We take data protection seriously!

A personalised evaluation of these data does not take place.
If you send us data via a contact form, these data will be stored on our servers during data backup. Your data are used by us exclusively for the processing of your concern. Your data are treated by us strictly confidentially. No transfer to third parties takes place.

Controller:

Personal data:

When you use one of our services, we generally collect only the data that are necessary to provide you our service. We may ask you for further information, but this is voluntary. Whenever we process personal data, we do so in order to provide you our service or to pursue our commercial objectives.

Contact:

When contacting us (e.g. by contact form, e‑mail, telephone or via social media) the details of the inquiring persons are processed to the extent that this is necessary in order to answer the contact requests and any measures requested.

The answer of contact requests in the context of contractual or pre‑contractual relationships takes place in order to fulfil our contractual obligations or to answer (pre)contractual inquiries and otherwise on the basis of the legitimate interests in answering the inquiries.

• Processed data types: inventory data (e.g. name, addresses), contact data (e.g. e‑mail, telephone numbers), content data (e.g. entries in online forms).
• Data subjects: communication partners.
• Purposes of processing: contact requests and communication.
• Legal bases: performance of a contract and pre‑contractual inquiries (Art. 6 para. 1 lit. b GDPR), legitimate interests (Art. 6 para. 1 lit. f GDPR

Automatically stored data:

The provider of these pages collects and stores automatically information in so‑called server log files, which your browser automatically transmits to us.
These are:

• Date and time of the request
• Name of the requested file
• Page from which the file was requested
• Access status (file transferred, file not found, etc.)
• Web browser and operating system used
• Full IP address of the requesting computer
• Amount of data transferred

A merging of these data with other data sources is not carried out. The processing takes place according to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. For reasons of technical security, in particular to defend against attack attempts on our web server, these data are briefly stored by us. It is not possible for us from these data to draw conclusions about individual persons.

After a maximum of seven days the data are anonymised by shortening the IP address to the domain level so that it is no longer possible to link to a single user.
In anonymised form the data are also processed for statistical purposes; a matching with other data sets or disclosure to third parties, even in extracts, does not take place.

Cookies:

This enables the visited websites and servers to distinguish the individual browser of the affected person from other browsers that contain other cookies. A certain browser can thus be recognised and identified via the unique cookie‑ID.

By using session cookies the controller can provide users of this website a user‑friendly service that would not be possible without the setting of cookies. Without consent we use only technically necessary cookies on the legal basis of legitimate interest according to Art. 6 para. 1 lit. f GDPR.

Security:

Whenever we collect and process personal data, these are encrypted before they are transmitted. This ensures that your data cannot be misused by third‑parties. Our security precautions are subject to a continuous improvement process, and our privacy statements are regularly updated. Please ensure that you have the most current version.

Which data are processed and from which sources do these data originate?

The personal data include:

For applicants and employees these include e.g. first and last name, address, contact data (e‑mail, phone number, fax), date of birth, data from résumé and references, bank details, religious affiliation, photo recordings.

For business partners these include e.g. the name of their legal representatives, company, commercial register number, VAT‑ID, company number, address, contact persons’ contact data (e‑mail, telephone, fax), bank details.

For visitors of our company these include name and signature.

For journalists these include first and last name, e‑mail address, fax number.

For competition participants these include first and last name, e‑mail address.

In addition we also process the following other personal data:

• Information on the type and content of contract data, order data, turnover and document data, customer and supplier history as well as consultancy documents,
• Advertising and sales data,
• Information from your electronic communication with us (e.g. IP‐address, log‐in data),
• Other data which we have obtained from you in the framework of our business relationship (e.g. in customer talks),
• Data which we generate ourselves from master/contact data and other data, such as by means of customer needs and customer potential analyses,
• The documentation of your consent declaration, for example for the receipt of newsletters.
• Photo recordings in the context of events.

For what purposes and on which legal basis are the data processed?

We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act 2018 in the respectively applicable version:

• For the fulfilment of (pre‑)contractual obligations (Art. 6 para. 1 lit. b GDPR): The processing of your data takes place for the online contract execution or in one of our branches, for the execution of your employment contract in our company. The data are processed in particular during the initiation of business relations and during the carrying out of contracts with you.
• For the fulfilment of legal obligations (Art. 6 para. 1 lit. c GDPR): A processing of your data is necessary for the fulfilment of various statutory obligations, e.g. from the Commercial Code or the Fiscal Code.
• For the safeguarding of legitimate interests (Art. 6 para. 1 lit. f GDPR): Due to a balancing of interests a data‑processing beyond the mere fulfilment of the contract may take place for the safeguarding of legitimate interests of us or third parties. A data processing for the safeguarding of legitimate interests takes place for example in the following cases:

– Advertising or marketing (see section 4),
– Measures for business management and further development of services and products
– Maintaining a group‑wide customer database for improving customer service
– In the context of legal prosecution
– Sending of non‑sales‑promoting information and press releases.

• Within the scope of your consent (Art. 6 para. 1 lit. a GDPR): If you have given us a consent to process your data, e.g. to receive our newsletter, publication of photos, competitions, etc.

Processing of personal data for advertising purposes:

Under the statutory conditions of § 7 para. 3 UWG we are entitled to use the e‑mail address that you provided at contract conclusion for direct advertising for our own similar goods or services. These product recommendations you receive from us regardless of whether you have subscribed to a newsletter.

If you do not wish to receive such recommendations from us by e‑mail, you may at any time object to the use of your address for this purpose without incurring other costs than transmission costs at the basic rate. A notification in text form suffices. Of course each e‑mail always includes an unsubscribe link.

Who receives my data?

In the event of a legal obligation and in the context of legal prosecution authorities and courts as well as external auditors may also be recipients of your data.

In addition your data may, for business initiation and execution purposes, be transmitted to insurers, banks, credit agencies and service providers.

How long are my data stored?

Are personal data transferred to a third country?

What data protection rights do I have?

These rights are available to you in accordance with the prerequisites of the applicable data protection laws.

Right of access:

Right to rectification:

Right to erasure:

Right to restriction of processing:

• You may demand from us the restriction of the processing of your data if
• you dispute the accuracy of the data, for the duration that allows us to verify the accuracy of the data, or
• the processing of the data is unlawful and you oppose deletion and instead request restriction of the use of the data, or
• we no longer need the data for the intended purpose, you however still need them for the assertion or defence of legal claims, or
• you have objected to the processing of the data.

Right to data portability:

• we process these data on the basis of your consent given or in fulfilment of a contract between us, and
• this processing is carried out by means of automated procedures.
  If technically feasible you may ask us for a direct transmission of your data to another controller.

Right to object:

Right to lodge a complaint:

If you want to assert one of the mentioned rights against us, please contact our data protection officer. If required we may ask you for additional information to confirm your identity.

Am I obligated to provide data?

Changes to this privacy policy: