Data protection information (information duties according to Art. 13 GDPR)
With this data protection information we would like to inform you on the one hand about
- which personal data we collect and use from you
- whether and, if so, to which third parties these may be passed on
- how long we store the data
- which rights you have
If you have any questions about the following privacy notices, you can contact us using the contact information below.
Name and contact details of the person responsible
Responsible body is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
The person responsible for data processing is:
Stedinger Straße 32
We take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
Various personal data is collected. Personal data are data with which you can be personally identified. This data protection declaration explains which data we collect and for what we use it. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.
Your rights as a data subject
In this section we would like to inform you in detail about the rights you are entitled to.
According to the applicable laws, you have various rights regarding your personal data. If you would like to assert these rights, please send your request by e-mail or by post, clearly identifying yourself to the above-mentioned person responsible for data processing.
You have the right to free information about your stored personal data, their origin and recipients and the purpose of data processing and, if necessary, a right to correction, blocking or deletion of this data at any time within the scope of the applicable legal provisions. You can contact us at any time at the address given in the imprint if you have any further questions on the subject of personal data. You also have the right of appeal to the competent supervisory authority.
Right to information
You have the right to ask us to confirm whether we are processing your personal data. If this is the case, you have a right of access to these data and to all details relating to these data (in particular processing purposes, recipients, storage period, rights of data subjects, the origin of the data if these were not collected directly from you). You can read the details about your right to information in Article 15 of the EU Data Protection Basic Regulation.
Right to correction and completion
In accordance with Article 16 of the Basic EU Data Protection Regulation, you have the right to request us to correct any inaccurate personal data concerning you and to complete any incomplete personal data without delay.
Right to cancellation
You have the right to request us to delete your personal data immediately if one of the reasons stated in Article 17 of the EU Data Protection Basic Regulation applies. Such a reason for the immediate deletion can be given, for example, if the personal data is no longer necessary for the processing of your request or if you have objected to data processing.
Right to limitation of processing
You have the right to request us to restrict the processing of your personal data if one of the conditions set out in Article 18 of the EU Data Protection Basic Regulation is met. For example, if we no longer need this data to process your complaint or inquiry, but you need it to assert, exercise or defend legal claims, you have the right to restrict processing.
Right to revoke consent
You have the right to revoke your consent to the processing of your personal data at any time in accordance with Article 7(3) of the Basic EU Data Protection Regulation. The revocation applies only to future data processing, i.e. the data processing that has taken place up to the revocation remains legal in this case.
Right to data transferability
You have the right to receive the personal data concerning you that you have provided to us in a structured, current and machine-readable format, and you have the right to transmit this data to another person in charge without our interference, provided that
1. processing is based on consent pursuant to Art. 6 para. 1 sentence 1 a) DSGVO or Art. 9 para. 2 a) DSGVO or on a contract pursuant to Art. 6 para. 1 sentence 1 b) DSGVO and
2. processing is carried out using automated methods.
When exercising your right to data transferability in accordance with paragraph 1, you have the right to request that the personal data be transferred directly by us to another person responsible, insofar as this is technically feasible.
Right of objection
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you on the basis of Art. 6 para. 1 sentence 1 e) or f) DSGVO; this also applies to profiling based on these provisions. We no longer process personal data unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.
You have the right, for reasons arising from your particular situation, to object to the processing of personal data concerning you, for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 DSGVO, unless the processing is necessary for the performance of a task in the public interest.
Right of appeal to a supervisory authority
You have the right of appeal to a supervisory authority, in particular in the Member State where you are staying, working or suspected of having infringed the law, if you believe that the processing of personal data concerning you is unlawful.
The competent authority is:
The State Commissioner for Data Protection of Lower Saxony
Telefon: 05 11/120-45 00
Telefax: 05 11/120-45 99
E-Mail: poststelle@ lfd.niedersachsen.de
Data processing, general
Legal basis of the processing
Insofar as not already mentioned in the individual processing under the previous paragraphs, we will show below the legal bases on the basis of which we carry out the data processing.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU Data Protection Ordinance (DSGVO) serves as the legal basis.
In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 sentence 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 Para. 1 S 1 lit. c DSGVO serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 sentence 1 lit. d DSGVO serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 lit. f DSGVO) serves as the legal basis for processing.
Your data will be stored for as long as it is absolutely necessary to achieve the respective purpose, but at the latest, however, as long as legal regulations require it.
As soon as the storage purpose ceases to apply or a storage period prescribed by the aforementioned regulations expires, the personal data is routinely blocked or deleted, unless there is a need for further storage of the data as a result of the conclusion or performance of a contract.
We make every effort to ensure the security of your data in accordance with the applicable data protection laws and technical possibilities.
We use the SSL (Secure Socket Layer) coding system for the website, but point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.
To secure your data, we maintain technical and organisational security measures in accordance with Art. 32 DSGVO, which we constantly adapt to the state of the art.
Furthermore, we do not guarantee that our offer will be available at certain times; disruptions, interruptions or failures cannot be ruled out. The servers we use are regularly and carefully secured.
Disclosure of data to third parties
In principle, we only use your personal data within our company.
If and insofar as we involve third parties within the scope of the fulfilment of contracts (e.g. in the IT area of hosting companies), this personal data is only received to the extent to which the transfer is necessary for the corresponding service.
In the event that we outsource certain parts of data processing ("order processing"), this is done on the basis of Art. 28 DSGVO. We contractually oblige contractors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject.
Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or this occurs in connection with the use of third-party services or disclosure / transfer of data to third parties, this will only take place to fulfil our (pre)contractual obligations, or on the basis of your consent, or on the basis of a legal obligation or on the basis of our legitimate interests.
If legal or contractual permissions are given, we process or leave the data in a third country only if the special requirements of Art. 44 ff. Process DSGVO.
Processing then takes place, for example, on the basis of special guarantees, such as the officially recognised determination of a data protection level corresponding to the EU (e.g. for the USA by the "Privacy Shield") or compliance with officially recognised special contractual obligations (so-called "standard contractual clauses").
If you contact us by e-mail, we will store your details for processing the request and in the event that follow-up questions arise.
This is also our legitimate interest pursuant to Art 6 para. 1 sentence 1 f) DSGVO.
We only store and use further personal data if you give your consent or if this is legally permissible without special consent.
The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage and database services, security services and technical maintenance services that we use to operate the Site.
We or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta- and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer according to art. 6 par. 1 p. 1 f) DSGVO in connection with art. 28 DSGVO.
If you send us enquiries using the contact form, your details from the enquiry form, including the contact data you provided there, will be stored for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.
The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing processes carried out up to the revocation remains unaffected by the revocation.
The data entered by you in the contact form will remain with us until you request us to delete, your consent for storage revoked or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.
When you visit our website, the web server collects usage data. This survey is necessary to technically enable the connection to our server and the use of our website. The following usage data is collected:
- the page from which the file was requested,
- Name of the retrieved file,
- Date and time of retrieval,
- the amount of data transferred,
- Status of whether the retrieval was successful,
- Description of the type of web browser used,
- IP address of the requesting computer, which is shortened after the usage process in such a way that it is no longer possible to draw any conclusions about your person.
These log data are only stored anonymously. We do not store any IP address or other personal data that can be traced back to your person. Personal user profiles are therefore not created. No data or other information is passed on to third parties when you visit our website.
We use session cookies on our website. Cookies are small text files that can be stored and read on your terminal device. We distinguish between session cookies, which are deleted again as soon as you close your browser and permanent cookies, which are also stored permanently after the respective usage process. Cookies can contain data that enable the recognition of the terminal device used. In some cases, however, cookies only contain information on certain settings that cannot be related to individuals. The session cookies we use do not contain any personal data. Furthermore, no techniques are used that make your usage behaviour comprehensible. The legal basis for the use of session cookies is our legitimate interest in using our website as required (Article 6(1)(f) of the Basic EU Data Protection Regulation).
Social media, analysis tools and third-party tools
When you visit our website, your surfing behaviour can be statistically evaluated. This is done primarily with cookies and so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You may object to this analysis or prevent it by not using certain tools. You will find detailed information on this in the following data protection declaration.
You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration.
Google Tag Manager
Our website uses the Google Tag Manager. With the Google Tag Manager, website tags can be managed via an interface. The Google Tag Manager tool does not collect personal data and triggers other tags that may collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
Google Analytics cookies are stored on the basis of Art. 6 Par. 1 lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both his website and his advertising.
We have activated the IP anonymisation function on this website. This will cause your IP address to be cut by Google within Member States of the European Union or in other countries party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set which prevents the collection of your data on future visits to this website: Disable Google Analytics.
<a id="ga-opt-out" href="#">Disable Google Analytics capture</a>
Contract data processing
We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities for the use of Google Analytics.
Demographic features on Google Analytics
This website uses the "demographic features" function of Google Analytics. This allows reports to be created that contain information on the age, gender and interests of site visitors. This data comes from interest-related advertising by Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can disable this feature at any time from your Google Account ad preferences or opt-out of Google Analytics collecting your information as described in the "Opt-out of data collection" section.
We use various domains to set cookies, which are used in our advertising products. These include the following domains as well as some country-specific versions of these domains, e.g. googleadservices.com.
Use of etracker
We use components from etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany. Every time you visit our site, this component collects and stores data for marketing and optimization purposes, which can then be used to create user profiles under a pseudonym by using cookies. Cookies are small text files that are stored locally in the cache of the visitor's Internet browser in order to enable the visitor's Internet browser to be recognized. The data collected in this way will not be used to personally identify the visitor to our website without the visitor's consent. In addition, this data is not combined with personal data and not with the user profiles created under a pseudonym. You can object to the collection and storage of data by etracker at any time with effect for the future:
This sets an opt-out cookie called "cntcookie" from etracker. Please do not delete this cookie as long as you wish to maintain the above objection. Further information ﬁnden can be found in the etracker data protection regulations.
Use of Facebook plugins (Like button)
We have integrated plug-ins of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA on our pages. You can recognize the Facebook plug-ins by the Facebook logo or the “like” button on our page. A list of all Facebook plug-ins is available here: developers.facebook.com/docs/plugins/.
If you visit our pages, a direct connection between your browser and the Facebook server is established via the plug-in. In this way the information that you have visited our page with your IP address is transmitted to Facebook. If you click on the Facebook “like” button while you are logged into your Facebook account, you can post a link to the contents of our pages on your Facebook profile. Facebook is then able to attribute the visit of our pages to your user account. Please note, that we as provider of the pages do not receive any information about the content of the transmitted data or their use by Facebook. You can find further information with regard to this topic in the data privacy statement of Facebook under de-de.facebook.com/policy.php
If you do not want Facebook to attribute your visit of our pages to your Facebook user account, please log out of your Facebook user account.
Use of Google +1
Collection and disclosure of information:
By way of the Google+1 button you can publish information all over the world. Via the Google +1 button you and other users receive personalised contents from Google and our partners. Google saves both the information that you have given +1 for a content and information about the page which you have viewed when clicking on +1. Your +1 may be shown as information together with your profile name and your photo in Google services, such as search results or in your Google profile or included on websites and advertisements on the internet.
Google records information about your +1 activities to improve the Google services for you and others. To be able to use the Google +1 button you must have a public Google profile which is visible worldwide and contains at least the name chosen for the profile. This name will be used in all Google services. In some cases this name may also replace another name which you have used when sharing contents via your Google account. The identity of your Google profile can be shown to users knowing your e-mail address or disposing of other identifying information of you.
Use of the collected information:
In addition to the uses explained above, the information provided by you will be used according to the applicable Google data protection provisions. Google may publish summarized statistics about the +1 activities of the users or disclose them to users and partners, such as publishers, advertisers or associated websites.
Use of Twitter
We have integrated features of the Twitter service on our pages. These features are offered by Twitter Inc., Twitter, Inc. 1355 Market St, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “Re-Tweet” feature the websites visited by you are linked to your Twitter account and disclosed to other users. As part of this process data is transmitted to Twitter as well.
Please note that we as provider of the pages do not receive any information about the content of the transmitted data or their use by Twitter. You can find further information with regard to this topic in the data privacy statement of Twitter under twitter.com/privacy.
You can change your data protection settings at Twitter in the account settings under twitter.com/account/settings.
Use of LinkedIn
Our pages include functions of the LinkedIn service. These features are provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. By using LinkedIn and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter.
When you visit our pages, the plugin establishes a direct connection between your browser and the LinkedIn server. LinkedIn receives the information that you have visited our site with your IP address. If you click the LinkedIn button while logged into your LinkedIn profile, you can link the contents of our pages on your profile. This allows LinkedIn to associate the visit to our pages with your user account. We would like to point out that, as the provider of the pages, we are not aware of the content of the data transmitted or how they are used.
If you would like to deactivate LinkedIn advertising cookies, please use the following link:
Cookie Consent from Silktide
Google Web Fonts
This site uses so-called web fonts provided by Google to uniformly display fonts. When you call up a page, your browser loads the required Web fonts into your browser cache to display texts and fonts correctly.
To do this, the browser you are using must connect to Google's servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
If your browser does not support web fonts, a default font is used by your computer.
We use the CDNJS to enable and optimize functions and have them delivered by the visitor to the nearest server. This was developed by Ryan Kirkman and Thomas Davis. Further information can be found at cdnjs.com/about or twitter.com/cdnjs.
Data protection officer
We have appointed a data protection officer for our company.