Data Protection
1) Information on the collection of personal data and contact details of the controller
We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how your personal data is handled when you use our website. Personal data means all data with which you can be personally identified.
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
BK Process Engineering GmbH
Gewerbepark 18
49143 Bissendorf
Germany
Telephone: +49 5402 609 60 20
Email: b_koepke@bkcfd.de
The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
For security reasons and to protect the transmission of personal data and other confidential content, such as orders or inquiries sent to the controller, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser bar.
2) Data collection when visiting our website
If you use our website for purely informational purposes, that is, if you do not register or otherwise transmit information to us, we collect only the data that your browser transmits to our server, known as “server log files.” When you access our website, we collect the following data, which is technically necessary for us to display the website to you: • The website visited • Date and time of access • Amount of data sent in bytes • Source/reference from which you reached the page • Browser used • Operating system used • IP address used, if applicable in anonymized form
Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to review the server log files retrospectively if there are concrete indications of unlawful use.
3) Cookies
In order to make visits to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. Cookies are small text files that are stored on your device. Some of the cookies we use are deleted again after the end of the browser session, that is, after you close your browser, and are known as session cookies. Other cookies remain on your device and enable us to recognize your browser the next time you visit, and are known as persistent cookies. If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. The respective cookie storage duration can be found in the overview of the cookie settings of your web browser.
In some cases, cookies are used to simplify the ordering process by storing settings, for example by remembering the contents of a virtual shopping cart for a later visit to the website. If individual cookies used by us also process personal data, the processing takes place in accordance with Art. 6(1)(b) GDPR either for the performance of the contract, in accordance with Art. 6(1)(a) GDPR in the case of consent given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the website visit.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or exclude the acceptance of cookies in certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.
These can be found for the respective browsers under the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contacting us
When you contact us, for example via contact form or email, personal data is collected. Which data is collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration.
The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after your request has been fully processed. This is the case if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
5) Data processing when opening a customer account and for contract processing
In accordance with Art. 6(1)(b) GDPR, personal data is also collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be carried out by sending a message to the above-mentioned address of the controller. We store and use the data provided by you for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked with due regard to tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or we reserve further data use that is legally permitted.
6) Use of single sign-on methods
6.1 Facebook Connect
On our website, you can log in to create a customer account or register by using the social plugin “Facebook Connect” of the social network Facebook, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), as part of the so-called single sign-on technology, provided that you have a Facebook profile. You can recognize the “Facebook Connect” social plugins on our website by the blue button with the Facebook logo and the wording “Log in with Facebook”, “Connect with Facebook”, “Log in with Facebook” or “Sign in with Facebook”.
If you access a page of our website that contains such a plugin, your browser establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted directly by Facebook to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook.
This information, including your IP address, is transmitted by your browser directly to a server of Facebook Inc. in the USA and stored there. These data processing operations take place in accordance with Art. 6(1)(f) GDPR on the basis of Facebook’s legitimate interest in displaying personalized advertising based on your browsing behavior.
By using the “Facebook Connect” button on our website, you also have the option of logging in to or registering on our website using your Facebook user data. Only if you expressly give your consent in accordance with Art. 6(1)(a) GDPR before the registration process, on the basis of a corresponding notice regarding the exchange of data with Facebook, will we receive from Facebook, depending on your personal privacy settings at Facebook, the general and publicly accessible information stored in your profile. This information includes the user ID, name, profile picture, age, and gender.
We point out that, following changes to Facebook’s data protection and terms of use, your profile pictures, the user IDs of your friends, and your friends list may also be transmitted if these have been marked as “public” in your privacy settings on Facebook and if you have given consent.
The data transmitted by Facebook is stored and processed by us for the creation of a user account with the necessary data, such as salutation, first name, last name, address details, country, email address, and date of birth, provided that you have released this data for this purpose at Facebook. Conversely, based on your consent, data such as information about your browsing or purchasing behavior may be transmitted by us to your Facebook profile.
The consent given can be revoked at any time by sending a message to the controller named at the beginning of this Data Protection statement.
For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your related rights and setting options to protect your privacy, please refer to Facebook’s privacy information: https://www.facebook.com/policy.php
If you do not want Facebook to directly associate the data collected through our website with your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the loading of Facebook plugins with add-ons for your browser, for example “Adblock Plus”: https://adblockplus.org/de/
6.2 Google Sign-In
On our website, you can log in to create a customer account or register using the “Google Sign-In” service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), as part of the so-called single sign-on technology, provided that you have a Google profile. You can recognize the Google login function on our website by buttons such as “Sign in with Google” or “Log in with Google”.
If you access a page of our website that contains a Google login function, your browser establishes a direct connection to Google’s servers. The content of the login button is transmitted directly by Google to your browser and integrated into the page. Through this integration, Google receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Google profile or are not currently logged in to Google.
This information, including your IP address, is transmitted by your browser directly to a Google server and stored there; transmission to the servers of Google LLC in the USA may also occur. These data processing operations take place in accordance with Art. 6(1)(f) GDPR on the basis of Google’s legitimate interest in displaying personalized advertising based on browsing behavior.
By using the Google login button on our website, you also have the option of logging in to or registering on our website using your Google user data. Only if you expressly give your consent in accordance with Art. 6(1)(a) GDPR before the registration process, on the basis of a corresponding notice regarding the exchange of data with Google, will we receive from Google, depending on your personal privacy settings at Google, the general and publicly accessible information stored in your profile. This information includes the user ID, name, profile picture, age, and gender.
We point out that, following changes to Google’s data protection and terms of use, your profile pictures, the user IDs of your friends, and your friends list may also be transmitted if these have been marked as “public” in your privacy settings at Google and if you have given consent.
The data transmitted by Google is stored and processed by us for the creation of a user account with the necessary data, such as salutation, first name, last name, address details, country, email address, and date of birth, provided that you have released this data for this purpose at Google. Conversely, based on your consent, data such as information about your browsing or purchasing behavior may be transmitted by us to your Google profile.
The consent given can be revoked at any time by sending a message to the controller named at the beginning of this Data Protection statement.
For the purpose and scope of the data collection and the further processing and use of the data by Google, as well as your related rights and setting options to protect your privacy, please refer to Google’s privacy information: https://policies.google.com/privacy?hl=de&gl=de
The terms of use for “Google Sign-In” can be viewed here: https://policies.google.com/terms
If you do not want Google to directly associate the data collected through our website with your Google profile, you must log out of Google before visiting our website. You can also completely prevent the loading of Google plugins with add-ons for your browser, for example “Adblock Plus”: https://adblockplus.org/de/
7) Comment function
As part of the comment function on this website, in addition to your comment, information on the time at which the comment was created and the commentator name chosen by you are stored and published on this website. Furthermore, your IP address is logged and stored. This storage of the IP address takes place for security reasons and in the event that the person concerned infringes the rights of third parties or posts unlawful content through a submitted comment. We require your email address in order to contact you if a third party objects to your published content as unlawful. The legal bases for storing your data are Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful.
8) Use of customer data for direct advertising
Registration for our email newsletter
If you register for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. For the newsletter dispatch, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm, by clicking a corresponding link, that you wish to receive newsletters in the future.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When you register for the newsletter, we store your IP address entered by the internet service provider (ISP) as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later point in time. The data collected by us when you register for the newsletter is used exclusively for advertising purposes by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning of this statement. After successful unsubscribing, your email address will immediately be deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this where permitted by law and about which we inform you in this statement.
9) Data processing for order handling
9.1 Transmission of image files for order processing via upload function
On our website, we offer customers the option of commissioning the personalization of products by transmitting image files via an upload function. The submitted image motif is used as a template for the personalization of the selected product.
Using the upload form on the website, the customer can transmit one or more image files from the storage of the device used directly to us by automated, encrypted data transmission. We then collect, store, and use the transmitted files exclusively for the production of the personalized product within the meaning of the relevant service description on our website.
If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed of this in the following paragraphs. There is no further disclosure. If the transmitted files or digital motifs contain personal data, especially images of identifiable persons, all processing operations just described are carried out exclusively for the purpose of processing your online order in accordance with Art. 6(1)(b) GDPR. After final processing of the order, the transmitted image files are automatically and completely deleted.
Transmission of image files for order processing by email
On our website, we offer customers the option of commissioning the personalization of products by transmitting image files by email. The submitted image motif is used as a template for the personalization of the selected product.
Using the email address provided on the website, the customer can transmit one or more image files from the storage of the device used to us. We then collect, store, and use the files transmitted in this way exclusively for the production of the personalized product within the meaning of the relevant service description on our website.
If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed of this in the following paragraphs. There is no further disclosure. If the transmitted files or digital motifs contain personal data, especially images of identifiable persons, all processing operations just described are carried out exclusively for the purpose of processing your online order in accordance with Art. 6(1)(b) GDPR. After final processing of the order, the transmitted image files are automatically and completely deleted.
9.2 For the processing of your order, we work with the service providers listed below, who support us wholly or partly in carrying out concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
The personal data collected by us is passed on as part of contract processing to the transport company commissioned with delivery, insofar as this is necessary for delivery of the goods. Your payment data is passed on to the commissioned credit institution as part of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will provide explicit information about this below. The legal basis for the transfer of data is Art. 6(1)(b) GDPR.
9.3 Transfer of personal data to shipping service providers
– DHL
If delivery of the goods is carried out by the transport service provider DHL, DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, we will pass on your email address to DHL before delivery of the goods for the purpose of agreeing a delivery date or delivery notification in accordance with Art. 6(1)(a) GDPR, provided that you have given your express consent for this during the order process. Otherwise, for the purpose of delivery in accordance with Art. 6(1)(b) GDPR, we will only pass on the recipient’s name and delivery address to DHL. The transfer takes place only to the extent necessary for delivery of the goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible.
Consent can be revoked at any time with effect for the future vis-à-vis the controller named above or vis-à-vis the transport service provider DHL.
– DHL Freight
If delivery of the goods is carried out by the transport service provider DHL Freight GmbH, Godesberger Allee 102-104, 53175 Bonn, Germany, we will pass on your email address to DHL before delivery of the goods for the purpose of agreeing a delivery date or delivery notification in accordance with Art. 6(1)(a) GDPR, provided that you have given your express consent for this during the order process. Otherwise, for the purpose of delivery in accordance with Art. 6(1)(b) GDPR, we will only pass on the recipient’s name and delivery address to DHL. The transfer takes place only to the extent necessary for delivery of the goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible.
Consent can be revoked at any time with effect for the future vis-à-vis the controller named above or vis-à-vis the transport service provider DHL.
– ECMS
If delivery of the goods is carried out by ECMS, ECMS NL, we will pass on your email address to ECMS before delivery of the goods for the purpose of agreeing a delivery date or delivery notification in accordance with Art. 6(1)(a) GDPR, provided that you have given your express consent for this during the order process. Otherwise, for the purpose of delivery in accordance with Art. 6(1)(b) GDPR, we will only pass on the recipient’s name and delivery address to Schenker.
The transfer takes place only to the extent necessary for delivery of the goods. In this case, prior coordination of the delivery date with Schenker or delivery notification is not possible. Consent can be revoked at any time with effect for the future vis-à-vis the controller named above or vis-à-vis ECMS.
9.4 Use of payment service providers
– Smart2Pay
If you choose a payment method offered by the payment service provider Smart2Pay, payment processing will be carried out via Smart2Pay, Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam, Netherlands. We will transmit to Smart2Pay the information you provided during the order process together with the information about your order, such as name, address, IBAN, BIC, invoice amount, currency, and transaction number, in accordance with Art. 6(1)(b) GDPR.
Your data is transferred exclusively for the purpose of payment processing with the payment service provider Smart2Pay and only to the extent necessary for this purpose.
– Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or, if offered, “purchase on account” or “installment payment” via PayPal, we pass on your payment data as part of payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, hereinafter “PayPal”. The transfer takes place in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or, if offered, “purchase on account” or “installment payment” via PayPal. For this purpose, your payment data may be transmitted to credit agencies in accordance with Art. 6(1)(f) GDPR on the basis of PayPal’s legitimate interest in determining your solvency.
PayPal uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding whether to provide the respective payment method. The credit information may contain probability values, known as score values. If score values are included in the result of the credit information, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values.
Further data protection information, including information on the credit agencies used, can be found in PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
9.5 Carrying out credit checks
– General accounts receivable and debt collection service
If we make advance payments, for example delivery on invoice, we reserve the right to carry out a credit check on the basis of mathematical-statistical procedures in order to safeguard our legitimate interest in determining the solvency of our customers. We transmit the personal data necessary for a credit check to the following service provider in accordance with Art. 6(1)(f) GDPR:
Allgemeiner Debitoren- und Inkassodienst GmbH
Eduard-Pestel-Str. 7
49080 Osnabrück
The credit information may contain probability values, known as score values. If score values are included in the result of the credit information, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values.
We use the result of the credit check with regard to the statistical probability of default for the purpose of deciding on the establishment, execution, or termination of a contractual relationship.
You can object to this processing of your data at any time by sending a message to the controller responsible for data processing or to the above-mentioned credit agency. However, we may still be entitled to process your personal data if this is necessary for contractual payment processing.
10) Use of social media: social plugins
10.1 Facebook plugins with Shariff solution
Our website uses so-called social plugins (“plugins”) of the social network Facebook, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).
To increase the protection of your data when visiting our website, these buttons are not integrated unrestrictedly as plugins, but only into the page using an HTML link. This type of integration ensures that, when a page of our website containing such buttons is accessed, no connection to Facebook’s servers is established yet. If you click on the button, a new browser window opens and accesses the Facebook page, where you can interact with the plugins there, if necessary after entering your login data.
For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your related rights and setting options to protect your privacy, please refer to Facebook’s privacy information: https://www.facebook.com/policy.php
10.2 LinkedIn plugin as Shariff solution
Our website uses so-called social plugins (“plugins”) of the online service LinkedIn, operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).
To increase the protection of your data when visiting our website, these buttons are not integrated unrestrictedly as plugins, but only into the page using an HTML link. This type of integration ensures that, when a page of our website containing such buttons is accessed, no connection to LinkedIn’s servers is established yet. If you click on the button, a new browser window opens and accesses the LinkedIn page, where you can interact with the plugins there, if necessary after entering your login data.
For the purpose and scope of data collection and the further processing and use of the data by LinkedIn, as well as your related rights and setting options to protect your privacy, please refer to LinkedIn’s privacy information: https://www.linkedin.com/legal/privacy-policy
11) Use of social media: videos
Use of YouTube videos
This website uses the YouTube embedding function for the display and playback of videos from the provider “YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
The extended data protection mode is used, which, according to the provider, initiates the storage of user information only when the video or videos are played. If playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behavior. According to information from YouTube, these are used, among other things, to collect video statistics, improve user-friendliness, and prevent abusive behavior. If you are logged in to Google, your data will be directly assigned to your account when you click on a video. If you do not want the assignment to your profile at YouTube, you must log out before activating the button. Google stores your data, even for users who are not logged in, as usage profiles and evaluates them. Such evaluation is carried out in particular in accordance with Art. 6(1)(f) GDPR on the basis of Google’s legitimate interests in displaying personalized advertising, market research, and/or the demand-oriented design of its website. You have a right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. As part of the use of YouTube, personal data may also be transmitted to the servers of Google LLC in the USA.
Regardless of whether the embedded videos are played, each time this website is accessed a connection is established to the Google network, which may trigger further data processing operations beyond our control.
Further information on data protection at YouTube can be found in YouTube’s terms of use at https://www.youtube.com/static?template=terms and in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy
To the extent legally required, we have obtained your consent in accordance with Art. 6(1)(a) GDPR for the processing of your data described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the “Cookie Consent Tool” provided on the website.
12) Online-Marketing
12.1 Google AdSense
This website uses Google AdSense, a web advertising service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses so-called cookies, which are text files stored on your computer and which enable an analysis of your use of the website. In addition, Google AdSense also uses so-called “web beacons”, small invisible graphics, to collect information, by means of which simple actions such as visitor traffic on the website can be recorded, collected, and evaluated. The information generated by the cookie and/or web beacon about your use of this website, including your IP address, is usually transmitted to a Google server and stored there. Transmission to servers of Google LLC in the USA may also occur.
Google uses the information obtained in this way to evaluate your usage behavior with regard to the AdSense advertisements. The IP address transmitted by your browser as part of Google AdSense is not merged with other Google data. The information collected by Google may under certain circumstances be transferred to third parties if this is legally required and/or if third parties process this data on behalf of Google.
The described processing of data is carried out in accordance with Art. 6(1)(f) GDPR for the purpose of targeted advertising directed at the user by advertising third parties, whose advertisements are displayed on this website on the basis of the evaluated user behavior. This processing also serves our financial interest in exploiting the economic potential of our website through the paid display of personalized third-party advertising content.
Further information on Google’s data protection provisions can be found at: https://www.google.de/policies/privacy/
You can permanently deactivate cookies for ad preferences by preventing them through a corresponding setting of your browser software or by downloading and installing the browser plugin available at the following link: https://www.google.com/settings/ads/plugin?hl=de
https://www.google.com/settings/ads/plugin?hl=de
Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.
To the extent legally required, we have obtained your consent in accordance with Art. 6(1)(a) GDPR for the processing of your data described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the “Cookie Consent Tool” provided on the website or alternatively follow the above-described option for lodging an objection.
To the extent legally required, we have obtained your consent in accordance with Art. 6(1)(a) GDPR for the processing of your data described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the above-described option for lodging an objection.
12.2 Use of Google Ads conversion tracking
This website uses the online advertising program “Google Ads” and, within the scope of Google Ads, conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites by means of advertising materials, so-called Google AdWords. Based on the data from the advertising campaigns, we can determine how successful the individual advertising measures are. We pursue the objective of showing you advertising that is of interest to you, making our website more interesting for you, and achieving a fair calculation of the advertising costs incurred.
The cookie for conversion tracking is set when a user clicks on an advertisement placed by Google. Cookies are small text files stored on your device. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the advertisement and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Google Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their advertisement and were redirected to a page equipped with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not wish to participate in tracking, you can block this use by deactivating the Google conversion tracking cookie in your internet browser under the heading “User settings”. You will then not be included in the conversion tracking statistics. We use Google Ads on the basis of our legitimate interest in targeted advertising in accordance with Art. 6(1)(f) GDPR. As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC in the USA.
Further information on Google’s data protection provisions can be found at: https://www.google.de/policies/privacy/
You can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plugin available at the following link: https://www.google.com/settings/ads/plugin?hl=de
https://www.google.com/settings/ads/plugin?hl=de
Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.
To the extent legally required, we have obtained your consent in accordance with Art. 6(1)(a) GDPR for the processing of your data described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the “Cookie Consent Tool” provided on the website or alternatively follow the above-described option for lodging an objection.
Soweit rechtlich erforderlich, haben wir zur vorstehend dargestellten Verarbeitung Ihrer Daten Ihre Einwilligung gemäß Art. 6 Abs. 1 lit. a DSGVO eingeholt. Sie können Ihre erteilte Einwilligung jederzeit mit Wirkung für die Zukunft widerrufen. Um Ihren Widerruf auszuüben, deaktivieren Sie diesen Dienst im auf der Webseite bereitgestellten “Cookie-Consent-Tool” oder befolgen Sie alternativ die vorstehend geschilderte Möglichkeit zur Vornahme eines Widerspruchs.
12.3 LinkedIn Insight
This website uses the retargeting and conversion tool of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, which enables personalized advertisements to be shown to visitors of this website on the “LinkedIn” platform.
For this purpose, a cookie, a small text file, is set on the browser of your device when you visit our website; it expires after 120 days. If the user visits certain pages of this website and is simultaneously logged in to their LinkedIn account, a connection to LinkedIn’s servers is established, through which interest-based advertising can be displayed on the platform. At the same time, the cookie makes it possible to create anonymous reports on the performance of advertisements on LinkedIn and information on website interaction, which are made available to us and LinkedIn.
The display of advertising and the creation of statistical reports do not take place if the user is not simultaneously logged in to their LinkedIn account when visiting this website.
The information obtained with the help of the cookie never allows personal identification of the respective user.
The transmission of information takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in targeted advertising and the statistical evaluation of the success of product advertisements on LinkedIn, and therefore serves to optimize our online offering.
You can deactivate the LinkedIn Insight Tool and the display of interest-based advertising on LinkedIn by setting an opt-out cookie at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
This opt-out cookie works only in this browser and only for this domain. If you delete your cookies in this browser, you must click the above link again.
Further information on LinkedIn’s data protection provisions can be found at: https://www.linkedin.com/legal/privacy-policy#choices-oblig
To the extent legally required, we have obtained your consent in accordance with Art. 6(1)(a) GDPR for the processing of your data described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the above-described option for lodging an objection.
13) Web analytics services
Google Universal Analytics with Google Signals
This website uses Google Universal Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Universal Analytics uses so-called cookies, which are text files stored on your device and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website, including the shortened IP address, is generally transmitted to a Google server and stored there; transmission to servers of Google LLC in the USA may also occur.
This website uses Google Universal Analytics exclusively with the extension “_anonymizeIp()”, which ensures anonymization of the IP address by truncation and excludes direct personal reference. Through the extension, your IP address is shortened by Google beforehand within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a server of Google LLC in the USA and shortened there.
On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide us with further services related to website and internet usage. The IP address transmitted by your browser within the scope of Google Universal Analytics is not merged with other Google data.
Google Analytics additionally enables, through a special feature known as “demographic characteristics”, the creation of statistics containing statements about the age, gender, and interests of website visitors on the basis of an evaluation of interest-based advertising and with the inclusion of third-party information. This allows the definition and differentiation of website user groups for the purpose of target-group-optimized alignment of marketing measures. However, data sets collected through the “demographic characteristics” feature cannot be assigned to a specific person.
All processing described above, in particular the setting of Google Analytics cookies for reading information on the device used, is carried out only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without this consent, Google Analytics will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “Cookie Consent Tool” provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, under which Google is obliged to protect the data of visitors to our pages and not to pass it on to third parties.
For the transmission of data from the EU to the USA, Google relies on so-called standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google Universal Analytics can be found at: https://policies.google.com/privacy?hl=de&gl=de
This website also uses Google Signals as an extension of Google Analytics. With Google Signals, we can have Google create cross-device reports, known as “cross-device tracking”.
If you have activated “personalized ads” in your Google account settings and have linked your internet-enabled devices to your Google account, Google can, with the corresponding consent to the use of Google Analytics in accordance with Art. 6(1)(a) GDPR, analyze user behavior across devices and create database models based on this.
The logins and device types of all site visitors who were logged in to a Google account and performed a conversion are taken into account. The data shows, among other things, on which device you first clicked on an advertisement and on which device the associated conversion took place. We do not receive personal data from Google in this context, but only statistics created on the basis of Google Signals.
You have the option to deactivate the “personalized ads” function in the settings of your Google account and thereby disable cross-device analysis. Please follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de
Further information on Google Signals can be found here: https://support.google.com/analytics/answer/7532985?hl=de
14) Use of a live chat system
Tawk.to
On this website, technologies of tawk.to inc., 187 East Warm Springs Rd, SB298 Las Vegas, NV 89119, USA, www.tawk.to, are used to collect and store anonymized data for the purpose of web analysis and for operating the live chat system in order to answer live support inquiries. From this anonymized data, usage profiles may be created under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the website visitor’s internet browser. The cookies enable the recognition of the internet browser.
The data collected with tawk.to technologies is not used, without the separately granted consent of the data subject, to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym. To avoid the storage of tawk.to cookies, you can configure your internet browser so that no cookies will be stored on your computer in the future or so that cookies already stored are deleted. However, deactivating all cookies may mean that some functions on our website can no longer be executed. You can object at any time, with effect for the future, to the collection and storage of data for the purpose of creating a pseudonymized usage profile by sending us your objection informally by email to the email address stated in the Imprint.
We have concluded a data processing agreement with tawk.to Inc., the provider of tawk.to, under which we oblige tawk.to Inc. to protect the data of our customers and not pass it on to third parties.
15) Tools and miscellaneous
15.1 – DATEV
For bookkeeping, we use the cloud-based accounting software of DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany (“DATEV”).
DATEV processes incoming and outgoing invoices as well as, where applicable, the bank transactions of our company in order to automatically record invoices, match them with transactions, and create financial accounting from them in a partially automated process.
If personal data is also processed in this context, processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in an efficient organization and documentation of our business transactions.
Further information on DATEV, the automated processing of data, and the data protection provisions can be found at: https://www.datev.de/web/de/m/ueber-datev/datenschutz/
15.2 Google reCAPTCHA
On this website, we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function serves primarily to distinguish whether an input is made by a natural person or abusively by machine and automated processing. The service includes the transmission of the IP address and, where applicable, further data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in determining individual responsibility on the internet and preventing misuse and spam.
As part of the use of Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC in the USA.
Further information on Google reCAPTCHA and Google’s privacy policy can be viewed at: https://www.google.com/intl/de/policies/privacy/
To the extent legally required, we have obtained your consent in accordance with Art. 6(1)(a) GDPR for the processing of your data described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the above-described option for lodging an objection.
15.3 Applications for job vacancies by email
On our website, we advertise currently vacant positions in a separate section, for which interested parties can apply by email to the contact address provided.
Admission to the application process requires applicants to provide us, together with the application by email, with all personal data necessary for a well-founded and informed assessment and selection.
The required information includes general personal information, such as name, address, a telephone or electronic contact option, as well as qualification-related evidence of the skills required for a position. Where necessary, this may also include health-related information that, in the interest of social protection in the person of the applicant, must be given special consideration under labor and social law.
Which components an application must contain in an individual case in order to be considered, and in what form these components are to be transmitted by email, can be taken from the respective job advertisement.
After receipt of the application sent using the specified email contact address, the applicant data is stored by us and evaluated exclusively for the purpose of processing the application. For queries arising during processing, we use, at our discretion, either the email address provided by the applicant with the application or a telephone number specified.
The legal basis for these processing operations, including contact for queries, is generally Art. 6(1)(b) GDPR, in Germany in conjunction with Section 26(1) BDSG, within the meaning of which participation in the application process is considered initiation of an employment contract.
If special categories of personal data within the meaning of Art. 9(1) GDPR are requested from applicants as part of the application process, for example health data such as information on severe disability status, processing is carried out in accordance with Art. 9(2)(b) GDPR so that we can exercise the rights arising from labor law and social security and social protection law and fulfill our corresponding obligations.
Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9(1)(h) GDPR if it takes place for the purposes of preventive or occupational medicine, assessment of the applicant’s working capacity, medical diagnosis, provision or treatment in the health or social care sector, or management of systems and services in the health or social care sector.
If, in the course of the evaluation described above, an applicant is not selected or withdraws the application prematurely, the data transmitted by email as well as all electronic correspondence, including the original application email, will be deleted after corresponding notification, at the latest after 6 months.
This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, where applicable, to comply with our obligations to provide evidence under the regulations on equal treatment of applicants.
In the event of a successful application, the data provided will be further processed on the basis of Art. 6(1)(b) GDPR, in Germany in conjunction with Section 26(1) BDSG, for the purposes of carrying out the employment relationship.
15.4 – Google Maps
On our website, we use Google Maps API of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive maps in order to visually present geographical information. Through the use of this service, our location is shown to you and any journey there is made easier.
Already when accessing the subpages in which the Google Maps map is embedded, information about your use of our website, such as your IP address, is transmitted to Google servers and stored there; transmission to servers of Google LLC in the USA may also occur. This takes place regardless of whether Google provides a user account through which you are logged in or whether a user account exists.
If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment to your Google profile, you must log out before activating the button. Google stores your data, even for users who are not logged in, as usage profiles and evaluates them. The collection, storage, and evaluation take place in accordance with Art. 6(1)(f) GDPR on the basis of Google’s legitimate interest in displaying personalized advertising, market research, and/or the demand-oriented design of Google websites. You have a right to object to the creation of these user profiles; to exercise this right, you must contact Google.
If you do not agree to the future transmission of your data to Google within the framework of using Google Maps, there is also the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and therefore also the map display on this website cannot then be used.
Google’s terms of use can be viewed at https://www.google.de/intl/de/policies/terms/regional.html. The additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on Google’s website under “Google Privacy Policy”: https://www.google.de/intl/de/policies/privacy/
To the extent legally required, we have obtained your consent in accordance with Art. 6(1)(a) GDPR for the processing of your data described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the above-described option for lodging an objection.
15.5 – Data Dog
The functions of the “Datadog” service of Datadog, Inc., 620 8th Ave, 45th Floor, New York, NY 10018, USA, are integrated into our platform. The system notifies our development team of possible technical complications or functional impairments in connection with the operation of our website. For this purpose, both server information and usage parameters such as the IP address, the browser used, timestamps, and the URL accessed may be transmitted to Datadog. If the information transmitted in this way also contains personal data, processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in efficient root cause analysis for the improvement of the reliability and functionality of our website. Further information on the collection and use of data by Datadog, Inc. can be found at: www.datadoghq.com/legal/privacy/
16) Rights of the data subject
16.1 Applicable data protection law grants you comprehensive data subject rights, namely rights of access and intervention, vis-à-vis the controller with regard to the processing of your personal data. We inform you about these rights below:
• Right of access pursuant to Art. 15 GDPR: You have, in particular, a right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed which safeguards under Art. 46 GDPR exist when your data is transferred to third countries.
• Right to rectification pursuant to Art. 16 GDPR: You have the right to immediate rectification of inaccurate data concerning you and/or completion of incomplete data stored by us.
• Right to erasure pursuant to Art. 17 GDPR: You have the right to request deletion of your personal data if the conditions of Art. 17(1) GDPR are met. However, this right does not exist in particular if processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest, or for asserting, exercising, or defending legal claims.
• Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request restriction of the processing of your personal data as long as the accuracy of your data disputed by you is being verified; if you reject deletion of your data due to unlawful data processing and instead request restriction of processing of your data; if you need your data for asserting, exercising, or defending legal claims after we no longer need this data for achieving the purpose; or if you have objected for reasons arising from your particular situation, as long as it has not yet been established whether our legitimate reasons prevail.
• Right to notification pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure, or restriction of processing vis-à-vis the controller, the controller is obliged to inform all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
• Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format or to request transmission to another controller, where technically feasible.
• Right to revoke consent granted pursuant to Art. 7(3) GDPR: You have the right to revoke consent once granted for the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned without delay, provided that further processing cannot be based on a legal basis for processing without consent. The lawfulness of processing based on consent before its revocation is not affected by the revocation.
• Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of personal data concerning you infringes the GDPR, you have, without prejudice to any other administrative or judicial remedy, the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work, or the place of the alleged infringement.
16.2 Right to object
IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
17) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and, where applicable, additionally by the respective statutory retention period, for example commercial and tax retention periods.
When personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, this data is stored until the data subject revokes their consent.
If statutory retention periods exist for data processed in the context of legal or quasi-legal obligations on the basis of Art. 6(1)(b) GDPR, this data is routinely deleted after expiry of the retention periods, provided that it is no longer required for fulfillment of the contract or initiation of a contract and/or there is no continued legitimate interest on our part in further storage.
When personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the assertion, exercise, or defense of legal claims.
When personal data is processed for the purpose of direct advertising on the basis of Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object under Art. 21(2) GDPR.
Unless otherwise stated in the other information in this statement regarding specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.