Data Privacy Statement
We are committed to transparency and integrity in processing your personal data. In processing personal data, we comply with requirements under data protection law, in particular the EU General Data Protection Regulation (“GDPR”) and the German Federal Data Protection Act (“BDSG”).
In this Data Privacy Statement, we explain what information (including personal data) we process during your visit and use of our above-mentioned internet offering (“Website”) and what rights you have in relation to your personal data.
- What principles do we observe?
In compliance with requirements under data protection law, we process personal data only if we are permitted to do so under a statutory provision or you have given us your consent.
On this Website we can also record items of information that, taken on their own, do not allow us to directly draw conclusions about your person. Nevertheless, this information may constitute “personal data” within the meaning of data protection law in certain cases, in particular if it is combined with other data. In addition, we may also record information on this Website that does not enable us to identify you directly or indirectly; this is the case, for example, with aggregated information on all users of this Website.
- What data do we process?
You can access our Website without directly providing personal data (such as your name, postal address or e-mail address). In this case, too, we have to process certain information to enable you to access our Website. Moreover, on this Website we use certain analytics methods and have integrated links to other Websites whose operators may process further (personal) data.
- Log files: When you visit this Website, our web server automatically stores the domain name or IP address of the requesting computer system (usually your internet access provider), including the date, time and length of your visit, the sub-sites/URLs you visit, and information on the applications and devices you use to view our sites.
- Means of contact: On our Website, we point out various ways you can contact us. If you use one of these ways, we process the information we ask for and/or you give us in order to handle your inquiry.
- For what purposes do we process your data and what is the legal basis for that?
- Personal data that may be contained in the log files is processed to enable you to use our Website; that is done on the basis of Section 15 (1) of the German Telemedia Act (TMG) and on the basis of Article 6 paragraph 1 point (f) GDPR so as to safeguard our legitimate interests in operating our Website.
- The data collected using cookies (including the web analytics services) and the pseudonymous user profiles are processed for the purposes of advertising, market research and tailoring our Website to users’ needs on the basis of Section 15 (3) of the German Telemedia Act (TMG) and on the basis of Article 6 paragraph 1 point (f) GDPR so as to safeguard our legitimate interests in analyzing use of our Website.
- Personal data provided to us as part of an inquiry directed to us using the channels specified on the Website is processed to deal with the inquiry so as to safeguard our legitimate interests in conducting an existing business relationship or performing our other business activities on the basis of Article 6 paragraph 1 point (f) GDPR.
- We can also process the personal data collected in connection with the use of our Website to comply with legal obligations to which we are subject; this is done on the basis of Article 6 paragraph 1 point (c) GDPR.
- Where necessary, we also process personal data above and beyond the above-mentioned purposes to safeguard further legitimate interests or the interests of third parties; this is done on the basis of Article 6 paragraph 1 point (f) GDPR. Our legitimate interests include
establishing legal claims and defending ourselves in legal disputes;
preventing and investigating criminal acts; and
controlling and further development of our business activities, including risk management and operation of our IT systems.
- Is automated decision-making used?
In principle, we do not use any automated decision-making (including profiling) within the meaning of Article 22 GDPR in connection with operation of our Website. If we use such methods in individual cases, we will notify you separately to the legally prescribed extent.
- For how long is personal data stored?
In general, we store personal data for as long as we have legitimate interests in storing it and they are not overridden by your interests in your data no longer being stored.
Even if we have no legitimate interests, we can continue to store your data if we are required to do so by law (such as to comply with retention obligations). We erase your personal data, also without any action on your part, as soon as we no longer need to know it in order to fulfill the purpose of processing or storage of it is otherwise legally impermissible.
What are your rights as an affected person?
Right of Objection according to Article 21 GDPR
An affected person has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6 (1), including profiling based on those provisions. In the event of such an objection, we will no longer process the personal data concerning that person, unless (i) we can demonstrate compelling legitimate grounds to further process the personal data, outweighing the interests, rights and freedoms of the person affected, or (ii) the processing is used for effective exercise or defense of legal rights.
In case we process personal data for direct marketing purposes, the affected person shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. If an affected person objects processing for direct marketing purposes, the relevant personal data will no longer be processed for these purposes.
- Additional Rights
As an affected person, you also have the right to
access the personal data stored on you (Article 15 GDPR);
have incorrect data rectified and to have incomplete data completed (Article 16 GDPR);
demand erasure of personal data (Article 17 GDPR);
demand restriction of processing (Article 18 GDPR); and
demand data portability (Article 20 GDPR),
If you have questions relating to processing of data, you can also contact our Data Protection Officer.
As an affected person you also have the right to lodge a complaint with a supervisory authority responsible for data protection (Article 77 GDPR).
Data protection notice Google Analytics
This web page uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
In case of activation of the IP anonymization, Google will truncate/anonymize the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA.
On behalf of the website provider Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website provider. Google will not associate your IP address with any other data held by Google.
Furthermore you can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available under https://tools.google.com/dlpage/gaoptout?hl=en. Please note that on this website, Google Analytics code is supplemented by “gat._anonymizeIp();” to ensure an anonymized collection of IP addresses (so called IP-masking).