Privacy Polic

Responsible

for data processing within the meaning of the General Data Protection Regulation (DSGVO) and other provisions of data protection law is

SONAX GmbH
Münchener Str. 75
86633 Neuburg
Germany

Phone: +49 / 84 31 / 53-0
E-mail: [email protected]
Internet: www.sonax.de

Data Protection Officer

of those responsible:

Ms Vera Schneider
E-mail: [email protected]

otherwise reachable under the contact details of the responsible person.

Protection of your personal data

Data protection and the protection of your personality are important to us. Accordingly, we only process personal data in accordance with the applicable legal provisions for data protection and data security, in particular the General Data Protection Regulation (DSGVO), the Federal Data Protection Act (BDSG) and the Telecommunications Telemedia Data Protection Act (TTDSG). In doing so, we are guided by the principle of data avoidance and data economy. We require our employees to maintain confidentiality and secrecy.

Our website can be used without registration, i.e. without actively disclosing your identity or manually entering personal data. Nevertheless, personal data is collected each time you visit our website. It may also be necessary to provide your personal data in the course of use, e.g. when you contact us. The following data protection declaration informs you about the processing of your personal data when using our website, the measures taken to protect your data and your rights as a data subject.

General principles for the processing of personal data

1. description of the processing of personal data

We use IT systems on our websites to provide services to our users, where we process the personal data described in more detail below.

2. legal bases for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) lit. a DSGVO serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis in conjunction with a concretising special enabling norm.

If the processing is necessary to protect a legitimate interest of the controller or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.

3. disclosure of data, processors, external providers

Data transmission

Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties

if you have given your express consent to this in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO,
if the disclosure is necessary for the assertion, exercise or defence of legal claims pursuant to Art. 6 (1) sentence 1 lit. f DSGVO and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.
in the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c DSGVO,
if this is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO.

Processor

The transfer of your data to order processors only takes place within the framework of the legal provisions, in particular in accordance with Art. 28 DSGVO. We have concluded a service agreement as well as a valid contract for commissioned processing with all processors. The processor will only process the personal data on our instructions and for the purposes described, in particular for the fulfilment of the contract.

Your data is protected against loss, misuse and unauthorised or unauthorised access, disclosure, modification or deletion. We log access, collect access passwords and encrypt data unless this fundamentally affects our services.

External providers and links

On our website, you may also find information and/or services from other providers who collect personal data as part of their offers. Please note that we are not responsible for the processing of this data, but only the external provider, where other conditions may apply.

This website may contain links to websites of other providers. Please note that this privacy policy applies exclusively to our website. We cannot check whether external providers comply with the applicable data protection regulations.

4. data deletion and storage period

The personal data of the data subjects will be deleted or blocked as soon as the purpose of the storage no longer applies, e.g. the storage of the data is no longer necessary for the performance of a contract or for an overriding legitimate interest. Storage may also take place if this is provided for by the European or national legislator in regulations, laws or other provisions to which the responsible party is subject. Accordingly, the data will be deleted or blocked if a storage period prescribed by the aforementioned standards expires.

Visit our website

1. description and scope of data processing

When you visit our website www.sonax.de, the browser used on your end device automatically sends information to the server of our website. This information is temporarily stored in a log file. The following information is collected without your intervention and stored until automatic deletion:

IP address of the user (requesting computer)
Date and time of access
Name and URL of the accessed file/page
Website from which the access is made (referrer URL)
Browser used and the operating system of your computer
Name of your access provider

The log files contain IP addresses or other data that allow an assignment to a user and are therefore predominantly classified as personal data.

2. purpose of the data processing

The above data will be processed by us for the following purposes:

Ensuring a smooth connection of the website
Ensuring a comfortable use of our website
Evaluations of system security and stability
Evaluation of user behaviour
Other administrative purposes

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. In this specific context, we do not use the collected data for the purpose of drawing conclusions about your person for marketing purposes. These purposes result in our legitimate interest according to Art. 6 para. 1 p. 1 lit. f DSGVO.

Anonymous information may be statistically analysed by us in order to optimise our website and the technology behind it. In addition, we use cookies or other analysis services when you visit our website. You will find more detailed explanations on this below in this data protection declaration.

3. legal basis of the data processing

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b DSGVO, as a user relationship exists, as well as Art. 6 para. 1 sentence 1 lit. f DSGVO. Our legitimate interest follows from the data processing purposes described above.

4. duration of the storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is generally the case when the respective session has ended. If IP addresses are stored in log files in an unabbreviated form, the personal data is deleted or anonymised after seven days at the latest. Storage beyond this is possible in connection with cookies or analysis services. In this case, the IP addresses of the users are deleted or shortened so that it is not possible to assign the calling client. You will find more detailed explanations on this below in this data protection declaration.

5. possibility of objection and removal

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

Forms on the website, bookings, enquiries, contact, newsletter

If you contact us by e-mail or contact form regarding questions of any kind, you give us your voluntary consent to process your personal data for the purpose of contacting you. This serves the purpose of assigning the enquiry and subsequently answering it.

The following personal data is collected and processed in the various forms:

Request Form Authorised Detailer
First Name, Last Name, Company Name, Email, Postcode, Phone Number, Country

Contact form
First name, last name, e-mail, telephone number, street, house number, postcode, city, country

Seminar enquiry form
First name, last name, company, e-mail, telephone, street, house number, postcode

Seminar booking
Company, first name, surname, street, house number, postcode, town, telephone number, fax number, e-mail

Product enquiry
First name, last name, e-mail, street, house number, postcode, city, country

We process the personal data to process your enquiries, to provide the services you have requested and to ensure compliance with laws and regulations.

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. a and b DSGVO, as in each case your consent for the use of a form or the sending of information is given and/or a contractual service is provided.

The personal data collected will be stored for as long as is necessary for the purposes described. Insofar as the data is subject to statutory storage obligations, for example in accordance with the AO or the HGB, it must be stored for six or ten years. Otherwise, the general storage principles described above apply.

1. description and scope of data processing

On our website, you have the option of subscribing to a free newsletter. When registering for the newsletter, the following data is collected via the input mask and transmitted to us:

Name of the user
IP address of the calling computer
Date and time of registration
Information about the browser type and version used
The operating system of the user

During the registration process, your consent for the processing of data is obtained by the double opt-in procedure (double consent) with reference to this privacy policy. After the first act of consent, the user receives a confirmation e-mail for the second consent. The verified user gives the website operator permission to send him newsletters by e-mail. This procedure forms the basis for legally secure e-mail marketing. Consent for the newsletter can also be obtained by other means, e.g. in writing or by e-mail.

Based on your consent, we will use the personal data we hold to inform you about our products, services and events.

For the dispatch of the newsletter, the data is passed on to external service providers by way of order processing and deleted again after the dispatch has been completed. The data is used exclusively for sending the newsletter.

2. purpose of the data processing

The collection of the e-mail address and other personal data of the user serves to send the newsletter as well as to prevent misuse of the services or the e-mail address used.

3. legal basis of the data processing

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. a and b DSGVO, as your consent has been given for the sending of information and a contractual service is provided.

4. duration of the storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's email address is therefore stored for as long as the subscription to the newsletter is active. The other personal data collected during the registration process is usually deleted after a period of seven days.

5. possibility of objection and removal

You can revoke your consent at any time with effect for the future and cancel the newsletter, both via the unsubscribe link in the individual mailings and informally, e.g. to [email protected]. You can find more information on consent in the chapter "Rights of the data subject".

Cookies, plugins and web analytics

In the following, we describe in detail which cookies, analysis tools and plugins we use, which data is processed in the process and how you can deactivate the analysis tools. The term "cookies" is also used as a generic term for plugins and analysis tools of all kinds.

1. what are cookies?

Cookies are used when using our website. Cookies are small files that are automatically created by the browser and stored on the user's end device (laptop, tablet, smartphone or similar) when visiting the website. Cookies do not cause any damage to the end device and do not contain viruses, Trojans or other malware. Information is stored in the cookie that is related to the specific end device used. Cookies can be automatically recognised and read during a current visit or during the next visit. However, this does not mean that the site operator gains direct knowledge of the user's identity.

Cookies make visiting the website more user-friendly by remembering personal settings or serve the advertising interests of the site operator. Cookies make it possible, in particular, to determine the frequency of use and number of users of the pages, to analyse behaviour patterns of page use, but also to make our offer more customer-friendly. So-called session cookies are used, among other things, to recognise that the user has already visited individual pages of the website. These are automatically deleted after the page is left.

When you leave our site and go to third party sites, cookies may also be set by the target site. We are not legally responsible for these cookies. For the use of these cookies by third parties and the information stored in them, please compare the data protection declarations there.

2. legal basis for cookies, analysis tools and plugins

We may store cookies on your device if they are technically necessary for the operation of the website. Necessary cookies help to make a website usable by enabling basic functions such as page navigation or language selection. The website cannot function in part without such cookies. The data thereby processed for the named purposes serve to protect our legitimate interests that prevail in the context of a balancing of interests and are therefore necessary in accordance with the principle of proportionality. The legal basis for technically necessary cookies is Art. 6 para. 1 p. 1 lit. f DSGVO in conjunction with. § 25 para. 2 no. 2 TTDSG.

For all other cookie types, we require your consent. You can specifically select these as explicit opt-in consents in a dialogue window (cookie consent window) during your first visit to our website. This sets a cookie in your system that contains your cookie settings and signals to our system which cookies have been accepted each time you visit our website. You can change or revoke your cookie settings on our website at any time. Instructions on how to deactivate cookies can be found below. The legal basis for all other cookie types is Art. 6 para. 1 p. 1 lit. a DSGVO, § 25 para. 1 TTDSG, insofar as you have given your consent.

If you delete all cookies, this will have the effect that the cookie with your cookie settings will also be deleted, so that you will have to determine your cookie preferences again. Limiting cookies may result in limited functionality of the website.

How do we use cookies, analytics tools and plugins? Purpose of data processing

Within the scope of cookies, analysis tools and plug-ins, the name of the Internet service provider, requested files, IP address, access to individual pages, browser type, screen resolution, colour depth, operating system, search terms and reference pages from which you have accessed our websites are processed, among other things.

The data contained in session cookies or other cookies are processed by us for the following purposes:

Ensuring the smooth operation of the website
Ensuring a comfortable use of our website
System security and stability
for other administrative or promotional purposes

The data collected may be processed and used to improve the marketing of the websites, to increase the user-friendliness of the websites and for other optimisation purposes. The analysis required for marketing and optimisation purposes generally does not allow any direct conclusions to be drawn about your person or personal data. In particular, no names, addresses, telephone numbers or other data that can be directly assigned to individuals are stored. The analysis only provides aggregated data, such as the number of visitors and page views.

Among other things, cookies allow us to adapt our website to your wishes, to establish connections between different calls to our website or to save your password in the browser so that you do not have to re-enter it each time.

Cookies may also be used for targeted advertising. Third-party vendors and automated data collection tools may also be permitted to use cookies to help us deliver our own content and ads and measure the effectiveness of our advertising efforts. For registered users, the information collected on our websites is not anonymous. This information may be used in conjunction with other information we know or infer about you, such as your preferences, to provide content, services and advertisements tailored to you.

We currently use the cookies listed and described in more detail in our Cookie Policy on our website.

4. duration of the storage

Some cookies are deleted at the end of the browser session, i.e. after the browser is closed (so-called session cookies). Other cookies remain on the end device and make it possible to recognise the user on the next visit (persistent cookies). The specific duration of storage can be found in our cookie policy and in the overview in the cookie settings of your web browser. In all other respects, the general storage principles outlined above apply.

5. deactivation of cookies

You can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. Complete deactivation of cookies may mean that you cannot use all the functions of a website.

If you want to exclude cookies from being used, set your browser to delete cookies from your hard drive, block all cookies or warn you before a cookie is stored so that you can decide on a case-by-case basis whether you want the cookie. Each browser differs in the way it manages cookie settings. They are described in more detail in the help menu of each browser. There it is explained how you can change your cookie settings. You can find the respective browser information e.g. under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen, https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen, https://support.mozilla.org/de/kb/Cookies-blockieren

Firefox for Android: https://support.mozilla.org/de/kb/cookies-aktivieren-deaktivieren-firefox-android

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647

Opera: https://help.opera.com/de/latest/web-preferences/

You will also find the options for deactivation directly in the description of the cookies, plugins and tracking measures.

PIWIK PRO

We use Piwik PRO Analytics Suite as our website/app analytics software. We collect data about website visitors using cookies. The information collected includes, for example, the visitor's IP address, operating system, browser ID, browsing activity and other information. View the scope of data collected by Piwik PRO.

We calculate metrics such as bounce rate, page views, sessions and the like to understand how our website/app is used. We may also create visitor profiles based on browsing history to analyse visitor behaviour, display personalised content and run online campaigns.

We host our solution on Orange Cloud in Sweden/France and store the data for 14/25 months.

Purpose of data processing: Analytics and conversion tracking based on your consent. Legal basis: Art. 6 (1)(a) GDPR.

Piwik PRO does not share data about you with other sub-processors or third parties and does not use it for its own purposes. For more information, please see Piwik PRO's privacy policy.

Google Maps

This website uses Google Maps to display maps and to create directions. Google Maps is a service of Google LLC , 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). If you use the advanced functions of Google, for example by clicking on the map displayed, you are using a Google service outside our sphere of influence. In this case, the guidelines and information provided by Google in this context will apply.

On the Google website you will find further information on the Google Terms of Use, additional terms of use for Google Maps/Google Earth, the legal notices for Google Maps/Google Earth, and the Google Privacy Policy. In the privacy policy, you will find information on what data is collected for what purpose and what Google does with this data.

The processing of personal data by Google also takes place in the USA. To ensure an adequate level of data protection for data transfers to the US, Google concludes the EU standard contractual clauses with its customers, see here as well as here. The wording of the EU standard data protection clauses can be found at https://gsuite.google.com/terms/mcc_terms.html. Google is also certified under the EU-U.S. Data Privacy Framework. A current certificate can be viewed here. This commits Google to comply with the standards and regulations of European data protection law.

The legal basis for the processing and transmission of personal data to Google is your consent pursuant to Art. 6 para. 1 S. 1 lit. a DSGVO is your consent. Furthermore, we also base the use of Google on Art. 6 para. 1 lit. f DSGVO, as the processing serves the user convenience of the website and is therefore necessary to protect our legitimate interests.

The general deactivation of cookies is described in the Cookies section.

Recaptcha

In order to protect the forms on this website, we use the "reCAPTCHA" service of Google LLC , 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter "Google". The use of this service makes it possible to distinguish whether the corresponding input is of human origin or is misused through automated machine processing. The integration of the service requires the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. If you wish to prevent this, you must block the saving of cookies in your browser. The use of the information obtained is in accordance with Google's terms of use:

https://www.google.com/intl/de/policies/privacy/

The general deactivation of cookies is described in the Cookies section.

Google Tag Manager

We use the Google Tag Manager service from Google. "Google" is a group of companies and consists of Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA as well as other affiliated companies of Google LLC.

We have concluded an order processing contract with Google. The Google Tag Manager is an auxiliary service and itself only processes personal data for technically necessary purposes. The Google Tag Manager takes care of loading other components, which in turn may collect data. The Google Tag Manager does not access this data. For more information on the Google Tag Manager, please refer to Google's privacy policy.

Please note that American authorities, such as intelligence agencies, could potentially gain access to personal data that is inevitably exchanged with Google on the basis of the Internet Protocol (TCP) when this service is integrated, due to American laws such as the Cloud Act.

The legal basis for the processing and transmission of personal data to Google is Art. 6 para. 1 sentence 1 lit. a DSGVO, § 25 para. 1 TTDSG, insofar as you have given your consent. Furthermore, we also base the use of Google on Art. 6 para. 1 lit. f DSGVO, as the processing is carried out to analyse user behaviour and is therefore necessary to protect our legitimate interests.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland or Google LLC , 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). In this context, pseudonymised usage profiles are created and cookies are used. The information generated by cookies about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address), date, time of server request, number of visits and the pages accessed are transmitted to a Google server in the USA and stored there.

The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website and internet use for the purposes of market research and demand-oriented design of these internet pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. By activating IP anonymisation on this website, the IP address is shortened before transmission within the EU or EEA (IP masking). Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymised IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The legal basis for the processing of personal data is Art. 6 para. 1 sentence 1 lit. a DSGVO, insofar as you have given your consent.

You may refuse the use of cookies by selecting the appropriate settings on your browser (see above for details). However, we would like to point out that in this case not all functions of this website can be used to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Google Ads

This website uses Google Ads, an online advertising programme for the targeted placement of advertisements by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland or Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter "Google").

Google Ads enables us to use so-called keyword targeting, i.e. the advertising targeting of page users during search queries in search engines at the time of their engagement with the searched topic. This allows us to display our advertisements in the Google search engine or on the websites of third party providers when the page user enters certain search terms in the Google search engine.

In addition, Google Ads enables us to target specific target groups. In online marketing, targeting means addressing precisely defined target groups. Based on the user data collected by Google (e.g. user locations, interests, etc.), we can display targeted advertisements. As a result, we as the operator of the website can quantitatively evaluate which search terms have led to the display of our advertisements and how many advertisements have led to a corresponding click behaviour.

Google Ads uses cookies that are stored on your terminal device, in particular in the browser, when you click on one of our Google Ads advertisements. The use of cookies serves to evaluate user behaviour. Consequently, we pass on data to Google for processing and must conclude an order processing contract with Google in accordance with Art. 28 DSGVO.

You can object to data processing at any time or prevent the storage of cookies by setting your browser software accordingly (see in detail above). However, we would like to point out that in this case not all functions of this website can be used to their full extent.

We have no influence on how, to what extent and for how long Google processes the accruing data. According to information from Google, the data is stored on secure servers and processed in encrypted form. In many cases, the cookies are stored for 30 days to three months. Further information on the use of cookies by Google can be found here.

We have concluded an order processing agreement with Google regarding Google Ads. The details of the commissioned data processing, in particular regarding contractual terms, deletion, etc., can be found here.

Google transmits data to third countries, although we have no detailed knowledge of this. The processing of personal data by Google also takes place in the USA. To ensure an adequate level of data protection for data transfers to the USA, Google concludes the EU standard contractual clauses, see here as well as here, each with a variety of further data protection information. The wording of the EU standard data protection clauses can be found, for example, here or here. Google is also certified under the EU-U.S. Data Privacy Framework. A current certificate can be viewed here. Through the Data Privacy Framework and the standard contractual clauses, Google undertakes to comply with the standards and regulations of European data protection law.

The legal basis for the processing of personal data by the Google Ads service is Art. 6 para. 1 sentence 1 lit. a DSGVO, § 25 para. 1 TTDSG, insofar as you have given your consent. Furthermore, we also base the use of Google Ads on Art. 6 (1) lit. f DSGVO, as the processing of the data is carried out to optimise offers, service and marketing measures and therefore serves to protect our legitimate interests.

Further information on data protection in connection with Google Ads can be found here and in Google's general data protection declaration.

Hotjar

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) lit. a DSGVO serves as the legal basis.

Our websites use the tracking and feedback tool "Hotjar" (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, + 1 (855) 464-6788, [email protected]). The use includes the "Surveys" mode of operation. This makes it possible to associate data, sessions and interactions across multiple devices with a pseudonymous user ID and thus analyse a user's activities across devices.

Hotjar uses cookies to process data, such as standard internet log data and details of behaviour patterns when visiting our website. This is to provide you with a better web experience and to facilitate the use of certain features. Cookies are small files placed on computers or other devices by websites for the purpose of logging and improving the functionality of the website. Hotjar stores this data in a pseudonymised user profile. They are not processed to identify individual users or to match them with other data of a user.

Cookies are stored on your device and you have full control over their use. You can deactivate cookies or restrict the transmission of data through cookies by changing the settings of your web browser. Cookies that have already been stored can be deleted at any time. After deactivating cookies, you may no longer be able to use the full range of functions on our website.

The general deactivation of cookies is described in the Cookies section.

Further information on the cookies used by Hotjar can be found at https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies. In addition, Hotjar offers further data protection information at https://www.hotjar.com/privacy.

In addition, you have the option of ending the analysis of your usage behaviour by way of the so-called opt-out. By confirming the link https://www.hotjar.com/opt-out, a cookie is stored on your end device via your internet browser, which prevents further analysis. Please note, however, that you will have to click on the above link again if you delete the cookies stored on your end device.

Access and disclosure to third parties

For the purpose of analysing certain technical data and for data processing and/or storage functions, Hotjar works with a limited number of trusted external service providers. These service providers have been carefully selected by Hotjar and meet high data protection and security standards. Data is disclosed to the service providers only to the extent necessary to provide the services offered, and Hotjar contractually obliges them to keep all data disclosed to them by us confidential and to use personal data only in accordance with Hotjar's instructions.

Hotjar will only disclose your information to third parties without your express consent if they are required to do so by law, as described in the Terms of Service, or pursuant to a governmental or court order.

When visiting a Hotjar-based website, you can prevent Hotjar from collecting your data at any time by going to Hotjar's opt-out page and clicking "Disable Hotjar" or by enabling "Do Not Track (DNT)" in your browser.

Duration of the processing

Hotjar will store your usage data until you withdraw your consent to data processing. All other data, as listed above, will be stored for as long as necessary for the purpose(s) for which it was originally collected or as long as there are legal retention obligations.

Further information on the GDPR compliance of Hotjar

https://www.hotjar.com/legal/compliance/gdpr-commitment

Swiftype Search/Swiftype Autocomplete

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) lit. a DSGVO serves as the legal basis.

Our websites use the "Swiftype" tool for searching (Elasticsearch, Inc., 800 El Camino Real, Suite 350, Mountain View, CA 94040, USA or Elasticsearch B.V., Rijnsburgstraat 11, 1059 AT Amsterdam, Netherlands).

Swiftype uses cookies to process data such as standard internet log data and details of our website search usage patterns. This is to constantly improve our search to provide you with a better search experience. Cookies are small files placed on computers or other devices by websites for the purpose of logging and improving the functionality of the website. Swiftype stores this data in a pseudonymised user profile. They are not processed to identify individual users or to match them with other data of a user.

Cookies are stored on your device and you have full control over their use. You can disable cookies or restrict the transmission of data through cookies by changing the settings of your web browser. Cookies that have already been stored can be deleted at any time. After deactivating cookies, you may no longer be able to use the full range of functions on our website.

The general deactivation of cookies is described in the Cookies section.

In addition, Swiftype offers under

https://www.elastic.co/de/legal/privacy-statement

https://swiftype.com/privacy-and-gdpr-faq

for further information on data protection.

Cloudinary

Our website uses Cloudinary, a cloud-based image and video management service for displaying embedded content. The service provider is the US company Cloudinary Limited (hereinafter Cloudinary), 111 W Evelyn Ave, Suite 206, Sunnyvale, CA 94086, USA.

When you access a page that contains content displayed via Cloudinary, a connection to Cloudinary's server is established and personal data such as your email address in particular is transferred to Cloudinary in the USA. Cloudinary bases the transfer on the Standard Contractual Clauses of the EU Commission to ensure an adequate level of data protection. Further information on the use of the Standard Contractual Clauses by Cloudinary can be found under "Transfer of Personal Information" in the Privacy Policy of Cloudinary.

Data processing serves the purpose of providing you with optimised embedded content. The legal basis for the data processing is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest follows from the described purpose of the data processing. We have concluded a data processing agreement with Cloudinary.

Further data protection information can be found in Cloudinary's Privacy Policy.

Privacy Policy Facebook Fan Page

The responsible party for the Facebook platform as a whole is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland or Meta Platforms Inc, 1 Hacker Way, Menlo Park, California 94025, USA (hereinafter Facebook). The person responsible for our own Facebook page is the person responsible for the website above.

When visiting our Facebook fan page, Facebook collects personal user data, e.g. through the use of cookies, tracking and similar technologies. This also applies to users who are not logged in or registered with Facebook while visiting the page. The types of cookies and tools Facebook uses are described in detail in the Cookie Policy. There you will also find a list of cookies and similar technologies. Under Cookie Settings, you can manage the permitted cookies yourself.

Facebook transfers some of the collected information to affiliated companies in the USA. Facebook bases the transfer on the standard contractual clauses of the EU Commission in order to ensure an appropriate level of data protection. Further information on the use of the standard contractual clauses by Facebook can be found at https://www.facebook.com/legal/terms/dataprocessing and https://www.facebook.com/legal/EU_data_transfer_addendum/update.

Further information on data processing by Facebook as a whole can be found in Facebook's data policy. How and to what extent personal user data is processed by Facebook is not transparent or verifiable for us in detail.

We do not have full access to the personal data processed by Facebook, not even to your profile data. Rather, only the publicly accessible information of your profile is visible to us. You can determine the scope of the publicly accessible information in your profile yourself in the privacy settings under Facebook Settings. There you can, for example, hide your Likes or no longer follow our Facebook page. Then your profile will no longer appear in the list of fans of our fan page.

Regarding your visit to our Facebook fan page, we receive anonymous usage statistics from Facebook with e.g. the following information:

Reach: number and development of people accessing a specific post, ad, etc.; number and development of user interactions with a specific post; ad performance (cost of a click; number of people who have seen an ad).
Followers: Number and development of people who follow our page over a certain period of time.
Demographics: average age of users, gender, place of residence, language

We use the statistical information to find out which content is well received by our users and which interests our users have. This enables us to adapt the offers and contributions on our site to the needs of our users and to continuously improve our site in line with our target groups.

The legal basis for the processing of usage data and statistics is Art. 6 (1) lit. a DSGVO, insofar as you have consented to the processing. Furthermore, the processing of the statistics is based on a legitimate interest pursuant to Art. 6 (1) lit. f DSGVO, whereby our legitimate interest is derived from the above purpose description.

We cannot assign the statistical usage data to a specific profile or user or draw any other conclusions about an individual user. You can use your Facebook settings to decide in which form targeted advertising is displayed to you. You can adjust your advertising preferences yourself in your user account under Advertising Settings.

Facebook compiles the statistics on the basis of usage data to which we have no access. We have entered into a joint responsibility agreement (Controller Addendum) with Facebook, which regulates which data processing operations we or Facebook are responsible for when you visit our Facebook fan page. In this agreement, Facebook has assumed responsibility for the processing of your usage data and has undertaken to protect your rights under the GDPR. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

If you actively contact us, e.g. via posts, comments, forms or chat functions, we process your personal data, e.g. name, contact details, concerns, etc., to process your enquiry and communicate with you. For this purpose, we store your data in our CRM system. The legal basis for this data processing is, depending on the nature of your request, our legitimate interest according to Art. 6 para. 1 lit. f DSGVO to process a general request with you, or Art. 6 para. 1 lit. b DSGVO if your request is directed towards the conclusion of a contract.

Your personal data will only be stored on our systems for as long as is necessary in accordance with the above purposes or for as long as there are statutory retention obligations.

There is no legal or contractual obligation for you to provide your personal data. However, you cannot use our Facebook fan page without Facebook processing your personal data.

For more information about how we process personal data and what rights you have in this regard, please see this privacy notice. With regard to data processing by Facebook, we ask you to use the Facebook email address or contact options directly to exercise your rights. With regard to our data processing, you will find the contact options above.

Privacy policy Instagram page

The responsible party for the Instagram platform as a whole is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland or Instagram, LLC, 1601 Willow Road, Menlo Park, California 94025, USA (hereinafter Instagram). The person responsible for our own Instagram page is the person responsible for the website above.

When visiting our Instagram page, Instagram collects personal user data, e.g. through the use of cookies, tracking and similar technologies. This also applies to users who are not logged in or registered with Instagram while visiting the page. The types of cookies and tools used by Instagram are described in detail in the Cookie Policy. There you will also find a list of cookies and similar technologies as well as further information on how you can manage cookies yourself.

Instagram partially transfers the collected information to affiliated companies in the USA. Instagram bases the transfer on the standard contractual clauses of the EU Commission in order to ensure an adequate level of data protection. Further information on the use of the standard contractual clauses by Instagram can be found at https://www.facebook.com/help/instagram/272603474673152.

Further information on data processing by Instagram as a whole, in particular which personal data Instagram processes for which purposes, can be found in the privacy policy and in the terms of use of Instagram. How and to what extent personal user data is processed by Instagram is not transparent or verifiable for us in detail.

We do not have full access to the personal data processed by Instagram, not even to your profile data. Rather, only the publicly accessible information of your profile is visible to us. You can determine the scope of the publicly accessible information in your profile yourself in the privacy settings under Instagram settings. There you can, for example, no longer follow our Instagram page.

Regarding your visit to our Instagram page, we receive anonymous usage statistics from Instagram with e.g. the following information:

Reach: number and development of people who call up a particular post, ad, etc.; number and development of user interactions with a particular post; ad performance (number of people who have seen an ad/post); from this it is possible to deduce, for example, which ads/posts are better received than others.
Followers: Number and development of people who follow our page over a certain period of time.

Instagram creates the statistics on the basis of usage data to which we have no access. We use the statistical information to find out which content is well received by our users and what interests our users have. This enables us to adapt the offers and posts on our site to the needs of our users and to continuously improve our site in line with our target groups.

We cannot assign the statistical usage data to a specific profile or user or draw any other conclusions about an individual user. You can use your Instagram settings to decide in which form targeted advertising is displayed to you. You can adjust your advertising preferences yourself in your user account under Advertising Settings.

Your personal data will only be stored on our systems for as long as this is required in accordance with the above purposes or for as long as there are statutory retention obligations.

There is no legal or contractual obligation for you to provide your personal data. However, you cannot use our Instagram page without Instagram processing your personal data.

For more information on how we process personal data and what your rights are in this regard, please see this privacy notice. With regard to data processing by Instagram, we ask you to use the Instagram email address or contact options directly to exercise your rights. With regard to our data processing, you can find the contact options above.

Privacy policy YouTube

YouTube is a social network and online video portal of YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google") is responsible for all data processing in the European area.

The person responsible for our own YouTube page is the person responsible for the website above. In addition, our website uses plugins and embedded videos from YouTube.

When you visit our YouTube page, YouTube as the responsible party collects personal data of the users, e.g. through the use of cookies. We cannot trace or influence which user data YouTube processes in detail. We also do not have full access to the processed data or your profile data. We can only view the publicly accessible information of your profile, which you yourself determine in your YouTube settings.

We receive anonymous statistics from YouTube regarding the use of our YouTube page, which include the following information:

Followers: Number of people following our YouTube page, including growth and development over a defined time frame.
Reach: Number of people who see a specific post. Number of interactions on a post. This can be used, for example, to deduce which content is better received than others.
Ad performance: Number of people reached and interacted with a post or paid ad.

We use the statistics, from which we cannot draw any conclusions about individual users, to improve our YouTube site and to respond to the interests of our users. We cannot link the statistical data with the profile data of our users or followers. You can decide via your YouTube settings in which form targeted advertising is shown to you.

If you actively contact us on YouTube, e.g. via comments, forms or chat functions, we process your personal data, e.g. name, contact details, concerns, etc., to process your enquiry and communicate with you. For this purpose, we store your data in our CRM system. The legal basis for this data processing is, depending on the nature of your request, our legitimate interest according to Art. 6 para. 1 lit. f DSGVO to process a general request with you, or Art. 6 para. 1 lit. b DSGVO if your request is directed towards the conclusion of a contract.

Your personal data will only be stored on our systems for as long as is necessary in accordance with the above purposes or for as long as there are statutory retention obligations.

There is no legal or contractual obligation for you to provide your personal data. However, you cannot use our YouTube site without YouTube processing your personal data.

If you visit our websites with a YouTube plugin, a connection is established to the YouTube server and it is communicated which of our pages you are visiting. Videos from YouTube are displayed on our website using a framing technology and can be played directly there. This service is inactive by default, but you can activate and deactivate it at any time by giving your consent. As soon as you activate the consent button with a click and thereby declare your consent to view the content from YouTube, the connection to YouTube is established.

Through the embedding technique, YouTube sets at least one cookie in the user's browser and thus automatically collects personal data of the website visitors, such as the IP address and the behaviour on the page, which are transmitted to Google. The legal basis for the processing of the data is your consent pursuant to Art.6 para. 1 lit. a DSGVO.

The data collected is processed by Google and may also be transferred to countries outside the European Union. We have no influence on the type and scope of the data processed by Google, the use or the transfer of this data to third parties, in particular to countries outside the European Union.

The data processing and transmission by Google takes place regardless of whether or not you have a user account with YouTube or Google. If you are logged in to a user account, your data will be directly assigned to this account. If you do not wish this, you must log out of your user account before visiting our YouTube site or playing a video. The data transmitted to Google will be stored by Google in the form of user profiles and used for advertising and market research purposes as well as for personalised design. With the help of this evaluation, Google can generate demand-optimised advertising (even for users who are not logged in). You can object to the creation of these user profiles. To do so, you must contact Google.

YouTube does not provide its own privacy policy, but refers to Google's privacy policy for the use of YouTube. In Google's privacy policy, you can find out more about data processing by Google as well as your rights and setting options and change your settings yourself. The processing of personal data by Google also takes place in the USA. To ensure an adequate level of data protection for data transfers to the USA, Google concludes the EU standard contractual clauses with its customers, see here and here. The wording of the EU standard data protection clauses can be found at https://gsuite.google.com/terms/mcc_terms.html. Google is also certified under the EU-U.S. Data Privacy Framework. A current certificate can be viewed here. This obliges Google to comply with the standards and regulations of European data protection law.

For more information about how we process personal data and what rights you have in this regard, please see this privacy notice. With regard to data processing by YouTube, we ask you to use the YouTube email address or contact options directly to exercise your rights. With regard to our data processing, you will find the contact options above.

We use YouTube in connection with the "extended data protection mode" function in order to be able to show you videos. The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in improving the quality of our website. According to YouTube, the "enhanced data protection mode" function means that the data described in more detail below is only transmitted to the YouTube server when you actually start a video.

Without this "enhanced data protection", a connection to the YouTube server in the USA is established as soon as you call up one of our Internet pages on which a YouTube video is embedded.

Privacy policy LinkedIn

The responsible party for the LinkedIn platform as a whole is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter LinkedIn). The person responsible for our own LinkedIn page is the person responsible for the website above.

When visiting our LinkedIn page, LinkedIn collects personal user data, e.g. through the use of cookies, tracking and similar technologies. This also applies to users who are not logged in or registered with LinkedIn while visiting the page. The types of cookies and tools LinkedIn uses are described in detail in the Cookie Policy. An individual list of cookies and similar technologies can be found in the cookie table.

LinkedIn may transfer some of the collected information to affiliated companies in the USA. LinkedIn bases the transfer on the standard contractual clauses of the EU Commission in order to ensure an appropriate level of data protection. Further information on the use of the standard contractual clauses by LinkedIn can be found at https://de.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

Further information on data processing by LinkedIn as a whole can be found in LinkedIn's privacy policy. How and to what extent personal user data is processed by LinkedIn is not transparent or verifiable for us in detail.

We do not have full access to the personal data processed by LinkedIn, not even to your profile data. Rather, only the publicly accessible information of your profile is visible to us. You can determine the scope of the publicly accessible information in your profile yourself in your LinkedIn settings.

Regarding your visit to our site, we receive anonymous usage statistics from LinkedIn with the following information:

Reach: number and development of people accessing a specific post, ad, etc.; number and development of user interactions with a specific post.
Followers: Number and development of people who follow our page over a certain period of time.

We cannot assign the statistical usage data to a specific profile or user or draw any other conclusions about an individual user. You can use your LinkedIn settings to determine whether and in what form you are shown targeted advertising.

LinkedIn creates the statistics on the basis of usage data to which we have no access. LinkedIn has assumed responsibility for the processing of the usage data in a Joint Controller Addendum and has committed to safeguarding your rights under the GDPR.

Your personal data will only be stored on our systems for as long as is necessary in accordance with the above purposes or for as long as there are statutory retention obligations.

There is no legal or contractual obligation for you to provide your personal data. However, you cannot use our LinkedIn page without LinkedIn processing your personal data.

For more information about how we process personal data and what rights you have in this regard, please see this privacy notice. With regard to data processing by LinkedIn, we ask you to use the LinkedIn email address or contact options directly to exercise your rights. With regard to our data processing, you will find the contact options above.

Privacy policy Xing

The person responsible for the Xing platform as a whole is New Work SE, Am Strandkai 1, 20457 Hamburg (hereinafter referred to as Xing). The person responsible for our own Xing page is the person responsible for the website above. There is a relationship of joint responsibility, whereby Xing has assumed responsibility for the processing of usage data and has undertaken to safeguard your rights under the GDPR.

When visiting our Xing site, Xing collects personal user data, e.g. through the use of cookies, tracking and similar technologies. This also applies to users who are not logged in or registered with Xing while visiting the site. The types of tracking tools Xing uses are described under Tracking. A list of tracking technologies can be found under third-party providers.

Xing may transfer some of the collected information to recipients in third countries. Xing bases the transfer to unsafe third countries on the Standard Contractual Clauses of the EU Commission in order to ensure an adequate level of data protection. Further information on the use of the standard contractual clauses can be found in Xing's privacy policy under Third Countries.

Further information on data processing by Xing as a whole can be found in Xing's privacy policy or in the associated long version. How and to what extent personal user data is processed by Xing is not transparent or verifiable for us in detail.

We do not have full access to the personal data processed by Xing, not even to your profile data. Rather, we can only view the publicly accessible information in your profile. You can determine the scope of the publicly accessible information in your profile yourself in your Xing settings.

Regarding your visit to our site, we receive anonymous usage statistics (page insights) from Xing with the following information:

Reach: number and development of people accessing a specific post, ad, etc.; number and development of user interactions with a specific post.
Followers: Number and development of people who follow our page over a certain period of time.
Demographics: average age of visitors, gender, place of residence, language

Xing compiles the statistics on the basis of usage data to which we have no access. We cannot assign the statistical data to a specific profile or user or draw any other conclusions about an individual user. You can use your Xing settings to determine whether and in what form you are shown targeted advertising.

Should you actively contact us, e.g. via posts, comments, forms or chat functions, we will process your personal data, e.g. name, contact details, concerns, etc., in order to process your enquiry and communicate with you. For this purpose, we store your data in our CRM system. The legal basis for this data processing is, depending on the nature of your enquiry, our legitimate interest according to Art. 6 (1) lit. f DSGVO, in order to process a general enquiry with you, or Art. 6 (1) lit. b DSGVO, if your enquiry is directed towards the conclusion of a contract.

Your personal data will only be stored on our systems for as long as is necessary in accordance with the above purposes or for as long as there are statutory retention obligations.

There is no legal or contractual obligation for you to provide your personal data. However, you cannot use our Xing site without Xing processing your personal data.

For more information about how we process personal data and what rights you have in this regard, please see this privacy notice. With regard to data processing by Xing, we ask you to directly use the e-mail address or other contact options of Xing to exercise your rights. With regard to our data processing, you will find the contact options above.

Use of Zoom

We use Zoom for video conferences. You can find the relevant data protection regulations here.

Rights of the data subject

You have the different rights outlined below based on the data protection regulations.

1. right to information

You have the right to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

2. right of rectification

In accordance with Art. 16 DSGVO, you have the right to demand the immediate correction of incorrect or completion of your personal data stored by us.

3. right to erasure

You have the right to request the deletion of your personal data stored by us in accordance with Art. 17 DSGVO, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.

4. right to restriction of processing

You have the right to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO if the accuracy of the data is disputed by you, the processing is unlawful but you object to its erasure, we no longer require the data but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 DSGVO.

5. right to data portability

You have the right, in accordance with Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.

6. right to revoke the declaration of consent under data protection law

In accordance with Art. 7 (3) DSGVO, you have the right to revoke your declaration of consent under data protection law at any time. As a result, we may no longer continue the data processing based on this consent in the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

If you wish to exercise your right of revocation, it is sufficient to send a corresponding notification via all known communication channels, in particular also by e-mail to [email protected].

7. right to complain to a supervisory authority

You have the right to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters. In Bavaria this is

Bavarian State Office for Data Protection Supervision

Promenade 18
91522 Ansbach

Phone: 0981/180093-0
E-mail: [email protected]
Internet: https://www.lda.bayern.de

A list of the competent data protection authorities of the Laender (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

8. right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.

If you wish to exercise your right of objection, it is sufficient to notify us accordingly via all known communication channels, in particular also by e-mail to [email protected].

After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the establishment, exercise or defence of legal claims. This does not apply if the processing is for direct marketing purposes. Then we will not further process your personal data for this purpose.

9. automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

(1) is necessary for the conclusion or performance of a contract between you and the controller,

(2) is authorised by Union or Member State legislation to which the controller is subject and that legislation contains adequate measures to safeguard your rights and freedoms and your legitimate interests; or

(3) is done with your express consent.

However, these decisions must not be based on special categories of personal data pursuant to Art. 9(1) of the GDPR, unless Art. 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

With regard to the cases referred to in (1) and (3), the controller shall take reasonable steps to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.

Data security

We use the widespread SSL encryption (Secure Socket Layer) in the TLS standard (Transport Layer Security) in connection with the highest encryption level supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Purpose and legal basis of data processing

The security measures described are used on the basis of Art. 6 (1) sentence 1 lit. f, Art. 32 DSGVO. The data processed in this way is necessary for security purposes to protect our legitimate interests as well as the interests of third parties in accordance with Art. 6 (1) sentence 1 lit. f DSGVO.

Questions to the Data Protection Officer

If you have any questions about data protection, please write us an e-mail or contact the person responsible for data protection in our organisation directly: Ms Vera Schneider, e-mail: [email protected]

Up-to-dateness and amendment of this privacy policy

This data protection declaration is valid as of July 2023. Due to the further development of our website and offers, e.g. the introduction of new services, or due to changed legal or official requirements, it may become necessary to change this data protection declaration. We therefore reserve the right to adapt the data protection declaration at any time with effect for the future. The new data protection statement will then apply to your next visit. We recommend that you read the current data protection declaration from time to time. The current data protection declaration can be found on our website at https://www.sonax.de/footer/rechtliches/datenschutz.

Privacy Policy

Responsible

Data Protection Officer

Protection of your personal data

General principles for the processing of personal data

1. description of the processing of personal data

2. legal bases for the processing of personal data

3. disclosure of data, processors, external providers

Data transmission

Processor

External providers and links

4. data deletion and storage period

Visit our website

1. description and scope of data processing

2. purpose of the data processing

3. legal basis of the data processing

4. duration of the storage

5. possibility of objection and removal

Forms on the website, bookings, enquiries, contact, newsletter

Newsletter

1. description and scope of data processing

2. purpose of the data processing

3. legal basis of the data processing

4. duration of the storage

5. possibility of objection and removal

Cookies, plugins and web analytics

1. what are cookies?

2. legal basis for cookies, analysis tools and plugins

How do we use cookies, analytics tools and plugins? Purpose of data processing

4. duration of the storage

5. deactivation of cookies

PIWIK PRO

Google Maps

Recaptcha

Google Tag Manager

Google Analytics

Google Ads

Hotjar

Swiftype Search/Swiftype Autocomplete

Cloudinary

Privacy Policy Facebook Fan Page

Privacy policy Instagram page

Privacy policy YouTube

Privacy policy LinkedIn

Privacy policy Xing

Use of Zoom

Rights of the data subject

1. right to information

2. right of rectification

3. right to erasure

4. right to restriction of processing

5. right to data portability

6. right to revoke the declaration of consent under data protection law

7. right to complain to a supervisory authority

8. right of objection

9. automated decision in individual cases including profiling

Data security

Purpose and legal basis of data processing

Questions to the Data Protection Officer

Up-to-dateness and amendment of this privacy policy