PRIVACY POLICY

Status: June 2023

We are pleased that you are visiting our website. Below we inform you about how we process your data in accordance with Article 13 of the General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for the processing described below is the entity named in the Imprint.

2. Usage data

When you visit our websites, usage data is temporarily evaluated on our web server as log files for statistical purposes in order to improve the quality of our websites. This dataset includes:

name and address of the requested content,
date and time of the request,
amount of data transferred,
access status (content transferred / not found),
description of the web browser and operating system used,
referrer link (the page from which you accessed ours),
IP address of the requesting device (shortened so that it is no longer directly attributable to a person).

The log data is evaluated only in anonymised form.

3. Storage of the full IP address for security purposes

In addition, we store the full IP address transmitted by your web browser strictly for a limited purpose for seven days in order to detect, limit and eliminate attacks on our websites. After this period, the IP address is deleted or anonymised. The legal basis is Art. 6(1) sentence 1 lit. f GDPR (legitimate interest).

4. Data security

To protect your data from unauthorised access as comprehensively as possible, we take technical and organisational measures. We use TLS encryption for data transmission between your device and our server. You can usually recognise this by the closed padlock symbol and an address beginning with https://.

5. Anonymous visitor measurement

We carry out anonymous visitor measurement on our websites. For this purpose, server log data and the shortened IP address are evaluated. No conclusions can be drawn about your person.

6. Note on data transfers to the USA and other third countries

We use, among other things, tools from providers based in the USA or other third countries without an adequate level of data protection. If these tools are active, your personal data may be transferred to such third countries and processed there. We point out that a level of data protection comparable to the EU cannot be guaranteed in these countries. For example, US companies may be obliged to disclose personal data to security authorities without effective legal remedies for data subjects. We have no influence on these processing activities.

7. Cookies

We use cookies on our websites. Cookies are small text files that can be stored and read on your device. We distinguish between session cookies (deleted when you close your browser) and persistent cookies (stored beyo the display of the website. You can configure your browser to inform you about cookies, delete them, and prevent new cookies. Please note that the website may not be displayed optimally and some functions may not be available.

8. Tools

Google Analytics

This website uses Google Analytics, provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland. Google Analytics allows us to analyse wean be revoked at any time via the cookie settings. Data may b

Matomo Analytics

We use Matomo (Matomo.org, 150 Willis, Wellington, New Zealand) to design our webpages to meeen via our cookie banner. Cookies are deleted after 13 months or upon withdrawal of consent.

iThemes Security

We use iThemes Security (iThemes Media LLC, 1720 South Kelly Avenue, Edmond, OK 73013, USA) to protect against unauthorised

Meta Pixel (Facebook Pixel)

We use the Meta Pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, for conversion measuremeia cookie settings. Data may b

LinkedIn Insight Tag

We use the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) to receive aggregated information about visitors and to meastimate interest (Art. 6(1) lit. f GDPR). Data may be transferred to the USA and is safeguarded via Standard Contractual Clauses.

Google Tag Manager

This website uses Google Tag Manager (Google Ireland Limited). Tag Manager itself does not create user profiles, does not store cookies, and performs no independent analyses; it manages tags that may collect data.

Google AdSense

We use Google AdSense (Google Irie

Google Fonts (local hosting)

We use Google Fonts locally; no connection to Google servers is established.

9. Hosting and Content Delivery Networks (CDN)

We host our website externally. Personal data collected on this website is stored on the servers of the hosting provider. The external hosting serves contract fulfilment (Art. 6(1) lit. b GDPR) and our legitimate interest in a secure, fast and efficient provision (Art. 6(1) lit. f GDPR). W

Hosting provider: Kinsta Inc., 8605 Santa Monica Blvd #92581, West Hollywood, CA 90069, USA.

Cloudflare

We use Cloudflare (Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA) as a CDN and DNS to imlauses.

10. External media

Content from social media platforms and video platforms is blocked by default. If cookies for external media are accepted, access does not require additional manual consent.

11. Map services

We embed map services that are not stored on our servers. We initially display locally stored preview images; only after you click a preview are contents loaded from the third-party provider. By clicking, you consent to loading external content. This may involve processing outside the

12. Contact by e-mail, phone or fax

If you contact us by e-mail, phone or fax, your enquiry and the resulting personal data are processed to handle your request. Legal basis: Art. 6(1) lit. b GDPR where related to contract / pre-contract measures, otherwise Art. 6(1) lit. f GDPR (legitimate interest) or consent (Art. 6(1) lit. a GDPR) where applicable.

13. Newsletter

If you subscribe to our newsletter, we process at least your e-mail address. Newsletter delivery requires your explicit consent; you can revoke consent at any time via the unsubscribe link. We may store additional data (e.g. IP at the time of subscription/confirmation) to demonstrate lawful subscription (Art. 6(1) lit. f GDPR).

We use Mailchimp (Rocket Science Group LLC, Atlanta, GA, USA) to send new

14. Audio and video conferences

We use online conference tools to communicate with partners/customers and interested parties. Providers may process technical and usage data (e.g. IP address, device information, meeting metadata). Legal basis: Art. 6(1) lit. b GDPR for contract-related communication and Art. 6(1) lit. f GDPR for efficient communication; where consent is required, Art. 6(1) lit. a GDPR.

Tool used: GoToMeeting (LogMeIn, Inc., Bos

15. Competitions

Data provided in competitions is used exclusively to determine and contact winners (Art. 6(1) lit. f GDPR) and is deleted after the competition ends, unless legal retention obligations apply.

16. Online applications

We process personal data submitted in online applications in accordance with applicable law, in particular § 26 BDSG (Germany), solely for the purpose of applicant selection. Unsuccessful applications are deleted after 6 months unless you consent to longer retention (Art. 6(1) lit. a GDPR).

17. Your rights

You have the rights of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), withdrawal of consent (Art. 7) and objection (Art. 21), as well as the right to lodge a complaint with a supervisory authority (Art. 77).

18. Data Protection Officer

Datenschutz Süd GmbH
Wörthstraße 15
97082 Würzburg
Web: https://www./
E-mail:

If you contact our Data Protection Officer, please specify the controller named in the Imprint.

You can access our services via Easyweb.