Privacy policy
Contents
Privacy policy for siewert-kau.de, siewert-kau.com and siewert-kau.info
1) Introduction and general information
4) Data processing when visiting the website
5) General data processing on the website
6) Data processing when using our online shop
7) Services from third-party providers
9) Data transfer and recipients
11) Duration of storage of personal data
14) External links (social media)
15) Data processing in the context of our social media presence
18) Reservation of right of amendment
1) Introduction and general information
Thank you for your interest in our website. The protection of your personal data is very important to us. Below you will find information on the handling of your data that is collected through your use of our website. Your data will be processed in accordance with the statutory data protection regulations.
2) Contact information
Controller within the meaning of the GDPR
Siewert & Kau Technology Vertriebs GmbH
Walter-Gropius-Str. 12a
50126 Bergheim
02271-763-0
Contact details of the data protection officer
You can contact our data protection officer via :
datenschutz-intern@siewert-kau.de
3) Definitions
Our privacy policy should be simple and understandable for everyone. As a rule, the official terms of the General Data Protection Regulation (GDPR) are used in this privacy policy. The official definitions are explained in Art. 4 GDPR.
4) Data processing when visiting the website
Accessing and storing information in terminal equipment
By using our website, information (e.g. IP address) may be accessed or information (e.g. cookies) may be stored in your end devices. This access or storage may involve further processing of personal data within the meaning of the GDPR.
In cases where such access to information or such storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of § 25 para. 1 sentence 1, para. 2 no. 2 TDDDG.
In cases in which such a process serves other purposes (e.g. the needs-based design of our website), this is only carried out on the basis of Section 25 (1) TDDDG with your consent in accordance with Art. 6 (1) (a) GDPR. Consent can be revoked at any time for the future. The provisions of the GDPR and the German Federal Data Protection Act (BDSG) apply to the processing of your personal data.
Further information on the processing of your personal data and the relevant legal bases in this context can be found in the following sections on the specific processing activities on our website.
Webhosting
This website is hosted by the external service provider ALL-INKL.COM – Neue Medien Münnich. This website is hosted in Germany. Personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, website access and other data generated via a website.
We collect the data listed in order to ensure a smooth connection to the website and the technically error-free provision of our services. The processing of this data is absolutely necessary in order to make the website available to you. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.
We have concluded an order processing contract with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige the provider to protect our customers’ data and not to pass it on to third parties.
Server-Logfiles
When you visit our website, it is technically necessary for data to be transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:
- Date and time of the request
- Name of the requested file
- Page from which the file was requested
- Access status
- Web browser and operating system used
- (Complete) IP address of the requesting computer
- Amount of data transferred
We collect the data listed in order to ensure a smooth connection to the website and the technically error-free provision of our services. The processing of this data is absolutely necessary in order to make the website available to you. The log files are used to analyse system security and stability as well as for administrative purposes. The legal basis for the processing of the data is our legitimate interest in the protection and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.
For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short period of time. After 30 days at the latest, the data is anonymised by shortening the IP address at domain level so that it is no longer possible to establish a reference to the individual user.
5) General data processing on the website
Contact form and contact by e-mail
If you send us enquiries via the contact form or e-mail, your details from the enquiry form or your e-mail, including the personal data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. It is necessary to provide an e-mail address to contact us; providing your first name, surname and telephone number is voluntary. We will never pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your enquiry in accordance with Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR if your enquiry is aimed at concluding a contract. Your data will be deleted after final processing of your enquiry, provided that there are no statutory retention obligations to the contrary. In the case of Art. 6 para. 1 lit. f GDPR, you can object to the processing of your personal data at any time.
Newsletter
If you would like to receive the newsletter offered on the website with regular information about our offers and products, we require your e-mail address and your name as mandatory information.
Additional data may be provided in order to be able to address you personally in the newsletter and/or to identify you if you wish to exercise your rights as a data subject.
We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you our newsletter by e-mail if you have expressly confirmed to us that you consent to the sending of newsletters. In the first step, you will receive an e-mail with a link that you can use to confirm that you, as the owner of the corresponding e-mail address, wish to receive future newsletters. By confirming, you give us your consent in accordance with Art. 6 para. 1 lit. a GDPR that we may use your personal data for the purpose of sending the desired newsletter.
When you register for the newsletter, in addition to the e-mail address required for sending the newsletter, we store the IP address you used to register for the newsletter as well as the date and time of registration and confirmation in order to be able to trace possible misuse at a later date. The legal basis for this is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
You can unsubscribe from the newsletter at any time via the link included in every newsletter or by sending an email to the controller named above. After cancellation, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to the continued use of the data collected or the continued processing is otherwise permitted by law.
6) Data processing when using our online shop
Registration of a customer account
You have the option of creating a customer account in our online shop in order to order goods. When you register and set up your customer account, we collect and use the following personal data:
- First name, surname and title
- E-mail address
- Phone number
- address
- Date and time of registration
In addition, voluntary information can be provided (e.g. telephone number etc.). Mandatory information provided for the purpose of registration is marked with an asterisk as a mandatory field in the input mask.
The legal basis for data required to provide the customer account and order goods is Art. 6 para. 1 lit. b GDPR.
For the processing of voluntary information, the legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. Your data will be deleted as soon as the user account on our website is deleted and insofar as there are no statutory retention obligations. You can arrange for your customer account, including the data you have provided, to be changed and/or deleted by sending a corresponding message to the controller named at the beginning.
Registration of contact persons
You have the option of registering yourself or your colleagues as a contact person for Siewert & Kau and thus creating a user profile. We collect and use the following personal data as part of the registration and set-up process:
- First name, surname and title
- E-mail address
- Phone number
- Date and time of registration
- Department / Position
Mandatory information provided for the purpose of registration is marked with an asterisk as a mandatory field in the input mask. Your user account gives you the opportunity to use other parts of our website and to log in to the offers you have purchased. The legal basis for data processing with consent is Art. 6 para. 1 lit. a GDPR or Art. 6 para. 1 lit. b GDPR, provided that the processing is necessary for the provision of the desired services. Your data will be deleted as soon as the user account on our website is deleted and insofar as there are no statutory retention obligations. You can usually change and/or delete your user account, including the data you have provided, directly in your user account after logging in or by sending a corresponding message to the controller named at the beginning.
Sale of goods via our online shop
Description and scope of data processing
On our website, we offer users the opportunity to purchase goods from us.
The data is transmitted to us and stored in accordance with the user’s registration data in connection with the goods, means of payment and shipping details selected by the user. The following user data is collected as part of the sales process and transmitted to the service providers named here:
- E-mail address / telephone number
- Title, first and last name, address
- Ware
- Payment information: Your payment data will be transmitted to the relevant payment service provider depending on the payment method you have selected. The payment service provider is responsible for your payment data. When selecting certain payment methods, the payment service providers may carry out a credit risk assessment based on mathematical-statistical procedures (so-called scoring) with a credit agency. We have no influence on the assessment and do not receive any assessment results. Information, in particular about the responsible body of the payment service providers, the contact details of the data protection officers of the payment service providers and the categories of personal data processed by the payment service providers, can be obtained from the service providers
- Shipping information: If we have goods shipped, we pass on data to the commissioned shipping company insofar as this is required for the delivery or status of the shipment. Service providers are specified when the order is placed. These are currently:
- Deutsche Post AG and DHL Paket GmbH
- Hermes Germany GmbH
- DACHSER SE
- DSV Air & Sea Germany GmbH
- FedEx Express Deutschland GmbH
- Gras Logistik GmbH
- Logwin AG
- MBS Speditionsgesellschaft mbH
- Rhenus SE & Co. KG
- Schenker Deutschland AG
- trans-o-flex Express GmbH & Co. KGaA
- United Parcel Service Deutschland S.à r.l. & Co. OHG
Legal basis for data processing
The legal basis is Art. 6 para. 1 lit. b or lit. f GDPR.
Purpose of data processing
The processing of data for customer support, logistics, payment and shipping is necessary for the fulfilment of the contract in accordance with Art. 6 para. 1 lit. b GDPR. This concerns our purchase and sale of goods by or to the user.
Duration of storage
The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected.
This is the case during the purchase and sales contract or for the implementation of pre-contractual measures if the data is no longer required for the fulfilment of the contract. Even after conclusion of the contract, it may be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.
Possibility of objection and removal
If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.
7) Services from third-party providers
Cookies
Our website uses so-called “cookies”. Cookies are small text files that are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or language settings). Other cookies are used to evaluate user behaviour or display advertising.
The processing of data through the use of strictly necessary cookies is based on a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the technically error-free provision of our services. For details on the processing purposes and legitimate interests, please refer to the information on the specific data processing.
The processing of personal data through the use of other cookies is based on consent in accordance with Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time for the future. If such cookies are used for analysis and optimisation purposes, we will inform you about this separately in this privacy policy and obtain your consent in accordance with Art. 6 para. 1 lit. a GDPR.
You can set your browser so that you
- be informed about the setting of cookies,
- Only allow cookies in individual cases,
- exclude the acceptance of cookies for certain cases or in general,
- activate the automatic deletion of cookies when the browser is closed.
The cookie settings can be managed for the respective browsers under the following links:
You can also manage cookies from many companies and functions that are used for advertising individually. To do this, use the corresponding user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.
Most browsers also offer a so-called “do-not-track function”. If this function is activated, the respective browser informs advertising networks, websites and applications that you do not wish to be “tracked” for the purpose of behaviour-based advertising and the like.
Information and instructions on how to edit this function can be found under the following links, depending on your browser provider:
You can also prevent scripts from loading by default. “NoScript” only allows the execution of JavaScripts, Java and other plug-ins on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).
Please note that deactivating cookies may limit the functionality of our website.
Change cookie settings
You can revoke or change your cookie settings at any time. To do this, call up the cookie settings again via our integrated red “Data protection” symbol on the right-hand side of the website. In our shop, you can access the cookie settings via the grey button at the bottom left.
Consent management via the “Usercentrics” consent management platform
On our websites, we use the consent management platform “Usercentrics” from Usercentrics GmbH, Sendlingerstr. 7, 80331 Munich, with the help of which we manage your consent to the use of cookies and similar technologies.
We use the service to manage your consent to the use of cookies and similar technologies and the subsequent data processing.
If you give or refuse consent via our consent banner, the service processes the following data:
- Your device information,
- the description of the web browser and operating system used
- the language used by your browser and operating system
- Device ID
- The ID of the website operator and address of the website on which you give your consent
- IP address
- Geographical location
- the date and time of consent
- Your consent status with regard to the cookies and similar technologies used by us or with regard to the services used, which serves as proof of your consent.
This data is logged on the provider’s servers. As part of the data processing, data is stored in the local storage of the browser and a pixel is used to store your consent status in your end device, read it out again when you visit the page again and compare it.
In this way, we are able to check your consent status on all subsequent and future visits to our websites and to activate or deactivate cookies and other technologies in accordance with your decision to use them when you visit the site again.
If we use cookies and similar technologies as part of the integration of the service or if data is stored on your end device or read from there by the service, this is done in accordance with § 25 para. 2 TDDDG. Subsequent data processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. c GDPR in conjunction with Art. 5 para. 2 GDPR or on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR to safeguard our legitimate interests.
Our legitimate interest lies in being able to centrally control the cookies and similar technologies integrated on our website as well as integrated services and to offer you an easy way to give and revoke your declarations of consent and thus fulfil our legal obligations under Section 25 TDDDG and our accountability obligation under Art. 5 (2) GDPR with regard to your consent.
When using the service, the data collected via our websites is transmitted to the following recipients:
- Usercentrics GmbH, Sendlingerstr. 7, 80331 Munich.
Further information on the handling of personal data by the provider can be found at https://usercentrics.com/de/datenschutzerklaerung/.
By integrating the service on our websites, data is transmitted to the above-mentioned recipient and stored there for a period of one year or for as long as is necessary to fulfil the stated purposes. No further storage of the data processed by the service takes place.
Google Analytics
Our website uses Google Analytics, an internet analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called “cookies”.
Google will use this information on behalf of the operator of this website to analyse your use of the website and to compile reports on website activity. Google will also use this information to provide the website operator with other services relating to the use of the website and the Internet. The data collected by Yours The IP address sent by your browser as part of Google Analytics will not be combined with other Google data. Processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your consent.
We only use Google Analytics with activated IP anonymisation. This means that your IP address is only processed by Google in abbreviated form.
We have concluded an order processing contract with the service provider in which we oblige them to protect our customers’ data and not to pass it on to third parties.
As it is possible for Google to transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection required by the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link https://www.dataprivacyframework.gov/s/participant-search
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
The Google Analytics terms of use and information on data protection can be accessed via the following links:
http://www.google.com/analytics/terms/de.html
https://www.google.de/intl/de/policies/
The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. Data at user and event level that is linked to cookies, user identifiers (e.g. user ID) and advertising IDs (e.g. DoubleClick cookies, Android advertising ID, IDFA [Apple identifier for advertisers]) is deleted no later than 14 months after it is collected.
You can prevent the storage of cookies by adjusting the settings of your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie, analysing your use of the website (including your IP address) and processing this data by Google by downloading and installing the browser plugin available at
https://tools.google.com/dlpage/gaoptout?hl=de is available.
Google Fonts
We use “Google Fonts” on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: “Google”). Google Fonts enables us to use external fonts. For this purpose, the required Google Fonts are loaded into your browser cache by your web browser when you access our website. This is necessary so that your browser can also display a visually improved presentation of our texts. If your browser does not support this function, a standard font from your computer will be used for display. These Google fonts are integrated by a server call, usually a Google server in the USA. This tells the server which page of our website you have visited. The IP address of the browser of the visitor’s end device is also stored by Google.
We use Google Fonts for optimisation purposes, in particular to improve the use of our website for you and to make its design more user-friendly. The processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your consent. This consent can be revoked at any time with effect for the future.
As it is possible for Google to transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, further safeguards are required to ensure the level of data protection required by the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies that are certified under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and thus undertakes to comply with the corresponding data protection standards, which can be viewed at the following link https://www.dataprivacyframework.gov/s/participant-search
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
Further information on data protection can be found in Google’s privacy policy: http://www.google.de/intl/de/policies/privacy
Further information on Google Fonts can be found at https://fonts.google.com/
Google Marketing Platform (formerly DoubleClick)
This website uses DoubleClick of the Google Marketing Platform, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (“Google”).
DoubleClick uses cookies to present you with adverts that are relevant to you. A pseudonymous identification number (ID) is assigned to your browser or device in order to check which adverts have been displayed in your browser and which adverts have been viewed. This can improve campaign performance or, for example, prevent you from seeing the same advert more than once. In addition, Google can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Campaign Manager advert and later visits the advertiser’s website with the same browser and makes a purchase there. According to Google, the cookies do not contain any personal information. If you have given us your consent, the data is processed on the basis of Art. 6 para. 1 lit. a GDPR.
Due to the technology used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advert from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.
As it is possible for Google to transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, further guarantees are required to ensure the level of data protection required by the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies that are certified under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and thus undertakes to comply with the corresponding data protection standards, which can be viewed at the following link https://www.dataprivacyframework.gov/s/participant-search
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
Further information on the Google Marketing Platform can be found at https://marketingplatform.google.com/about/ and on data protection at Google in general: https://www.google.de/intl/de/policies/privacy.
Google Maps
Our website uses the online map service provider Google Maps via an interface. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently. The provider of the map service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps, it is necessary to save your IP address.
Google uses cookies to collect information about user behaviour. The legal basis for the processing of your personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TTDSG.
As it is possible for Google to transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, further guarantees are required to ensure the level of data protection required by the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies that are certified under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and thus undertakes to comply with the corresponding data protection standards, which can be viewed at the following link https://www.dataprivacyframework.gov/s/participant-search
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
Further information on the handling of user data can be found in Google’s privacy policy:
https://www.google.de/intl/de/policies/privacy/
Opt-out: https://www.google.com/settings/ads/
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
The purpose of reCAPTCHA is to check whether data is entered on our website (e.g. in a contact form) by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. To analyse this, reCAPTCHA evaluates various pieces of information, e.g.
- IP address
- Length of stay of the website visitor on the website
- Mouse movements made by the user
The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place. Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in protecting our website from abusive automated spying and from unwanted, automated mailings (spam).
As it is possible for Google to transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, further guarantees are required to ensure the level of data protection required by the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies that are certified under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and thus undertakes to comply with the corresponding data protection standards, which can be viewed at the following link https://www.dataprivacyframework.gov/s/participant-search
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
We do not store any personal data from the use of reCAPTCHA. In general, personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies.
Further information on Google reCAPTCHA and Google’s privacy policy can be found at the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/v3beta.html
Font Awesome
Our website uses Font Awesome for the standardised display of fonts and symbols. The provider is Fonticons, Inc, 307 S Main St Ste 202, Bentonville, AR 72712, Arkansas, USA.
When you call up a page, your browser loads the required fonts into your browser cache in order to display texts, fonts and symbols correctly. For this purpose, the browser you are using must connect to the Font Awesome servers. As a result, Font Awesome becomes aware that this website has been accessed via your IP address.
The processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of the consent you have given. This consent can be revoked at any time with effect for the future.
As personal data may be transferred to affiliated companies and subcontractors in countries outside the EU and the EEA, further protection mechanisms are required to ensure the level of data protection required by the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification in accordance with the EU-U.S. Data Privacy Framework under the fonticons but not is certified.
Accordingly, further protective mechanisms are required to ensure the level of data protection required by the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavour to obtain additional regulations and assurances from the recipient in the USA.
Further information about Font Awesome can be found in Font Awesome’s privacy policy at: https://fontawesome.com/privacy.
YouTube
On our website, we embed videos from “YouTube”, a social media platform of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). The legal basis for the processing of your personal data in this context is your consent given in accordance with Art. 6 para. 1 lit. a GDPR.
If the playback of embedded YouTube videos is started with your consent, a server call is made, usually to a Google server in the USA. This tells the server which page you have accessed and the IP address of the browser of the visitor’s end device is transmitted to Google and stored by Google.
If you have given your consent, the provider “YouTube” also uses cookies to collect information about user behaviour. According to information from “YouTube”, these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive behaviour. If you are logged in to Google, your data may also be assigned to your account when you click on a video. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. Google stores this data as usage profiles and uses it for the purposes of advertising, market research and/or customising its websites. Such an analysis is carried out in particular (even for users who are not logged in) to display customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please contact Google directly for this purpose.
As it is possible for Google to transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, further guarantees are required to ensure the level of data protection required by the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies that are certified under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and thus undertakes to comply with the corresponding data protection standards, which can be viewed at the following link https://www.dataprivacyframework.gov/s/participant-search
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
Further information on data protection and the use of data by Google can be found on the following Google website: https://policies.google.com/privacy?hl=de&gl=de
8) Sending of applications
When you apply to us via our contact form, by email or via Whatsapp (see below), we collect personal data. This includes in particular your contact details (such as the user’s first and last name, telephone number and email address) as well as other data provided by you on your career (e.g. curriculum vitae, qualifications, degrees and professional experience) and your person (e.g. cover letter, personal interests). This may also include special categories of personal data (e.g. information on a severe disability).
Your personal data will generally be collected directly from you as part of the application process and encrypted during electronic transmission. The primary legal basis for this is Section 26 (1) BDSG. In addition, consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 26 (2) BDSG can be used as a data protection law permission provision. If the processing of your data is based on consent, you have the right to revoke your consent at any time with effect for the future.
Within our company, only those persons and departments (e.g. human resources) have access to your personal data who absolutely need it to carry out the application process or to fulfil our legal obligations. For this purpose, your applications may be forwarded to the responsible persons for review. In no case will your personal data be passed on to third parties without authorisation.
Your data for an application for a specific job advertisement will be stored and processed by us during the ongoing application process. After completion of the application process (e.g. in the form of an acceptance or rejection), the application process including all personal data will be deleted from the system no later than six months after the end of the application process. The data of selected applicants will be stored securely for up to 1 year, provided that the applicants have given their consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Section 26 (2) BDSG. You can revoke your consent at any time with effect for the future. For this purpose, an informal e-mail to the above-mentioned contact details of the controller is sufficient. In the event of acceptance, your application documents will be transferred to the personnel file.
Application via Whatsapp
You can apply to us via Whatsapp. We use Whatsapp Business for this purpose. A service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
You can contact us, for example, via a button on the website. Your contact data in the form of your telephone number is processed, as well as meta/communication data (e.g. device information, IP addresses). In addition, the data listed under the point “Application” are processed within the scope of the application process.
We would like to point out that the communication content (i.e. the content of the message and attached images) is end-to-end encrypted. This means that the content of the messages is not visible, not even by Whatsapp itself. You should always use an up-to-date version of the messenger with activated encryption to ensure that the message content is encrypted.
However, we would also like to point out that the providers of the messenger services cannot see the content, but can find out that and when you communicate with us, as well as technical information about the device you are using and, depending on the settings of your device, also location information (so-called metadata) is processed.
If we ask you for permission before communicating with you via Messenger, the legal basis for our processing of your data is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a. GDPR. Otherwise, if we do not ask for your consent and you contact us, for example, on your own initiative, we use Whatsapp in relation to our contractual partners and within the scope of contract initiation as a contractual measure pursuant to Art. 6 para. 1 sentence 1 lit. b. GDPR and in the case of other interested parties on the basis of our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f. GDPR in fast and efficient communication.
We have concluded a data processing agreement with the service provider, in which we commit him to protect the data of our customers and not to pass it on to third parties.
Since a transfer of personal data by WhatsApp to affiliated companies and sub-service providers in countries outside the EU and the EEA is possible, further protection mechanisms are required to ensure the data protection level of the GDPR. For the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with a certification according to the EU-U.S. Data Privacy Framework. WhatsApp LLC is certified according to the EU-U.S. Data Privacy Framework and therefore undertakes to comply with appropriate data protection standards, which can be viewed under the following link: https://www.dataprivacyframework.gov/s/participant-search
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision of the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
The terms of use of Whatsapp and information on data protection can be accessed via the following links:
https://www.whatsapp.com/legal/
https://www.whatsapp.com/legal/business-data-processing-terms
You can revoke your consent at any time and object to communication with us via Whatsapp at any time. In this case, we will delete the messages in accordance with our general deletion guidelines (i.e., as described above, after the end of contractual relationships, in the context of archiving requirements, etc.) and otherwise as soon as we can assume that we have answered any inquiries from you, if no reference to a previous conversation is to be expected and there are no legal storage obligations to the deletion.
In conclusion, we would like to point out that for reasons of your security, we reserve the right not to answer inquiries via Whatsapp. This is the case, for example, if contractual internals require special confidentiality or an answer via Whatsapp does not meet the formal requirements. In such cases, we will refer you to more adequate communication channels.
9) Data Transfer and Recipients
Your personal data will not be transferred to third parties, except
- if we have explicitly pointed this out in the description of the respective data processing,
- if you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
- the transfer is necessary according to Art. 6 para. 1 sentence 1 lit. f GDPR for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
- in the event that there is a legal obligation to transfer the data in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR and
- insofar as this is necessary according to Art. 6 para. 1 sentence 1 lit. b GDPR for the processing of contractual relationships with you.
We also use external service providers for the processing of our services, which we have carefully selected, commissioned in writing and with whom we have concluded data processing agreements in accordance with Art. 28 GDPR, if necessary. These are bound by our instructions and are regularly monitored by us. These include service providers for hosting, sending e-mails as well as maintenance and care of our IT systems, etc. The service providers will not pass this data on to third parties.
10) Data Security
In accordance with Art. 32 GDPR, we take appropriate technical and organisational measures, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk. For security reasons and to protect the transmission of confidential content, this website uses SSL encryption.
11) Duration of Storage of Personal Data
The duration of the storage of personal data is based on the relevant statutory retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is required for the fulfilment of the contract or the initiation of the contract or if we have a legitimate interest in further storage, the data will be deleted when it is no longer required for these purposes or you have made use of your right of revocation or objection.
12) your Rights
In the following, you will find information on which data subject rights the applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:
The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data, unless it was collected from us, as well as the existence of automated decision-making, including profiling and, where applicable, meaningful information on its details.
The right to demand the immediate correction of incorrect or completion of your personal data stored by us in accordance with Art. 16 GDPR.
The right to demand the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.
The right to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse its deletion and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.
The right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request its transfer to another controller in accordance with Art. 20 GDPR.
The right to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office mentioned above or, if applicable, that of your usual place of residence or workplace.
The right to revoke granted consent in accordance with Art. 7 para. 3 GDPR: You have the right to revoke your consent to the processing of data once granted at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of consent until revocation.
13) Right of Objection
If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as this is done for reasons arising from your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to specify a particular situation.
If you would like to make use of your right of revocation or objection, it is sufficient to send an e-mail to datenschutz-intern@siewert-kau.de to
14) External Links (Social Media)
14.1 Social networks (Facebook, Instagram, YouTube and LinkedIn) are only included on our website as a link to the corresponding services. After clicking on the embedded text/image link, you will be redirected to the page of the respective provider. User information is only transferred to the respective provider after the redirection. For information on how your personal data is handled when using these websites, please refer to the respective data protection provisions of the providers you use.
14.2 External content
We have provided additional functions and content on our website by connecting the Ubiquiti Support Platform and the Ubiquiti AI chatbot. Please note that when using this embedded page, personal data is processed for which the third-party provider is responsible.
Responsible body for data processing
The embedded external website, the external content and the AI chatbot are operated by a third-party provider (Ubiquiti Inc., 685 Third Avenue, New York 10017). This third-party provider is responsible for the processing of personal data collected in the context of the use of the embedded content and the AI chatbot.
Type of data processed
The following personal data may be processed when using the embedded external website and the AI chatbot:
Information and content that you enter in the AI chatbot (e.g. requests, messages)
Usage data (e.g. access times, interaction duration, click behaviour)
Technical data (e.g. IP address, browser type, operating system, device data)
- Purpose of data processing
The data collected is processed by the third-party provider in particular for the following purposes:- Provision and improvement of the functionality of the AI chatbot and the external content
- Answering your inquiries and providing personalised content
- Analysis of user behaviour for statistical purposes and to optimise the services
Disclosure and transfer of data
The data collected in the context of the use of the embedded content and the AI chatbot will be transmitted directly to the third-party provider and processed by them. The data will only be passed on to third parties if this is required by law or if you have expressly consented to this.Duration of data storage
Your personal data will only be stored by the third-party provider for as long as it is necessary for the fulfilment of the above-mentioned purposes or as long as statutory retention periods provide for this. After expiry of these periods, the data will be deleted.Your rights as a data subject
You have the right to obtain information about the data stored about you at any time, to request the correction or deletion of this data, to demand the restriction of processing and to object to the processing of your data. In addition, you can revoke your consent to the processing of your data at any time with effect for the future.Declaration of consent
By using the embedded external website and the AI chatbot, you agree to the processing of your data by the third-party provider to the extent described above. You can revoke this consent at any time with effect for the future by contacting the third-party provider directly.Contact and further information
For further information on data protection or to exercise your rights, please contact the third-party provider directly at: https://www.ui.com/gdpr-request/15) Data Processing within the Scope of our Social Media Presence
15.1 Introduction and general information on data processing
The protection of your personal data is very important to us. In the following, you will find information on how your data is handled, which is collected through your use of our social media presence on social networks and platforms. Your data is processed in accordance with the statutory provisions.
15.1.1. General information on the responsible body
The controller named at the beginning of this privacy policy (hereinafter “we/us”) operates presences or “fan pages” on various social media platforms. For the processing of your personal data in connection with your visit to our presence or our “fan page” on the Facebook and LinkedIn platforms, we are jointly responsible with the operators of the respective platform mentioned here under 1.1.1, insofar as they provide us with aggregated information on visitors to our fan page or our presence (“Insights”). You can find detailed information on the scope of processing under joint responsibility in relation to the respective providers in the second section of this privacy policy.
15.1.1.1 Joint responsibility
The platform operators for Facebook and Instagram are: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour Dublin 2, a subsidiary of Meta Platforms, Inc., 1601 Willow Rd Menlo Park, CA 94025-1452, USA.
The platform operator for LinkedIn is: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W Maude Ave Sunnyvale, CA, 94085-2810 USA.
We have concluded an agreement with the operators in accordance with Art. 26 GDPR on joint responsibility for the processing of your personal data (Controller Addendum) regarding Facebook. This agreement specifies which data processing operations we or the respective operator are responsible for when you visit our fan page or our presence on the platform of the respective operator. You can view this agreement at the following link:
Facebook: https://www.facebook.com/legal/terms/page_controller_addendum
LinkedIn: https://legal.linkedin.com/pages-joint-controller-addendum
15.1.2. Own responsibility of the platform providers
If your personal data is processed by one of the social media platform providers listed below, this processing is the sole responsibility of the platform operator within the meaning of Art. 7 No. 4 GDPR. To assert your data subject rights, we would like to point out that these can be asserted most effectively against the respective providers. Only they have access to the data collected from you. Should you still require assistance, please do not hesitate to contact us at any time.
- Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland
- Instagram, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland
- YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- XING incl. kununu (New Work SE), Am Strandkai 1, 20457 Hamburg, Germany
- TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
15.1.3. Own responsibility of Siewert & Kau
We are solely responsible for the processing of your personal data in the cases mentioned under 1.4 to 1.7, which is not carried out by the operators mentioned under 1.1.2.
15.2 Data transfer and recipients, data transfer to third countries
If we pass on personal data to the providers of social media platforms, the latter are recipients of the data within the meaning of Art. 4 No. 9 GDPR. As personal data is transferred to countries outside the EU and the EEA (including the USA) when visiting and interacting with the social media platforms we use, further protection mechanisms are required to ensure the level of data protection of the GDPR.
- Facebook: Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search. For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, the provider states that it uses standard data protection clauses in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe, see here https://de-de.facebook.com/privacy/policy/
- LinkedIn: According to the privacy policy, uses suitable measures for third-country transfers, including in particular standard data protection clauses, to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfer to the USA or other third countries outside the EU: https://www.linkedin.com/help/linkedin/answer/a1343190?trk=microsites-frontend_legal_privacy-policy&lang=de
In cases in which providers process your personal data under their own responsibility (1.1.2.), we have no influence on the processing of this data by the provider and its handling of this data (at least after the data has been transmitted). For further information, please check the privacy policy of the respective provider and, if necessary, use the options for opting out / for personalization with regard to data processing by the provider:
- X (formerly Twitter)
- Privacy policy: https://x.com/de/privacy
- Opt-out: https://x.com/settings/account/personalization
- According to the privacy policy, Twitter uses standard data protection clauses to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfer to the USA or other third countries outside the EU for which there is no adequacy decision by the EU Commission: https://x.com/de/privacy
- Privacy policy/Opt-out: http://instagram.com/about/legal/privacy/
- Instagram (Meta Platforms Inc.) ist nach dem EU-U.S. Data Privacy Framework zertifiziert und verpflichtet sich demnach auf die Einhaltung angemessener Datenschutzstandards, was unter folgendem Link eingesehen werden kann: https://www.dataprivacyframework.gov/s/participant-search. For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, the provider states that it uses standard data protection clauses in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe, see here http://instagram.com/about/legal/privacy/
- YouTube/Google
- Privacy policy: https://policies.google.com/privacy?hl=de&gl=de
- Opt-out: https://adssettings.google.com/authenticated
- Google (Google LLC) is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search. For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, the provider states that it uses standard data protection clauses in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe, see here https://policies.google.com/privacy?hl=de&gl=de
- XING incl. kununu (New Work SE)
- Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
- Opt-Out: https://nats.xing.com/optout.html?popup=1&locale=de_DE
- According to the privacy policy, XING uses suitable measures for third-country transfers, in particular standard data protection clauses, to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfer to the USA or other third countries outside the EU: https://privacy.xing.com/de/datenschutzerklaerung/wer-erhaelt-daten-zu-ihrer-person/drittlaender
- TikTok
- Privacy policy / Opt-Out: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE
- If available, TikTok relies on an adequacy decision by the EU Commission when transferring personal data. Otherwise, according to the privacy policy, standard data protection clauses are used to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfer to the USA or other third countries outside the EU. https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE (Section “Our global activities and data transfers”).
- Vimeo
- Privacy policy / Opt-Out: https://vimeo.com/privacy
- According to the privacy policy, Vimeo uses standard data protection clauses to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfer to the USA or other third countries outside the EU: https://vimeo.com/privacy#international_data_transfers_and_certain_user_rights
15.3. Access to and storage of information in end devices (cookies)
When you access our Facebook fan page or our other social media presences, one or more cookies are placed on your end device by the platform provider. Cookies are small text files that are either temporarily stored on your end device for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or an automatic solution is carried out by your web browser.
Cookies have various functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or language settings). Other cookies are used to evaluate user behavior or to display advertising.
By interacting with our Facebook fan page or our other social media presences, information (e.g. your IP address) can be accessed or information (e.g. cookies) can be stored in your end devices. This access or storage may be associated with further processing of personal data within the meaning of the GDPR.
The activity or validity period of cookies can vary greatly, but you can delete them manually at any time using your web browser settings. If you have any technical questions about this, please contact the manufacturer of your web browser. Further information on the use of cookies and its legal basis can be found in the respective privacy policy of the provider. Links to the respective privacy policies can be found above under the point “Data transfer and recipients”. If you have any further questions about this, please contact the provider of the respective social media platform directly.
15.4. Data processing for market research and advertising purposes
As a rule, personal data on the company page is processed for market research and advertising purposes by the provider of the social media platform. For this purpose, a cookie is placed in your browser, which enables the respective provider to recognize you when you visit a website. In addition, an extensive evaluation of your interactions on the social media platform is carried out by the provider. The collected data can be used to create user profiles. These are used to place advertisements inside and outside the platform that are likely to correspond to your interests. Furthermore, data independent of the devices you use can also be stored in the user profiles. This is regularly the case if you are a member of the respective platforms and are logged in to them. You can find further information on this in the data protection information of the respective provider.
When you visit our social media presence or interact with it, we may receive personal data from you which, unlike in the cases mentioned in section 2 of this privacy policy, we also process under our own responsibility in addition to the provider. This may be information that you actively provide (comments, likes and information that you make publicly available, such as your profile picture or name).
15.5 Data processing when contacting us
We ourselves collect personal data when you contact us, e.g. via a contact form or through a messenger service of the respective platform, such as Facebook Messenger. Which data is collected depends on your information and the contact details you have provided or released. These are stored by us for the purpose of processing the request and in the event of follow-up questions. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR and, if applicable, Art. 6 Para. 1 lit. b GDPR, if your request aims at the conclusion of a contract. Your data will be deleted after your request has been processed, provided that there are no legal retention obligations to the contrary. We assume that the processing is complete when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
15.6 Data processing for contract execution
If your contact via a social network or other platform aims at concluding a contract for the delivery of goods or the provision of services with us, we process your data to fulfill the contract or to carry out pre-contractual measures or to provide the desired services. The legal basis for the processing of your data in this case is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted if it is no longer required for the execution of the contract or if it is established that the pre-contractual measures do not lead to a contract being concluded that corresponds to the purpose of the contact. Please note, however, that even after the conclusion of the contract it may be necessary to store personal data of our contractual partners in order to fulfill contractual or legal obligations.
15.7 Data processing based on consent
If you are asked by the respective providers of the platforms for consent to processing for a specific purpose, the legal basis for the processing is Art. 6 Para. 1 lit. a, Art. 7 GDPR. Consent given can be withdrawn at any time with effect for the future.
- Processing under joint responsibility with the operator of the social media platform
15.8.1 Facebook fan page (insights functionality)
15.8.1.1 Data processing with regard to “page insights” when visiting our Facebook fan page
When you visit our Facebook fan page, personal data about you is processed by Facebook as the operator of the platform and by us as the operator of the fan page. Insofar as this data processing takes place in connection with the insights functionality of Facebook (Meta Platforms Irland Ltd. or Meta Plattforms Inc.), we are jointly responsible for this with Facebook (Art. 26 Para. 1 GDPR).
Page Insights (https://www.facebook.com/business/a/page/page-insights) is a function provided by Facebook that allows the operator of a Facebook fan page (us) to receive aggregated data about the interaction of visitors.
Page Insights can be based on personal data that is collected in connection with a visit or interaction by people on or with our page and in connection with provided content. Please note what personal data you share with us via Facebook. Your data can be processed for market research and advertising purposes, even if you are not logged in to Facebook or do not have a Facebook account. For example, user profiles can be created from the usage behavior and the resulting interests of the users. The user profiles can in turn be used to place advertisements inside and outside the platforms that are likely to correspond to the interests of the users. This data collection takes place via cookies that are stored on your end device. Furthermore, data that is independent of the devices used by the users can also be stored in the user profiles; in particular, if the users are members of the respective platforms and are logged in to them.
We only receive summarized (aggregated) data from Facebook, which does not allow any conclusions to be drawn about individual persons.
Your personal data is processed by us for advertising and marketing purposes. (Example: increasing the reach and awareness of our fan page through target group-oriented design of posts, evaluation of the success of marketing campaigns).
The legal basis for the processing of your personal data in relation to the insights functionality is your consent given to Facebook or Meta in accordance with Art. 6 Para. 1 lit. a GDPR.
Please refer to Facebook’s privacy policy for information on the purposes that Facebook pursues with the processing of your personal data and on the legal bases for this data processing.
Please note that we have no influence on the data collection and further processing under the responsibility of Facebook. As a result, we cannot provide any information about the extent to which, where and for how long the data is stored by Facebook. Furthermore, we cannot make any statements about the extent to which Facebook complies with existing deletion obligations, which evaluations and links with the data are made by Facebook and to whom the data is passed on by Facebook.
Information on the processing of your personal data, which Facebook processes for its own purposes, can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/
15.8.1.2. Your rights as a data subject
If you, as a visitor to the site, wish to exercise your rights (information, correction, deletion, restriction, data portability, complaint to the supervisory authority, objection or revocation), you can contact both Facebook and us. You can adjust your advertising settings independently in your user account. To do this, click on the following link and log in:
https://www.facebook.com/settings?tab=ads or http://www.youronlinechoices.com
You can also restrict the visibility of your Facebook account to us via the Facebook settings.
For further details, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy/
15.8.1.3. Data Protection Officer of Facebook
To contact Facebook’s Data Protection Officer, you can use the online contact form provided by Facebook at the following link https://www.facebook.com/help/contact/540977946302970 .
15.9. LinkedIn presence
15.9.1. Data processing with regard to “Page Insights” when visiting our LinkedIn presence
When you visit our LinkedIn presence, your personal data will be processed by LinkedIn as the platform operator and by us as the operator of our presence within the platform. Insofar as this data processing takes place in connection with the Insights functionality of LinkedIn (LinkedIn Ireland Unlimited Company or LinkedIn Corporation), we are jointly responsible with LinkedIn for this (Art. 26 para. 1 GDPR).
LinkedIn Page Insights (https://legal.linkedin.com/pages-joint-controller-addendum) is a function provided by LinkedIn that allows the operator of a LinkedIn presence (us) to receive aggregated data about visitor interaction.
As part of the Page Insights function, LinkedIn evaluates your interaction with our LinkedIn presence and also uses the personal information you provide (professional activity, industry, country, etc.). The evaluated data is made available to us by LinkedIn, but only in aggregated form (i.e. LinkedIn does not provide us with any specific information on individual users as part of this function, but only aggregated information). We use this aggregated data for the target group-oriented presentation of our LinkedIn presence and generally for its optimization with regard to the above-mentioned advertising purposes.
We have a legitimate interest in these advertising purposes, and your data is processed on the basis of Art. 6 para. 1 lit. f GDPR.
Please refer to LinkedIn’s privacy policy for information on the purposes that LinkedIn pursues with the processing of your personal data and the legal bases for this data processing.
Please note that we have no influence on the data collection and further processing under the responsibility of LinkedIn. As a result, we cannot provide any information about the extent to which, where and for how long the data is stored by LinkedIn. Furthermore, we cannot make any statements about the extent to which LinkedIn complies with existing deletion obligations, which evaluations and links with the data are made by LinkedIn and to whom the data is passed on by LinkedIn.
15.9.2. Your rights as a data subject
If you, as a visitor to the site, wish to exercise your rights (information, correction, deletion, restriction, data portability, complaint to the supervisory authority, objection or revocation), you can contact both LinkedIn and us. You can restrict the visibility of your LinkedIn account (also) to us via the LinkedIn settings.
For further information on data processing by LinkedIn, please refer to LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy
15.9.3. Data Protection Officer of LinkedIn
To contact LinkedIn’s Data Protection Officer, you can use the contact form at the link https://www.linkedin.com/help/linkedin/ask/TSO-DPO .
16) Legal Obligations
The provision of personal data for the decision on the conclusion of a contract, the fulfillment of the contract or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision within the framework of contractual measures if you provide such personal data that is required for the conclusion of the contract, the fulfillment of the contract or pre-contractual measures.
17) Automated Decision-Making
Automated decision-making or profiling in accordance with Art. 22 GDPR does not take place.
18) Reservation of Right to Make Changes
We reserve the right to adapt or update this privacy policy if necessary, in compliance with the applicable data protection regulations. In this way, we can adapt it to current legal requirements and take into account changes to our services, e.g. when introducing new services. The current version applies to your visit.
Date of this privacy policy: 08/01/2025