ning tech­no­lo­gies in data analysis.

Goog­le Ana­ly­tics uses tech­no­lo­gies that make the reco­gni­ti­on of the user for the pur­po­se of ana­ly­zing the user beha­vi­or pat­terns (e.g., coo­kies or device fin­ger­prin­ting). The web­site use infor­ma­ti­on recor­ded by Goog­le is, as a rule trans­fer­red to a Goog­le ser­ver in the United Sta­tes, whe­re it is stored.

The use of the­se ser­vices occurs on the basis of your con­sent pur­suant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revo­ke your con­sent at any time.

Data trans­mis­si­on to the US is based on the Stan­dard Con­trac­tu­al Clau­ses (SCC) of the Euro­pean Com­mis­si­on. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

Brow­ser plug-in

You can pre­vent the record­ing and pro­ces­sing of your data by Goog­le by down­loading and instal­ling the brow­ser plugin avail­ab­le under the fol­lowing link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more infor­ma­ti­on about the hand­ling of user data by Goog­le Ana­ly­tics, plea­se con­sult Google’s Data Pri­va­cy Decla­ra­ti­on at: https://support.google.com/analytics/answer/6004245?hl=en.

Con­tract data processing

We have exe­cu­t­ed a con­tract data pro­ces­sing agree­ment with Goog­le and are imple­men­ting the strin­gent pro­vi­si­ons of the Ger­man data pro­tec­tion agen­ci­es to the ful­lest when using Goog­le Analytics.

Face­book Pixel

To mea­su­re con­ver­si­on rates, this web­site uses the visi­tor acti­vi­ty pixel of Face­book. The pro­vi­der of this ser­vice is Meta Plat­forms Ire­land Limi­ted, 4 Grand Canal Squa­re, Dub­lin 2, Ire­land. Accord­ing to Facebook’s state­ment the collec­ted data will be trans­fer­red to the USA and other third-par­ty coun­tries too.

This tool allows the tracking of page visi­tors after they have been lin­ked to the web­site of the pro­vi­der after cli­cking on a Face­book ad. This makes it pos­si­ble to ana­ly­ze the effec­ti­ve­ness of Face­book ads for sta­tis­ti­cal and mar­ket rese­arch pur­po­ses and to opti­mi­ze future adver­ti­sing campaigns.

For us as the ope­ra­tors of this web­site, the collec­ted data is anony­mous. We are not in a posi­ti­on to arri­ve at any con­clu­si­ons as to the iden­ti­ty of users. Howe­ver, Face­book archi­ves the infor­ma­ti­on and pro­ces­ses it, so that it is pos­si­ble to make a con­nec­tion to the respec­ti­ve user pro­fi­le and Face­book is in a posi­ti­on to use the data for its own pro­mo­tio­nal pur­po­ses in com­pli­an­ce with the Face­book Data Usa­ge Poli­cy. This enab­les Face­book to dis­play ads on Face­book pages as well as in loca­ti­ons out­side of Face­book. We as the ope­ra­tor of this web­site have no con­trol over the use of such data.

The use of the­se ser­vices occurs on the basis of your con­sent pur­suant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revo­ke your con­sent at any time.

Data trans­mis­si­on to the US is based on the Stan­dard Con­trac­tu­al Clau­ses (SCC) of the Euro­pean Com­mis­si­on. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum und https://de-de.facebook.com/help/566994660333381.

Inso­far as per­so­nal data is collec­ted on our web­site with the help of the tool descri­bed here and for­war­ded to Face­book, we and Meta Plat­forms Ire­land Limi­ted, 4 Grand Canal Squa­re, Grand Canal Har­bour, Dub­lin 2, Ire­land are joint­ly respon­si­ble for this data pro­ces­sing (Art. 26 DSGVO). The joint respon­si­bi­li­ty is limi­ted exclu­si­ve­ly to the collec­tion of the data and its for­war­ding to Face­book. The pro­ces­sing by Face­book that takes place after the onward trans­fer is not part of the joint respon­si­bi­li­ty. The obli­ga­ti­ons incum­bent on us joint­ly have been set out in a joint pro­ces­sing agree­ment. The wor­d­ing of the agree­ment can be found under: https://www.facebook.com/legal/controller_addendum. Accord­ing to this agree­ment, we are respon­si­ble for pro­vi­ding the pri­va­cy infor­ma­ti­on when using the Face­book tool and for the pri­va­cy-secu­re imple­men­ta­ti­on of the tool on our web­site. Face­book is respon­si­ble for the data secu­ri­ty of Face­book pro­ducts. You can assert data sub­ject rights (e.g., requests for infor­ma­ti­on) regar­ding data pro­ces­sed by Face­book direct­ly with Face­book. If you assert the data sub­ject rights with us, we are obli­ged to for­ward them to Facebook.

In Facebook’s Data Pri­va­cy Poli­ci­es, you will find addi­tio­nal infor­ma­ti­on about the pro­tec­tion of your pri­va­cy at: https://www.facebook.com/about/privacy/.

You also have the opti­on to deac­ti­va­te the remar­ke­ting func­tion “Cus­tom Audi­en­ces” in the ad set­tings sec­tion under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you first have to log into Facebook.

If you do not have a Face­book account, you can deac­ti­va­te any user-based adver­ti­sing by Face­book on the web­site of the Euro­pean Inter­ac­ti­ve Digi­tal Adver­ti­sing Alli­an­ce: http://www.youronlinechoices.com/de/praferenzmanagement/.

Face­book Cus­tom Audiences

We use Face­book Cus­tom Audi­en­ces. The pro­vi­der of this ser­vice is Meta Plat­forms Ire­land Limi­ted, 4 Grand Canal Squa­re, Dub­lin 2, Ireland.

Whenever you visit or use our web­site and apps, uti­li­ze our port­fo­lio (e.g., par­ti­ci­pa­ti­on in sweep­sta­kes), trans­fer data to us or inter­act with the Face­book con­tent of our com­pa­ny, we record rela­ted per­so­nal data. In the event that you have given us your con­sent to the use of Face­book Cus­tom Audi­en­ces, we will share the­se data with Face­book to put Face­book in a posi­ti­on to send you com­pa­ti­ble ads. The­se data may also be used to defi­ned tar­get audi­en­ces (Loo­ka­li­ke Audiences).

Face­book pro­ces­ses the­se data as our con­tract pro­ces­sor. For details, plea­se con­sult the user agree­ment of Face­book: https://www.facebook.com/legal/terms/customaudience.

The use of the­se ser­vices occurs on the basis of your con­sent pur­suant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revo­ke your con­sent at any time.

The trans­fer of date to the USA is based on the stan­dard con­tract clau­ses of the EU Com­mis­si­on. For details plea­se see: https://www.facebook.com/legal/terms/customaudience and https://www.facebook.com/legal/terms/dataprocessing.

Lin­kedIn Insight Tag

This web­site uses the Insight tag from Lin­kedIn. This ser­vice is pro­vi­ded by Lin­kedIn Ire­land Unli­mi­ted Com­pa­ny, Wil­ton Pla­za, Wil­ton Place, Dub­lin 2, Ireland.

Data pro­ces­sing by Lin­kedIn Insight tag

We use the Lin­kedIn Insight tag to obtain infor­ma­ti­on about visi­tors to our web­site. Once a web­site visi­tor is regis­tered with Lin­kedIn, we can ana­ly­ze the key occup­a­tio­nal data (e.g., care­er level, com­pa­ny size, coun­try, loca­ti­on, indus­try, job tit­le) of our web­site visi­tors to help us bet­ter tar­get our site to the rele­vant audi­ence. We can also use Lin­kedIn Insight tags to mea­su­re whe­ther visi­tors to our web­sites make a purcha­se or per­form other actions (con­ver­si­on mea­su­re­ment). Con­ver­si­on mea­su­re­ment can also be car­ri­ed out across devices (e.g. from PC to tablet). Lin­kedIn Insight Tag also fea­tures a retar­ge­ting func­tion that allows us to dis­play tar­ge­ted adver­ti­sing to visi­tors to our web­site out­side of the web­site. Accord­ing to Lin­kedIn, no iden­ti­fi­ca­ti­on of the adver­ti­sing addres­see takes place.

Lin­kedIn its­elf also collects log files (URL, refer­rer URL, IP address, device and brow­ser cha­rac­te­ris­tics and time of access). The IP addres­ses are shor­ten­ed or (if they are used to reach Lin­kedIn mem­bers across devices) has­h­ed (pseud­ony­mi­zed). The direct iden­ti­fiers of Lin­kedIn mem­bers are dele­ted by Lin­kedIn after seven days. The remai­ning pseud­ony­mi­zed data will then be dele­ted wit­hin 180 days.

The data collec­ted by Lin­kedIn can­not be assi­gned by us as a web­site ope­ra­tor to spe­ci­fic indi­vi­du­als. Lin­kedIn will store the per­so­nal data collec­ted from web­site visi­tors on its ser­vers in the USA and use it for its own pro­mo­tio­nal acti­vi­ties. For details, plea­se see LinkedIn’s pri­va­cy poli­cy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.

Legal basis

If your appro­val (con­sent) has been obtai­ned the use of the abo­ve­men­tio­ned ser­vice shall occur on the basis of Art. 6(1)(a) GDPR and § 25 TTDSG (Ger­man Telecom­mu­ni­ca­ti­ons Act). Such con­sent may be revo­ked at any time. If your con­sent was not obtai­ned, the use of the ser­vice will occur on the basis of Art. 6(1)(f) GDPR; the web­site ope­ra­tor has a legi­ti­ma­te inte­rest in effec­ti­ve adver­ti­sing pro­mo­ti­ons that inclu­de the uti­liz­a­ti­on of social media.

Data trans­mis­si­on to the US is based on the Stan­dard Con­trac­tu­al Clau­ses (SCC) of the Euro­pean Com­mis­si­on. Details can be found here: https://www.linkedin.com/legal/l/dpa und https://www.linkedin.com/legal/l/eu-sccs.

Objec­tion to the use of Lin­kedIn Insight Tag

You can object to LinkedIn’s ana­ly­sis of user beha­vi­or and tar­ge­ted adver­ti­sing at the fol­lowing link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

In addi­ti­on, Lin­kedIn mem­bers can con­trol the use of their per­so­nal infor­ma­ti­on for pro­mo­tio­nal pur­po­ses in the account set­tings. To pre­vent Lin­kedIn from lin­king infor­ma­ti­on collec­ted on our site to your Lin­kedIn account, you must log out of your Lin­kedIn account befo­re you visit our site.

Data pro­ces­sing

We have con­clu­ded a data pro­ces­sing agree­ment (DPA) with the abo­ve-men­tio­ned pro­vi­der. This is a con­tract man­da­ted by data pri­va­cy laws that gua­ran­tees that they pro­cess per­so­nal data of our web­site visi­tors only based on our inst­ruc­tions and in com­pli­an­ce with the GDPR.

7. Plug-ins and Tools

Goog­le Maps

This web­site uses the map­ping ser­vice Goog­le Maps. The pro­vi­der is Goog­le Ire­land Limi­ted (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ireland.

To enab­le the use of the Goog­le Maps fea­tures, your IP address must be stored. As a rule, this infor­ma­ti­on is trans­fer­red to one of Google’s ser­vers in the United Sta­tes, whe­re it is archi­ved. The ope­ra­tor of this web­site has no con­trol over the data trans­fer. In case Goog­le Maps has been acti­va­ted, Goog­le has the opti­on to use Goog­le web fonts for the pur­po­se of the uni­form depic­tion of fonts. When you access Goog­le Maps, your brow­ser will load the requi­red web fonts into your brow­ser cache, to cor­rect­ly dis­play text and fonts.

We use Goog­le Maps to pre­sent our online con­tent in an appe­aling man­ner and to make the loca­ti­ons dis­c­lo­sed on our web­site easy to find. This con­sti­tu­tes a legi­ti­ma­te inte­rest as defi­ned in Art. 6(1)(f) GDPR. If appro­pria­te con­sent has been obtai­ned, the pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent inclu­des the sto­rage of coo­kies or the access to infor­ma­ti­on in the user’s end device (e.g., device fin­ger­prin­ting) wit­hin the mea­ning of the TTDSG. This con­sent can be revo­ked at any time.

Data trans­mis­si­on to the US is based on the Stan­dard Con­trac­tu­al Clau­ses (SCC) of the Euro­pean Com­mis­si­on. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more infor­ma­ti­on on the hand­ling of user data, plea­se review Google’s Data Pri­va­cy Decla­ra­ti­on under: https://policies.google.com/privacy?hl=en.

Mana­geWP

We admi­nis­tra­te this web­site with the assi­s­tance of the Mana­geWP tool. The pro­vi­der is GoDaddy.com WP Euro­pe, Trg repu­bli­ke 5, 11000 Bel­gra­de, Ser­bia (her­ein­af­ter refer­red to as ManageWP).

Among other things, Mana­geWP ensu­res that we can moni­tor the secu­ri­ty and per­for­mance of our web­site as well as gene­ra­te auto­ma­tic back­ups. Con­se­quent­ly, Mana­geWP has access to all of the website’s con­tent, inclu­ding our data­ba­ses. Mana­geWP is being hos­ted on the provider’s servers.

The use of Mana­geWP is based on Art. 6 (1)(f) GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in a website(s) that work(s) as effec­tively and secu­re­ly as pos­si­ble. If appro­pria­te con­sent has been obtai­ned, the pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent inclu­des the sto­rage of coo­kies or the access to infor­ma­ti­on in the user’s end device (e.g., device fin­ger­prin­ting) wit­hin the mea­ning of the TTDSG. This con­sent can be revo­ked at any time.

Data pro­ces­sing

We have con­clu­ded a data pro­ces­sing agree­ment (DPA) with the abo­ve-men­tio­ned pro­vi­der. This is a con­tract man­da­ted by data pri­va­cy laws that gua­ran­tees that they pro­cess per­so­nal data of our web­site visi­tors only based on our inst­ruc­tions and in com­pli­an­ce with the GDPR.