In terms of the General Data Protection Regulation and other national data protection laws of the EU member states and Switzerland and other applicable data protection-related regulations ("applicable data protection legislation"), the data controller is:
EDAG Engineering Group AG
Schlossgasse 2
9320 Arbon
Switzerland
Tel.: +49 661 6000-0
Fax: +49 661 6000-223
Website: www.edag.com
1. Extent to which and purpose for which personal data is processed
We only ever collect and use personal data of our users to the extent to which this is necessary to provide a fully functional website and our contents and services. The regular collection and use of personal data of our users is only ever made with the user's consent (insofar as legally required). One exception to this rule applies in cases in which, for factual reasons, it is not possible to obtain the user's prior consent, or in which, according to applicable data protection legislation, the processing of this data is permitted on other legal grounds.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject to process his or her personal data, Art. 6 para. 1 p. 1 point a of the EU General Data Protection Regulation (GDPR) and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis for the processing of personal data.
Art. 6 para. 1 p. 1 point b of the GDPR and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is party. This shall also apply to processing necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 p. 1 point c of the GDPR and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis.
Should it be necessary to process personal data in order to protect the vital interests of the data subject or another natural person, Art. 6 para. 1 p. 1 point d of the GDPR and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis.
Should processing be necessary to protect the legitimate interests of our company or a third party and such interests are not overridden by the interests, fundamental rights and freedoms of the data subject, then Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis for processing.
3. Data erasure and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose for which it has been saved ceases to apply. Further, data may also be stored if provided for by European or national legislators in Union directives, laws or other regulations, to which the data controller is subject. The data will also be deleted or blocked at such time as the storage period prescribed by the designated standards expires, unless it is necessary for the data to be stored for a further period for the conclusion or performance of a contract.
1. Description and extent of data processing
We use the consent management service of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich (hereinafter "Usercentrics"). Our Usercentrics consent tool is played out via the Google Tag Manager. For this reason, the Google Tag Manager is activated as an essential cookie (unselectable) (first level) when you visit our website. Only if you activate a cookie requiring consent through your express consent in our consent tool Usercentrics will the Google Tag Manager establish a connection to this cookie and the corresponding cookie will be reloaded – see V. Use of the Google Tag Manager.
When our website is accessed, the Usercentrics system automatically collects data and information from the computer system of the accessing computer. The following data is collected by or through the use of the service:
2. Legal basis for data processing
Due to the legal obligation to store the aforementioned data, the legal basis is Art. 6 para. 1 p. 1 lit. c GDPR as well as the analogous provisions according to the applicable data protection law.
3. Purpose of data processing
The service is used to manage consent. This serves to comply with legal obligations, according to which data processing requiring consent may only be carried out via the website if the corresponding consent of the user has been obtained. The Usercentrics service is used to store and manage the consent obtained. This also applies in the event of revocation of the consent given.
Usercentrics is used as a contract processor. Therefore, we have concluded contract for commissioned data processing with Usercentrics in accordance with the legal requirements.
4. Storage duration; right to object and right of elimination
The storage period is the period of time during which the collected data is stored for processing. The data must be deleted as soon as they are no longer required for the specified processing purposes.
The consent data (consent given and revocation of consent) is stored for three years. The data will then be deleted immediately.
The collection and storage of the data is required by law for the operation of the website. The user therefore has no right to object.
The privacy policy of the data processor can be found here: https://usercentrics.com/de/datenschutzerklaerung/
1. Description and extent of data processing
Every time our website is accessed, our system automatically acquires data and information from the computer system of the calling computer. The following data is collected:
(1) The user's IP address
(2) Date and time of access
(3) Website visited
(4) Quantity of data sent in bytes
(5) Source/link from which you accessed the website
(6) Browser used
(7) Operating system used
The data is also stored in the log files of our system. This data is not stored with other personal data of the user.
2. Legal basis for data processing
Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions pursuant to applicable data protection legislation are the legal basis for the temporary storage of the data and the log files.
3. Purpose of data processing
The temporary storage of the IP address by the system is necessary in order to be able to deliver the website to the user's computer. The data that has been acquired is used for statistical analyses and to improve the website. Your personal data (IP address) is first anonymised.
Data is stored in log files to ensure that the website functions properly. In addition, the data serves to optimise the website and to guarantee the security of our IT systems. No data evaluation is carried out for marketing purposes in this context.
These purposes are also in our legitimate interests in data processing under Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
4. Storage duration
Data is deleted as soon as it is no longer needed for the purpose for which it was collected. In the case of data being collected in order to make the website available, this is the case when the session is terminated.
In the case of data stored in log files, this is the case after a maximum of seven days. Storage beyond this point in time is possible. In this case, the user's IP address will be deleted or distorted, so that it can no longer be attributed to the accessing client.
5. Right to object and right of elimination
Data acquisition is essential for the provision of the website and the storage of data in log files is essential for operating the website. The user therefore has no right to object.
1. Description and extent of data processing
Our website makes use of cookies. Cookies are data records stored on the user's computer system in or by the Internet browser. If a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic character string that enables the browser to be clearly identified the next time the website is accessed.
We use cookies to make our website more user-friendly. Some elements of our website require the accessing browser to be identified if the user changes from one page to another.
The following data is stored and transmitted in the cookies:
(1) The user's IP address
(2) Date and time of access
(3) Login information
(4) Amount of data transferred
(5) Enquiring domain
On our website, we also use cookies which make it possible to analyse the user's surfing habits.
The following data can be transmitted in this way:
(1) Equipment type, model, brand, screen resolution
(2) Operating system, versions, families
(3) Browser, version, configuration, engines, plugins, language, language code
(4) Location data
(5) Provider details
(6) Pages per visit, number of visits, repeat visits, time of visit, date of visit
(7) Entry pages, exit pages, page URL, title of page, search items, downloads
(8) Search engines, search item, websites, social networks
(9) Campaigns, campaign key word
When accessing our website, the user is informed that functional cookies are used, as are cookies for analysis and marketing purposes, and a Cookie Consent Manager is used to obtain his or her consent to the processing of the personal data used in this respect. Information regarding this data privacy statement is also issued in this context.
Detailed information on how the individual cookies work, information on how long they function and details of whether third parties have access to these cookies can also be found in the Cookie Consent Manager. You can access the Cookie Consent Manager any time by clicking the corresponding button in the footer of our website.
2. Legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 p. 1 point f of the GDPR.
The legal basis for the processing of personal data using functional cookies and cookies for analysis and marketing purposes is Art. 6 para. 1 p. 1 point a of the GDPR along with the analogous provisions in accordance with the applicable data protection legislation.
3. Purpose of data processing
Depending on their intended use and function, we divide cookies into the following categories:
a) Technically necessary cookies
Technically necessary cookies guarantee functions without which our website cannot be be put to its intended use. These cookies are used exclusively by us, i.e. they are first party cookies. This means that all information stored in the cookies is returned to our website. Technically necessary cookies are used, for example, to ensure that users who have logged in always remain logged in when accessing various sub-pages of our website, and so do not have to re-enter login data every time they access a new page.
It is possible and permissible to use technically necessary cookies on our website without first obtaining consent. For this reason, individual technically necessary cookies cannot be activated or deactivated. These purposes are also in our legitimate interests in the processing of personal data under Art. 6 para. 1 p. 1 point f of the GDPR. Our interest in ensuring the unobstructed provision of our website and the services it offers prevails.
b) Functional cookies
Functional cookies enable our website to store information that has already been input (such as registered name, language selection or a user's location) and, on the basis of this information, offer improved and more personalised functions. The way in which these cookies collect and store data ensures that user behaviour on other websites cannot be tracked.
c) Performance cookies
In order to improve the website's attractiveness, content and functionality, performance cookies collect aggregated information about how it is used. These cookies help us to determine whether, how often and how long which website subpages are visited and what content is of particular interest to users.
These cookies do not store any information that would allow the user to be identified. The information collected is aggregated, and does not allow us to directly identify the individual. The only purpose it serves is to compile statistics in order to better tailor the content of our website to the needs of our users, to improve user experience, and to optimise our range of services.
d) Marketing cookies
Marketing cookies come from external advertising companies (third party cookies) and are used to collect information about the websites visited by the user, to create targeted advertising for the user, and to display advertisements based on the user's interests. They are also used to limit the frequency with which an advertisement appears, and to measure the effectiveness of advertising campaigns. This information may be shared with third parties, advertisers for instance.
4. Storage duration, right to object and right of elimination
Cookies are stored on the user's computer, from which they are transmitted to our website. As the user, you therefore have complete control over the use of cookies.
Even if you have consented to the use of cookies, you can revoke your consent at any time, with future effect. Please use one of the following options to do this:
5. Forwarding of Personal Data
If you accept the functional cookies above and beyond those that are technically necessary, and cookies for analysis and advertising purposes, you also consent to the processing of your data in the USA pursuant to Art. 49 para. 1 p. 1 point a of the GDPR and the analogous provisions in accordance with the applicable data protection law. We would like to point out that the European Court of Justice regards the US as a country with a level of data protection that is insufficient by EU standards. In view of this fact, no other suitable data protection safeguards exist. There is therefore a risk of your data being processed by U.S. authorities for control and monitoring purposes, possibly without the possibility of legal recourse. If you do not want this to happen, click Refuse.
1. Description and extent of data processing
There is a contact form on our website, and this can be used to contact us online. Should a user make use of this option, the data entered in the input mask is transmitted to us and stored. The following data is mandatory:
(1) Subject
(2) E-mail address
The following optional data may also be supplied:
(3) Salutation
(4) Company
(5) Surname, first name
(6) Telephone No.
(7) Street, number
(8) Postcode, city
(9) Country
(10) Your message to us
The following data is also stored at the time the message is sent:
(11) The user's IP address
(12) Date and time of registration
Your consent to the processing of this data will be requested and reference made to this data privacy statement when you send your message.
Alternatively, an e-mail address is provided if you prefer to contact us this way. In this case, the personal data of the user transmitted with the e-mail is stored.
2. Legal basis for data processing
The legal basis for the processing of data, provided the user's consent has been obtained, is Art. 6 para. 1 p. 1 point a of the GDPR.
The legal basis for the processing of data collected when an e-mail is being sent is Art. 6 para. 1 p. 1 point f of the GDPR. If the point of the e-mail contact is to enter into a contract, then Art. 6 para. 1 p. 1 point b of the GDPR will serve as an additional legal basis for processing.
3. Purpose of data processing
The reason for processing personal data from the input mask is to enable us to handle communication with you. If contact is established by e-mail, this also establishes a legitimate interest in processing the data.
The other personal data collected when the message is sent serve to prevent any misuse of the contact form and to guarantee the security of our IT systems.
4. Storage duration
Data is deleted as soon as it is no longer needed for the purpose for which it was collected. For personal data from the input mask of the contact form and data transmitted by e-mail, this is the case when a particular communication with the user is finished. Communication is finished when circumstances indicate that the matter concerned has been fully resolved.
The additional personal data collected while the message is being sent will be deleted after a period of no more than seven days has elapsed.
5. Right to object and right of elimination
The user has the right to withdraw his or her consent to the processing of the personal data at any time. If the user contacts us by e-mail, he or she can object to the storage of his or her personal data at any time. If this is the case, then the communication cannot be continued.
In this case, all personal data collected as a result of contact being made will then be deleted.
1. Description and extent of data processing
It is possible to register for inclusion in a free IR mailing list on our website. When submitting your IR mailing list registration, the data from the input mask is transmitted to us.
This involves the following information supplied by you:
(1) Form of address
(2) Surname, first name
(3) Title
(4) E-mail address
(5) Company
(6) Position
(7) Grouping (politics, press, financial analyst, fund manager, …)
In addition to this, the following data is also collected during registration:
(1) IP address of the accessing computer
(2) Date and time of registration
Your consent to the processing of this data (insofar as legally required) will be requested and reference made to this data privacy statement during registration.
None of the data relating to the data processing for the dispatch of the information is disclosed to third parties. Such data is used solely for the dispatch of the IR information.
2. Legal basis for data processing
Art. 6 para. 1 p. 1 point b of the GDPR and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis for the processing of personal data necessary for the performance of a contract (in this case dispatch of our IR messages) to which the data subject is party.
3. Purpose of data processing
The user's e-mail address is collected for the purpose of sending the IR information. We need your personal data for communication purposes, for example: (i) to send you newsletters and other information about EDAG; (ii) to send you invitations to events, courses, conferences and lectures.
Other personal data is collected during registration in order to prevent any misuse of the services or the e-mail address used.
4. Storage duration
Your personal data will be kept for the purposes specified herein for as long as you are an EDAG business partner. You can unsubscribe from our database at any time if you no longer wish to receive information from us. If you choose to do so, we will not send you any more such communications.
As a rule, the other personal data collected during registration will be deleted after a period of seven days has elapsed.
5. Right to object and right of elimination
The data subject can cancel the IR mailing list subscription at any time by deleting the profile which has been set up. To this end, there is a corresponding link on the website. You can also contact us via e-mail at: ir[at]edag-group.ag
This also makes it possible to revoke consent to the storage of personal data collected during registration.
1. Description and extent of data processing
It is possible to subscribe to a free press mailing list and receive company news, provided that, in addition to being a user, you are also an official press organ. When registering for press mailing list, the data from the input mask is transmitted to us.
The following data is mandatory:
(1) Form of address
(2) Surname, first name
(3) Publisher
(4) E-mail address
(5) Press organ
This involves the e-mail address you have given and information that will permit us to check that you are the owner of the e-mail address provided, or that the owner agrees to receive the company's news by means of the press mailing list.
In addition to this, the following data is also collected during registration:
(1) IP address of the accessing computer
(2) Date and time of registration
As an additional option, you may also give the name of the publication when you are registering. Your consent to the processing of this data (insofar as legally required) will be requested and reference made to this data privacy statement during registration.
Data relating to the data processing for the dispatch of company news is disclosed to third parties. This involves: Cision Germany GmbH, Westhafenplatz 1, 60327 Frankfurt am Main.
The data is used to dispatch the company news, and to this end is entered in a protected area in the media database of Cision Germany GmbH. Via this platform, the company news is sent to everyone on the mailing list entered. Your data is stored on Cision servers in Europe, and also in third countries. Data is exchanged between EU and third country servers. This exchange is subject to EU data protection rules.
For more information see: https://gdpr.cision.de/Datenschutzhinweis-fuer-Kunden or https://gdpr.cision.de/index.php?s=20288
2. Legal basis for data processing
Art. 6 para. 1 p. 1 point b of the GDPR and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis for the processing of personal data necessary for the performance of a contract (in this case dispatch of our IR messages) to which the data subject is party.
3. Purpose of data processing
The user's e-mail address is collected for the purpose of sending the relevant company news by means of the press mailing list.
Other personal data is collected during registration in order to prevent any misuse of the services or the e-mail address used.
4. Storage duration
Data is deleted as soon as it is no longer needed for the purpose for which it was collected. Accordingly, the e-mail address of the user will be stored for as long as the subscription to the press mailing list is active.
As a rule, the other personal data collected during registration will be deleted after a period of seven days has elapsed.
5. Right to object and right of elimination
The data subject can at any time cancel the subscription to the press mailing list and delete the profile which has been set up. To this end, every company news item contains a note on unsubscribing from the press mailing list.
This also makes it possible to revoke consent to the storage of personal data collected during registration.
1. Description and extent of data processing
On our website, we offer users the opportunity to register on our recruiting portal; when using this, they are required to provide personal data. The data is entered in an input mask, transmitted to us, and stored. The following data is collected during the registration process:
(1) Form of address
(2) Surname, first name
(3) E-mail address
(4) Telephone number
(5) Nationality
(6) Date of Birth
The following data is also stored at the time the registration is submitted:
(7) The user's IP address
(8) Date and time of registration
During the registration process, we refer to the data privacy statement for applicants for further processing of the application documents.
2. Legal basis for data processing
The legal basis for the processing of data, provided the user's consent has been obtained, is Art. 6 para. 1 p. 1 point a of the GDPR and the analogous provisions in accordance with the applicable data protection legislation.
3. Purpose of data processing
The user must register in order to be able to use the recruiting portal.
4. Storage duration
Data is deleted as soon as it is no longer needed for the purpose for which it was collected. In the event of a rejection, the data is deleted no later than six months after the end of the application process. If the data subject gives the data controller his or her consent to being contacted at a later date in order to resume the application process, should another position for which he or she might be considered become available, then any data that has been transmitted is deleted 24 months after the date it was saved.
5. Right to object and right of elimination
As the user, you can cancel your registration at any time. You can amend any stored data concerning you at any time.
We maintain online presences within social networks in order to communicate with any customers, interested parties and users active there, and to inform them about our services. In this context, only simple links are used on our website, or only social media buttons that do not establish any connection to the network in question when the page is loaded. To this end, we use the "c’t Shariff" solution, which makes data protection compliant social media buttons available.
This is the difference between the "Share buttons" used here and the the widespread social media plugins, which transmit data to the social networks as soon as the page is loaded, without the button having to be clicked. By way of comparison, a Shariff button does not create a direct contact between the social network and the visitor until the latter actively clicks on the Share button. In this way, Shariff prevents users from leaving a digital trail on every page they visit, therefore improving data protection. For more information on c’t Shariff, see https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html (in german only).
Additional information on the processing of data within the social networks concerned can be found in the following social media data privacy statement.
1. Description and extent to which personal data is processed
This website uses Google Analytics, a web analytics service of Google Inc. ("Google"). This makes it possible for data, sessions and interaction across multiple devices to be assigned to a pseudonymised user-ID, permitting the cross-device analysis of the activities of a user.
Google Analytics makes use of "cookies", text files which are stored on your computer and enable the use of the website to be analysed. As a rule, the information relating to your use of this website generated by the cookie is transferred to a Google server in the USA, where it is saved. If IP address anonymisation has been activated on this website, Google will truncate your IP address within member states of the European Union or other states party to the Agreement on the European Economic Area (including Switzerland). Only in exceptional cases is the IP address transferred to a Google server in the USA and truncated there. On behalf of the owner of this website, Google will use this information to evaluate your usage of the website, to compile reports on the website activities, and to perform further services relating to the use of the website and Internet for the website owner.
To do this, the following data concerning you is processed:
(1) The user's IP address
(2) Date and time of access
(3) Login information
(4) Amount of data transferred
(5) Enquiring domain
(6) Equipment type, model, brand, screen resolution
(7) Operating system, versions, families
(8) Browser, version, configuration, engines, plugins, language, language code
(9) Location data
(10) Provider details
(11) Pages per visit, number of visits, repeat visits, time of visit, date of visit
(12) Entry pages, exit pages, page URL, title of page, search items, downloads
(13) Search engines, search item, websites, social networks
(14) Campaigns, campaign key word
The IP address sent by your browser via Google Analytics is not merged with other data by Google.
2. Legal basis for the processing of personal data
The legal basis for the use of Google Analytics, provided your consent has been obtained, is Art. 6 para. 1 p. 1 point a of the GDPR and the analogous provisions in accordance with the applicable data protection law.
3. Purpose of data processing
The purpose behind the use of the web analytics service is to analyse and make regular improvements to the use of our website. The statistics obtained enable us to improve our services and make them more interesting to you, our users. For any exceptional cases in which personal data is transferred to the USA, standard contractual clauses have been agreed with Google under the terms of the contractual arrangements.
4. Storage duration, right to object and right of elimination
Any data that is sent by Google and linked with cookies, user authentication (e.g. user ID) or advertising IDs is automatically deleted after 14 months. According to Google, data which has come to the end of its storage period is automatically deleted once a month. We draw your attention to the fact that we have no influence over how long data is stored by Google.
You can prevent cookies from being stored by adjusting your browser software accordingly; we would, however, like to draw your attention to the fact that if you do so, this might possibly result in your not being able to use all the functions offered on this website to the full. Further, you can prevent the acquisition of the data generated by the cookie and relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in: tools.google.com/dlpage/gaoptout.
Opt-out cookies prevent the future acquisition of your data when visiting this website. To prevent acquisition across multiple devices by Universal Analytics, you will have to activate the opt-out for all systems in use. Click here to set the opt-out cookie: ga-optout text=“Deactivate Google Analytics“.
This website uses Google Analytics with the "_anonymizeIp()" function. This ensures that IP addresses are processed in truncated form, making it impossible to trace them to a specific user. Should the data about you that has been collected produce a direct personal link, this is immediately blocked, so the personal data is instantly deleted.
5. Forwarding of Personal Data
Information on the third-party provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. The conditions of use can be found at: www.google.com/analytics/terms/de.html; a data privacy summary can be found at: www.google.com/intl/de/analytics/learn/privacy.html, and a data privacy statement at: www.google.de/intl/de/policies/privacy.
To this purpose, we have also entered into a data processing contract with Google.
If you accept the functional cookies above and beyond those that are technically necessary, and cookies for analysis and advertising purposes, you also consent to the processing of your data in the USA pursuant to Art. 49 para. 1 p. 1 point a of the GDPR. We would like to point out that the European Court of Justice regards the US as a country with a level of data protection that is insufficient by EU standards. In view of this fact, no other suitable data protection safeguards exist. There is therefore a risk of your data being processed by U.S. authorities for control and monitoring purposes, possibly without the possibility of legal recourse. If you do not want this to happen, click Refuse.
1. Description and extent of data processing
This website uses Google Tag Manager. This is a tool that allows marketers to manage their website tags via an interface. A tag manager itself, which implements the tags, is a service that can collect personal data by setting cookies. The tool triggers other tags, which in turn may collect data.
We use Google Tag Manager on two levels when you visit our website. Initially, when you access our website, Google Tag Manager is activated as an essential cookie (unselectable) (first level). At this stage, however, it only serves the function of playing our cookie consent tool Usercentrics – see III. – which gives you the opportunity to decide on the activation of the various cookies used on our website. Until this point, the web tracking functions of the Google Tag Manager are deactivated and at this stage it only serves as an administration and activation tool for Usercentrics.
Only at the second level do we manage and activate further cookies via the Google Tag Manager, which require your consent. Only if you activate a cookie requiring consent in our Usercentrics consent tool with your express consent will the Google Tag Manager establish a connection to this cookie and load the corresponding cookie. Until such activation, the web tracking functions of the Google Tag Manager also remain deactivated.
2. Purpose and legal basis of the processing of personal data
The purpose of using Google Tag Manager is to be able to manage third-party tags in an organised manner and also to be able to implement your selection of activated technologies accordingly. We have a legitimate interest in this, Art. 6 para. 1 sentence 1 lit. f GDPR. If you activate other services in our consent tool Usercentrics, their processing is based on your consent, Art. 6 para. 1 sentence 1 lit. a GDPR
3. Duration of storage, objection and removal options
The Google Tag Manager itself triggers other tags, which in turn may collect data. The Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager. You can find more information here: http://www.google.de/tagmanager/use-policy.html.
When Google Tag Manager is activated, a connection to Google is established. In this respect, we would like to point out that we have no influence on the storage of your data by Google. We have also concluded a data processing agreement with Google for this purpose.
The storage of your data also depends on the respective storage period of the tools activated by the Google Tag Manager.
You cannot activate the Google Tag Manager yourself, as it manages and plays out technologies that are essential for the operation of the website and is therefore itself an essential technology of our website.
If tools requiring consent are used by the Google Tag Manager, their use can be eliminated by deactivating the relevant activity.
4. Transfer of personal data
Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. The terms of use can be found at: www.google.com/analytics/terms/de.html; an overview of data protection can be found at: www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy at: www.google.de/intl/de/policies/privacy.
We would also like to point out that we cannot rule out the transfer of data to the USA (to Google LLC based in the USA) in this context. However, since the adequacy decision between the EU and the USA, the Data Privacy Framework (DPF), which has been in force since 10 July 2023, the USA is certified as having an equivalent level of data protection to the EU insofar as the company receiving the data in the USA is certified in accordance with the requirements of the DPF, which is to be affirmed for Google LLC (see positive proof in the list of the US Department of Commerce).
1. Description and extent of data processing
This website uses Google Ads in order to draw attention to our attractive range of products and services on external websites with the help of advertising media (known as Google Ads). In relation to the data from the advertising campaigns, we can establish how successful each advertising activity has been.
This advertising material is delivered by Google via "ad servers". To this end, we use ad server cookies, by means of which certain performance assessment parameters, such as the number of advertisement impressions or user clicks, can be measured. If you reach our website via a Google advertisement, Google Ads will store a cookie in your computer. As a rule, these cookies become invalid after 30 days have expired, and are not intended to identify you personally. The following data is generally saved as analysis values for this cookie:
(1) The unique cookie ID
(2) Number of ad Impressions per placement (frequency)
(3) Last impression (relevant for post-view conversions)
(4) Opt-out information (indication that the user does not wish to be contacted again)
These cookies enable Google to recognise your Internet browser. Should a user visit certain pages of the website of an Ads customer and the cookie stored on his or her computer has not yet expired, Google and the customer can see that the customer has clicked on the advertisement and been redirected to this page. Every Ads customer is assigned a different cookie. This means that cookies cannot be tracked across the websites of Ads customers. We do not collect and process personal data in the above-mentioned advertising activities. All we receive from Google are statistical evaluations. With the help of these evaluations, we can see which of the advertising activities that have been implemented have been particularly effective. We receive no further data relating to the use of advertising media, and in particular, we are not able to identify users from this information.
Further information on Google's data protection can be found here: https://policies.google.com/privacy?hl=en and https://services.google.com/sitestats/en.html.
Alternatively, you can visit the Network Advertising Initiative (NAI) website at https://www.networkadvertising.org/.
2. Legal basis for data processing
The legal basis for the processing of your data, provided your consent has been obtained, is Art. 6 para. 1 p. 1 point a of the GDPR and the analogous provisions in accordance with the applicable data protection law.
3. Purpose of data processing
The reasons we use Google Ads are to show you advertising that is of interest to you, to make our website more interesting for you, and to ensure that advertising costs are fairly calculated.
4. Storage duration, right to object and right of elimination
As a rule, the cookies used become invalid after 30 days have expired, and are not intended to identify you personally.
On account of the marketing tools used, your browser automatically creates a direct link to the Google server. We have no influence on the volume and any further use of the data that is collected due to the use of this tool by Google, and the information we are giving you therefore reflects the state of our knowledge: by implementing Ads Conversion, Google receives the information that you have activated the corresponding part of our website or have clicked on one of our advertisements. If you have registered for a Google service, Google can assign the visit to your account. Even if you have not registered or logged on with Google, there is still a chance that the provider might find out your IP address and store it.
There are a number of ways of preventing this tracking process: a) by setting your browser software accordingly, the suppression of third party cookies in particular has the effect that you will not receive advertising from third parties; b) by deactivating the cookies for conversion tracking: to do this, set your browser so that cookies from the "www.googleadservices.com" domain are blocked, www.google.de/settings/ads: however this setting will be deleted if you delete your cookies; c) by deactivating the interest-based advertisements of providers involved in the self-regulatory campaign "About Ads", using this link www.aboutads.info/choices: however this setting will be deleted if you delete your cookies; d) by permanently deactivating in your Firefox, Internet Explorer or Google Chrome browsers, using this link www.google.com/settings/ads/plugin. In this case, we draw your attention to the fact that this might possibly result in your not being able to use this website to the full.
1. Description and extent of data processing; disclosure of personal data
We process personal data in the context of plug-ins, temporary cookies, tracking pixels and other measurement tools ("measurement tools"). Measurement tools enable us to track website visits and actions (so-called conversions) of visitors on our respective website. This helps us, among other things, to check the effectiveness of our advertisements and to display advertisements in a more targeted and interest-related manner.
For this purpose, we process identifiers such as your IP address, time of a website visit and/or another identifier (e.g. a special ID number). This personal data is sent to the provider of the respective measurement tool or sent to us by the provider. This enables us to track, for example, how often an advertisement on a partner's website was clicked on in order to reach our website.
2. Legal basis for data processing
The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a DSGVO, i.e. the integration only takes place after your consent.
3. Measuring tool service provider
We have no knowledge about the details of the processing of personal data in the area of responsibility of the respective measurement tool provider. Below you will find information about the processing of personal data by the respective measurement tool provider:
https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer
https://developers.facebook.com/docs/meta-pixel/?locale=en_US
https://services.google.com/sitestats/en.html
https://business.safety.google/intl/en/adsservices/
https://www.linkedin.com/legal/privacy-policy?
https://privacy.xing.com/en/privacy-policy
https://www.reddit.com/r/redditads/comments/a33o6p/the_new_and_improved_conversion_pixel_and/
https://www.reddit.com/policies/privacy-policy
https://www.twitch.tv/p/en/legal/privacy-notice/
https://www.studydrive.net/en/tag/privacy-policy
https://studyflix.de/datenschutz
https://www.get-in.de/datenschutz
4. Right to revoke and right of elimination
You can revoke your consent at any time, most easily via our Cookie Manager. You can also delete cookies in the browser of your end device (please note that such deletion must be carried out separately for each end device due to the technical design).
5. International data transfer
Through the respective use of measurement tools, your personal data may be transferred to recipients in third countries. Third countries are countries outside the EU and outside the EEA. These third countries also include the USA. In the USA, there is no comparable level of data protection as in Europe. In particular, it is possible that government agencies access personal data without us or you knowing about it. Legal prosecution may not be promising.
We transfer personal data to third countries on the basis of the EU standard contractual clauses when using measurement tools accordingly, if required. You can find more information here:
Standard contractual clauses for international transfers | European Commission (europa.eu)
1. Description and extent of data processing
We use the Google Maps service on this website. This enables us to display interactive maps directly on the website, making it easy and convenient for you to use the map function.
Should you visit the website, Google receives the information that you have activated the corresponding subpage of our website. In addition, the following data is transmitted:
(1) IP address of the accessing computer
(2) Date and time of enquiry
This happens regardless of whether or not Google has provided a user account by means of which you have logged on. If you have logged on to Google, your data is assigned directly to your account. If you do not wish the data to be assigned to your profile with Google, you must log out before clicking on the link.
Further, depending on what settings the user has made, it is even possible for Google to collect location data. However, your consent to such data being used is always necessary, and you can refuse to let Google have this in your response to the query.
Further information concerning the purpose and scope of data acquisition and its processing by the plugin provider can be found in the provider’s data privacy statements,. where you will also find additional information on your rights in this respect and setting options to protect your private sphere:
https://policies.google.com/privacy?hl=en&gl=en.
2. Legal basis for data processing
Provided your consent has been obtained, the legal basis for the processing of data is Art. 6 para. 1 p. 1 point a of the GDPR and the analogous provisions in accordance with the applicable data protection legislation.
3. Purpose of data processing
Google stores your data as usage profiles, which it then uses for advertising or market research purposes, and/or the needs-based design of its website. An analysis of this type is carried out (even for users who have not logged on) in particular to provide needs-based advertising, and to inform other people using the social network of your activities on our website.
4. Storage duration; Right to object and right of elimination
We store your personal data for as long as is necessary to provide Google Maps for you when you are accessing this website. You are entitled to withdraw your consent at any time without affecting the admissibility of any processing carried out prior to its withdrawal. Using our Consent Manager is the easiest way to withdraw your consent. You also have the right to object to the creation of these user profiles, and to exercise this right, you must contact Google.
5. Forwarding of personal data
Google also processes your personal data in the USA. With your consent to the integration of the function, you also consent to the processing of your data in the USA pursuant to Art. 49 para. 1 p. 1 point a of the GDPR. We would like to point out that the European Court of Justice regards the US as a country with a level of data protection that is insufficient by EU standards. In view of this fact, no other suitable data protection safeguards exist. There is therefore a risk of your data being processed by U.S. authorities for control and monitoring purposes, possibly without the possibility of legal recourse. If you do not want this to happen, click Refuse.
1. Description and extent of data processing
We use the web fonts provided by Google and downloaded to our local server to ensure that font types are shown consistently. To this end, the required web fonts are loaded into your browser cache so that texts and fonts are displayed correctly. If your browser does not support web fonts, a default font from your computer is used.
No cookies are set when you call up the page. Also, no direct connection to Google's servers is established, as the fonts are integrated locally into our website.
2. Legal basis for data processing
Due to our legitimate interest in fonts being shown consistently, Art. 6 para. 1 p. 1 point f of the GDPR is the legal basis for processing
3. Purpose of data processing
Google Web Fonts is a freely available library of over 800 fonts. Google Web Fonts allows us to present our website to the user in an attractive design and in the same quality across all devices. This is the only way of making it technically possible for all visitors to our homepage to have a consistent and pleasant user experience.
This is also a legitimate interest within the meaning of Art. 6 para. 1 p. 1 point f of the GDPR.
4. Storage duration, right to object and right of elimination
Data is stored for as long as it is needed for the purpose for which it was collected. You have the option of objecting to the use by changing your browser settings.
1. Description and extent of data processing
We have integrated YouTube videos into our online service; these are stored at www.YouTube.com and can be played directly from our website. Due to this integration, a connection between your browser and YouTube is established when you visit our Website and data about you as a user is transferred to YouTube. We have no influence on this data transmission.
2. Legal basis for data processing
The legal basis for the processing, if you have given your consent, is Art. 6 para. 1 p. 1 lit. a DSGVO and the analogous provisions according to the applicable data protection law.
3. Purpose of data processing
YouTube stores your data as usage profiles, which it then uses for advertising or market research purposes, and/or the needs-based design of its website. An analysis of this type is carried out (even for users who have not logged on) in particular to provide needs-based advertising, and to inform other people using the social network of your activities on our website.
4. Storage duration, right to object and right of elimination
If you do not wish the data to be assigned to your profile with YouTube, you must log out before activating the button. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact YouTube.
Further information concerning the purpose and scope of data acquisition and its processing by YouTube can be found in the data privacy statement, where you will also find additional information on your rights and setting options to protect your private sphere: https://www.google.de/intl/de/policies/privacy.
5. Forwarding of personal data
YouTube also processes your personal data in the USA. With your consent to the integration of YouTube videos, you also consent to the processing of your data in the USA pursuant to Art. 49 para. 1 p. 1 point a of the GDPR and the analogous provisions according to the applicable data protection law. We would like to point out that the European Court of Justice regards the US as a country with a level of data protection that is insufficient by EU standards. In view of this fact, no other suitable data protection safeguards exist. There is therefore a risk of your data being processed by U.S. authorities for control and monitoring purposes, possibly without the possibility of legal recourse. If you do not want this to happen, click Refuse.
1. Description and extent of data processing
For analysis purposes, as well as for e-mailing, blogs and posting social media, we use HubSpot, a service provided by HubSpot Inc., on our website. HubSpot Inc. is a US company which has a subsidiary in Ireland (HubSpot, 2nd floor 30 North Wall Quay, Dublin 1, Ireland, Tel.: +353 1 5187500). HubSpot uses cookies which are stored on the user's computer and collect certain types of data. The following data is collected:
2. Legal basis for data processing
If the user's consent has been obtained, the legal basis for the processing of personal data by the HubSpot service is Art. 6 para. 1 p. 1 point a of the GDPR and the analogous provisions according to the applicable data protection law. The use of the service for the purpose of emailing, blogging and social media posting is otherwise based on our legitimate interest in accordance with Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions in accordance with the applicable data protection law.
3. Purpose of data processing
The purpose of using the service for analysis is to be able to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user.
The data collected via the HubSpot service is used for mailing lists, blogs and social media postings, making customer care easier and clearer.
The purposes described above are also in our legitimate interests in the processing of personal data under Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions in accordance with the applicable data protection law.
4. Storage duration, right to object and right of elimination
We use data that has been acquired by means of the HubSpot service for the above-mentioned purposes only, and do not disclose such data to third parties. To this purpose, we have also entered into a data processing contract with HubSpot Inc.
You can prevent the acquisition of data by HubSpot by making the appropriate browser settings to forbid cookies from being stored. Instructions can be found on http://www.meine-cookies.org/cookies_verwalten/index.html
If you would like to prevent your data from being used for marketing purposes, you can unsubscribe by clicking on http://www.youronlinechoices.eu/
Further information on data processing by HubSpot and the HubSpot data protection conditions can be found at https://legal.hubspot.com/legal-stuff, https://legal.hubspot.com/privacy-policy, and https://legal.hubspot.com/website-terms-of-use.
5. Forwarding of Personal Data
HubSpot processes your personal data in the USA. With your consent to the integration of the service, you also consent to the processing of your data in the USA pursuant to Art. 49 para. 1 sentence 1 point a of the GDPR and the analogous provisions pursuant to applicable data protection legislation. We would like to point out that the European Court of Justice regards the US as a country with a level of data protection that is insufficient by EU standards. In view of this fact, no other suitable data protection safeguards exist. There is therefore a risk of your data being processed by U.S. authorities for control and monitoring purposes, possibly without the possibility of legal recourse. If you do not want this to happen, click Refuse.
If personal data concerning you is processed, you are the data subject as defined in the GDPR and the analogous provisions pursuant to applicable data protection legislation, and have the following rights against the data controller:
1. Right to be informed
You can ask the controller to provide you with confirmation as to whether or not personal data concerning you is processed by us.
If such processing is being undertaken, you can ask the controller to provide you with information concerning the following:
(1) The purposes for which the personal data is processed;
(2) The personal data categories which are processed;
(3) The recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
(4) The planned storage duration of the personal data concerning you or, if it is not possible to provide concrete information on this point, criteria for defining the storage duration;
(5) The existence of a right to correct or delete the personal data concerning you, a right to limit processing by the controller, or a right to object to such processing;
(6) The existence of a right to lodge a complaint with a supervisory authority;
(7) All available information concerning the origin of the data, if the personal data was not acquired from the data subject him or herself;
(8) The existence of automated decision-making and profiling in accordance with Art. 22 para. 1 and 4 of the GDPR and the analogous provisions pursuant to applicable data protection legislation and – at least in these cases – meaningful information on the logic involved and the implications and intended impact of such processing for the data subject.
You have the right to request information on whether or not the personal data concerning you is transmitted to a third country or international organisation. In this context, you may ask for information on appropriate guarantees in accordance with Art. 46 of the GDPR and the analogous provisions pursuant to applicable data protection legislation relating to the transmission of data.
2. Right to rectification
You have a right to have the controller correct or complete any personal data concerning you which, having been processed, is either incorrect or incomplete. The data controller must carry out any corrections without undue delay.
3. Right to restrict processing
Subject to the following conditions, you can request that processing of the personal data concerning you be restricted:
(1) If you dispute the accuracy of the personal data concerning you for a period which allows the controller to check the accuracy of the personal data;
(2) The processing is unlawful and you refuse deletion of the personal data, instead requesting that use of the personal data be restricted;
(3) The controller no longer needs the personal data for processing purposes, but you need it in order to establish, exercise or defend legal claims, or
(4) If you have filed an objection to the processing of the data in accordance with Art. 21 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.
If the processing of the personal data concerning you has been restricted, then, storage aside, this data may only be processed with your consent (insofar as legally required), or to establish, exercise or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of substantial public interest on the basis of Union or Member State law.
If the processing has been restricted under the above-mentioned conditions, you will be informed by the controller before the restriction is lifted.
4. Right to deletion
a) Obligation to delete
You can ask the controller to delete the personal data concerning you without undue delay, and the controller is obliged to delete this data without delay if one of the following reasons applies:
(1) The personal data concerning you is no longer needed for the purposes for which it was collected or otherwise processed.
(2) You revoke your consent, which served as the basis for processing in accordance with Art. 6 para. 1 p. 1 lit. a or Art. 9 para. 2 point a of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and there is no other legal basis for the processing.
(3) You file an objection to processing in accordance with Art. 21 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and there are no overriding legitimate reasons for the processing, or you file an objection to processing in accordance with Art. 21 para. 2 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
(4) The personal data concerning you has been unlawfully processed.
(5) Deletion of the personal data concerning you is necessary in order to ensure compliance with a legal obligation under Union or Member State law to which the data controller is subject.
(6) The personal data concerning you has been acquired in relation to the offer of information society services in accordance with Art. 8 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
b) Information to third parties
If the controller has made the personal data concerning you public, and is obliged to delete such data in accordance with Art. 17 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, then, taking into account the technologies available and implementation costs, he - the controller - applies appropriate measures, which may also be of a technical nature, to inform the people responsible for processing personal data that, as the data subject, you have requested that they should delete all links to this personal data as well as all copies or replications of this personal data.
c) Exceptions
The data subject does not have the right to have his or her data deleted if processing is necessary
(1) to exercise the rights to freedom of expression and freedom of information;
(2) to comply with a legal obligation calling for processing on the basis of Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the field of public health in accordance with Art. 9 para. 2 points h and i and Art. 9 para. 3 of the GDPR and the analogous provisions pursuant to applicable data protection legislation;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, insofar as the right set out in section a) is likely to render impossible or seriously impair the achievement of the purposes of this processing, or
(5) to establish, exercise or defend legal claims.
5. Right to information
If you have exercised your right to have the controller correct, delete or restrict the processing of your data, then the controller is obliged to inform all recipients to whom the personal data concerning you has been disclosed of such correction or deletion of the data or restriction of the processing, unless it proves impossible to do so or would involve unreasonable expense and effort.
You are entitled to have the controller inform you of these recipients.
6. Right to data portability
You have the right to receive the personal data concerning you with which you have provided the controller in a structured, commonly used and machine-readable format. Further, you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, providing that
(1) processing is based on consent in accordance with Art. 6 para. 1 p. 1 point a of the GDPR or Art. 9 para. 2 point a of GDPR and the analogous provisions pursuant to applicable data protection legislation, or on a contract in accordance with Art. 6 para. 1 p. 1 point b of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and
(2) the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible.
This shall not adversely affect the rights and freedoms of others.
The right to data portability does not apply to processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
7. Right to object
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6 para. 1 p. 1 point e or f of the GDPR and the analogous provisions pursuant to applicable data protection legislation; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims.
If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling, insofar as it is related to such direct marketing.
Should you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.
In the context of the use of information society services – notwithstanding Directive 2002/58/EG and the analogous provisions pursuant to applicable data protection legislation – you are entitled to exercise your right to object by automated means using technical specifications.
8. Right to withdraw declaration of consent under data protection law
You have the right to withdraw your declaration of consent to the processing of personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on your consent before its withdrawal.
9. Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects that concern you or significantly affects in a similar way. This does not apply if the decision
(1) is necessary for entering into or the performance of a contract between you and the data controller,
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests, or
(3) is made with your explicit consent.
These decisions must not, however, be based on special categories of personal data referred to in Art. 9 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, unless Art. 9 para. 2 point a or g and the analogous provisions pursuant to applicable data protection legislation apply, and suitable measures have been undertaken to safeguard your rights and freedoms and your legitimate interests.
With regard to the cases described in points (1) and (3), data controller will implement suitable measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State or state of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR and the analogous provisions pursuant to applicable data protection legislation.
The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy in accordance with Art. 78 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.