This data protection declaration clarifies the nature, scope and purpose of the processing of personal data within our online services and the associated websites and functions and content as well as external online presences, such as our social media profiles. With regard to the terms used, such as "processing" or "person responsible", please refer to the definitions in Art. 4 of the Data Protection Basic Regulation (DSGVO).
Responsible according to Art. 4 para. 7 DSGVO is
Phone: +49 (0) 5341 / 22 35-0
Data Protection Officer
If you have any questions, suggestions or comments regarding data protection and the enforcement of your rights, please contact our data protection officer:
Terms used according to the DSGVO Art. 4
"Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"); a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifier (e.g. a cookie) or to one or more specific characteristics which express the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person, is regarded as identifiable.
"Processing" means any operation carried out with or without the aid of automated processes, or set of operations, involving personal data. The term is broad and covers practically every handling of data.
"Pseudonymisation" means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the provision of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data are not attributed to an identified or identifiable natural person.
"Profiling" means any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the work performance, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or movements of that natural person.
The "controller" is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Categories of data subjects
Visitors and users of the online service (hereinafter referred to collectively as "users").
Applicable legal basis
In accordance with Art. 13 DSGVO we inform you about the legal basis of our data processing. If the legal basis is not mentioned in the data protection declaration, the following applies: The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 DSGVO, the legal basis for processing in order to fulfil our services and carry out contractual measures as well as answer inquiries is Art. 6 para. 1 lit. b DSGVO, the legal basis for processing in order to fulfil our legal obligations is Art. 6 para. 1 lit. c DSGVO, and the legal basis for processing in order to safeguard our legitimate interests is Art. 6 para. 1 lit. f DSGVO. Art. 6 para. 1 lit. d DSGVO serves as a legal basis in the event that vital interests of the data subject or another natural person necessitate the processing of personal data.
Hosting and e-mailing
The hosting services used by us serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services which we use for the purpose of operating this online service.
In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online service on the basis of our legitimate interests in the efficient and secure provision of this online service pursuant to Art. 6 Para. 1 lit. f DSGVO in conjunction with Art. 28 DSGVO. Art. 28 DSGVO (conclusion of an order processing contract).
Collection of access data
We, or our hosting provider, only collect the personal data, on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. of the German Data Protection Act (DSGVO), that your browser transmits to our servers each time you access our online services. The access data includes the name of the website accessed, file, date and time of access, data volume transferred, notification of successful access, browser type and version, terminal device type, the user's operating system and IP address.
The server log files are stored for a maximum period of 7 days for security reasons (e.g. to clarify misuse or fraud) and then deleted. Data, the further storage of which is necessary for evidence purposes, are excluded from deletion until the respective incident has been finally clarified.
Cookies and right of objection for direct advertising
Cookies" are small files that are stored on the user's computer. Several kinds of data can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after the user's visit to an online service. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online offer and closes his browser. The content of a shopping basket in an online shop or a login status, for example, can be stored in such a cookie. Cookies are referred to as "permanent" or "persistent" and remain stored even after the browser has been closed. For example, the login status can be saved if users visit it after several days. The interests of the users who are used for range measurement or marketing purposes can also be stored in such a cookie. "Third party cookies" are cookies that are offered by providers other than the person responsible for operating the online service (otherwise, if they are only the latter's cookies, they are referred to as "first party cookies").
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.
Please note that if cookies are not accepted, the functionality of our websites may be restricted.
Using Web Fonts
On this website the external fonts of Google Fonts are used. Google Fonts is a service of Google Inc. ("Google"). These web fonts are integrated via a server call, usually a Google server in the USA. This will tell the server which of our Internet pages you have visited. The IP address of the browser of the terminal device of the visitor of these web pages is also stored by Google. You can find more detailed information in Google's data protection information, which you can find here:
Use of Google Maps
In order to ensure sufficient data security during the transmission of forms, in certain cases we use the service reCAPTCHA of the company Google Inc. This serves above all to differentiate whether the input is made by a natural person or whether it is misused by mechanical and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. The differing data protection provisions of Google Inc. apply here. Further information on the data protection guidelines of Google Inc. can be found at: http://www.google.de/intl/de/privacy
Cooperation with contract processors and third parties
Insofar as we disclose data to other persons and companies (contract processors or third parties) within the scope of our processing, transfer them to them or otherwise grant them access to the data, this shall only take place on the basis of legal permission (e.g. if a transfer of the data to third parties, such as payment service providers, in accordance with Art. 6 Para. 1 lit. b DSGVO is necessary for the performance of the contract), if you have consented to this, if a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties with the processing of data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 DSGVO.
Transfers to third countries
We do not transfer data to third countries.
Deletion of data
The data processed by us will be deleted in accordance with Art. 17 and 18 DSGVO or their processing will be restricted. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as it is no longer required for its purpose and there are no legal obligations to retain it. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be stored for commercial or tax reasons.
According to legal requirements in Germany, the data is stored in particular for 10 years according to §§ 147 Abs. 1 AO, 257 Abs. 1 Nr. 1 und 4, Abs. 4 HGB (German Commercial Code) (books, records, management reports, accounting records, commercial books, documents relevant for taxation, etc.) and 6 years according to § 257 Abs. 1 Nr. 2 und 3, Abs. 4 HGB (commercial letters).
Rights of the persons concerned
You have the right to request confirmation as to whether the data in question will be processed and to obtain information about this data and further information and a copy of the data in accordance with Art. 15 DSGVO.
According to Art. 16 DSGVO, you have the right to request the completion of data concerning you or the correction of incorrect data concerning you.
Pursuant to Art. 17 DSGVO, you have the right to demand that the data concerned be deleted immediately or, alternatively, to demand a restriction on the processing of the data pursuant to Art. 18 DSGVO.
You have the right to demand that the data concerning you which you have made available to us be received in accordance with Art. 20 DSGVO and that it be transferred to other responsible parties.
You also have the right, pursuant to Art. 77 DSGVO, to file a complaint with the competent supervisory authority.
Right of withdrawal
You have the right to revoke consents granted pursuant to Art. 7 para. 3 DSGVO with effect for the future.
Right of objection
You may object at any time to the future processing of the data concerning you in accordance with Art. 21 DSGVO. In particular, you may object to the processing of your data for the purposes of direct marketing.