Privacy policy

INTRODUCTION AND TERMS


1. INTRODUCTION

We process personal data by operating our website www.HAFN-IT.de (hereinafter referred to as the „Website“). These are treated confidentially by us and processed in accordance with the applicable laws , in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG-neu). With our data protection regulations, we want to inform you which personal data we collect from you, for what purposes and on what legal basis we use it and, if necessary, to whom we disclose it. In addition, we will explain to you your rights to protect and enforce your privacy.


2. TERMS

Our data protection regulations contain technical terms that are included in the GDPR and the BDSG-new. For your better understanding, let’s explain these terms in simple terms in advance:

2.1 personal data

„Personal data“ is any information relating to an identified or identifiable person (Art. 4 No. 1 GDPR). Information about an identified person can be, for example.B the name or e-mail address. However, personal data are also data for which the identity is not immediately apparent, but can be determined by combining one’s own or third-party information and thus learning who it is. A person can be identified by providing their address or bank details, date of birth or user name, IP addresses and/or location data. Relevant here are all information that in any way allows a conclusion to be made about a person.

2.2 processing

Article4 (2) GDPR means ‚processing‘ means any operation relating to personal data. This applies in particular to the collection, recording, organisation, ordering, storage, adaptation or modification, reading, querying, use, disclosure, transmission, dissemination or any other form of provision, matching or linking, restriction, erasure or destruction of personal data.

RESPONSIBLE COMPANY AND DATA PROTECTION OFFICER

3. PERSON IN CHARGE

Responsible for the data processing is:

Company:HAFN IT GmbH („we“)
Legal representative: Steffen Becker, Carlo Dannies, Christian Sprave (Managing Director)
Address: Gellertstraße 32, 22301 Hamburg
Phone: +49 40 822160400
Fax: +49 40 27166948
Email: info@HAFN-IT.de

4. DATA PROTECTION SUPERVISOR

We have appointed an external data protection officer for our company. You can reach him at:

Name: Arne Platzbecker
Address: HABEWI GmbH & Co. KG, Palmaille 96, 22767 Hamburg
Phone: +49 40 18189800
Fax: +49 40 181898099
Email: datenschutz@habewi.de

PROCESSING FRAME

5. PROCESSING FRAME: WEBSITE

Within the framework of the website with the URL www.HAFN-IT.de, we process the personal data of you listed below in clause s 6-18. We only process data from you that you actively provide on our website (e.B. by filling out forms) or which you automatically provide when using our offer.
Your data will be processed exclusively by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers in the processing of your personal data, this is done within the framework of a so-called order processing, in which we as the client are authorized to issue instructions to our contractor. For the operation of our website we use external service providers for hosting, maintenance, maintenance and further development. If additional external service providers are used for individual processing operations listed in paragraphs 6 to 18, they will be designated there.

We host our website at the external service provider SiteGround Hosting EOOD (SiteGround Hosting EOOD, 6 Olimpiyska Str., 1166 Sofia, Bulgaria) with server location in Europe. In principle, data transfers to third countries do not take place and are not planned. We will inform you about exceptions to this principle in the processing sins described below.

THE PROCESSING

6. PROVISION OF THE WEBSITE AND SERVER LOG FILES

6.1 Description of processing

Each time we access the website, we automatically collect information that your browser transmits to our server (so-called log files). This is the following data:

• Your IP address
• the browser software you use, as well as its version and language.
• the operating system you are using
• the website from which you came to our website (so-called referrer)
• the subpages you visit on our website
• the date and time of your visit to our website
• Your Internet service provider
• Amount of data transferred
• Country and place from which you visited our website
• Your length of stay on our website

These are also stored in the so-called log files of our system. The temporary storage of your IP address by the system is necessary in order to be able to deliver our website to the terminal device of a user. To do this, the user’s IP address must be stored for the duration of the session. However, your IP address is not recorded in our log files.

6.2 purpose

The processing is carried out in order to enable the website to be accessed and to ensure its stability and security. In addition, the processing serves the statistical evaluation and improvement of our online offer.

6.3 legal basic

The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 sec. 1 lit. f GDPR). Our legitimate interest lies in the purpose specified in clause 6.2.

6.4 Storage time

The data will be deleted as soon as they are no longer necessary for the purpose of their collection. In the case of the collection of data for the provision of the website, this is the case when the respective session is terminated. The log files will be deleted after 30 days.

7. CONTACTED BY E-MAIL

7.1 Description of processing

You can contact us using the e-mail addresses provided on the website. In this case, the personal data transmitted with the e-mail will be processed by us.

7.2 purpose

The data submitted with and in your e-mail will be used exclusively for the purpose of processing and responding to your request.

7.3 legal basis

The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 sec. 1 lit. f GDPR). Our legitimate interest lies in the purpose specified in clause 7.2. If the e-mail contact is aimed at concluding or fulfilling a contract, the data processing takes place for the performance of the contract (Art. 6 sec. 1 lit.b GDPR).

7.4 Storage time

The data will be deleted by us as soon as it is no longer necessary for the purpose of their collection. This is usually the case when the communication with you is finished. The communication is terminated if it can be inferred from the circumstances that your request has been finally clarified. If statutory retention periods prevent deletion, deletion shall take place immediately after expiry of the statutory retention period.

8. COOKIES

8.1 Description of processing

Our website uses cookies. Cookies are small text files that are stored on the user’s device when you visit a website. Cookies contain information that enables the recognition of a terminal device and, if applicable, certain functions of a website. In most cases, we only use so-called „session cookies“. These are automatically deleted when you end your Internet session and close the browser. Other cookies remain stored on your device for an extended period of time. On our website we use the following cookies:

• Cookie name: _ga. Purpose/Function: Google Analytics Distinction of visitors Storage time: This cookie expires 2 years after it has been filed.
• Cookie name: _gat. Purpose/Function: Google Analytics Throttling of request rates Storage time: This cookie expires 1 minute after it has been dropped.
• Cookie name: _gid. Purpose/Function: Google Analytics Distinction between users Storage time: This cookie expires 24 hours after it is filed.

8.2 purpose

We use cookies to make our website more user-friendly and to offer the functions described in clause 8.1.

8.3 legal basis

The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 sec. 1 lit. f GDPR). Our legitimate interest lies in the purpose specified in clause 8.2. If you are asked by us for your consent within the framework of a cookie banner or cookie consent tool, the legal basis is Art. 6 sec. 1 lit. a GDPR. Such consent is voluntary.

8.4 Storage period, withdrawal of consent

Cookies are automatically deleted at the end of a session or at the end of the specified storage period. Since cookies are stored on your device, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, individual functions of our website cannot be used or can only be used to a limited extent. If we obtain consent to the use of cookies via a cookie banner or a cookie consent tool, these consents may be revoked by you at any time within the settings of the cookie banner or the cookie-consent tool with effect for the future.

9. NEWSLETTER

9.1 Description of processing

We send a newsletter at irregular intervals. With the newsletter we inform you about our services, products and reference projects. You will only receive our newsletter if you actively subscribe to our mailing list. You can subscribe to it by filling out and submitting a newsletter registration form on our website.
To register for the newsletter, only your e-mail address is required. All other information (such as e.B. Your first name and last name) are voluntary and serve only to personalize the e-mails.
We use the so-called double opt-in procedure to carry out and verify newsletter registrations. Registration takes place in several steps. First, you can subscribe to the newsletter on our website. You will then receive an e-mail from us to the e-mail address you provided. With this e-mail we ask you to confirm that you have actually entered the newsletter and wish to send it. Confirmation is made by clicking on a confirmation link in the e-mail. Only after a successful confirmation will we include you in our newsletter distribution list and send you e-mails in the future. As part of the double opt-in procedure, we store the date, time and IP addresses both when registering and confirming.

If you purchase goods or services on our website and deposit your e-mail address, it can subsequently be used by us for sending a so-called existing customer newsletter. In such a case, the newsletter will only send direct mail for your own similar goods or services.

9.2 purpose

The processing is carried out in order to offer the newsletter function and to be able to send newsletter e-mails to subscribers as well as existing customers. The collection and storage of the date, time and IP addresses at the time of the newsletter registration serves to document the consent given and to protect against the abusive registration of e-mail addresses.

9.3 legal basis

The processing is carried out at our subscriber newsletter on the basis of consent in accordance with Art. 6 sec. 1 lit. a GDPR. You can access the declaration of consent on our website at any time at the following address. Your consent is voluntary. The collection and storage of the date, time and IP addresses when registering for the newsletter is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 sec. 1 lit. f GDPR). Our legitimate interest lies in the purpose specified in clause 9.2.

The processing is carried out at our existing customer newsletter on the basis of Art. 6 sec. 1 lit. f GDPR in order to safeguard the overriding interests of the controller. Our legitimate interest lies in direct marketing to existing customers. This is permitted within the scope of Section 7 (3) of the UWG, which we have observed.
9.4 Storage period and withdrawal of consent
If you do not confirm your registration for our newsletter within 24 hours of receiving the corresponding registration email, your data will be automatically deleted. We will process your personal data for the duration of your newsletter subscription. You can terminate the receipt of our newsletter at any time by revoking your consent. You can also object to the use of your e-mail address for sending our existing customer newsletter at any time.

For this, a simple explanation (by e-mail to info@HAFN-IT.de, or by post to HAFN IT GmbH, Gellertstraße 32, 22301 Hamburg). You can also unsubscribe from the newsletter by clicking on the unsubscribe link in any newsletter e-mail or following it. With the withdrawal of your consent, no more newsletters will be sent to you and your personal data will be removed from our active mailing list. We will include your e-mail address in our so-called blacklist in order to enforce your revocation. This will enable you to ensure that you do not receive newsletters from us in the future and that your e-mail address will not be misused by third parties.
9.5 Recipients and transfers to third countries
We use the services of the newsletter provider Mailchimp to manage our newsletter distribution and to send the e-mails. This is done as part of order processing. Mailchimp is an offer from The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308 USA (hereinafter referred to as „Mailchimp“). With your newsletter registration, the data provided during the registration process will be transferred to Mailchimp and processed on Mailchimp servers in the USA. Mailchimp has submitted to the EU-US Privacy Shield. For more information about the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework. For more information on Mailchimp’s privacy policy, see the service provider’s privacy policy at http://mailchimp.com/legal/privacy/.

10. SOCIAL NETWORKS

10.1 Description of processing

Our website does not use so-called social media plugins. The logos of the social networks Facebook, LinkedIn and Xing displayed on our website are only linked to the corresponding profiles of our company. If you click on one of the logos, you will be redirected to the external website of the respective social network.

However, our profiles within the social networks also represent data processing. If you are logged in to the respective social network when you visit such a profile, this information will be assigned to your user account there. When you interact with our profile, such as „share,“ „like,“ or „retweet,“ this information is also stored in your user account. Through the so-called „insights“ of our Facebook page we have the possibility to obtain statistical data. These statistics are provided by Facebook. The „Insights function“ is not re-hireable. We cannot decide to turn this feature on or off. It is available to all Facebook fan page operators, whether you use Facebook’s Insights feature or not. We are provided with data for a selectable period of time and for the following groups of people: fans, subscribers, people reached and interacting. These are the following categories of personal data: total number of page views, „likes“ including origin, page activities, post interactions, reach, contribution reach (divided into organic, viral and paid interactions), comments, shared content, responses, and demographic evaluations, i.e. country of origin, gender, and age. Due to the Facebook Terms of Use – which each user must have agreed to use in order to use Facebook – we are able to identify subscribers and fans of our Site and view their profiles.
The social networks with which you communicate store your data using pseudonyms as user profiles and use it for advertising purposes and for market research. For example.B ads within the social network and on other third-party websites that correspond to your presumed interests may be displayed to you. For this purpose, cookies are usually used, which the social network places on your terminal device. Further information on cookies can be found in clause 8. You have the right to object to the formation of these user profiles, which you must contact the social networks directly for the exercise of.

10.2 purpose

We maintain profiles on the aforementioned social networks for the purpose of contemporary and supportive public relations and corporate communication with customers and interested parties.
We use the „Facebook Insights“ function to make our posts on our Facebook fan page more attractive to our visitors. For example, we can use preferred visitor visits for time-optimized planning of our contributions.

10.3 legal basis

The legal basis for data processing within the framework of our profiles on social networks is the protection of our overriding legitimate interests (Art. 6 sec. 1 lit. f GDPR). Our legitimate interest lies in the purpose specified in clause 10.2. If you are asked by us for your consent within the framework of a cookie banner or cookie consent tool, the legal basis is Art. 6 sec. 1 lit. a GDPR. Such consent is voluntary. If you are asked for consent by the respective operator of a social network, the legal basis is Article 6 (1) lit. a GDPR. The data processing is carried out with regard to our Facebook fan page on the basis of an agreement on joint responsibility under Article 26 GDPR between us and Facebook, which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum.

10.4 Recipients and transfers to third countries

The respective social networks are operated by the companies listed below. For more information about data protection with regard to our social media profile, please refer to the linked privacy policy.

• Facebook: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304. Privacy Policy: http://www.facebook.com/policy.php; http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo.

• LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
Privacy Policy: https://www.linkedin.com/legal/privacy-policy?src=li-other&veh=de.linkedin.com%7Cli-other

• Microsoft Bing: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Privacy Policy: https://privacy.microsoft.com/de-de/privacystatement

The social networks also process your personal data in the USA and have submitted to the EU-US Privacy Shield. For more information about the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework.

11. YOUTUBE VIDEOS

11.1 Description of processing

Our website uses services provided by „YouTube“ of a video platform operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (hereinafter referred to as „Youtube“). YouTube is represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube by embedding individual videos from the platform on our website as iFrame, so that they can be playable directly on our website. The videos are integrated into the „extended privacy mode“ offered on YouTube, i.e. no personal data will be transferred from you to Google as long as you do not play the videos. Only by playing a video is a data transfer to Google, over which we have no influence. When you play a video embedded there on a subpage of our website, it is transmitted to Google which subpage you visited and which video you viewed. If necessary, your IP address will also be transmitted to Google. If you are logged in as a YouTube or Google user, Google assigns this information to your user account. Google stores your data as user profiles and uses it for advertising purposes, for market research and/or for the needs-based design of Google websites. You have the right to object to the creation of these user profiles, which you must contact Google directly to exercise. For more information about Google’s privacy, see https://policies.google.com/privacy?hl=de-DE.

11.2 purpose

The processing is done in order to be able to show you videos on our website.

11.3 legal basis

The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 sec. 1 lit. f GDPR). Our legitimate interest lies in the purpose specified in clause 11.2.

11.4 Recipients and transfers to third countries

The integration of YouTube may send you/you personal data to YouTube LLC or you. Google submits. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield. For more information about the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework.

12. GOOGLE MAPS

12.1 Description of processing

Our website uses „Google Maps“, a map display service of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as „Google“). We use Google Maps by including a map with our business address on our website. The map is loaded directly from a Google server. To do this, your browser sends a request to a Google server. In this way, we may also transmit your IP address to Google in connection with the address of our website. However, Google Maps does not store cookies on your device. If you are logged in to Google when you visit our site, Google Maps assigns this information to your Google user account. Google stores your data as user profiles and uses it for advertising purposes, for market research and/or for the needs-based design of Google websites. You have the right to object to the creation of these user profiles, which you must contact Google directly to exercise. For more information about Google’s privacy, see https://policies.google.com/privacy?hl=de-DE.

12.2 purpose

The processing is done in order to be able to show you an interactive map on our website.

12.3 legal basis

The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 sec. 1 lit. f GDPR). Our legitimate interest lies in the purpose specified in clause 12.2.

12.4 Recipients and transfers to third countries

Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield. For more information about the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework.

13. GOOGLE ANALYTICS

13.1 Description of processing

Our website uses „Google Analytics“, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as „Google“). Google Analytics uses cookies (see clause 8), which enable an analysis of your use of our website. The information generated by the cookie is usually transmitted to a Google server in the USA and stored there. However, we only use Google Analytics with IP anonymization. This will shorten your IP address from Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google. The statistics compiled by Google Analytics record in particular how many users visit our website, from which country or place access is made, which subpages are accessed and which links or search terms allow visitors to access our website. The Google Analytics Terms of Use can be found at https://marketingplatform.google.com/about/analytics/terms/de/. An overview of data protection at Google Analytics is available at http://www.google.com/intl/de/analytics/learn/privacy.html. Google’s privacy policy can be viewed under https://policies.google.com/privacy?hl=de-DE.

13.2 purpose

The processing takes place in order to evaluate the use of our website. The information thus obtained serves to improve and tailor our online presence.

13.3 legal basis

The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 sec. 1 lit. f GDPR). Our legitimate interest lies in the purpose specified in clause 13.2. If you are asked by us for consent within the framework of a cookie banner or cookie consent tool, which also covers the use of Google Analytics, then the legal basis exists in Art. 6 sec. 1 lit. a GDPR. Such consent is voluntary.

13.4 Storage period and right to object, withdrawal of consent

We have explained in paragraph 8 how to store the storage time, as well as your control and setting options for cookies. You can object to the data processing by Google Analytics at any time by downloading and installing the browser add-on offered by Google at https://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, you have the option to click on the link below. This will set an opt-out cookie on your device that prevents the collection of your data on future visits to this website: Disable Google Analytics (https://support.google.com/analytics/answer/181881). The analysis data processed and stored with Google Analytics will be automatically deleted by us after 14 months. If we obtain consent to the use of Google Analytics via a cookie banner or a cookie consent tool, such consents may be revoked by you at any time within the settings of the cookie banner or the cookie consent tool with effect for the future.

13.5 Recipients and transfers to third countries

Google Analytics works for us as a service provider as part of an order processing. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield. For more information about the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework.

14. GOOGLE ADWORD CONVERSION AND GOOGLE REMARKETING

14.1 Description of processing

Our website uses the advertising service „Google Adword Conversion“, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as „Google“). With the help of Google Adwords Conversions, we can place advertisements on external websites in order to make you aware of our offers. In addition, the service allows us to determine the reach and success of individual advertising activities. Our advertisements are delivered by Google via so-called „ad servers“. For this purpose, Google uses so-called „ad server“ cookies, which measure certain parameters for measuring success, such as displaying the ads or clicks by the users. If you access our website via a Google ad, Google Adwords stores a cookie in your device (see paragraph 8). According to Google, these cookies are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wants to be addressed) are usually stored as analysis values. The cookies allow Google to recognize your internet browser. If you are visiting an Adwords customer’s website and the cookie stored on your device has not yet expired, Google and the customer can recognize that the user has clicked on the ad and has been redirected to our website. Each Adwords customer is assigned a different cookie. Cookies cannot therefore be tracked through adwords customers‘ websites. We do not process any personal data with our Google Adwords advertising measures. Google only provides us with statistical evaluations. On the basis of these evaluations, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising materials, in particular we cannot identify the users on the basis of this information. Therefore, when you visit our website, you will be connected to the Google servers. We have no influence on the scope and further use of the data collected by Google through the use of Google Adwords Conversion and therefore inform you according to our state of knowledge: By integrating Google Adwords Conversion, Google receives the information which subpage of our website you have accessed or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will find out and store your IP address.

Our website also uses the advertising service „Google Remarketing“, which is also operated by Google. With Google Remarketing, we can re-address you with advertisements for our offers after visiting our website on other websites that have joined the Google advertising network. Google also uses cookies, which are stored in your browser and through which your usage behaviour when visiting various websites is recorded and evaluated by Google. This allows Google to determine your previous visit to our website and to show you advertisements for our offers on other websites. According to Google, the data collected in the course of remarketing will not be combined with your personal data, which may be stored by Google. In particular, according to Google, pseudonymization is used in remarketing.
For more information on Google’s privacy, please click here: https://policies.google.com/privacy?hl=de and https://services.google.com/sitestats/de.html.

14.2 purpose

The processing takes place in order to be able to carry out targeted online advertising for our own offers and to evaluate their effectiveness and reach.

14.3 legal basis

The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 sec. 1 lit. f GDPR). Our legitimate interest lies in the purpose specified in clause 14.2. If you are asked by us for your consent within the framework of a cookie banner or cookie consent tool, the legal basis is Art. 6 sec. 1 lit. a GDPR. Such consent is voluntary.

14.4 Storage period and right to object, withdrawal of consent

We have explained in paragraph 8 how to store the storage time, as well as your control and setting options for cookies. You can object to the data processing by Google Adwords Conversion and Google Remarketing at any time via the following website: http://www.google.com/ads/preferences. If we obtain consent to the use of Google Adwords Conversion and Google Remarketing via a cookie banner or a cookie consent tool, these consents may be revoked by you at any time within the settings of the cookie banner or the cookie consent tool with effect for the future.

14.5 Recipients and transfers to third countries

By integrating Google Adwords Conversion and Google Remarketing, personal data may be transmitted to Google. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield. For more information about the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework.

15. GOOGLE ADSENSE

15.1 Description of processing

Our website uses Google AdSense, a service that selects advertisements to match the content of our website, Google LLC („Google“). The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In addition to the content context, AdSense also supports interest-based targeting based on the individual profile of a visitor to our website or advertisement. Google AdSense uses so-called „cookies“, text files that are stored on your computer and which enable an analysis of the use of the website. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons can be used to evaluate information such as visitor traffic on these pages. The information generated by cookies and web beacons about the use of this website (including your IP address) and delivery of advertising formats is transmitted to a Google server in the USA and stored there. This information may be shared by Google with Google’s contractual partners. However, Google will not merge your IP address with other data you store.

15.2 purpose

The processing takes place in order to be able to offer you the most relevant advertising, to increase the attractiveness of our website and to optimize our advertising offer.

15.3 legal basis

The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 sec. 1 lit. f GDPR). Our legitimate interest lies in the purpose specified in clause 15.2. If you are asked by us for your consent within the framework of a cookie banner or cookie consent tool, the legal basis is Art. 6 sec. 1 lit. a GDPR. Such consent is voluntary.

15.4 Storage period and right to object, withdrawal of consent

We have explained in paragraph 8 how to store the storage time, as well as your control and setting options for cookies. You can prevent the installation of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to the full extent. If we obtain consent to the use of Google Adsense via a cookie banner or a cookie consent tool, these consents may be revoked by you at any time within the settings of the cookie banner or the cookie consent tool with effect for the future.

15.5 Recipients and transfers to third countries

Google Adsense works as a service provider for us as part of an order processing. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield. For more information about the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework. Google’s privacy policy can be viewed under https://policies.google.com/privacy?hl=de&gl=de.

16. DOUBLECLICK BY GOOGLE

16.1 Description of processing

Doubleclick by Google is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“). Doubleclick by Google uses cookies to present you with ads that are relevant to you. A pseudonymous identification number (ID) is assigned to your browser to check which ads have been displayed in your browser and which ads have been viewed. The cookies do not contain any personal information.

16.2 purpose

The use of DoubleClick cookies only allows Google and its partner websites to display advertisements based on previous visits to our or other websites on the Internet.

16.3 legal basis

The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 sec. 1 lit. f GDPR). Our legitimate interest lies in the purpose specified in clause 16.2. If you are asked by us for your consent within the framework of a cookie banner or cookie consent tool, the legal basis is Art. 6 sec. 1 lit. a GDPR. Such consent is voluntary.

16.4 Storage period and right to object, withdrawal of consent

We have explained in paragraph 8 how to store the storage time, as well as your control and setting options for cookies. You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of our websites to the full extent. You can also prevent the collection of data generated by the cookies and related to your use of the websites to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following https://adssettings.google.com/anonymous?sig=ACi0TCh-ANse4yBBEUZRY_SM_sQze3w0Pmk3Z0BcNkWd1t_RZkFcuuT88_JMUS8QuK4xaNA1OSEIgaBlD7cXsD8OhcmtigFpMNi9xu0X-CG89PyjFk9yJ6s&hl=de under the item DoubleClick deactivation extension. Alternatively, you can disable the Doubleclick cookies on the Digital Advertising Alliance page at the following link. If we obtain consent to the use of Doubleclick via a cookie banner or a cookie consent tool, these consents may be revoked by you at any time within the settings of the cookie banner or the cookie-consent tool with effect for the future.

16.5 Recipients and transfers to third countries

The information generated by the cookies is transmitted by Google to a server in the USA for evaluation and stored there. Google complies with the privacy policy of the Privacy Shield Agreement and is registered with the U.S. Department of Commerce’s Privacy Shield program. A transfer of the data by Google to third parties takes place only on the basis of legal regulations or within the scope of order data processing. Under no circumstances will Google combine its data with other data collected by Google. For more information about the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework. Google’s privacy policy can be viewed under https://policies.google.com/privacy?hl=de&gl=de.

17. BING MAPS

17.1 Description of processing

Our website uses „Bing Maps“, a map display service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA. (hereinafter referred to as „Microsoft“). We use Bing Maps by including a map with our business address on our website. The map is loaded directly from a Microsoft server. To do this, your browser sends a request to a Microsoft server. This may also allow us to transmit your IP address to Microsoft in connection with the address of our website. However, Bing Maps does not store cookies on your device. If you are logged in to Microsoft when you visit our site, Bing Maps will assign this information to your Microsoft user account. Microsoft stores your data as usage profiles and uses it for advertising purposes, market research, and/or for customizing Microsoft websites. You have the right to object to the creation of these user profiles, which you must contact Microsoft directly to exercise. For more information about Microsoft’s privacy, see https://privacy.microsoft.com/de-de/privacystatement.

17.2 purpose

The processing is done in order to be able to show you an interactive map on our website.

17.3 legal basis

The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 sec. 1 lit. f GDPR). Our legitimate interest lies in the purpose specified in clause 17.2.

17.4 Recipients and transfers to third countries

By integrating Bing Maps, personal data may be transmitted to Microsoft . Microsoft also processes your personal data in the United States and has submitted to the EU-US Privacy Shield. For more information about the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework.

18. FACEBOOK PIXEL

18.1 Description of processing

Our website uses the facebook pixel remarketing service operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA („Facebook“). Through the „Facebook Pixel“ we are able to display advertisements on the social network that target those Facebook users who have shown interest in our offer – e.B. through an earlier visit to our website. TheFacebook Pixel also enables us to understand and evaluate the effectiveness and reach of our ads on Facebook by tracking whether Facebook users interact with our ads on the social network by clicking on the ads on our website. Therefore, when you visit our website, you connect to the Facebook servers and the „Facebook pixel“ is embedded in our website. In addition, Facebook may store a cookie on your device (see paragraph 8 above). If you are logged in to Facebook or later log in to Facebook, your visit to our website will be assigned to your user account. The data collected about you via the „Facebook Pixel“ is anonymous to us. You do not provide us with any conclusions about your person. However, Facebook can connect to your user profile. The data processing by Facebook is carried out in accordance with the company’s data policy, which can be accessed under https://www.facebook.com/policy.php.

18.2 purpose

The processing takes place in order to be able to carry out targeted online advertising for our own offers and to evaluate their effectiveness and reach.

18.3 legal basis

The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 sec. 1 lit. f GDPR). Our legitimate interest lies in the purpose specified in clause 18.2. If you are asked by us for consent within the framework of a cookie banner or cookie consent tool, which also covers the use of the Facebook pixel, then the legal basis exists in Art. 6 sec. 1 lit. a GDPR. Such consent is voluntary.

18.4 Storage period and right to object, withdrawal of consent

We have explained in paragraph 8 how to store the storage time, as well as your control and setting options for cookies. If we obtain consent to the use of the Facebook Pixel via a cookie banner or a cookie consent tool, such consents may be revoked by you at any time within the settings of the cookie banner or the cookie consent tool with effect for the future. You can object to the collection of data by the“Facebook Pixel“ and the use of your data to display Facebook advertisements at any time. To do this, you can press the following opt-out link: …


18.5 Recipients and transfers to third countries

By integrating the „Facebook Pixel“ personal data may be transmitted to Facebook. Facebook also processes your personal data in the USA and has submitted to the EU-US Privacy Shield. For more information about the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework.

SECURITY MEASURES

19. SECURITY MEASURES

In order to protect your personal data from third-party access, we have provided our website with an SSL or TLS certificate. SSL stands for „Secure Sockets Layer“ and TLS for „Transport Layer Security“ and encrypts the communication of data between a website and the user’s device. You can recognize the active SSL or TLS encryption by a small lock logo that appears on the far left of the address bar of the browser.

YOUR RIGHTS

20. AFFECTED RIGHTS

With regard to the data processing described above by our company, you are entitled to the following data subjects:

20.1 Information (Art. 15 GDPR)

You have the right to request confirmation from us as to whether we process personal data concerning you. If this is the case, you shall have the right to information about these personal data and to the further information listed in Article 15 GDPR, subject to the conditions set out in Article 15 GDPR.

20.2 Correction (Art. 16 GDPR)

You have the right to request from us without delay the correction of any inaccurate personal data concerning you and, if applicable, the completion of incomplete personal data.

20.3 Deletion (Art. 17 GDPR)

You have the right to request that personal data concerning you be deleted immediately, provided that one of the reasons listed in Article 17 GDPR applies, e.B.g. if your data is no longer needed for the purposes we pursue.

20.4 Restriction of data processing (Art. 18 GDPR)

You have the right to request from us to restrict processing if one of the conditions set out in Article 18 GDPR is met, e.B. if you dispute the accuracy of your personal data, the data processing will be restricted for the duration that allows us to verify the accuracy of your data.

20.5 Data portability (Art. 20 GDPR)

You have the right, under the conditions set out in Article 20 GDPR, to require the release of the data concerning you in a structured, common and machine-readable format.

20.6 Withdrawal of consents (Art. 7 sec. 3 GDPR)

You have the right to withdraw your consent at any time in the case of processing based on consent. The revocation shall apply from the date of its assertion. In other words, it works for the future. The processing does not therefore become retroactively illegal by revoking the consent.

20.7 Complaint (Art. 77 GDPR)

If you believe that the processing of personal data concerning you violates the GDPR, you have the right to complain to a supervisory authority. They may exercise this right from a supervisory authority in the EU Member State of their place of residence, place of work or place of the alleged infringement.

20.8 Prohibition of automated decisions/profiling (Art. 22 GDPR)

Decisions that have a legal consequence for you or significantly affect you must not be based solely on automated processing of personal data, including profiling. We inform you that we do not use automated decision-making, including profiling, with respect to your personal data.

20.9 Opposition (Art. 21 GDPR)

If we process personal data of you on the basis of Art. 6 sec. 1 lit. f GDPR (for the protection of overriding legitimate interests), you have the right to object to this under the conditions set out in Art. 21 GDPR. However, this only applies if there are reasons arising from your particular situation. After an objection, we will no longer process your personal data unless we can prove compelling legitimate grounds for processing that outweigh your interests, rights and freedoms. We also do not have to stop processing if it serves to assert, exercise or defend legal claims. In any case, regardless of a particular situation, you have the right to object at any time to the processing of your personal data for direct marketing.

As of: June 2020