We take data privacy seriously

The protection of your privacy in the processing of personal data is an important concern for us. When you visit our website, our web servers store by default the IP of your Internet service provider, the website from which you visit us, the webpages you visit on our website and the date and duration of the visit. This information is essential for the technical transmission of the webpages and secure server operation. There is no personalised evaluation of this data.

Controller:

Personal data

Personal data is data about you. It includes your name, address and email address. You do not have to disclose any personal data in order to visit our website. In some cases, we need your name and address as well as other information in order to be able to offer you the service you desire.

The same applies in the event that we supply you with information material on request or when we respond to your enquiries. In these cases, we will always point this out to you. Moreover, we only store the data that you have provided to us automatically or voluntarily.

When you use one of our services, we generally only collect the data that is necessary to provide you with our service. We may ask you for more information, but it is voluntary in nature. Whenever we process personal data, we do so in order to be able to offer you our service or to pursue our commercial objectives.

Contact

In contact with us (e.g. via the contact form, email, telephone or via social media), the details of the enquiring persons will be processed insofar as this is necessary to respond to the contact enquiries and to implement any measures requested. Response to contact enquiries within the framework of contractual or pre-contractual relationships is carried out in order to fulfil our contractual obligations or to answer (pre-)contractual enquiries and otherwise on the basis of the legitimate interests in answering the enquiries.

• Types of data processed: Inventory data (e.g. names, addresses), contact data (e.g. email, telephone numbers), content data (e.g. entries in online forms).
• Data subjects: Communication partners.
• Purposes of processing: Contact requests and communication.
• Legal basis: Performance of contract and pre-contractual enquiries (Art. 6 para. 1 (b) GDPR), legitimate interests (Art. 6 para. 1 (f) GDPR).

Automatically saved data

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Date and time of the request
• Name of the requested file
• Page from which the file was requested
• Access status (file transferred, file not found, etc.)
• Web browser and operating system used
• Full IP address of the requesting computer
• Amount of data transferred

This data is not merged with other data sources. The processing is carried out in accordance with Art. 6 para. 1 (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. For reasons of technical security, in particular to defend against attack attempts on our web server, this data is stored by us for a short time. We are not able to draw conclusions about individual persons on the basis of this data. After seven days at the latest, the data is anonymised by shortening the IP address at the domain level, so that it is no longer possible to establish a reference to the individual user. The data is also processed in anonymised form for statistical purposes; there will be no comparison with other databases or disclosure to third parties, even in excerpts. Only the number of page views is displayed, within the framework of our server statistics, which we publish every two years in our activity report.

Cookies

When you visit our website, we may store information on your computer in the form of cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters through which websites and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows the websites and servers visited to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A particular internet browser can be recognised and identified via the unique cookie ID.

Session cookies enable the controller to provide users of this website with a user-friendly service that would not be possible without setting cookies. Unless we have your consent, we only use technically necessary cookies on the legal basis of legitimate interest in accordance with Art. 6 para. 1 (f) GDPR.

We use personalised cookies to improve our website or for marketing/advertising purposes only with your consent. On your first visit, you can voluntarily consent to tracking or analysis via the cookie banner displayed. Your data may be passed on to partners or third-party providers. These cookies will be stored only if you explicitly agree to this, the legal basis is then your consent in accordance with Art. 6 para. 1 (a) GDPR.

You can change your settings for the use of cookies at any time here:

Consent Banner

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not carry out independent analyses. It is used only to manage and display the tools integrated through it. However, Google Tag Manager does collect your IP address, which may also be transmitted to Google's parent company in the United States.

The use of Google Tag Manager is based on Art. 6 para. 1 (f) GDPR. The website operators have a legitimate interest in the quick and uncomplicated integration and management of various tools on their website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 (a) GDPR and Section 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Google Analytics (4)

This website uses functions of the Google Analytics web analysis service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, dwell time, operating systems used and origin of the user. This data is summarised in a user ID and assigned to the respective end device of the website visitor.

Furthermore, we can use Google Analytics to, for example, record your mouse and scroll movements and clicks. In addition, Google Analytics uses various modelling approaches to supplement the collected data sets and uses machine learning technologies in data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there. The use of this service is based on your consent in accordance with Art. 6 para. 1 (a) GDPR and Section 25 para. 1 TTDSG. The consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/

Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. You can find more information on the handling of user data by Google Analytics in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en

Google Conversion Tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Conversion Tracking, we and Google can see whether the user has taken certain actions. For example, we can evaluate which buttons on our website have been clicked on how often and which products have been viewed or purchased particularly often. This information is used to compile conversion statistics. We can learn the total number of users who clicked on our ads and what actions they took. We do not receive any information that allows us to personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.

The use of this service is based on your consent in accordance with Art. 6 para. 1 (a) GDPR and Section 25 para. 1 TTDSG. The consent can be revoked at any time.

You can find more information about Google Conversion Tracking in Google's privacy policy: https://policies.google.com/privacy?hl=en

Adobe Fonts

This website uses Adobe Web Fonts for the uniform display of certain fonts. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).

When you access this website, your browser loads the required fonts directly from Adobe in order to be able to display them correctly on your device. Your browser connects to Adobe's servers in the USA. This allows Adobe to see that your IP address has been used to access this website. According to Adobe, no cookies are stored when the fonts are provided.

The storage and analysis of the data is carried out on the basis of Art. 6 para. 1 (f) GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 (a) GDPR and Section 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.adobe.com/uk/privacy/eudatatransfers.html

For more information about Adobe Fonts, please visit: https://www.adobe.com/uk/privacy/policies/adobe-fonts.html

Adobe's privacy policy can be found at: https://www.adobe.com/uk/privacy/policy.html

Security

We have implemented technical and administrative safeguards to protect your personal data against loss, destruction, manipulation and unauthorised access. All our employees and service providers working for us are obliged to comply with the applicable data protection laws.

Whenever we collect and process personal data, it is encrypted before it is transmitted. This means that your data cannot be misused by third parties. Our security precautions are subject to a continuous improvement process, and our privacy policies are constantly being revised. Please make sure you have the latest version.

Information obligations pursuant to Art. 13 GDPR

We would like to provide you with comprehensive information about the processing of your data in our company and the data protection claims and rights to which you are entitled within the meaning of Article 13 of the European General Data Protection Regulation (EU GDPR).

1. Who is responsible for data processing and who can you contact?

Responsible (controller) is

The company data protection officer is

2. What data is processed and what are the sources of this data?

We process the data that we have received from you on the basis of your consent in the context of the initiation or execution of the contract or in competitions.

Personal data includes:

• Contact details (e.g. name, telephone, email, address)
• Contract data
• Billing data
• Application data

3. For what purposes and on what legal basis is the data processed?

We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act 2018 in the applicable version:

• For the fulfilment of (pre-)contractual obligations (Article 6 para. 1 (b) GDPR): Your data is processed for the purpose of contract processing in one of our companies or for the purpose of contract processing of your employment in one of our companies. The data is processed in particular when initiating business and executing contracts with you.
• For the fulfilment of legal obligations (Article 6 para. 1 (c) GDPR): The processing of your data is necessary for the purpose of fulfilling various legal obligations, e.g. under the Commercial Code or the Tax Code.
• To safeguard legitimate interests (Art. 6 para. 1 (f) GDPR): On the basis of a balancing of interests, data processing may take place beyond the actual performance of the contract to protect our legitimate interests or those of third parties. Data processing to protect legitimate interests is carried out, for example, in the following cases:
  • advertising or marketing (see No. 4),
  • measures for business management and the further development of services and products;
  • in the context of legal prosecution
  • sending non-promotional information and press releases.
• Within the framework of your consent (Art. 6 para. 1 (a) GDPR): If you have given us consent to the processing of your data, e.g. to send us our newsletter, publication of photos, competitions, etc.

4. Processing of personal data for advertising purposes

You can object to the use of your personal data for advertising purposes at any time, either in whole or for individual measures, without incurring any costs other than the transmission costs at the basic rates.

Under the provisions of Section 7 para. 3 UWG, we are entitled to use the email address that you provided when concluding the contract for direct advertising for our own similar goods or services. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. If you do not wish to receive such recommendations from us by email, you may object to the use of your address for this purpose at any time without incurring any costs other than the transmission costs at the basic rates. A notification in text form is sufficient for this purpose. Of course, every email always contains an unsubscribe link.

5. Who receives my data?

If we use a service provider for the purposes of processing on our behalf, we still remain responsible for the protection of your data. All processors are contractually obliged to treat your data confidentially and to process it only in the context of the provision of services. The processors commissioned by us will receive your data to the extent that they need the data to perform their respective services. These are, for example, IT service providers that we need for the operation and security of our IT system.

If a statutory obligation exists or in the context of legal prosecution, authorities and courts as well as external auditors may be recipients of your data. In addition, insurance companies, banks, credit agencies and service providers may be recipients of your data for the purpose of initiating and fulfilling the contract.

6. How long will my data be stored?

We process your data until the end of the business relationship or until the expiry of the applicable statutory retention periods (e.g. from the Commercial Code, the Tax Code, or the Working Hours Act); beyond that, until the end of pending litigation where the data is needed as evidence.

7. Is personal data transferred to a third country?

As a matter of principle, we do not transmit any data to a third country. Transfer in individual cases takes place only on the basis of an adequacy decision of the European Commission, standard contractual clauses, suitable guarantees or your express consent.

8. What data protection rights do I have?

You have a right to information, correction, erasure or restriction of the processing of your stored data at any time, a right to object to the processing, as well as a right to data portability and to lodge a complaint in accordance with the requirements of data protection law.

Right to information:

You can request information from us as to whether and to what extent we process your data.

Right to rectification:

If we process your data that is incomplete or incorrect, you can request at any time that we correct or complete it.

Right to erasure:

You can ask us to erase your data if we process it unlawfully or if the processing disproportionately interferes with your legitimate protection interests. Please note that there may be reasons that prevent immediate deletion, e.g. in the case of statutorily regulated retention obligations. Regardless of the exercise of your right to erasure, we will delete your data immediately and completely, provided that there is no legal or statutory obligation to retain data in this regard.

Right to restriction of processing:

You can ask us to restrict the processing of your data if:

• you contest the correctness of the data, for a period of time that allows us to verify the correctness of the data.
• the processing of the data is unlawful, but you reject its erasure and instead request a restriction of the use of the data,
• we no longer need the data for the intended purpose, but you still need this data to assert or defend legal claims, or
• you have objected to the processing of the data.

Right to data portability:

You can request that we provide you with the data you have provided to us in a structured, commonly used and machine-readable format and that you can transmit this data to another controller without hindrance from us, provided that:

• we process this data on the basis of revocable consent given by you or for the performance of a contract between us, and
• this processing is carried out by automated means.

If technically feasible, you can request that we transmit your data directly to another controller.

Right to object:

If we process your data on the basis of legitimate interest, you can object to this data processing at any time; this would also apply to profiling based on those provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims. You can object to the processing of your data for the purpose of direct marketing at any time without giving reasons.

Right of appeal:

If you believe that we are violating German or European data protection law in the processing of your data, please contact us in order to clarify any questions. Of course, you also have the right to contact the supervisory authority responsible for you, the respective State Office for Data Protection Supervision. If you wish to assert any of the above-mentioned rights against us, please contact our data protection officer. In case of doubt, we may request additional information to confirm your identity.

9. Am I obliged to provide data?

The processing of your data is necessary for the conclusion or performance of your contract with us. If you do not provide us with this data, we will generally have to refuse to conclude the contract or will no longer be able to perform an existing contract and consequently have to terminate it. However, you are not obliged to give consent to data processing with regard to data that is not relevant to the performance of the contract or is not required by law.

Changes to this Privacy Policy

We reserve the right to amend our privacy policy if it is necessary due to new technologies. Please make sure you have the latest version. If material changes are made to this Privacy Policy, we will announce these on our website.

All interested parties and visitors to our website can reach us for data protection issues at:

If our data protection officer is unable to respond to your concern to your satisfaction, you will in any case retain your right to lodge a complaint with the data protection supervisory authority responsible for your federal state.