1. Data protection at a glance 

General information 

The following information provides outlines clearly what happens to your personal data when you visit this website. Personal data are all data by which you can be identified personally. You can find detailed information on the subject of data protection in the Privacy Policy following this text. 

 

Data recording on this website 

Who is responsible for data recording on this website? 

The data processing on this website is carried out by the website operator. You can find the latter’s contact data in the Imprint of this website. 


How do we record your data? 

Your data are firstly recorded by the fact that you communicate them to us. This may involve e.g. data that you enter in a contact form.
Other data are automatically recorded by our IT systems when you visit our website. These are above all technical data (e.g. Internet browser, operating system or time of site access). These data are recorded automatically as soon as you enter this website.

 

What do we use your data for? 

Some of the data are collected in order to ensure a fault-free provision of the website. Other data can be used for analysis of your user behaviour. 


What rights do you have in respect to your data? 

You have the right to receive information about the origin, recipients and purpose of your saved personal data free of charge at any time. You also have the right to demand correction or erasure of these data. You can contact us about this and send other questions on the subject of data protection via the address indicated in the Imprint. You are also entitled to complain to the responsible authority.
Furthermore, you have the right to demand a restriction to the processing of your personal data under certain circumstances. You can find details about this in the Privacy Policy under “Right to restriction of processing”.


Analysis tools and tools of third party providers 

Your surfing behaviour can be analysed statistically when you visit this website. This is primarily done with cookies and with so-called analysis programs. Your surfing behaviour is normally analysed anonymously; the surfing behaviour cannot be traced back to you.
You can object to this analysis or prevent it by not using certain tools. You can find detailed information on these tools and your objection options in the Privacy Policy below.

2. Hosting and content delivery networks (CDN) 

External hosting 

This website is hosted at an external service provider (host). The personal data that are recorded on this website are stored on the servers of the host. This may include IP addresses, contract enquiries, metadata and communication data, contractual data, contact data, names, website accesses and other data that are generated via a website.
The host is used for the purpose of contract fulfilment in respect to our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 Para. 1 lit. f GDPR).
Our host will only process your data to the extent that this is necessary for fulfilment of his performance obligations and follow our instructions in respect to this data.


Conclusion of a contract concerning order processing 

To ensure processing compliant with data protection, we have concluded a contract concerning order processing with our host. 

//Cloudflare

//We use the “Cloudflare” service. The provider is Cloudflare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA (hereinafter “Cloudflare”). 
Cloudflare provides a globally distributed content delivery network with DNS. Here the information transfer between your browser and our website is realised technically via the network of Cloudflare. This enables Cloudflare to analyse the data traffic between your browser and our website and serves as a filter between our servers and potentially malicious data traffic from the Internet. To this end, Cloudflare can also utilise cookies, although these are used for the described purpose only. 

//We have concluded a contract concerning order processing with Cloudflare. Cloudflare is also a certified participant in the “EU-US Privacy Shield Frameworks”. Cloudflare is committed to handling personal data received from the member states of the European Union (EU) in accordance with the “Privacy Shield Framework”.

//The use of Cloudflare is based on our justified interest in as error-free and secure provision of our website as possible (Art. 6 Para. 1 lit. f GDPR). 

//You can find more information on the subject of security at Cloudflare here: //https://www.cloudflare.com/privacypolicy/.

3. General notes and mandatory information 

Data protection 

The operators is these pages take the protection of your personal data very seriously. We treat your personal data confidentially and corresponding to the statutory data protection regulations as well as this Privacy Policy.
Various types of personal data will be collected if you use this website. Personal data are data by which you can be identified personally. This Privacy Policy explains which data we collect and why we use it. It also explains how and for what purpose this occurs.
We point out that data transmission in the Internet (e.g. during communication by email) may be subject to security breaches. Complete protection of the data against access by third parties is not possible.

 

Information on the data controller 

The party responsible for the data processing on this website is: 

abcr GmbH
Im Schlehert 10
76187 Karlsruhe

Phone: +49 (0) 721 950 61-0
E-Mail:  info@abcr.com

The responsible party is the natural or legal person, who decides on the purpose and means for the processing of personal data (e.g. names, email addresses or similar) solely or jointly with others. 


Legally stipulated data protection officer 

We have appointed a data protection officer for our company. 

DATENSCHUTZ perfect GbR
Michael Oehler
Office Karlsruhe-West
Stiller Winkel 4
76187 Karlsruhe

Phone: +49 (0) 721 53158-79 
E-Mail: datenschutz@abcr.com

 

Revocation of your consent to the data processing 

Many data processing procedures are only possible with your explicit consent. You can revoke consent already granted at any time. An informal notification to us by email is sufficient for this. The legitimacy of the data processing performed until the revocation remains unaffected by the revocation. 


Right to objection against data processing in particular cases as well as against direct advertising (Art. 21 GDPR) 

IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT FOR REASONS RESULTING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH A PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY STATEMENT. IF YOU LODGE AN OBJECTION, WE SHALL NO LONGER PROCESS YOUR RELEVANT PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING, WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES FOR THE ASSERTION, EXERCISING OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED IN ODER TO PERFORM DIRECT ADVERTISING, YOU HAVE THE RIGHT AT ANY TIME TO LODGE AN OBJECTION TO THE PROCESSING OF PERSONAL DATA RELATING TO YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING, IF AND TO THE EXTENT THAT IT IS ASSOCIATED WITH SUCH PROCESSING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).

 

Right to complain to the responsible authority 

In the event of infringements against the GDPR, the data subject is entitled to complain to a supervisory authority, in particular in the member state of their usual residence, their workplace or the location of the presumed infringement. The right to complain results irrespective of other remedies under administrative or judicial law. 


Right to data portability 

You have the right to transfer data that we process automatically on the basis of your consent or in fulfilment of a contract to yourself or to a third party in a common, machine-readable format. If you do not demand direct transfer of the data tom another data controller, this will occur only to the extent that it is feasible technically. 


SSL or TLS encryption 

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, for example orders or enquiries, which you send to us as site operators. You can recognise an encrypted link by the fact that the address line of your browser changes from “http://” to “https://” and by the lock symbol in your browser line. 

If the SSL or TLS encryption is activated, the data that you send to us cannot be read by third parties. 


Encrypted payment transactions on this website 

If the conclusion of a fee-based contract results in an obligation to send us your payment data (e.g. account number for direct debit), these data are required for payment processing.
The payment transaction via common means of payment (Visa/MasterCard, direct debit) is realised via an encrypted SSL or TLS link. You can recognise an encrypted link by the fact that the address line of your browser changes from “http://” to “https://” and by the lock symbol in your browser line.
With encrypted communication, your payment data that you send to us cannot be read by third parties.

 

Origin, erasure and correction 

You have right the according to the applicable statutory provisions to free information at any time concerning your saved personal data, their origin and recipients and the purpose of the data processing and, if applicable, a right to correction or erasure of this data. You can contact us about this and send other questions on the subject of personal data via the address indicated in the Imprint. Right to restriction of processing You have the right to demand a restriction to the processing of your personal data. To this end, you can contact us via the address indicated in the Imprint.
The right to restriction of processing results in the following cases:
If you dispute the correctness of your personal data stored at us, we usually require time in order to check this. You have the right to demand a restriction to the processing of your personal data for the duration of the check.
If the processing of your personal data occurs/occurred unlawfully, you can demand restriction of the data processing instead of erasure.
If we no longer require your personal data, but you require it to exercise, defend or assert legal claims, you have the right to demand a restriction to the processing of your personal data instead of erasure.
If you have lodged an objection pursuant to Art. 21 Para. 1 GDPR, it will be necessary to weigh up both your interests and our interests. Insofar as it cannot be determined whose interests predominate, you have the right to demand a restriction to the processing of your personal data.
If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the assertion, exercise or defence of legal claims or for protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a member state.


Objection to advertising emails 

The use of contact data published as part of the Imprint obligation concerning the sending of advertisements and information materials not explicitly requested is hereby objected to. The operators of the pages expressly reserve the right to initiate legal steps in the event of unwanted sending of advertising information, such as by spam emails. 

4. Data recording on this website 

Cookies

Our Internet sites use so-called “cookies”. Cookies are small text files that do not harm your end device. They are stored on your end device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are deleted automatically after the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are deleted automatically by your web browser.

Sometimes cookies can also be stored by third party companies on your end device if you visit our site (third party cookies). These enable us or you to utilise certain services of the third party company (e.g. cookies for handling payment services).

Cookies have various functions. Numerous cookies are required technically, as certain website functions would not function without these (e.g. the shopping basket function or video displays). Other cookies serve for evaluating user behaviour or displaying advertisements.

Cookies that are required for the realisation of electronic communication or for the provision of certain functions desired by you (e.g. shopping basket function) are stored on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a justified interest in the storage of cookies for technically flawless and optimised provision of their services. If and to the extent that a corresponding consent has been requested (e.g. a consent for the storage of cookies), the processing shall be done exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time however.

You can set your browser so that you are informed about the placement of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally, as well as activate the automatic deletion of cookies when closing the browser. The deactivation of cookies can impair the functionality of this website.

Insofar as cookies are used by third party companies or for analysis purposes, we shall inform you about this within the framework of the Privacy Policy and, if applicable, request consent.


Cookie consent with Usercentrics 

This website uses the cookie consent technology of Usercentrics in order to obtain your consent for the storage of certain cookies on your end device and document this in accordance with data protection law. This technology is provided by Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, website: https://usercentrics.com/en/ (hereinafter “Usercentrics”). 

If you visit our website, the following personal data will be sent to Usercentrics:

  • Your consent(s) or the revocation of your consent(s)
  • Your IP address
  • Information about your browser
  • Information about your end device
  • Time of your visit to the website

Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the granted consents or their revocation to you. The data recorded in this way are stored until you request us to delete them, you delete the Usercentrics cookie yourself, or the purpose of the data storage no longer becomes applicable. Compelling legitimate grounds for the retention remain unaffected. 

We use Usercentrics in order to obtain the consents stipulated by law for the use of cookies. The legal basis for this is Art. 6 Para. 1 S. 1 lit. c GDPR. 


Contract concerning order processing 

We have concluded a contract concerning order processing with Usercentrics. This represents a contract stipulated under a data protection law, which ensures that Usercentrics only uses the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR. 

 

Server log files 

The provider of the pages automatically collects and saves information in so-called server log files, which your browser automatically sends to us. These are: 

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server
  • request IP address

These data will not be merged with other data sources. 

These data are collected on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a justified interest in the technically flawless visualisation and optimisation of their website – the server log files must be recorded for this. 


Contact forms 

If you send us enquiries via a contact form, your data from the contact form including the contact data indicated by you there will be saved by us for the purpose of processing the enquiry and for the case of follow-up enquiries. We shall not communicate these data without your consent. 

These data are processed on the basis of Art. 6 Para. 1 lit. b GDPR, insofar as your enquiry is associated with the fulfilment of a contract or is necessary for the implementation of precontractual measures. In all other cases, the processing is based on our justified interest in the effective processing of the enquires submitted to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) insofar as his has been requested. 

The data entered in the contact form remains with us until you request us to delete them, revoke your consent to storage or the purpose of the data storage is no longer applicable (e.g. after completed processing of your enquiry). Mandatory legal provisions – in particular retention periods – remain unaffected. 


Enquiry by email, telephone or fax 

If you contact us by email, telephone or fax, your enquiry including all personal data derived from this (name, enquiry) will be stored and processed at us for the purpose of processing your concern. We shall not communicate these data without your consent. 

These data are processed on the basis of Art. 6 Para. 1 lit. b GDPR, insofar as your enquiry is associated with the fulfilment of a contract or is necessary for the implementation of precontractual measures. In all other cases, the processing is based on your consent (Art. 6 Para. 1 lit. a GDPR) and/or on our justified interests (Art. 6 Para. 1 lit. f GDPR), as we have a justified interest in the effective processing of the enquiries submitted to us. 

The data sent by you in the contact form remain with us until you request us to delete them, revoke your consent to storage or the purpose of the data storage no longer becomes applicable (e.g. after completed processing of your concern). Mandatory legal provisions – in particular statutory retention periods – remain unaffected. 


Registration on this website 

You can register on the website in order to use additional functions on the site. We only use the data entered for this for the purpose of utilising the relevant offer or service for which you have registered. The mandatory data requested during the registration must be indicated in full. Otherwise we shall decline the registration. 

For important changes, such as for the offer scope or for changes necessary technically, we shall use the email address indicated during the registration to inform you in this way. 

The data entered during the registration is processed for the purpose of realising the usage relationship established by the registration and, if applicable, for initiating further contracts (Art. 6 Para. 1 lit. b GDPR). 

The data recorded during the registration will be stored by us as long as you are registered on this website and will then be deleted. Statutory retention periods remain unaffected. 

5. Social media 

Facebook plugins (Like & Share button) 

Plugins of the Facebook social network are integrated on the website. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the recorded data are also sent to the USA and to third party countries. 

You can recognise the Facebook plugins by the Facebook logo or the “Like” button on this website. You can find an overview of the Facebook Plugins here: https://developers.facebook.com/docs/plugins/?locale=en_GB.

If you visit this website, a direct link between your browser and the Facebook server will be established via the plugin. This informs Facebook that you have visited his website with your IP address. If you click on the Facebook “Like” button while you are logged into your Facebook account, you can link the content of this website to your Facebook profile. This lets Facebook assign the visit to this website to your user account. We point out that we as a provider of the pages have no knowledge of the content of the transmitted data as well as their use by Facebook. You can find more information on this in the privacy statement of Facebook at: https://www.facebook.com/privacy/explanation

If you do not want Facebook to be able to assign the visit to this website to your Facebook user account, please log out of your Facebook user account. 

The Facebook plugin is used on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a justified interest in as extensive visibility as possible in the social media. 

 

Twitter plugin 

Functions of the Twitter service are integrated on this website. These functions are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “Re-Tweet” function, the websites you have visited are linked to your Twitter account and announced to other users. In doing so, data are also sent to Twitter. We point out that we as a provider of the pages have no knowledge of the content of the transmitted data as well as their use by Twitter. You can find more information on this in the privacy statement of Twitter at:   https://twitter.com/en/privacy.

The Twitter plugin is used on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a justified interest in as extensive visibility as possible in the social media. 

You can change your data privacy settings for Twitter in the account settings at https://twitter.com/account/settings 

 

Instagram plugin 

Functions of the Instagram service are integrated on this website. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. 

If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking on the Instagram button. This lets Instagram assign the visit to this website to your user account. We point out that we as a provider of the pages have no knowledge of the content of the transmitted data as well as their use by Instagram. 

The data are stored and analysed on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a justified interest in as extensive visibility as possible in the social media. If and to the extent that a corresponding consent has been requested (e.g. a consent for the storage of cookies), the processing shall be done exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time however. 

You can find more information on this in the privacy statement of Instagram: https://instagram.com/about/legal/privacy/.

 

LinkedIn plugin 

This website uses functions of the LinkedIn network. The provider is the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.  

Each time you call up a page of this website that contains functions of LinkedIn, a link to servers of LinkedIn is established. LinkedIn is informed that you have visited this website with your IP address. If you click on the “Recommend “button of LinkedIn and are logged into LinkedIn with your account, LinkedIn is able to assign your visit to this website to you and your account. We point out that we as a provider of the pages have no knowledge of the content of the transmitted data as well as their use by LinkedIn. 

The LinkedIn plugin is used on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a justified interest in as extensive visibility as possible in the social media. 

You can find more information on this in the privacy statement of LinkedIn at: https://www.linkedin.com/legal/privacy-policy.

//XING Plugin

//This website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. 

//Each time you call up one of our pages that contains functions of XING, a link to servers of XING is established. When doing so, personal data is not saved according to our knowledge. In particular, no IP addresses are saved nor is the usage behaviour evaluated. 

//The data are stored and analysed on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a justified interest in as extensive visibility as possible in the social media. If and to the extent that a corresponding consent has been requested (e.g. a consent for the storage of cookies), the processing shall be done exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time however. 

//You can find more information on data protection and the XING Share button in the Privacy Policy of XING at:
//https://www.xing.com/app/share?op=data_protection.

6. Analysis tools and advertising 

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. 

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and which enable your usage of the website to be analysed. The information generated by the cookie concerning your use of this website is usually sent to a server of Google in the USA and stored there. 

Google Analytics cookies are stored and this analysis tool is used on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a justified interest in the analysis of user behaviour in order to optimise their web presence as well as their advertising. If and to the extent that a corresponding consent has been requested (e.g. a consent for the storage of cookies), the processing shall be done exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time however. 


IP anonymisation 

We have activated the IP anonymisation function on this website. Your IP address will consequently be truncated by Google within the member states of the European Union or in other states party to the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases is the full IP address sent to a server of Google in the USA and truncated there. Google will use this information on behalf of the operator of this website in order to analyse your use of the website so as to compile reports on the website activities and provide further services associated with the website usage and Internet usage to the website operator. The IP address sent by your browser as part of Google Analytics will not be merged with other data of Google. 


Browser plugin 

You can prevent the storage of cookies by a corresponding setting in your browser software; however we point out that you might not be able to use all functions of this website to the full extent in this case. You can also prevent the recording of the data generated by the cookie and relating to your use of the website (including your IP address) at Google as well as the processing of this data by Google by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB .


Objection to data recording 

You can prevent your data from being recorded by Google Analytics by clicking on the following link. An opt-out cookie is placed, which prevents your data from being recorded upon future visits to this website: Deactivate Google Analytics. 

You can find more information on how Google Analytics utilises user data in the Privacy Policy of Google: https://support.google.com/analytics/answer/6004245?hl=en-GB. 


Order processing 

We have concluded a contract with Google concerning order processing and fully implement the strict regulations of the German data protection authorities for the use of Google Analytics. 


Demographic characteristics in Google Analytics 

This website uses the “Demographic characteristics” function of Google Analytics. This allows reports to be created, which contain statements regarding the age, sex and interests of the visitors to the site. These data originate from interest-related advertising of Google as well as from visitor data from third party providers. These data cannot be assigned to any definite person. You can deactivate this function at any time via the display settings in your Google account or prohibit the recording of your data by Google Analytics as outlined generally at the point “Objection to data recording”. 


Storage duration 

Data stored at Google on a user and event level, which are linked to cookies, usernames (e.g. user ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) are anonymised or deleted after 14 months. You can view details about this under the following link:https://support.google.com/analytics/answer/7667196?hl=en-GB


Hotjar

This website uses Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (Website: https://www.hotjar.com). 

Hotjar is a tool for analysing your user behaviour on this website. Hotjar allows us to record your mouse and scroll movements or clicks, amongst other actions. In this way, Hotjar can determine how long you have remained at a certain point with your mouse cursor. Hotjar uses this information to compile so-called heatmaps, which allow us to determine which areas of the website visitors prefer to view. 

We can also ascertain how long you have remained on a page and when you left it. We can also discern at which point you broke off entering your entries in a contact form (so-called conversion funnels). 

Direct feedback from website visitors can also be obtained with Hotjar. This function serves for improving the Internet presence of the website provider. 

Hotjar uses cookies. Cookies are small text files that are placed on your computer and saved by your browser. They serve for making our presence more user-friendly, effective and secure. These cookies allow us to determine whether this website has been visited with a certain end device or whether the functions of Hotjar were deactivated for the relevant browser. Hotjar cookies remain on your end device until you delete them. 

You can set your browser so that you are informed about the placement of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally, as well as activate the automatic deletion of cookies when closing the browser. The deactivation of cookies can impair the functionality of this website. 

The use of Hotjar and storage of Hotjar cookies are realised on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a justified interest in the analysis of user behaviour in order to optimise their web presence as well as their advertising. If and to the extent that a corresponding consent has been requested (e.g. a consent for the storage of cookies), the processing shall be done exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time however. 


Deactivation of Hotjar 

If you wish to deactivate data logging by Hotjar, click on the link below and follow the instructions there: https://www.hotjar.com/opt-out

Please remember that Hotjar needs to be deactivated separately for each browser and each end device. You can find more information on Hotjar and the recorded data in the privacy statement of Hotjar under the following link: https://www.hotjar.com/privacy


Contract concerning order processing 

We have concluded a contract concerning order processing with Hotjar in order to implement the strict European data protection regulations. 


Matomo (formerly Piwik) 

This website uses the open source web analysis service MatomoMatomo uses so-called “cookies”. These are text files that are stored on your computer and which enable your usage of the website to be analysed. The information on the use of this website generated by the cookie is saved on our server for this. The IP address is anonymised before storage. 

Matomo cookies remain on your end device until you delete them. 

Matomo cookies are stored and this analysis tool is used on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a justified interest in the anonymised analysis of user behaviour in order to optimise their web presence as well as their advertising. If and to the extent that a corresponding consent has been requested (e.g. a consent for the storage of cookies), the processing shall be done exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time however. 

The information on the use of this website generated by the cookie is not passed on to third parties. You can prevent the storage of cookies by a corresponding setting in your browser software; however we point out that you might not be able to use all functions of this website to the full extent in this case. 

If you do not agree to the storage and use of your data, you can deactivate the storage and use here. In this case, an opt-out cookie is placed in your browser, which prevents Matomo for saving usage data. Deleting your cookies will also result in deletion of the Matomo opt-out cookie. The opt-out must be reactivated each time you visit this website again. 

[Add Matomo iframe code here] (Click for instructions) 


Google AdSense (not personalised) 

This website uses Google AdSense, a service for integrating advertisements. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. 

We use Google AdSense in “non-personalised” mode. In contrast to personalised mode, the advertisements are not therefore based on your previous user behaviour and a user profile is not created about you. Instead, so-called “context information” is utilised when choosing the advertisement. The selected advertisements are then typically oriented to your location, the content of the website you are visiting or your current search terms. You can find more information in the difference between personalised and non-personalised targeting with Google AdSense at: https://support.google.com/adsense/answer/9007336.

Please note that cookies can also be saved when using Google AdSense in non-personalised mode. These are used for combatting fraud and abuse according to Google. The cookies remain on your end device until you delete them. 

Google AdSense is used in non-personalised mode on the basis of Art. 6 Para. 1 lit. f GDPR. We have a justified interest in the analysis of user behaviour in order to optimise our web presence as well as our advertising. If and to the extent that a corresponding consent has been requested (e.g. a consent for the storage of cookies), the processing shall be done exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time however. 

Google has certification according to the “EU-US Privacy Shield”. The Privacy Shield is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified according to the Privacy Shield is obliged to comply with these data protection standards. 

You can adapt your advertising settings independently in your user account. Click on the following link and log in for this: https://adssettings.google.com/authenticated.

You can find more information on the advertising technologies of Google here: 
https://policies.google.com/technologies/ads
https://www.google.de/intl/en-GB/policies/privacy/.


Google Analytics Remarketing 

This website uses the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google Ads and Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. 

This function enables the advertising target groups created with Google Analytics Remarketing to be linked to the cross-device functions of Google Ads and Google DoubleClick. In this way, interest-related, personalised advertising messages, which were adapted based on your previous usage and surfing behaviour on an end device (e.g. mobile phone), can also be displayed on one of your other end devices (e.g. tablet or PC). 

If you have granted a corresponding consent, Google will link your web and app browser history to your Google account for this purpose. In this way, the same personalised advertising messages can be placed on each end device on which you log in with your Google account. 

To support this function, Google Analytics analyses user IDs authenticated by Google, which are temporarily linked to our Google Analytics data in order to define and create target groups for the cross-device advertising placement. 

You can permanently reject cross-device remarketing/targeting by deactivating personalised advertising; to do so following this link: https://www.google.com/settings/ads/onweb/.

The recorded data is merged in your Google account exclusively on the basis of your consent, which you can submit or revoke at Google (Art. 6 Para. 1 lit. a GDPR). During data logging procedures that are not merged in your Google account (e.g. because you do not have a Google account or you have declined the merger), the data recording is based on Art. 6 Para. 1 lit. f GDPR. The justified interest results from the fact that the website operator has an interest in the anonymised analysis of the website visitors for advertising purposes. 

You can find further information and the data protection policies in the privacy statement of Google at: at: https://policies.google.com/technologies/ads?hl=en-GB.

 

Google Ads and Google Conversion Tracking 

This website uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. 

We use so-called conversion tracking as part of Google Ads. If you click on an advertisement placed by Google, a cookie will be set for the conversion tracking. Cookies represent small text files placed on an internet browser on the user’s computer. These cookies become invalid after 30 days and no longer serve for personal identification of the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we ourselves recognise that the user has clicked on the advertisement and has been directed to this page. 

Every Google Ads customer receives another cookie. The cookies cannot be tracked via the websites of Google Ads customers. The information obtained via the conversion cookie serves for creating conversion statistics for Google Ads customers who have opted for conversion tracking. Customers find out the total number of customers who have clicked on their advertisement and who have been routed to a page provided with a conversion tracking tag. However, they do not receive any information that could allow the user to be identified. If you do not wish to take part in the tracking, you can decline this usage by easily deactivating the cookie of the Google Conversion Tracking via your Internet browser in user settings. This will prevent you from being included in the conversion tracking statistics. 

The storage of “conversion cookies” and use of this tracking tool are based on the principle of Art. 6 Para. 1 lit. f GDPR. The website operator has a justified interest in the analysis of user behaviour in order to optimise their web presence as well as their advertising. If and to the extent that a corresponding consent has been requested (e.g. a consent for the storage of cookies), the processing shall be done exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time however. 

You can find more information on Google Ads and Google Conversion Tracking in the privacy policies of Google: https://policies.google.com/privacy?hl=en-GB.

You can set your browser so that you are informed about the placement of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally, as well as activate the automatic deletion of cookies when closing the browser. The deactivation of cookies can impair the functionality of this website. 

 

Facebook Pixel 

This website uses the visitor action Pixel from Facebook for conversion measurement. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the recorded data are also sent to the USA and to third party countries. 

You can track the behaviour of visitors to the site after they have been directed to the website of the provider by clicking on a Facebook advertisement. This allows the effectiveness of the Facebook advertisements to be optimised for statistical and market research purposes and future advertising campaigns. 

The collected data are anonymous for us as operator, we cannot draw any conclusions about the identity of users. However, the data are saved and processed by Facebook, with the result that a link to the relevant user profile is possible and Facebook can use the data for its own advertising purposes, corresponding to the Facebook data usage guideline. In this way, Facebook can enable advertisements to be placed on pages of Facebook as well as outside Facebook. This use of data cannot be influenced by us as site operators. 

The use of Facebook-Pixel is based on the principle of Art. 6 Para. 1 lit. f GDPR. The website operator has a justified interest in effective advertising measures including social media. If and to the extent that a corresponding consent has been requested (e.g. a consent for the storage of cookies), the processing shall be done exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time however. 

The data privacy policies of Facebook contain information on how to protect your private sphere: https://en-gb.facebook.com/about/privacy/. 

You can also deactivate the remarketing function “Custom Audiences” in the settings area for advertisements at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You need to be logged into Facebook or this. 

If you do not have a Facebook account, you can deactivate usage-based advertising by Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

7. Newsletter 

Newsletter data 

If you wish to subscribe to the newsletter offered on the website, we require an email address from you as well as information allowing us to check that you are the owner of the email address indicated and agree to receiving the newsletter. Other data are not collected or this is only done so on a voluntary basis. We only use this data for sending the requested information and do not communicate this to third parties. 

The data entered in the newsletter form is processed exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can withdraw the consent granted for storage of the data, the email address as well as use thereof for sending the newsletter at any time, for example via the “Unsubscribe” link in the newsletter. The legality of the data processing already performed remains unaffected by the revocation. 

The data you provide us with for the purpose of subscribing to the newsletter are saved by us or the newsletter provider until you unsubscribe from the newsletter and deleted from the newsletter mailing list after unsubscribing from the newsletter. Data that have been saved by us for other purposes remain unaffected by this. 

After unsubscribing from the newsletter mailing list, your email address might be saved in a blacklist at us or the newsletter provider in order to prevent future mailings. The data from the blacklist are only used for this purpose and are not merged with other data. This serves both your interest as well as our interest in compliance with the statutory regulations for mailing newsletters (justified interest in accordance with Art. 6 Para. 1 lit. f GDPR). Storage in the blacklist is not limited at present. You can decline the storage if and to the extent that your interests outweigh our justified interest. 


Google Web Fonts

This site uses so-called web fonts, which are provided by Google for a standardised visualisation of fonts. The Google Fonts are installed locally. A link to the servers of Google is not established. 

You can find more information on Google Web Fonts at https://developers.google.com/fonts/faq and in the privacy statement of Google: https://policies.google.com/privacy?hl=en-GB.


Adobe Fonts

This website uses web fonts by Adobe for a standardised visualisation of certain fonts. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe). 

When calling up this website, your browser loads the required fonts directly from Adobe so as to be able to display them correctly on your end device. In doing so, your browser establishes a connection to the servers of Adobe in the USA. This lets Adobe know that the website was called up via your IP address. According to Adobe, no cookies are stored when making the fonts available. 

Adobe has certification according to the EU-US Privacy Shield. The Privacy Shield is an agreement between the United States of America and the European Union, which is meant to ensure compliance with European data standards. You can find more information at: https://www.adobe.com/en/privacy/eudatatransfers.html. 

The data are stored and analysed on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a justified interest in standardised visualisation of the typeface on their website. If and to the extent that a corresponding consent has been requested (e.g. a consent for the storage of cookies), the processing shall be done exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time however. 

You can find more information on Adobe Fonts at: https://www.adobe.com/en/privacy/policies/adobe-fonts.html. 

You can find the privacy statement of Adobe at: https://www.adobe.com/en/privacy/policy.html 


Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. 

reCAPTCHA can be used to check whether the data entry on this website (e.g. in a contact form) is made by a person or by an automated program. To this end, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor accesses the website. reCAPTCHA evaluates various information for the analysis (e.g. IP address, time spent by the visitor on the website or mouse movements made by the user). The data obtained during the analysis are sent to Google. 

The reCAPTCHA analyses run completely in the background. Website visitors are informed that an analysis is in progress. 

The data are stored and analysed on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a justified interest in protecting their web presence from improper automated spying and SPAM. If and to the extent that a corresponding consent has been requested (e.g. a consent for the storage of cookies), the processing shall be done exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time however. 

You can find more information on Google reCAPTCHA in the Google data privacy policies and the Google terms of use under the following links: https://policies.google.com/privacy?hl=en-GB and https://policies.google.com/terms?hl=en-GB. 

11. Own services 

Processing applicant data 

You have the opportunity to apply to us for work (e.g. by email, post or via our online application form). We explain below the scope, purpose and use of your personal data collected as part of the application process. We hereby assure that the collection, processing and use of your data will occur in accordance with applicable data protection law and all other statutory regulations and that your data will be treated with strict confidentiality. 


Scope and purpose of the data collection  

If you submit an application to us, we shall process your personal data associated with this (e.g. contact and communication data, application documents, notices within the context of interviews etc.), insofar as this is necessary for the decision to establish an employment relationship. The legal basis for this is § 26 BDSG (German Federal Data Protection Act) new (initiation of an employment relationship), Art. 6 Para. 1 lit. b GDPR (general contract initiation) and – if and to the extent that you have granted your consent – Art. 6 Para. 1 lit. a GDPR. The consent can be revoked at any time. Your personal data will only be disclosed within our company to persons who are involved in processing your application. 

If and to the extent that the application is successful, the data you have submitted will be stored in our data processing system on the basis of § 26 BDSG (German Federal Data Protection Act) new and Art. 6 Para. 1 lit. b GDPR for the purpose of realising the employment relationship. 


Retention period of the data 

If we cannot not make you a job offer, you reject a job vacancy or withdraw your application, we reserve the right to retain the data you have provided on the basis of our justified interests (Art. 6 Para. 1 lit. f GDPR) for up to 6 months from the termination of the application process (rejection or withdrawal of the application) in our system. The data are then deleted and the physical application documents destroyed. The retention serves in particular for verification purposes in the event of a legal dispute. If it becomes evident that the data have become necessary after the period of 6 months has passed (e.g. on account of an impending or sub judice legal dispute), an erasure will only be carried out if the purpose for the further retention no longer remains applicable. 

A longer retention can also occur if you have granted a corresponding consent (Art. 6 Para. 1 lit. a GDPR) or of statutory retention periods require otherwise. 


Inclusion in the applicant pool 

Insofar as we do not make you a job offer, it is possible to include you in our applicant pool. In the event of inclusion, all documents and data from the application will be added to the applicant pool in order to contact you if suitable vacancies become available. 

Inclusion in the applicant pool is done exclusively on the basis of your explicit consent (Art. 6 Para. 1 lit. a GDPR). Granting of consent is voluntary and has no relationship to the current application process. The data subject can withdraw their consent at any time. In this case, the data will be deleted from the applicant pool insofar as no statutory retention reasons exist. 

The data from the applicant pool will be deleted irrevocably not more than two years after the consent has been granted. 

12. Information on the processing of your personal data pursuant to Art. 13 and Art. 21 GDPR