M
M

Von Roll®
Pri­va­cy Noti­ce for Web­site and Social Media

1. An over­view of data protection

Gene­ral information

We take the pro­tec­tion of your per­so­nal data and com­pli­an­ce with the legal pro­vi­si­ons on data pro­tec­tion very serious­ly. In the fol­lowing, we would like to inform you — also in accordance with the EU Gene­ral Data Pro­tec­tion Regu­la­ti­on (her­ein­af­ter refer­red to as “GDPR”) — about how your per­so­nal data is pro­ces­sed and what rights you have when you visit our web­site and/or pre­sen­ces in social media. “Per­so­nal data” is any data with which you can be per­so­nal­ly identified.

Fur­ther infor­ma­ti­on on data pro­tec­tion (for examp­le for cus­to­mers and sup­pliers or the app­li­ca­ti­on pro­cess) can also be found at https://www.vonrollgroup.com/en/legal-information/.

Data record­ing on this website

Who is the respon­si­ble par­ty for the record­ing of data on this web­site (i.e., the “con­trol­ler”)?

The data on this web­site is pro­ces­sed by the ope­ra­tor of the web­site, who­se con­ta­ct infor­ma­ti­on is avail­ab­le under sec­tion “Infor­ma­ti­on about the respon­si­ble par­ty (refer­red to as the “con­trol­ler” in the GDPR)” in this Pri­va­cy Notice.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance be infor­ma­ti­on you enter into our con­ta­ct form.

Other data shall be recor­ded by our IT sys­tems auto­ma­ti­cal­ly or after you con­sent to its record­ing during your web­site visit. This data com­pri­ses pri­ma­ri­ly tech­ni­cal infor­ma­ti­on (e.g., web brow­ser, ope­ra­ting sys­tem, or time the site was acces­sed). This infor­ma­ti­on is recor­ded auto­ma­ti­cal­ly when you access this website.

What are the pur­po­ses we use your data for?

A por­ti­on of the infor­ma­ti­on is gene­ra­ted to gua­ran­tee the error free pro­vi­si­on of the web­site. Other data may be used to ana­ly­ze your user patterns.

What rights do you have as far as your infor­ma­ti­on is concerned?

You have the right to recei­ve infor­ma­ti­on about the source, reci­pi­ents, and pur­po­ses of your archi­ved per­so­nal data at any time without having to pay a fee for such dis­clo­sures. You also have the right to demand that your data are rec­ti­fied or era­di­ca­ted. If you have con­sen­ted to data pro­ces­sing, you have the opti­on to revo­ke this con­sent at any time, which shall affect all future data pro­ces­sing. Moreo­ver, you have the right to demand that the pro­ces­sing of your data be restric­ted under cer­tain cir­cum­s­tan­ces. Fur­ther­mo­re, you have the right to log a com­p­laint with the com­pe­tent super­vi­sing agency.

Plea­se do not hesi­ta­te to con­ta­ct us at any time if you have ques­ti­ons about this or any other data pro­tec­tion rela­ted issues.

Ana­ly­sis tools and tools pro­vi­ded by third parties

The­re is a pos­si­bi­li­ty that your brow­sing pat­terns will be sta­tis­ti­cal­ly ana­ly­zed when your visit this web­site. Such ana­ly­ses are per­for­med pri­ma­ri­ly with what we refer to as ana­ly­sis programs.

For detail­ed infor­ma­ti­on about the­se ana­ly­sis pro­grams plea­se con­sult our Pri­va­cy Noti­ce below.

 

2. Hos­ting and Con­tent Deli­very Net­works (CDN)

Exter­nal Hosting

This web­site is hos­ted by an exter­nal ser­vice pro­vi­der (host). Per­so­nal data collec­ted on this web­site are stored on the ser­vers of the host. The­se may inclu­de, but are not limi­ted to, IP addres­ses, con­ta­ct requests, meta­da­ta and com­mu­ni­ca­ti­ons, con­tract infor­ma­ti­on, con­ta­ct infor­ma­ti­on, names, web page access, and other data gene­ra­ted through a web site.

The host is used for the pur­po­se of ful­fil­ling the con­tract with our poten­ti­al and exis­ting cus­to­mers (Art. 6 para. 1 lit. b GDPR) and in the inte­rest of secu­re, fast, and effi­ci­ent pro­vi­si­on of our online ser­vices by a pro­fes­sio­nal pro­vi­der (Art. 6 para. 1 lit. f GDPR).

Our host will only pro­cess your data to the extent necessa­ry to ful­fil its per­for­mance obli­ga­ti­ons and to fol­low our inst­ruc­tions with respect to such data.

 

3. Gene­ral infor­ma­ti­on and man­da­to­ry information

Data pro­tec­tion

We hand­le your per­so­nal data as con­fi­den­ti­al infor­ma­ti­on and in com­pli­an­ce with the sta­tu­to­ry data pro­tec­tion regu­la­ti­ons and this Pri­va­cy Notice.

Whenever you use this web­site, a varie­ty of per­so­nal infor­ma­ti­on will be collec­ted. This Pri­va­cy Noti­ce exp­lains which data we collect as well as the pur­po­ses we use this data for. It also exp­lains how, and for which pur­po­se the infor­ma­ti­on is collected.

We here­with advi­se you that the trans­mis­si­on of data via the Inter­net (i.e., through e‑mail com­mu­ni­ca­ti­ons) may be pro­ne to secu­ri­ty gaps. It is not pos­si­ble to com­ple­te­ly pro­tect data against third-par­ty access.

Infor­ma­ti­on about the respon­si­ble par­ty (refer­red to as the “con­trol­ler” in the GDPR)

The data pro­ces­sing con­trol­ler on this web­site is:

Von Roll Manage­ment AG
Pass­wangs­tras­se 20
4226 Breitenbach
Schweiz

E‑Mail: dataprotection@vonroll.com

The con­trol­ler is the natu­ral per­son or legal enti­ty that sin­gle-han­ded­ly or joint­ly with others makes decisi­ons as to the pur­po­ses of and resour­ces for the pro­ces­sing of per­so­nal data (e.g., names, e‑mail addres­ses, etc.).

If for a web­site or social media pre­sence ano­t­her Von Roll Group com­pa­ny than Von Roll Manage­ment AG is express­ly indi­ca­ted as the respon­si­ble pro­vi­der (plea­se refer to the pro­vi­der infor­ma­ti­on of the web­site or social media pre­sence in ques­ti­on), this com­pa­ny is also the respon­si­ble data pro­ces­sing controller.

Sto­rage duration

Unless a more spe­ci­fic sto­rage peri­od has been spe­ci­fied in this Pri­va­cy Noti­ce, your per­so­nal data will remain with us until the pur­po­se for which it was collec­ted no lon­ger app­lies. If you assert a jus­ti­fied request for dele­ti­on or revo­ke your con­sent to data pro­ces­sing, your data will be dele­ted, unless we have other legal­ly per­mis­si­ble rea­sons for sto­ring your per­so­nal data (e.g., tax or com­mer­cial law reten­ti­on peri­ods); in the lat­ter case, the dele­ti­on will take place after the­se rea­sons cea­se to apply.

Infor­ma­ti­on on data trans­fer to the USA

Our web­site uses, in par­ti­cu­lar, tools from com­pa­nies based in the USA. When the­se tools are acti­ve, your per­so­nal infor­ma­ti­on may be trans­fer­red to the US ser­vers of the­se com­pa­nies. We must point out that the USA is not a safe third coun­try wit­hin the mea­ning of EU data pro­tec­tion law. US com­pa­nies are requi­red to release per­so­nal data to secu­ri­ty aut­ho­ri­ties without you as the data sub­ject being able to take legal action against this. The pos­si­bi­li­ty can­not the­re­fo­re be exclu­ded that US aut­ho­ri­ties (e.g. secret ser­vices) may pro­cess, eva­lua­te, and per­ma­nent­ly store your data on US ser­vers for moni­to­ring pur­po­ses.  We have no influ­ence over the­se pro­ces­sing activities.

Revo­ca­ti­on of your con­sent to the pro­ces­sing of data

A wide ran­ge of data pro­ces­sing tran­sac­tions are pos­si­ble only sub­ject to your express con­sent. You can also revo­ke at any time any con­sent you have alrea­dy given us. This shall be without pre­ju­di­ce to the law­ful­ness of any data collec­tion that occur­red pri­or to your revocation.

Right to object to the collec­tion of data in spe­cial cases; right to object to direct adver­ti­sing (Art. 21 GDPR)

In the event that data are pro­ces­sed on the basis of art. 6 sect. 1 lit. E or f gdpr, you have the right to at any time object to the pro­ces­sing of your per­so­nal data based on grounds ari­sing from your uni­que situa­ti­on. This also app­lies to any pro­filing based on the­se pro­vi­si­ons. To deter­mi­ne the legal basis, on which any pro­ces­sing of data is based, plea­se con­sult this pri­va­cy noti­ce. If you log an objec­tion, we will no lon­ger pro­cess your affec­ted per­so­nal data, unless we are in a posi­ti­on to pre­sent com­pel­ling pro­tec­tion worthy grounds for the pro­ces­sing of your data, that out­weigh your inte­rests, rights and free­doms or if the pur­po­se of the pro­ces­sing is the clai­ming, exer­cis­ing or defence of legal enti­t­le­ments (objec­tion pur­suant to art. 21 sect. 1 gdpr).
If your per­so­nal data is being pro­ces­sed in order to enga­ge in direct adver­ti­sing, you have the right to at any time object to the pro­ces­sing of your affec­ted per­so­nal data for the pur­po­ses of such adver­ti­sing. This also app­lies to pro­filing to the extent that it is affi­lia­ted with such direct adver­ti­sing. If you object, your per­so­nal data will sub­se­quent­ly no lon­ger be used for direct adver­ti­sing pur­po­ses (objec­tion pur­suant to art. 21 sect. 2 gdpr).

Right to log a com­p­laint with the com­pe­tent super­vi­so­ry agency

In the event of vio­la­ti­ons of the GDPR, data sub­jects are enti­t­led to log a com­p­laint with a super­vi­so­ry agen­cy, in par­ti­cu­lar in the mem­ber sta­te whe­re they usual­ly main­tain their domic­i­le, place of work or at the place whe­re the alle­ged vio­la­ti­on occur­red. The right to log a com­p­laint is in effect regard­less of any other admi­nis­tra­ti­ve or court pro­cee­dings avail­ab­le as legal recourses.

Right to data portability

You have the right to demand that we hand over any data we auto­ma­ti­cal­ly pro­cess on the basis of your con­sent or in order to ful­fil a con­tract be han­ded over to you or a third par­ty in a com­mon­ly used, machi­ne read­a­ble for­mat. If you should demand the direct trans­fer of the data to ano­t­her con­trol­ler, this will be done only if it is tech­ni­cal­ly feasible.

SSL and/or TLS encryption

For secu­ri­ty rea­sons and to pro­tect the trans­mis­si­on of con­fi­den­ti­al con­tent, such as inqui­ries you sub­mit to us as the web­site ope­ra­tor, this web­site uses eit­her an SSL or a TLS encryp­ti­on pro­gram. You can reco­gni­ze an encryp­ted con­nec­tion by che­cking whe­ther the address line of the brow­ser swit­ches from “http://” to “https://” and also by the appearan­ce of the lock icon in the brow­ser line.

If the SSL or TLS encryp­ti­on is acti­va­ted, data you trans­mit to us can­not be read by third parties.

Infor­ma­ti­on about, rec­ti­fi­ca­ti­on and era­di­ca­ti­on of data

Wit­hin the scope of the app­li­ca­ble sta­tu­to­ry pro­vi­si­ons, you have the right to at any time demand infor­ma­ti­on about your archi­ved per­so­nal data, their source and reci­pi­ents as well as the pur­po­se of the pro­ces­sing of your data. You may also have a right to have your data rec­ti­fied or era­di­ca­ted. If you have ques­ti­ons about this sub­ject mat­ter or any other ques­ti­ons about per­so­nal data, plea­se do not hesi­ta­te to con­ta­ct us at any time.

Right to demand pro­ces­sing restrictions

You have the right to demand the impo­si­ti­on of restric­tions as far as the pro­ces­sing of your per­so­nal data is con­cer­ned. To do so, you may con­ta­ct us at any time. The right to demand restric­tion of pro­ces­sing app­lies in the fol­lowing cases:

  • In the event that you should dis­pu­te the cor­rect­ness of your data archi­ved by us, we will usual­ly need some time to veri­fy this claim. During the time that this inves­ti­ga­ti­on is ongo­ing, you have the right to demand that we restrict the pro­ces­sing of your per­so­nal data.
  • If the pro­ces­sing of your per­so­nal data was/is con­duc­ted in an unlaw­ful man­ner, you have the opti­on to demand the restric­tion of the pro­ces­sing of your data in lieu of deman­ding the era­di­ca­ti­on of this data.
  • If we do not need your per­so­nal data any lon­ger and you need it to exer­cise, defend or claim legal enti­t­le­ments, you have the right to demand the restric­tion of the pro­ces­sing of your per­so­nal data ins­tead of its eradication.
  • If you have rai­sed an objec­tion pur­suant to Art. 21 Sect. 1 GDPR, your rights and our rights will have to be weig­hed against each other. As long as it has not been deter­mi­ned who­se inte­rests pre­vail, you have the right to demand a restric­tion of the pro­ces­sing of your per­so­nal data.

If you have restric­ted the pro­ces­sing of your per­so­nal data, the­se data – with the excep­ti­on of their archi­ving – may be pro­ces­sed only sub­ject to your con­sent or to claim, exer­cise or defend legal enti­t­le­ments or to pro­tect the rights of other natu­ral per­sons or legal enti­ties or for important public inte­rest rea­sons cited by the Euro­pean Uni­on or a mem­ber sta­te of the EU.

Rejec­tion of unso­li­ci­ted e‑mails

We here­with object to the use of con­ta­ct infor­ma­ti­on publis­hed on our web­site to send us pro­mo­tio­nal and infor­ma­ti­on mate­ri­al that we have not express­ly reques­ted. The ope­ra­tor of this web­site and its pages reser­ve the express right to take legal action in the event of the unso­li­ci­ted sen­ding of pro­mo­tio­nal infor­ma­ti­on, for instance via SPAM messages.

 

4. Record­ing of data on this website

Coo­kies

Our web­site uses so cal­led “coo­kies.” Coo­kies are small text files that do not cau­se any dama­ge to your device. They are eit­her stored tem­pora­ri­ly for the dura­ti­on of a ses­si­on (ses­si­on coo­kies) or they are per­ma­nent­ly archi­ved on your device (per­ma­nent coo­kies). Ses­si­on coo­kies are auto­ma­ti­cal­ly dele­ted once you ter­mi­na­te your visit. Per­ma­nent coo­kies remain archi­ved on your device until you actively dele­te them, or they are auto­ma­ti­cal­ly era­di­ca­ted by your web browser.

In some cases, it is pos­si­ble that third-par­ty coo­kies are stored on your device once you enter our web­site (third-par­ty coo­kies). The­se coo­kies enab­le you or us to take advan­ta­ge of cer­tain ser­vices offe­red by the third par­ty (e.g., coo­kies for the pro­ces­sing of pay­ment services).

Coo­kies have a varie­ty of func­tions. Many coo­kies are tech­ni­cal­ly essen­ti­al sin­ce cer­tain web­site func­tions would not work in the absence of the coo­kies (e.g., the shop­ping cart func­tion or the dis­play of vide­os). The pur­po­se of other coo­kies may be the ana­ly­sis of user pat­terns or the dis­play of pro­mo­tio­nal messages.

Coo­kies, which are requi­red for the per­for­mance of elec­tro­nic com­mu­ni­ca­ti­on tran­sac­tions (requi­red coo­kies) or for the pro­vi­si­on of cer­tain func­tions you want to use (func­tio­n­al coo­kies, e.g., for the shop­ping cart func­tion) or tho­se that are necessa­ry for the opti­miz­a­ti­on of the web­site (e.g., coo­kies that pro­vi­de mea­sura­ble insights into the web audi­ence), shall be stored on the basis of Art. 6 Sect. 1 lit. f GDPR, unless a dif­fe­rent legal basis is cited. The ope­ra­tor of the web­site has a legi­ti­ma­te inte­rest in the sto­rage of coo­kies to ensu­re the tech­ni­cal­ly error free and opti­mi­zed pro­vi­si­on of the operator’s ser­vices. If your con­sent to the sto­rage of the coo­kies has been reques­ted, the respec­ti­ve coo­kies are stored exclu­si­ve­ly on the basis of the con­sent obtai­ned (Art. 6 Sect. 1 lit. a GDPR); this con­sent may be revo­ked at any time.

You have the opti­on to set up your brow­ser in such a man­ner that you will be noti­fied any time coo­kies are pla­ced and to per­mit the accep­t­ance of coo­kies only in spe­ci­fic cases. You may also exclu­de the accep­t­ance of coo­kies in cer­tain cases or in gene­ral or acti­va­te the dele­te func­tion for the auto­ma­tic era­di­ca­ti­on of coo­kies when the brow­ser clo­ses. If coo­kies are deac­ti­va­ted, the func­tions of this web­site may be limited.

In the event that third-par­ty coo­kies are used or if coo­kies are used for ana­ly­ti­cal pur­po­ses, we will sepa­r­ate­ly noti­fy you in con­junc­tion with this Pri­va­cy Noti­ce and, if app­li­ca­ble, ask for your consent.

Chan­ge Coo­kie Settings

Ser­ver log files

The pro­vi­der of this web­site auto­ma­ti­cal­ly collects and stores infor­ma­ti­on in so-cal­led ser­ver log files, which your brow­ser com­mu­ni­ca­tes to us auto­ma­ti­cal­ly. The infor­ma­ti­on comprises:

  • The type and ver­si­on of brow­ser used
  • The used ope­ra­ting system
  • Refer­rer URL
  • The host­na­me of the acces­sing computer
  • The time of the ser­ver inquiry
  • The IP address
  • This data is not mer­ged with other data sources.

This data is recor­ded on the basis of Art. 6 Sect. 1 lit. f GDPR. The ope­ra­tor of the web­site has a legi­ti­ma­te inte­rest in the tech­ni­cal­ly error free depic­tion and the opti­miz­a­ti­on of the operator’s web­site. In order to achie­ve this, ser­ver log files must be recorded.

Con­ta­ct form

If you sub­mit inqui­ries to us via our con­ta­ct form, the infor­ma­ti­on pro­vi­ded in the con­ta­ct form as well as any con­ta­ct infor­ma­ti­on pro­vi­ded the­r­ein will be stored by us in order to hand­le your inqui­ry and in the event that we have fur­ther ques­ti­ons. We will not share this infor­ma­ti­on without your consent.

The pro­ces­sing of the­se data is based on Art. 6 para. 1 lit. b GDPR, if your request is rela­ted to the exe­cu­ti­on of a con­tract or if it is necessa­ry to car­ry out pre-con­trac­tu­al mea­su­res. In all other cases the pro­ces­sing is based on our legi­ti­ma­te inte­rest in the effec­ti­ve pro­ces­sing of the requests addres­sed to us (Art. 6 Para. 1 lit. f GDPR) or on your agree­ment (Art. 6 Para. 1 lit. a GDPR) if this has been requested.

The infor­ma­ti­on you have ent­e­red into the con­ta­ct form shall remain with us until you ask us to era­di­ca­te the data, revo­ke your con­sent to the archi­ving of data or if the pur­po­se for which the infor­ma­ti­on is being archi­ved no lon­ger exists (e.g., after we have con­clu­ded our respon­se to your inqui­ry). This shall be without pre­ju­di­ce to any man­da­to­ry legal pro­vi­si­ons, in par­ti­cu­lar reten­ti­on periods.

Request by e‑mail, tele­pho­ne, or fax

If you con­ta­ct us by e‑mail, tele­pho­ne or fax, your request, inclu­ding all resul­ting per­so­nal data (name, request) will be stored and pro­ces­sed by us for the pur­po­se of pro­ces­sing your request. We do not pass the­se data on without your consent.

The­se data are pro­ces­sed on the basis of Art. 6 Sect. 1 lit. b GDPR if your inqui­ry is rela­ted to the ful­fill­ment of a con­tract or is requi­red for the per­for­mance of pre-con­trac­tu­al mea­su­res. In all other cases, the data are pro­ces­sed on the basis of our legi­ti­ma­te inte­rest in the effec­ti­ve hand­ling of inqui­ries sub­mit­ted to us (Art. 6 Sect. 1 lit. f GDPR) or on the basis of your con­sent (Art. 6 Sect. 1 lit. a GDPR) if it has been obtained.

The data sent by you to us via con­ta­ct requests remain with us until you request us to dele­te, revo­ke your con­sent to the sto­rage or the pur­po­se for the data sto­rage lap­ses (e.g. after com­ple­ti­on of your request). Man­da­to­ry sta­tu­to­ry pro­vi­si­ons — in par­ti­cu­lar sta­tu­to­ry reten­ti­on peri­ods — remain unaffected.

 

5. Ana­ly­sis tools and advertising

Goog­le Analytics

This web­site uses func­tions of the web ana­ly­sis ser­vice Goog­le Ana­ly­tics. The pro­vi­der of this ser­vice is Goog­le Ire­land Limi­ted (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ireland.

Goog­le Ana­ly­tics enab­les the web­site ope­ra­tor to ana­ly­ze the beha­vi­or pat­terns of web­site visi­tors. To that end, the web­site ope­ra­tor recei­ves a varie­ty of user data, such as pages acces­sed, time spent on the page, the uti­li­zed ope­ra­ting sys­tem and the user’s ori­gin. Goog­le may con­so­li­da­te the­se data in a pro­fi­le that is allo­ca­ted to the respec­ti­ve user or the user’s device.

Goog­le Ana­ly­tics uses tech­no­lo­gies that make the reco­gni­ti­on of the user for the pur­po­se of ana­ly­zing the user beha­vi­or pat­terns (e.g., coo­kies or device fin­ger­prin­ting). The web­site use infor­ma­ti­on recor­ded by Goog­le is, as a rule trans­fer­red to a Goog­le ser­ver in the United Sta­tes, whe­re it is stored.

This ana­ly­sis tool is used on the basis of Art. 6 Sect. 1 lit. f GDPR. The ope­ra­tor of this web­site has a legi­ti­ma­te inte­rest in the ana­ly­sis of user pat­terns to opti­mi­ze both, the ser­vices offe­red online and the operator’s adver­ti­sing acti­vi­ties. If a cor­re­spon­ding agree­ment has been reques­ted (e.g., an agree­ment to the sto­rage of coo­kies), the pro­ces­sing takes place exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR; the agree­ment can be revo­ked at any time.

Data trans­mis­si­on to the US is based on the Stan­dard Con­trac­tu­al Clau­ses (SCC) of the Euro­pean Com­mis­si­on. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anony­miz­a­ti­on

On this web­site, we have acti­va­ted the IP anony­miz­a­ti­on func­tion. As a result, your IP address will be abbre­via­ted by Goog­le wit­hin the mem­ber sta­tes of the Euro­pean Uni­on or in other sta­tes that have rati­fied the Con­ven­ti­on on the Euro­pean Eco­no­mic Area pri­or to its trans­mis­si­on to the United Sta­tes. The full IP address will be trans­mit­ted to one of Google’s ser­vers in the United Sta­tes and abbre­via­ted the­re only in excep­tio­nal cases. On behalf of the ope­ra­tor of this web­site, Goog­le shall use this infor­ma­ti­on to ana­ly­ze your use of this web­site to gene­ra­te reports on web­site acti­vi­ties and to ren­der other ser­vices to the ope­ra­tor of this web­site that are rela­ted to the use of the web­site and the Inter­net. The IP address trans­mit­ted in con­junc­tion with Goog­le Ana­ly­tics from your brow­ser shall not be mer­ged with other data in Google’s possession.

Brow­ser plug-in

You can pre­vent the record­ing and pro­ces­sing of your data by Goog­le by down­loading and instal­ling the brow­ser plugin avail­ab­le under the fol­lowing link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more infor­ma­ti­on about the hand­ling of user data by Goog­le Ana­ly­tics, plea­se con­sult Google’s pri­va­cy noti­ce at: https://support.google.com/analytics/answer/6004245?hl=en.

Con­tract data processing

We have exe­cu­t­ed a con­tract data pro­ces­sing agree­ment with Goog­le and are imple­men­ting the strin­gent pro­vi­si­ons of the Ger­man data pro­tec­tion agen­ci­es to the ful­lest when using Goog­le Analytics.

Archi­ving period

Data on the user or inci­dent level stored by Goog­le lin­ked to coo­kies, user IDs or adver­ti­sing IDs (e.g., Dou­ble­Click coo­kies, Android adver­ti­sing ID) will be anony­mi­zed or dele­ted after 14 mon­th. For details, plea­se click the fol­lowing link: https://support.google.com/analytics/answer/7667196?hl=en

 

6. News­let­ter

If you would like to sub­scri­be to the news­let­ter offe­red on this web­site, we will need from you an e‑mail address as well as infor­ma­ti­on that allow us to veri­fy that you are the owner of the e‑mail address pro­vi­ded, and con­sent to the rece­i­pt of the news­let­ter. No fur­ther data shall be collec­ted or shall be collec­ted only on a vol­un­ta­ry basis. We shall use such data only for the sen­ding of the reques­ted infor­ma­ti­on and shall not share such data with any third parties.

The pro­ces­sing of the infor­ma­ti­on ent­e­red into the news­let­ter sub­scrip­ti­on form shall occur exclu­si­ve­ly on the basis of your con­sent (Art. 6 Sect. 1 lit. a GDPR). You may revo­ke the con­sent you have given to the archi­ving of data, the e‑mail address and the use of this infor­ma­ti­on for the sen­ding of the news­let­ter at any time, for instance by cli­cking on the “Unsub­scri­be” link in the news­let­ter. This shall be without pre­ju­di­ce to the law­ful­ness of any data pro­ces­sing tran­sac­tions that have taken place to date.

The data depo­si­ted with us for the pur­po­se of sub­scrib­ing to the news­let­ter will be stored by us until you unsub­scri­be from the news­let­ter or the news­let­ter ser­vice pro­vi­der and dele­ted from the news­let­ter dis­tri­bu­ti­on list after you unsub­scri­be from the news­let­ter or after the pur­po­se has cea­sed to app­ly. We reser­ve the right to dele­te or block e‑mail addres­ses from our news­let­ter dis­tri­bu­ti­on list at our own dis­cre­ti­on wit­hin the scope of our legi­ti­ma­te inte­rest in accordance with Art. 6(1)(f) GDPR.

After you unsub­scri­be from the news­let­ter dis­tri­bu­ti­on list, your e‑mail address may be stored by us or the news­let­ter ser­vice pro­vi­der in a black­list to pre­vent future mai­lings. The data from the black­list is used only for this pur­po­se and not mer­ged with other data. This ser­ves both your inte­rest and our inte­rest in com­ply­ing with the legal requi­re­ments when sen­ding news­let­ters (legi­ti­ma­te inte­rest wit­hin the mea­ning of Art. 6 para. 1 lit. f GDPR). The sto­rage in the black­list is inde­fi­ni­te. You may object to the sto­rage if your inte­rests out­weigh our legi­ti­ma­te interest.

 

7. Plug-ins and tools

You­Tube with expan­ded data pro­tec­tion integration

Our web­site embeds vide­os of the video por­tal You­Tube. The ope­ra­tor of You­Tube is Goog­le Ire­land Limi­ted (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ireland.

We use You­Tube in the expan­ded data pro­tec­tion mode. Accord­ing to You­Tube, this mode ensu­res that You­Tube does not store any infor­ma­ti­on about visi­tors to this web­site befo­re they watch the video. Nevertheless, this does not necessa­ri­ly mean that the sharing of data with You­Tube part­ners can be ruled out as a result of the expan­ded data pro­tec­tion mode. For instance, regard­less of whe­ther you are watching a video, You­Tube will always estab­lish a con­nec­tion with the Goog­le Dou­ble­Click network.

As soon as you start to play a You­Tube video on this web­site, a con­nec­tion to YouTube’s ser­vers will be estab­lis­hed. As a result, the You­Tube ser­ver will be noti­fied, which of our pages you have visi­ted. If you are log­ged into your You­Tube account while you visit our site, you enab­le You­Tube to direct­ly allo­ca­te your brow­sing pat­terns to your per­so­nal pro­fi­le. You have the opti­on to pre­vent this by log­ging out of your You­Tube account.

Fur­ther­mo­re, after you have star­ted to play a video, You­Tube will be able to place various coo­kies on your device or com­pa­ra­ble tech­no­lo­gies for reco­gni­ti­on (e.g. device fin­ger­prin­ting). In this way You­Tube will be able to obtain infor­ma­ti­on about this website’s visi­tors. Among other things, this infor­ma­ti­on will be used to gene­ra­te video sta­tis­tics with the aim of impro­ving the user friend­li­ness of the site and to pre­vent attempts to com­mit fraud.

Under cer­tain cir­cum­s­tan­ces, addi­tio­nal data pro­ces­sing tran­sac­tions may be trig­ge­red after you have star­ted to play a You­Tube video, which are bey­ond our control.

The use of You­Tube is based on our inte­rest in pre­sen­ting our online con­tent in an appe­aling man­ner. Pur­suant to Art. 6 Sect. 1 lit. f GDPR, this is a legi­ti­ma­te inte­rest. If a cor­re­spon­ding agree­ment has been reques­ted, the pro­ces­sing takes place exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR; the agree­ment can be revo­ked at any time.

For more infor­ma­ti­on on how You­Tube hand­les user data, plea­se con­sult the You­Tube pri­va­cy noti­ce under: https://policies.google.com/privacy?hl=en.

Goog­le reCAPTCHA

We use “Goog­le reCAP­T­CHA” (her­ein­af­ter refer­red to as “reCAP­T­CHA”) on this web­site. The pro­vi­der is Goog­le Ire­land Limi­ted (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ireland.

The pur­po­se of reCAP­T­CHA is to deter­mi­ne whe­ther data ent­e­red on this web­site (e.g., infor­ma­ti­on ent­e­red into a con­ta­ct form) is being pro­vi­ded by a human user or by an auto­ma­ted pro­gram. To deter­mi­ne this, reCAP­T­CHA ana­ly­zes the beha­vi­or of the web­site visi­tors based on a varie­ty of para­me­ters. This ana­ly­sis is trig­ge­red auto­ma­ti­cal­ly as soon as the web­site visi­tor enters the site. For this ana­ly­sis, reCAP­T­CHA eva­lua­tes a varie­ty of data (e.g., IP address, time the web­site visi­tor spent on the site or cur­sor move­ments initia­ted by the user). The data tra­cked during such ana­ly­ses are for­war­ded to Google.

reCAP­T­CHA ana­ly­ses run ent­i­re­ly in the back­ground. Web­site visi­tors are not aler­ted that an ana­ly­sis is underway.

Data are stored and ana­ly­zed on the basis of Art. 6 Sect. 1 lit. f GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in the pro­tec­tion of the operator’s web­sites against abu­si­ve auto­ma­ted spy­ing and against SPAM. If a respec­ti­ve decla­ra­ti­on of con­sent has been obtai­ned, the data will be pro­ces­sed exclu­si­ve­ly on the basis of Art. 6 Sect. 1 lit. a DGDPR. Any such con­sent may be revo­ked at any time.

For more infor­ma­ti­on about Goog­le reCAP­T­CHA plea­se refer to the Goog­le Data Pri­va­cy Decla­ra­ti­on and Terms Of Use under the fol­lowing links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

 

8. Our social media presences

Data pro­ces­sing through social media

We main­tain publicly avail­ab­le pro­files in social media. The indi­vi­du­al social media we use can be found below.

Social media such as Face­book, Twit­ter etc. can gene­ral­ly ana­ly­ze your user beha­vi­or com­pre­hen­si­ve­ly if you visit their web­site or a web­site with inte­gra­ted social media con­tent (e.g. like but­tons or ban­ner ads). When you visit our pre­sen­ces in social media, nume­rous data pro­tec­tion-rele­vant pro­ces­sing ope­ra­ti­ons are triggered.

In detail:

If you are log­ged in to your social media account and visit our social media pre­sence, the ope­ra­tor of the social media por­tal can assign this visit to your user account. Under cer­tain cir­cum­s­tan­ces, your per­so­nal data may also be recor­ded if you are not log­ged in or do not have an account with the respec­ti­ve social media por­tal. In this case, this data is collec­ted, for examp­le, via coo­kies stored on your device or by record­ing your IP address.

Using the data collec­ted in this way, the ope­ra­tors of the social media por­tals can crea­te user pro­files in which their pre­fe­ren­ces and inte­rests are stored. This way you can see inte­rest-based adver­ti­sing insi­de and out­side of your social media pre­sence. If you have an account with the social net­work, inte­rest-based adver­ti­sing can be dis­play­ed on any device you are log­ged in to or have log­ged in to.

Plea­se also note that we can­not retrace all pro­ces­sing ope­ra­ti­ons on the social media por­tals. Depen­ding on the pro­vi­der, addi­tio­nal pro­ces­sing ope­ra­ti­ons may the­re­fo­re be car­ri­ed out by the ope­ra­tors of the social media por­tals. Details can be found in the terms of use and pri­va­cy noti­ce of the respec­ti­ve social media portals.

Legal basis

Our social media pre­sen­ces should ensu­re the widest pos­si­ble pre­sence on the Inter­net. This is a legi­ti­ma­te inte­rest wit­hin the mea­ning of Art. 6 (1) lit. f GDPR. The ana­ly­sis pro­ces­ses initia­ted by the social net­works may be based on diver­gent legal bases to be spe­ci­fied by the ope­ra­tors of the social net­works (e.g. con­sent wit­hin the mea­ning of Art. 6 (1) (a) GDPR).

Respon­si­bi­li­ty and asser­ti­on of rights

If you visit one of our social media pre­sen­ces (e.g. Lin­kedin), we, tog­e­ther with the ope­ra­tor of the social media por­tal, are respon­si­ble for the data pro­ces­sing ope­ra­ti­ons trig­ge­red during this visit. You can in princip­le pro­tect your rights (infor­ma­ti­on, cor­rec­tion, dele­ti­on, limi­ta­ti­on of pro­ces­sing, data por­ta­bi­li­ty and com­p­laint) vis-à-vis us as well as vis-à-vis the ope­ra­tor of the respec­ti­ve social media portal.

Plea­se note that des­pi­te the shared respon­si­bi­li­ty with the social media por­tal ope­ra­tors, we do not have full influ­ence on the data pro­ces­sing ope­ra­ti­ons of the social media por­tals. Our opti­ons are deter­mi­ned by the com­pa­ny noti­ce of the respec­ti­ve provider.

Sto­rage time

The data collec­ted direct­ly by us via the social media pre­sence will be dele­ted from our sys­tems as soon as the pur­po­se for their sto­rage lap­ses, you ask us to dele­te it, you revo­ke your con­sent to the sto­rage or the pur­po­se for the data sto­rage lap­ses. Stored coo­kies remain on your device until you dele­te them. Man­da­to­ry sta­tu­to­ry pro­vi­si­ons — in par­ti­cu­lar, reten­ti­on peri­ods — remain unaffected.

We have no con­trol over the sto­rage dura­ti­on of your data that are stored by the social media ope­ra­tors for their own pur­po­ses. For details, plea­se con­ta­ct the social net­work ope­ra­tors direct­ly (e.g. in their pri­va­cy noti­ce, see below).

Indi­vi­du­al social networks

Twit­ter

We use the short mes­sa­ge ser­vice Twit­ter. The pro­vi­der is Twit­ter Inter­na­tio­nal Com­pa­ny, One Cum­ber­land Place, Feni­an Street, Dub­lin 2, D02 AX07, Ireland.

You can cus­to­mi­ze your Twit­ter pri­va­cy set­tings in your user account. Click on the fol­lowing link and log in: https://twitter.com/personalization.

Data trans­mis­si­on to the US is based on the Stan­dard Con­trac­tu­al Clau­ses (SCC) of the Euro­pean Com­mis­si­on. Details can be found here: https://gdpr.twitter.com/en/controller-to-controller-transfers.html.

For details, see the Twit­ter pri­va­cy noti­ce: https://twitter.com/privacy.

Insta­gram

The pro­vi­der is Insta­gram Inc., 1601 Wil­low Road, Men­lo Park, CA, 94025, USA.

Data trans­mis­si­on to the US is based on the Stan­dard Con­trac­tu­al Clau­ses (SCC) of the Euro­pean Com­mis­si­on. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendumhttps://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.

For details on how they hand­le your per­so­nal infor­ma­ti­on, see the Insta­gram pri­va­cy noti­ce: https://help.instagram.com/519522125107875.

XING / kununu

The pro­vi­der is New Work SE, Damm­tor­stra­ße 30, 20354 Ham­burg, Ger­ma­ny. Details on their hand­ling of your per­so­nal data can be found in the XING pri­va­cy noti­ce: https://privacy.xing.com/de/datenschutzerklaerung.

Lin­kedIn

The pro­vi­der is the Lin­kedIn Ire­land Unli­mi­ted Com­pa­ny, Wil­ton Pla­za, Wil­ton Place, Dub­lin 2, Ire­land. Lin­kedIn uses adver­ti­sing cookies.

If you want to dis­able Lin­kedIn adver­ti­sing coo­kies, plea­se use the fol­lowing link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data trans­mis­si­on to the US is based on the Stan­dard Con­trac­tu­al Clau­ses (SCC) of the Euro­pean Com­mis­si­on. Details can be found here: https://www.linkedin.com/legal/l/dpa und https://www.linkedin.com/legal/l/eu-sccs.

For details on how they hand­le your per­so­nal infor­ma­ti­on, plea­se refer to Lin­kedIn’s pri­va­cy noti­ce: https://www.linkedin.com/legal/privacy-Notice.

Vimeo

The pro­vi­der is Vimeo, Inc., 555 West 18th Street, New York 10011, USA.

Data trans­mis­si­on to the US is based on the Stan­dard Con­trac­tu­al Clau­ses (SCC) of the Euro­pean Com­mis­si­on and, accord­ing to Vimeo, on “legi­ti­ma­te busi­ness inte­rests”. Details can be found here: https://vimeo.com/privacy.

Details on how they hand­le your per­so­nal data can be found in the Vimeo pri­va­cy noti­ce: https://vimeo.com/privacy.

You­Tube

The pro­vi­der is Goog­le Ire­land Limi­ted, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land. Details on how they hand­le your per­so­nal data can be found in the You­Tube pri­va­cy noti­ce: https://policies.google.com/privacy?hl=en.