Pri­vacy Pol­icy

1. An overview of data pro­tec­tion

Gen­eral infor­ma­tion

The fol­low­ing infor­ma­tion will pro­vide you with an easy to nav­i­gate overview of what will hap­pen with your per­sonal data when you visit this web­site. The term “per­sonal data” com­prises all data that can be used to per­son­ally iden­tify you. For detailed infor­ma­tion about the sub­ject mat­ter of data pro­tec­tion, please con­sult our Data Pro­tec­tion Dec­la­ra­tion, which we have included beneath this copy.

Data record­ing on this web­site

Who is the respon­si­ble party for the record­ing of data on this web­site (i.e., the “con­troller”)?

The data on this web­site is processed by the oper­a­tor of the web­site, whose con­tact infor­ma­tion is avail­able under sec­tion “Infor­ma­tion about the respon­si­ble party (referred to as the “con­troller” in the GDPR)” in this Pri­vacy Pol­icy.

How do we record your data?

We col­lect your data as a result of your shar­ing of your data with us. This may, for instance be infor­ma­tion you enter into our con­tact form.

Other data shall be recorded by our IT sys­tems auto­mat­i­cally or after you con­sent to its record­ing dur­ing your web­site visit. This data com­prises pri­mar­ily tech­ni­cal infor­ma­tion (e.g., web browser, oper­at­ing sys­tem, or time the site was accessed). This infor­ma­tion is recorded auto­mat­i­cally when you access this web­site.

What are the pur­poses we use your data for?

A por­tion of the infor­ma­tion is gen­er­ated to guar­an­tee the error free pro­vi­sion of the web­site. Other data may be used to ana­lyze your user pat­terns.

What rights do you have as far as your infor­ma­tion is con­cerned?

You have the right to receive infor­ma­tion about the source, recip­i­ents, and pur­poses of your archived per­sonal data at any time with­out hav­ing to pay a fee for such dis­clo­sures. You also have the right to demand that your data are rec­ti­fied or erad­i­cated. If you have con­sented to data pro­cess­ing, you have the option to revoke this con­sent at any time, which shall affect all future data pro­cess­ing. More­over, you have the right to demand that the pro­cess­ing of your data be restricted under cer­tain cir­cum­stances. Fur­ther­more, you have the right to log a com­plaint with the com­pe­tent super­vis­ing agency.

Please do not hes­i­tate to con­tact us at any time if you have ques­tions about this or any other data pro­tec­tion related issues.

Analy­sis tools and tools pro­vided by third par­ties

There is a pos­si­bil­ity that your brows­ing pat­terns will be sta­tis­ti­cally ana­lyzed when your visit this web­site. Such analy­ses are per­formed pri­mar­ily with what we refer to as analy­sis pro­grams.

For detailed infor­ma­tion about these analy­sis pro­grams please con­sult our Data Pro­tec­tion Dec­la­ra­tion below.

2. Host­ing and Con­tent Deliv­ery Net­works (CDN)

We are host­ing the con­tent of our web­site at the fol­low­ing provider:

Exter­nal Host­ing

This web­site is hosted exter­nally. Per­sonal data col­lected on this web­site are stored on the servers of the host. These may include, but are not lim­ited to, IP addresses, con­tact requests, meta­data and com­mu­ni­ca­tions, con­tract infor­ma­tion, con­tact infor­ma­tion, names, web page access, and other data gen­er­ated through a web site.

The exter­nal host­ing serves the pur­pose of ful­fill­ing the con­tract with our poten­tial and exist­ing cus­tomers (Art. 6(1)(b) GDPR) and in the inter­est of secure, fast, and effi­cient pro­vi­sion of our online ser­vices by a pro­fes­sional provider (Art. 6(1)(f) GDPR). If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user's end device (e.g., device fin­ger­print­ing) within the mean­ing of the TTDSG. This con­sent can be revoked at any time.

Our host(s) will only process your data to the extent nec­es­sary to ful­fil its per­for­mance oblig­a­tions and to fol­low our instruc­tions with respect to such data.

We are using the fol­low­ing host(s):

webgo GmbH
Hei­denkamp­sweg 81
20097 Ham­burg

Cloud­flare

We use the “Cloud­flare” ser­vice pro­vided by Cloud­flare Inc., 101 Townsend St., San Fran­cisco, CA 94107, USA. (here­inafter referred to as “Cloud­flare”).

Cloud­flare offers a con­tent deliv­ery net­work with DNS that is avail­able world­wide. As a result, the infor­ma­tion trans­fer that occurs between your browser and our web­site is tech­ni­cally routed via Cloudflare’s net­work. This enables Cloud­flare to ana­lyze data trans­ac­tions between your browser and our web­site and to work as a fil­ter between our servers and poten­tially mali­cious data traf­fic from the Inter­net. In this con­text, Cloud­flare may also use cook­ies or other tech­nolo­gies deployed to rec­og­nize Inter­net users, which shall, how­ever, only be used for the herein described pur­pose.

The use of Cloud­flare is based on our legit­i­mate inter­est in a pro­vi­sion of our web­site offer­ings that is as error free and secure as pos­si­ble (Art. 6(1)(f) GDPR).

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tual Clauses (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://www.cloudflare.com/privacypolicy/.

For more infor­ma­tion on Cloudflare’s secu­rity pre­cau­tions and data pri­vacy poli­cies, please fol­low this link: https://www.cloudflare.com/privacypolicy/.

The com­pany is cer­ti­fied in accor­dance with the “EU-US Data Pri­vacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pany cer­ti­fied under the DPF is obliged to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnZKAA0&status=Active

Data pro­cess­ing

We have con­cluded a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dated by data pri­vacy laws that guar­an­tees that they process per­sonal data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

3. Gen­eral infor­ma­tion and manda­tory infor­ma­tion

Data pro­tec­tion

The oper­a­tors of this web­site and its pages take the pro­tec­tion of your per­sonal data very seri­ously. Hence, we han­dle your per­sonal data as con­fi­den­tial infor­ma­tion and in com­pli­ance with the statu­tory data pro­tec­tion reg­u­la­tions and this Data Pro­tec­tion Dec­la­ra­tion.

When­ever you use this web­site, a vari­ety of per­sonal infor­ma­tion will be col­lected. Per­sonal data com­prises data that can be used to per­son­ally iden­tify you. This Data Pro­tec­tion Dec­la­ra­tion explains which data we col­lect as well as the pur­poses we use this data for. It also explains how, and for which pur­pose the infor­ma­tion is col­lected.

We here­with advise you that the trans­mis­sion of data via the Inter­net (i.e., through e-mail com­mu­ni­ca­tions) may be prone to secu­rity gaps. It is not pos­si­ble to com­pletely pro­tect data against third-party access.

Infor­ma­tion about the respon­si­ble party (referred to as the “con­troller” in the GDPR)

The data pro­cess­ing con­troller on this web­site is:

AXXERON HESCH elec­tron­ics GmbH
Boschstraße 8
D-31535 Neustadt

Phone: +49 5032 9535-0
E-mail: [email protected]

The con­troller is the nat­ural per­son or legal entity that sin­gle-hand­edly or jointly with oth­ers makes deci­sions as to the pur­poses of and resources for the pro­cess­ing of per­sonal data (e.g., names, e-mail addresses, etc.).

Stor­age dura­tion

Unless a more spe­cific stor­age period has been spec­i­fied in this pri­vacy pol­icy, your per­sonal data will remain with us until the pur­pose for which it was col­lected no longer applies. If you assert a jus­ti­fied request for dele­tion or revoke your con­sent to data pro­cess­ing, your data will be deleted, unless we have other legally per­mis­si­ble rea­sons for stor­ing your per­sonal data (e.g., tax or com­mer­cial law reten­tion peri­ods); in the lat­ter case, the dele­tion will take place after these rea­sons cease to apply.

Gen­eral infor­ma­tion on the legal basis for the data pro­cess­ing on this web­site

If you have con­sented to data pro­cess­ing, we process your per­sonal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if spe­cial cat­e­gories of data are processed accord­ing to Art. 9 (1) DSGVO. In the case of explicit con­sent to the trans­fer of per­sonal data to third coun­tries, the data pro­cess­ing is also based on Art. 49 (1)(a) GDPR. If you have con­sented to the stor­age of cook­ies or to the access to infor­ma­tion in your end device (e.g., via device fin­ger­print­ing), the data pro­cess­ing is addi­tion­ally based on § 25 (1) TTDSG. The con­sent can be revoked at any time. If your data is required for the ful­fill­ment of a con­tract or for the imple­men­ta­tion of pre-con­trac­tual mea­sures, we process your data on the basis of Art. 6(1)(b) GDPR. Fur­ther­more, if your data is required for the ful­fill­ment of a legal oblig­a­tion, we process it on the basis of Art. 6(1)(c) GDPR. Fur­ther­more, the data pro­cess­ing may be car­ried out on the basis of our legit­i­mate inter­est accord­ing to Art. 6(1)(f) GDPR. Infor­ma­tion on the rel­e­vant legal basis in each indi­vid­ual case is pro­vided in the fol­low­ing para­graphs of this pri­vacy pol­icy.

Des­ig­na­tion of a data pro­tec­tion offi­cer

We have appointed a data pro­tec­tion offi­cer.

ER Secure GmbH
In der Knack­e­nau 4
82031 Grün­wald

Phone: +49 5032 9535-0
E-mail: [email protected]

Infor­ma­tion on the data trans­fer to third-party coun­tries that are not secure under data pro­tec­tion law and the trans­fer to US com­pa­nies that are not DPF-cer­ti­fied

We use, among other tech­nolo­gies, tools from com­pa­nies located in third-party coun­tries that are not safe under data pro­tec­tion law, as well as US tools whose providers are not cer­ti­fied under the EU-US Data Pri­vacy Frame­work (DPF). If these tools are enabled, your per­sonal data may be trans­ferred to and processed in these coun­tries. We would like you to note that no level of data pro­tec­tion com­pa­ra­ble to that in the EU can be guar­an­teed in third coun­tries that are inse­cure in terms of data pro­tec­tion law.

We would like to point out that the US, as a secure third-party coun­try, gen­er­ally has a level of data pro­tec­tion com­pa­ra­ble to that of the EU. Data trans­fer to the US is there­fore per­mit­ted if the recip­i­ent is cer­ti­fied under the “EU-US Data Pri­vacy Frame­work” (DPF) or has appro­pri­ate addi­tional assur­ances. Infor­ma­tion on trans­fers to third-party coun­tries, includ­ing the data recip­i­ents, can be found in this Pri­vacy Pol­icy.

Recip­i­ents of per­sonal data

In the scope of our busi­ness activ­i­ties, we coop­er­ate with var­i­ous exter­nal par­ties. In some cases, this also requires the trans­fer of per­sonal data to these exter­nal par­ties. We only dis­close per­sonal data to exter­nal par­ties if this is required as part of the ful­fill­ment of a con­tract, if we are legally oblig­ated to do so (e.g., dis­clo­sure of data to tax author­i­ties), if we have a legit­i­mate inter­est in the dis­clo­sure pur­suant to Art. 6 (1)(f) GDPR, or if another legal basis per­mits the dis­clo­sure of this data. When using proces­sors, we only dis­close per­sonal data of our cus­tomers on the basis of a valid con­tract on data pro­cess­ing. In the case of joint pro­cess­ing, a joint pro­cess­ing agree­ment is con­cluded.

Revo­ca­tion of your con­sent to the pro­cess­ing of data

A wide range of data pro­cess­ing trans­ac­tions are pos­si­ble only sub­ject to your express con­sent. You can also revoke at any time any con­sent you have already given us. This shall be with­out prej­u­dice to the law­ful­ness of any data col­lec­tion that occurred prior to your revo­ca­tion.

Right to object to the col­lec­tion of data in spe­cial cases; right to object to direct adver­tis­ing (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a com­plaint with the com­pe­tent super­vi­sory agency

In the event of vio­la­tions of the GDPR, data sub­jects are enti­tled to log a com­plaint with a super­vi­sory agency, in par­tic­u­lar in the mem­ber state where they usu­ally main­tain their domi­cile, place of work or at the place where the alleged vio­la­tion occurred. The right to log a com­plaint is in effect regard­less of any other admin­is­tra­tive or court pro­ceed­ings avail­able as legal recourses.

Right to data porta­bil­ity

You have the right to have data that we process auto­mat­i­cally on the basis of your con­sent or in ful­fill­ment of a con­tract handed over to you or to a third party in a com­mon, machine-read­able for­mat. If you should demand the direct trans­fer of the data to another con­troller, this will be done only if it is tech­ni­cally fea­si­ble.

Infor­ma­tion about, rec­ti­fi­ca­tion and erad­i­ca­tion of data

Within the scope of the applic­a­ble statu­tory pro­vi­sions, you have the right to demand infor­ma­tion about your archived per­sonal data, their source and recip­i­ents as well as the pur­pose of the pro­cess­ing of your data at any time. You may also have a right to have your data rec­ti­fied or erad­i­cated. If you have ques­tions about this sub­ject mat­ter or any other ques­tions about per­sonal data, please do not hes­i­tate to con­tact us at any time.

Right to demand pro­cess­ing restric­tions

You have the right to demand the impo­si­tion of restric­tions as far as the pro­cess­ing of your per­sonal data is con­cerned. To do so, you may con­tact us at any time. The right to demand restric­tion of pro­cess­ing applies in the fol­low­ing cases:

• In the event that you should dis­pute the cor­rect­ness of your data archived by us, we will usu­ally need some time to ver­ify this claim. Dur­ing the time that this inves­ti­ga­tion is ongo­ing, you have the right to demand that we restrict the pro­cess­ing of your per­sonal data.
• If the pro­cess­ing of your per­sonal data was/is con­ducted in an unlaw­ful man­ner, you have the option to demand the restric­tion of the pro­cess­ing of your data instead of demand­ing the erad­i­ca­tion of this data.
• If we do not need your per­sonal data any longer and you need it to exer­cise, defend or claim legal enti­tle­ments, you have the right to demand the restric­tion of the pro­cess­ing of your per­sonal data instead of its erad­i­ca­tion.
• If you have raised an objec­tion pur­suant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been deter­mined whose inter­ests pre­vail, you have the right to demand a restric­tion of the pro­cess­ing of your per­sonal data.

If you have restricted the pro­cess­ing of your per­sonal data, these data – with the excep­tion of their archiv­ing – may be processed only sub­ject to your con­sent or to claim, exer­cise or defend legal enti­tle­ments or to pro­tect the rights of other nat­ural per­sons or legal enti­ties or for impor­tant pub­lic inter­est rea­sons cited by the Euro­pean Union or a mem­ber state of the EU.

SSL and/or TLS encryp­tion

For secu­rity rea­sons and to pro­tect the trans­mis­sion of con­fi­den­tial con­tent, such as pur­chase orders or inquiries you sub­mit to us as the web­site oper­a­tor, this web­site uses either an SSL or a TLS encryp­tion pro­gram. You can rec­og­nize an encrypted con­nec­tion by check­ing whether the address line of the browser switches from “http://” to “https://” and also by the appear­ance of the lock icon in the browser line.

If the SSL or TLS encryp­tion is acti­vated, data you trans­mit to us can­not be read by third par­ties.

Encrypted pay­ment trans­ac­tions on this web­site

If you are under an oblig­a­tion to share your pay­ment infor­ma­tion (e.g. account num­ber if you give us the author­ity to debit your bank account) with us after you have entered into a fee-based con­tract with us, this infor­ma­tion is required to process pay­ments.

Pay­ment trans­ac­tions using com­mon modes of pay­ing (Visa/MasterCard, debit to your bank account) are processed exclu­sively via encrypted SSL or TLS con­nec­tions. You can rec­og­nize an encrypted con­nec­tion by check­ing whether the address line of the browser switches from “http://” to “https://” and also by the appear­ance of the lock icon in the browser line.

If the com­mu­ni­ca­tion with us is encrypted, third par­ties will not be able to read the pay­ment infor­ma­tion you share with us.

Rejec­tion of unso­licited e-mails

We here­with object to the use of con­tact infor­ma­tion pub­lished in con­junc­tion with the manda­tory infor­ma­tion to be pro­vided in our Site Notice to send us pro­mo­tional and infor­ma­tion mate­r­ial that we have not expressly requested. The oper­a­tors of this web­site and its pages reserve the express right to take legal action in the event of the unso­licited send­ing of pro­mo­tional infor­ma­tion, for instance via SPAM mes­sages.

4. Record­ing of data on this web­site

Cook­ies

Our web­sites and pages use what the indus­try refers to as “cook­ies.” Cook­ies are small data pack­ages that do not cause any dam­age to your device. They are either stored tem­porar­ily for the dura­tion of a ses­sion (ses­sion cook­ies) or they are per­ma­nently archived on your device (per­ma­nent cook­ies). Ses­sion cook­ies are auto­mat­i­cally deleted once you ter­mi­nate your visit. Per­ma­nent cook­ies remain archived on your device until you actively delete them, or they are auto­mat­i­cally erad­i­cated by your web browser.

Cook­ies can be issued by us (first-party cook­ies) or by third-party com­pa­nies (so-called third-party cook­ies). Third-party cook­ies enable the inte­gra­tion of cer­tain ser­vices of third-party com­pa­nies into web­sites (e.g., cook­ies for han­dling pay­ment ser­vices).

Cook­ies have a vari­ety of func­tions. Many cook­ies are tech­ni­cally essen­tial since cer­tain web­site func­tions would not work in the absence of these cook­ies (e.g., the shop­ping cart func­tion or the dis­play of videos). Other cook­ies may be used to ana­lyze user behav­ior or for pro­mo­tional pur­poses.

Cook­ies, which are required for the per­for­mance of elec­tronic com­mu­ni­ca­tion trans­ac­tions, for the pro­vi­sion of cer­tain func­tions you want to use (e.g., for the shop­ping cart func­tion) or those that are nec­es­sary for the opti­miza­tion (required cook­ies) of the web­site (e.g., cook­ies that pro­vide mea­sur­able insights into the web audi­ence), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a dif­fer­ent legal basis is cited. The oper­a­tor of the web­site has a legit­i­mate inter­est in the stor­age of required cook­ies to ensure the tech­ni­cally error-free and opti­mized pro­vi­sion of the operator’s ser­vices. If your con­sent to the stor­age of the cook­ies and sim­i­lar recog­ni­tion tech­nolo­gies has been requested, the pro­cess­ing occurs exclu­sively on the basis of the con­sent obtained (Art. 6(1)(a) GDPR and § 25 (1) TTDSG); this con­sent may be revoked at any time.

You have the option to set up your browser in such a man­ner that you will be noti­fied any time cook­ies are placed and to per­mit the accep­tance of cook­ies only in spe­cific cases. You may also exclude the accep­tance of cook­ies in cer­tain cases or in gen­eral or acti­vate the delete-func­tion for the auto­matic erad­i­ca­tion of cook­ies when the browser closes. If cook­ies are deac­ti­vated, the func­tions of this web­site may be lim­ited.

Which cook­ies and ser­vices are used on this web­site can be found in this pri­vacy pol­icy.

Con­sent with Bor­labs Cookie

Our web­site uses the Bor­labs con­sent tech­nol­ogy to obtain your con­sent to the stor­age of cer­tain cook­ies in your browser or for the use of cer­tain tech­nolo­gies and for their data pri­vacy pro­tec­tion com­pli­ant doc­u­men­ta­tion. The provider of this tech­nol­ogy is Bor­labs GmbH, Rübenkamp 32, 22305 Ham­burg, Ger­many (here­inafter referred to as Bor­labs).

When­ever you visit our web­site, a Bor­labs cookie will be stored in your browser, which archives any dec­la­ra­tions or revo­ca­tions of con­sent you have entered. These data are not shared with the provider of the Bor­labs tech­nol­ogy.

The recorded data shall remain archived until you ask us to erad­i­cate them, delete the Bor­labs cookie on your own or the pur­pose of stor­ing the data no longer exists. This shall be with­out prej­u­dice to any reten­tion oblig­a­tions man­dated by law. To review the details of Bor­labs’ data pro­cess­ing poli­cies, please visit https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

We use the Bor­labs cookie con­sent tech­nol­ogy to obtain the dec­la­ra­tions of con­sent man­dated by law for the use of cook­ies. The legal basis for the use of such cook­ies is Art. 6(1)(c) GDPR.

Server log files

The provider of this web­site and its pages auto­mat­i­cally col­lects and stores infor­ma­tion in so-called server log files, which your browser com­mu­ni­cates to us auto­mat­i­cally. The infor­ma­tion com­prises:

• The type and ver­sion of browser used
• The used oper­at­ing sys­tem
• Refer­rer URL
• The host­name of the access­ing com­puter
• The time of the server inquiry
• The IP address

This data is not merged with other data sources.

This data is recorded on the basis of Art. 6(1)(f) GDPR. The oper­a­tor of the web­site has a legit­i­mate inter­est in the tech­ni­cally error free depic­tion and the opti­miza­tion of the operator’s web­site. In order to achieve this, server log files must be recorded.

Con­tact form

If you sub­mit inquiries to us via our con­tact form, the infor­ma­tion pro­vided in the con­tact form as well as any con­tact infor­ma­tion pro­vided therein will be stored by us in order to han­dle your inquiry and in the event that we have fur­ther ques­tions. We will not share this infor­ma­tion with­out your con­sent.

The pro­cess­ing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the exe­cu­tion of a con­tract or if it is nec­es­sary to carry out pre-con­trac­tual mea­sures. In all other cases the pro­cess­ing is based on our legit­i­mate inter­est in the effec­tive pro­cess­ing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agree­ment (Art. 6(1)(a) GDPR) if this has been requested; the con­sent can be revoked at any time.

The infor­ma­tion you have entered into the con­tact form shall remain with us until you ask us to erad­i­cate the data, revoke your con­sent to the archiv­ing of data or if the pur­pose for which the infor­ma­tion is being archived no longer exists (e.g., after we have con­cluded our response to your inquiry). This shall be with­out prej­u­dice to any manda­tory legal pro­vi­sions, in par­tic­u­lar reten­tion peri­ods.

Request by e-mail, tele­phone, or fax

If you con­tact us by e-mail, tele­phone or fax, your request, includ­ing all result­ing per­sonal data (name, request) will be stored and processed by us for the pur­pose of pro­cess­ing your request. We do not pass these data on with­out your con­sent.

These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the ful­fill­ment of a con­tract or is required for the per­for­mance of pre-con­trac­tual mea­sures. In all other cases, the data are processed on the basis of our legit­i­mate inter­est in the effec­tive han­dling of inquiries sub­mit­ted to us (Art. 6(1)(f) GDPR) or on the basis of your con­sent (Art. 6(1)(a) GDPR) if it has been obtained; the con­sent can be revoked at any time.

The data sent by you to us via con­tact requests remain with us until you request us to delete, revoke your con­sent to the stor­age or the pur­pose for the data stor­age lapses (e.g. after com­ple­tion of your request). Manda­tory statu­tory pro­vi­sions - in par­tic­u­lar statu­tory reten­tion peri­ods - remain unaf­fected.

Use of Chat­bots

We use chat­bots to com­mu­ni­cate with you. Chat­bots have the capa­bil­ity to respond to your ques­tions and other entries with­out the assis­tance of humans. To do this, chat­bots ana­lyze your entries and other data to give match­ing responses (e.g., names, email addresses and other con­tact infor­ma­tion, cus­tomer num­bers and other iden­ti­fi­ca­tion, orders, and chat pro­gresses). The chat­bot can also reg­is­ter your IP address, log files, loca­tion infor­ma­tion and other meta data. The data is archived on the servers of the chat­bot provider.

It is pos­si­ble to gen­er­ate user pro­files based on the recorded data. More­over, the data can be used to dis­play inter­est-related adver­tis­ing if the other legal require­ments are met (in par­tic­u­lar if con­sent has been obtained). More­over, it is pos­si­ble to link chat­bots to ana­lyt­i­cal and adver­tis­ing tools.

The recorded data can also be used to improve our chat­bots and their response pat­terns (machine learn­ing).

We or the chat­bot oper­a­tor retain the data you enter until you ask us to delete it, revoke your con­sent to archive it or if the pur­pose for the data stor­age is no longer in effect (e.g., once your inquiry has been fully processed). This does not affect manda­tory statu­tory pro­vi­sions – in par­tic­u­lar, reten­tion time frames.

The legal basis for the use of chat­bots is Art. 6(1)(b) GDPR, if the chat­bot is used to nego­ti­ate a con­tract or in con­junc­tion with the ful­fill­ment of a con­tract. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) within the mean­ing of the TTDSG. This con­sent can be revoked at any time. In all other cases, the use is based on our legit­i­mate inter­est in the most effec­tive client com­mu­ni­ca­tion pos­si­ble (Art. 6(1)(f) GDPR).

Reg­is­tra­tion on this web­site

You have the option to reg­is­ter on this web­site to be able to use addi­tional web­site func­tions. We shall use the data you enter only for the pur­pose of using the respec­tive offer or ser­vice you have reg­is­tered for. The required infor­ma­tion we request at the time of reg­is­tra­tion must be entered in full. Oth­er­wise, we shall reject the reg­is­tra­tion.

To notify you of any impor­tant changes to the scope of our port­fo­lio or in the event of tech­ni­cal mod­i­fi­ca­tions, we shall use the e-mail address pro­vided dur­ing the reg­is­tra­tion process.

We shall process the data entered dur­ing the reg­is­tra­tion process on the basis of your con­sent (Art. 6(1)(a) GDPR).

The data recorded dur­ing the reg­is­tra­tion process shall be stored by us as long as you are reg­is­tered on this web­site. Sub­se­quently, such data shall be deleted. This shall be with­out prej­u­dice to manda­tory statu­tory reten­tion oblig­a­tions.

5. Analy­sis tools and adver­tis­ing

Google Tag Man­ager

We use the Google Tag Man­ager. The provider is Google Ire­land Lim­ited, Gor­don House, Bar­row Street, Dublin 4, Ire­land

The Google Tag Man­ager is a tool that allows us to inte­grate track­ing or sta­tis­ti­cal tools and other tech­nolo­gies on our web­site. The Google Tag Man­ager itself does not cre­ate any user pro­files, does not store cook­ies, and does not carry out any inde­pen­dent analy­ses. It only man­ages and runs the tools inte­grated via it. How­ever, the Google Tag Man­ager does col­lect your IP address, which may also be trans­ferred to Google’s par­ent com­pany in the United States.

The Google Tag Man­ager is used on the basis of Art. 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in the quick and uncom­pli­cated inte­gra­tion and admin­is­tra­tion of var­i­ous tools on his web­site. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) within the mean­ing of the TTDSG. This con­sent can be revoked at any time.

The com­pany is cer­ti­fied in accor­dance with the “EU-US Data Pri­vacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pany cer­ti­fied under the DPF is obliged to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Ana­lyt­ics

This web­site uses func­tions of the web analy­sis ser­vice Google Ana­lyt­ics. The provider of this ser­vice is Google Ire­land Lim­ited (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

Google Ana­lyt­ics enables the web­site oper­a­tor to ana­lyze the behav­ior pat­terns of web­site vis­i­tors. To that end, the web­site oper­a­tor receives a vari­ety of user data, such as pages accessed, time spent on the page, the uti­lized oper­at­ing sys­tem and the user’s ori­gin. This data is sum­ma­rized in a user-ID and assigned to the respec­tive end device of the web­site vis­i­tor.

Fur­ther­more, Google Ana­lyt­ics allows us to record your mouse and scroll move­ments and clicks, among other things. Google Ana­lyt­ics uses var­i­ous mod­el­ing approaches to aug­ment the col­lected data sets and uses machine learn­ing tech­nolo­gies in data analy­sis.

Google Ana­lyt­ics uses tech­nolo­gies that make the recog­ni­tion of the user for the pur­pose of ana­lyz­ing the user behav­ior pat­terns (e.g., cook­ies or device fin­ger­print­ing). The web­site use infor­ma­tion recorded by Google is, as a rule trans­ferred to a Google server in the United States, where it is stored.

The use of these ser­vices occurs on the basis of your con­sent pur­suant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your con­sent at any time.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tual Clauses (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

The com­pany is cer­ti­fied in accor­dance with the “EU-US Data Pri­vacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pany cer­ti­fied under the DPF is obliged to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Browser plug-in

You can pre­vent the record­ing and pro­cess­ing of your data by Google by down­load­ing and installing the browser plu­gin avail­able under the fol­low­ing link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more infor­ma­tion about the han­dling of user data by Google Ana­lyt­ics, please con­sult Google’s Data Pri­vacy Dec­la­ra­tion at: https://support.google.com/analytics/answer/6004245?hl=en.

Con­tract data pro­cess­ing

We have exe­cuted a con­tract data pro­cess­ing agree­ment with Google and are imple­ment­ing the strin­gent pro­vi­sions of the Ger­man data pro­tec­tion agen­cies to the fullest when using Google Ana­lyt­ics.

Google Ads

The web­site oper­a­tor uses Google Ads. Google Ads is an online pro­mo­tional pro­gram of Google Ire­land Lim­ited (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

Google Ads enables us to dis­play ads in the Google search engine or on third-party web­sites, if the user enters cer­tain search terms into Google (key­word tar­get­ing). It is also pos­si­ble to place tar­geted ads based on the user data Google has in its pos­ses­sion (e.g., loca­tion data and inter­ests; tar­get group tar­get­ing). As the web­site oper­a­tor, we can ana­lyze these data quan­ti­ta­tively, for instance by ana­lyz­ing which search terms resulted in the dis­play of our ads and how many ads led to respec­tive clicks.

The use of these ser­vices occurs on the basis of your con­sent pur­suant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your con­sent at any time.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tual Clauses (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

The com­pany is cer­ti­fied in accor­dance with the “EU-US Data Pri­vacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pany cer­ti­fied under the DPF is obliged to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Ads Remar­ket­ing

This web­site uses the func­tions of Google Ads Remar­ket­ing. The provider of these solu­tions is Google Ire­land Lim­ited (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

With Google Ads Remar­ket­ing, we can assign peo­ple who inter­act with our online offer­ing to spe­cific tar­get groups in order to sub­se­quently dis­play inter­est-based adver­tis­ing to them in the Google adver­tis­ing net­work (remar­ket­ing or retar­get­ing).

More­over, it is pos­si­ble to link the adver­tis­ing tar­get groups gen­er­ated with Google Ads Remar­ket­ing to device encom­pass­ing func­tions of Google. This makes it pos­si­ble to dis­play inter­est-based cus­tomized adver­tis­ing mes­sages, depend­ing on your prior usage and brows­ing pat­terns on a device (e.g., cell phone) in a man­ner tai­lored to you as well as on any of your devices (e.g., tablet or PC).

If you have a Google account, you have the option to object to per­son­al­ized adver­tis­ing under the fol­low­ing link: https://www.google.com/settings/ads/onweb/.

The use of these ser­vices occurs on the basis of your con­sent pur­suant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your con­sent at any time.

For fur­ther infor­ma­tion and the per­ti­nent data pro­tec­tion reg­u­la­tions, please con­sult the Data Pri­vacy Poli­cies of Google at: https://policies.google.com/technologies/ads?hl=en.

The com­pany is cer­ti­fied in accor­dance with the “EU-US Data Pri­vacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pany cer­ti­fied under the DPF is obliged to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

For­ma­tion of Tar­get Groups with Cus­tomer Rec­on­cil­i­a­tion

For the for­ma­tion of tar­get groups, we use, among other things, the Google Ads Remar­ket­ing cus­tomer rec­on­cil­i­a­tion fea­ture. To achieve this, we trans­fer cer­tain cus­tomer data (e.g., email addresses) from our cus­tomer lists to Google. If the respec­tive cus­tomers are Google users and are logged into their Google accounts, match­ing adver­tis­ing mes­sages within the Google net­work (e.g., YouTube, Gmail or in a search engine) are dis­played for them to view.

Google Con­ver­sion-Track­ing

This web­site uses Google Con­ver­sion Track­ing. The provider of this ser­vice is Google Ire­land Lim­ited (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

With the assis­tance of Google Con­ver­sion Track­ing, we are in a posi­tion to rec­og­nize whether the user has com­pleted cer­tain actions. For instance, we can ana­lyze the how fre­quently which but­tons on our web­site have been clicked and which prod­ucts are reviewed or pur­chased with par­tic­u­lar fre­quency. The pur­pose of this infor­ma­tion is to com­pile con­ver­sion sta­tis­tics. We learn how many users have clicked on our ads and which actions they have com­pleted. We do not receive any infor­ma­tion that would allow us to per­son­ally iden­tify the users. Google as such uses cook­ies or com­pa­ra­ble recog­ni­tion tech­nolo­gies for iden­ti­fi­ca­tion pur­poses.

The use of these ser­vices occurs on the basis of your con­sent pur­suant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your con­sent at any time.

For more infor­ma­tion about Google Con­ver­sion Track­ing, please review Google’s data pro­tec­tion pol­icy at: https://policies.google.com/privacy?hl=en

The com­pany is cer­ti­fied in accor­dance with the “EU-US Data Pri­vacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pany cer­ti­fied under the DPF is obliged to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

6. Newslet­ter

Newslet­ter data

If you would like to receive the newslet­ter offered on the web­site, we require an e-mail address from you as well as infor­ma­tion that allows us to ver­ify that you are the owner of the e-mail address pro­vided and that you agree to receive the newslet­ter. Fur­ther data is not col­lected or only on a vol­un­tary basis. For the han­dling of the newslet­ter, we use newslet­ter ser­vice providers, which are described below.

Clev­er­Reach

This web­site uses Clev­er­Reach for the send­ing of newslet­ters. The provider is the Clev­er­Reach GmbH & Co. KG, Schafjück­en­weg 2, 26180 Rast­ede, Ger­many (here­inafter “Clev­er­Reach”). Clev­er­Reach is a ser­vice that can be used to orga­nize and ana­lyze the send­ing of newslet­ters. The data you have entered for the pur­pose of sub­scrib­ing to our newslet­ter (e.g., e-mail address) are stored on servers of Clev­er­Reach in Ger­many or in Ire­land.

Newslet­ters we send out via Clev­er­Reach allow us to ana­lyze the user pat­terns of our newslet­ter recip­i­ents. Among other things, in con­junc­tion with this, it is pos­si­ble how many recip­i­ents actu­ally opened the newslet­ter e-mail and how often which link inside the newslet­ter has been clicked. With the assis­tance of a tool called Con­ver­sion Track­ing, we can also deter­mine whether an action that has been pre­de­fined in the newslet­ter actu­ally occurred after the link was clicked (e.g., pur­chase of a prod­uct on this web­site). For more infor­ma­tion on the data analy­sis ser­vices by Clev­er­Reach newslet­ters, please go to: https://www.cleverreach.com/en/features/reporting-tracking/.

The data is processed based on your con­sent (Art. 6(1)(a) GDPR). You may revoke any con­sent you have given at any time by unsub­scrib­ing from the newslet­ter. This shall be with­out prej­u­dice to the law­ful­ness of any data pro­cess­ing trans­ac­tions that have taken place prior to your revo­ca­tion.

If you do not want to per­mit an analy­sis by Clev­er­Reach, you must unsub­scribe from the newslet­ter. We pro­vide a link for you to do this in every newslet­ter mes­sage.

The data deposited with us for the pur­pose of sub­scrib­ing to the newslet­ter will be stored by us until you unsub­scribe from the newslet­ter or the newslet­ter ser­vice provider and deleted from the newslet­ter dis­tri­b­u­tion list after you unsub­scribe from the newslet­ter. Data stored for other pur­poses with us remain unaf­fected.

After you unsub­scribe from the newslet­ter dis­tri­b­u­tion list, your e-mail address may be stored by us or the newslet­ter ser­vice provider in a black­list, if such action is nec­es­sary to pre­vent future mail­ings. The data from the black­list is used only for this pur­pose and not merged with other data. This serves both your inter­est and our inter­est in com­ply­ing with the legal require­ments when send­ing newslet­ters (legit­i­mate inter­est within the mean­ing of Art. 6(1)(f) GDPR). The stor­age in the black­list is indef­i­nite. You may object to the stor­age if your inter­ests out­weigh our legit­i­mate inter­est.

For more details, please con­sult the Data Pro­tec­tion Pro­vi­sions of Clev­er­Reach at: https://www.cleverreach.com/en/privacy-policy/.

Data pro­cess­ing

We have con­cluded a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dated by data pri­vacy laws that guar­an­tees that they process per­sonal data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

7. Plug-ins and Tools

YouTube with expanded data pro­tec­tion inte­gra­tion

Our web­site embeds videos of the web­site YouTube. The web­site oper­a­tor is Google Ire­land Lim­ited (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

We use YouTube in the expanded data pro­tec­tion mode. Accord­ing to YouTube, this mode ensures that YouTube does not store any infor­ma­tion about vis­i­tors to this web­site before they watch the video. Nev­er­the­less, this does not nec­es­sar­ily mean that the shar­ing of data with YouTube part­ners can be ruled out as a result of the expanded data pro­tec­tion mode. For instance, regard­less of whether you are watch­ing a video, YouTube will always estab­lish a con­nec­tion with the Google Dou­bleClick net­work.

As soon as you start to play a YouTube video on this web­site, a con­nec­tion to YouTube’s servers will be estab­lished. As a result, the YouTube server will be noti­fied, which of our pages you have vis­ited. If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allo­cate your brows­ing pat­terns to your per­sonal pro­file. You have the option to pre­vent this by log­ging out of your YouTube account.

Fur­ther­more, after you have started to play a video, YouTube will be able to place var­i­ous cook­ies on your device or com­pa­ra­ble tech­nolo­gies for recog­ni­tion (e.g. device fin­ger­print­ing). In this way YouTube will be able to obtain infor­ma­tion about this website’s vis­i­tors. Among other things, this infor­ma­tion will be used to gen­er­ate video sta­tis­tics with the aim of improv­ing the user friend­li­ness of the site and to pre­vent attempts to com­mit fraud.

Under cer­tain cir­cum­stances, addi­tional data pro­cess­ing trans­ac­tions may be trig­gered after you have started to play a YouTube video, which are beyond our con­trol.

The use of YouTube is based on our inter­est in pre­sent­ing our online con­tent in an appeal­ing man­ner. Pur­suant to Art. 6(1)(f) GDPR, this is a legit­i­mate inter­est. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) within the mean­ing of the TTDSG. This con­sent can be revoked at any time.

For more infor­ma­tion on how YouTube han­dles user data, please con­sult the YouTube Data Pri­vacy Pol­icy under: https://policies.google.com/privacy?hl=en.

The com­pany is cer­ti­fied in accor­dance with the “EU-US Data Pri­vacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pany cer­ti­fied under the DPF is obliged to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Fonts (local embed­ding)

This web­site uses so-called Google Fonts pro­vided by Google to ensure the uni­form use of fonts on this site. These Google fonts are locally installed so that a con­nec­tion to Google’s servers will not be estab­lished in con­junc­tion with this appli­ca­tion.

For more infor­ma­tion on Google Fonts, please fol­low this link: https://developers.google.com/fonts/faq and con­sult Google’s Data Pri­vacy Dec­la­ra­tion under: https://policies.google.com/privacy?hl=en.

Font Awe­some (local embed­ding)

This web­site uses Font Awe­some to ensure the uni­form use of fonts on this site. Font Awe­some is locally installed so that a con­nec­tion to Fonti­cons, Inc.’s servers will not be estab­lished in con­junc­tion with this appli­ca­tion.

For more infor­ma­tion on Font Awe­some, please and con­sult the Data Pri­vacy Dec­la­ra­tion for Font Awe­some under: https://fontawesome.com/privacy.

iThemes Secu­rity

We have inte­grated iThemes Secu­rity into this web­site. The provider is iThemes Media LLC, 1720 South Kelly Avenue Edmond, OK 73013, USA (here­inafter referred to as “iThemes Secu­rity”).

iThemes Secu­rity pro­tects our web­site against unde­sir­able access or mali­cious cyber-attacks. For this pur­pose, iThemes Secu­rity records, among other things, your IP address, the time, and source of login attempts and log files (e.g., the uti­lized browser). iThemes Secu­rity is installed locally on our servers.

iThemes Secu­rity trans­mits IP addresses of recur­ring attack­ers to a cen­tral data­base of iThemes in the US (Net­work Brute Force Pro­tec­tion) to pre­vent such attacks in the future.

The use of iThemes Secu­rity is based on Art. 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in pro­tect­ing its web­site opti­mally against cyber-attacks. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) within the mean­ing of the TTDSG. This con­sent can be revoked at any time.

Ninja Fire­wall

We have inte­grated Ninja Fire­wall on this web­site. The provider is Nin­Tech­Net Lim­ited, Unit 1603, 16th Floor, The L. Plaza 367 - 375 Queen‘s Road Cen­tral She­ung Wan, Hong Kong (here­inafter referred to as “Ninja Fire­wall”).

Ninja Fire­wall pro­tects our web­site against unde­sir­able access or mali­cious cyber-attacks. For this pur­pose, Ninja Fire­wall col­lects IP address, request, refer­rer, and the time of page access. Ninja Fire­wall is installed locally on our servers and does not trans­mit any per­sonal data to the provider of the tool or other third par­ties.

We have enabled IP anonymiza­tion for Ninja Fire­wall, so that the tool only col­lects the IP address in a short­ened form.

The use of Ninja Fire­wall is based on Art. 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in the most effec­tive pro­tec­tion of his web­site against cyber­at­tacks.

8. eCom­merce and pay­ment ser­vice providers

Pro­cess­ing of Cus­tomer and Con­tract Data

We col­lect, process, and use per­sonal cus­tomer and con­tract data for the estab­lish­ment, con­tent arrange­ment and mod­i­fi­ca­tion of our con­trac­tual rela­tion­ships. Data with per­sonal ref­er­ences to the use of this web­site (usage data) will be col­lected, processed, and used only if this is nec­es­sary to enable the user to use our ser­vices or required for billing pur­poses. The legal basis for these processes is Art. 6(1)(b) GDPR.

The col­lected cus­tomer data shall be deleted upon com­ple­tion of the order or ter­mi­na­tion of the busi­ness rela­tion­ship and upon expi­ra­tion of any exist­ing statu­tory archiv­ing peri­ods. This shall be with­out prej­u­dice to any statu­tory archiv­ing peri­ods.

Our social media appear­ances

This pri­vacy pol­icy applies to the fol­low­ing social media pres­ence

• https://de.linkedin.com/company/hesch

Data pro­cess­ing through social net­works

We main­tain pub­licly avail­able pro­files in social net­works. The indi­vid­ual social net­works we use can be found below.

Social net­works such as Face­book, Twit­ter etc. can gen­er­ally ana­lyze your user behav­ior com­pre­hen­sively if you visit their web­site or a web­site with inte­grated social media con­tent (e.g., like but­tons or ban­ner ads). When you visit our social media pages, numer­ous data pro­tec­tion-rel­e­vant pro­cess­ing oper­a­tions are trig­gered. In detail:

If you are logged in to your social media account and visit our social media page, the oper­a­tor of the social media por­tal can assign this visit to your user account. Under cer­tain cir­cum­stances, your per­sonal data may also be recorded if you are not logged in or do not have an account with the respec­tive social media por­tal. In this case, this data is col­lected, for exam­ple, via cook­ies stored on your device or by record­ing your IP address.

Using the data col­lected in this way, the oper­a­tors of the social media por­tals can cre­ate user pro­files in which their pref­er­ences and inter­ests are stored. This way you can see inter­est-based adver­tis­ing inside and out­side of your social media pres­ence. If you have an account with the social net­work, inter­est-based adver­tis­ing can be dis­played on any device you are logged in to or have logged in to.

Please also note that we can­not retrace all pro­cess­ing oper­a­tions on the social media por­tals. Depend­ing on the provider, addi­tional pro­cess­ing oper­a­tions may there­fore be car­ried out by the oper­a­tors of the social media por­tals. Details can be found in the terms of use and pri­vacy pol­icy of the respec­tive social media por­tals.

Legal basis

Our social media appear­ances should ensure the widest pos­si­ble pres­ence on the Inter­net. This is a legit­i­mate inter­est within the mean­ing of Art. 6 (1) lit. f GDPR. The analy­sis processes ini­ti­ated by the social net­works may be based on diver­gent legal bases to be spec­i­fied by the oper­a­tors of the social net­works (e.g., con­sent within the mean­ing of Art. 6 (1) (a) GDPR).

Respon­si­bil­ity and asser­tion of rights

If you visit one of our social media sites (e.g., Face­book), we, together with the oper­a­tor of the social media plat­form, are respon­si­ble for the data pro­cess­ing oper­a­tions trig­gered dur­ing this visit. You can in prin­ci­ple pro­tect your rights (infor­ma­tion, cor­rec­tion, dele­tion, lim­i­ta­tion of pro­cess­ing, data porta­bil­ity and com­plaint) vis-à-vis us as well as vis-à-vis the oper­a­tor of the respec­tive social media por­tal (e.g., Face­book).

Please note that despite the shared respon­si­bil­ity with the social media por­tal oper­a­tors, we do not have full influ­ence on the data pro­cess­ing oper­a­tions of the social media por­tals. Our options are deter­mined by the com­pany pol­icy of the respec­tive provider.

Stor­age time

The data col­lected directly from us via the social media pres­ence will be deleted from our sys­tems as soon as you ask us to delete it, you revoke your con­sent to the stor­age or the pur­pose for the data stor­age lapses. Stored cook­ies remain on your device until you delete them. Manda­tory statu­tory pro­vi­sions - in par­tic­u­lar, reten­tion peri­ods - remain unaf­fected.

We have no con­trol over the stor­age dura­tion of your data that are stored by the social net­work oper­a­tors for their own pur­poses. For details, please con­tact the social net­work oper­a­tors directly (e.g., in their pri­vacy pol­icy, see below).

Your rights

You have the right to receive infor­ma­tion about the ori­gin, recip­i­ent and pur­pose of your stored per­sonal data at any time and free of charge. You also have the right to object, the right to data porta­bil­ity and the right to file a com­plaint with the respon­si­ble reg­u­la­tory agency. Fur­ther­more, you can request the cor­rec­tion, block­ing, dele­tion and, under cer­tain cir­cum­stances, the restric­tion of the pro­cess­ing of your per­sonal data.

Indi­vid­ual social net­works

LinkedIn

We have a LinkedIn pro­file. The provider is the LinkedIn Ire­land Unlim­ited Com­pany, Wilton Plaza, Wilton Place, Dublin 2, Ire­land. LinkedIn uses adver­tis­ing cook­ies.

If you want to dis­able LinkedIn adver­tis­ing cook­ies, please use the fol­low­ing link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tual Clauses (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

For details on how they han­dle your per­sonal infor­ma­tion, please refer to LinkedIn's pri­vacy pol­icy: https://www.linkedin.com/legal/privacy-policy.