Privacy Policy

Data protec­tion decla­ra­tion

The controller

for data processing within the meaning of the General Data Protec­tion Regu­la­tion (GDPR) and other data protec­tion regu­la­tions is
SONAX GmbH Münch­ener Str. 75 86633 Neuburg Germany
Tele­phone: +49 / 84 31 / 53-0 Email: info@sonax.de Internet: www.sonax.de

The data protec­tion officer

of the controller is:
Mrs Vera Schneider Email: daten­schutz@sonax.de
who can other­wise be reached using the contact details of the controller.


Protec­tion of your personal data

Data protec­tion and the protec­tion of your privacy are impor­tant to us. We there­fore only process personal data in accor­dance with the applic­able data protec­tion and data secu­rity legis­la­tion, in partic­ular the General Data Protec­tion Regu­la­tion (GDPR), the Federal Data Protec­tion Act (BDSG) and the Telecom­mu­ni­ca­tions and Tele­media Data Protec­tion Act (TTDSG). In this, we are guided by the prin­ciple of data avoid­ance and data minimi­sa­tion. Our employees are bound to confi­den­tiality and secrecy.

Our website can be used without regis­tra­tion, i.e. without actively disclosing your iden­tity or manu­ally entering personal data. Never­the­less, personal data are collected every time you visit our website. It may also be neces­sary to provide your personal data in the context of use, e.g. when you contact us. The following data protec­tion decla­ra­tion informs you about the processing of your personal data when using our website, the measures taken to protect your data and your rights as a data subject.


General prin­ci­ples for the processing of personal data

1. Descrip­tion of the processing of personal data

We use IT systems on our websites to provide services to our users, through which we process the personal data described in more detail below.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

When processing personal data that is neces­sary for the fulfil­ment of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing oper­a­tions that are neces­sary for the imple­men­ta­tion of pre-contrac­tual measures.

Insofar as the processing of personal data is neces­sary to fulfil a legal oblig­a­tion to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis in conjunc­tion with a special autho­rising stan­dard setting out the legal situ­a­tion more concretely.

If the processing is neces­sary to safe­guard a legit­i­mate interest of the controller or a third party and if the inter­ests, funda­mental rights and free­doms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

3. Transfer of data, proces­sors, external providers

Data transfer

Your personal data will not be trans­ferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties

  • if you have given your express consent in accor­dance with Art. 6 para. 1 sentence 1 lit. a GDPR,

  • if the disclo­sure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is neces­sary for the asser­tion, exer­cise or defence of legal claims and there is no reason to assume that you have an over­riding interest worthy of protec­tion in not disclosing your data,

  • in the event that there is a legal oblig­a­tion for disclo­sure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR,

  • if this is neces­sary for the processing of contrac­tual rela­tion­ships with you in accor­dance with Art. 6 para. 1 sentence 1 lit. b GDPR.

Proces­sors

Your data will only be passed on to proces­sors within the frame­work of the statu­tory provi­sions, in partic­ular in accor­dance with Art. 28 GDPR. We have concluded a service agree­ment and a valid contract for data processing with all proces­sors. The processor will only process the personal data on our instruc­tions and for the purposes described, in partic­ular for the fulfil­ment of the contract.

Your data are protected against loss, misuse and unau­tho­rised or unap­proved access, disclo­sure, modi­fi­ca­tion or dele­tion. We log access, collect access pass­words and encrypt data, provided this does not funda­men­tally impair our services.

External providers and links

On our website you may also find infor­ma­tion and/​or services from other providers who collect personal data as part of their offer­ings. Please note that we are not respon­sible for the processing of these data: only the external provider is, to whom other condi­tions may apply.

This website may contain links to websites of other providers. Please note that this data protec­tion decla­ra­tion applies exclu­sively to our website. We cannot check whether external providers comply with the applic­able data protec­tion regu­la­tions.

4. Data erasure and dura­tion of storage

The personal data of the data subjects will be deleted or restricted as soon as the purpose of the storage no longer applies, e.g. the storage of the data is no longer required for the fulfil­ment of a contract or an over­riding legit­i­mate interest. Data may also be stored if this is provided for by Euro­pean or national legis­la­tures through regu­la­tions, laws or other provi­sions to which the controller is subject. The data will there­fore be deleted or restricted when a storage period prescribed by the afore­men­tioned regu­la­tions expires.

Visiting our website

1. Descrip­tion and scope of data processing

When you visit our website www.sonax.com infor­ma­tion is auto­mat­i­cally sent to the server of our website by the browser used on your device. This infor­ma­tion is temporarily stored in a logfile. The following infor­ma­tion is collected without any action on your part and stored until it is auto­mat­i­cally deleted:

  • IP address of the user (requesting computer)

  • Date and time of access

  • Name and URL of the accessed file/​page

  • Website from which the access is made (referrer URL)

  • Browser used and the oper­ating system of your computer

  • Name of your access provider

The logfiles contain IP addresses or other data that can be assigned to a user and are there­fore predom­i­nantly cate­gorised as personal data.

2. Purpose of data processing

We process the afore­men­tioned data for the following purposes:

  • Ensuring a smooth connec­tion to the website

  • Ensuring easy use of our website

  • Analyses of system secu­rity and stability

  • Eval­u­a­tion of user behav­iour

  • Other admin­is­tra­tive purposes


The tempo­rary storage of the IP address by the system is neces­sary to enable the website to be deliv­ered to the user’s computer. For this purpose, the user’s IP address must remain stored for the dura­tion of the session. Storage in logfiles takes place to ensure the func­tion­ality of the website. We also use the data to opti­mise the website and to ensure the secu­rity of our infor­ma­tion tech­nology systems. In this specific context, we do not use the data collected here for the purpose of drawing conclu­sions about your person for marketing purposes. These purposes justify our legit­i­mate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

Anony­mous infor­ma­tion may be statis­ti­cally eval­u­ated by us in order to opti­mise our website and the tech­nology behind it. In addi­tion, we use cookies or other analysis services when you visit our website. You will find more detailed expla­na­tions below in this data protec­tion decla­ra­tion.

3. Legal basis for data processing

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR, as a user rela­tion­ship exists, as well as Art. 6 para. 1 sentence 1 lit. f GDPR. Our legit­i­mate interest follows from the data processing purposes described above.

4. Dura­tion of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collec­tion of data for the provi­sion of the website, this is gener­ally the case when the respec­tive session has ended. If unabridged IP addresses are stored in logfiles, the personal data will be deleted or anonymised after seven days at the latest. Addi­tional storage is possible in connec­tion with cookies or analysis services. In this case, the IP addresses of the users are deleted or trun­cated so that it is not possible to iden­tify the calling client. You will find more detailed expla­na­tions below in this data protec­tion decla­ra­tion.

5. Possi­bility of objec­tion and dele­tion

The collec­tion of data for the provi­sion of the website and the storage of data in logfiles is absolutely neces­sary for the oper­a­tion of the website. Conse­quently, there is no possi­bility of objec­tion on the part of the user.


Forms on the website, book­ings, enquiries, contact, newsletter

If you contact us with ques­tions of any kind by email or contact form, you give us your volun­tary consent to process your personal data for the purpose of contacting you. These are used to allo­cate the enquiry and subse­quently answer it.

The following personal data are collected and processed in the various forms:

  • Enquiry form Autho­rised Detailer: First name, surname, company name, email, post­code, tele­phone number, country

  • Contact form: First name, surname, email, tele­phone number, street, house number, post­code, city, country

  • Seminar enquiry form: First name, surname, company, email, tele­phone, street, house number, post­code

  • Seminar booking Company: First name, surname, street, house number, post­code, city, tele­phone number, fax number, email

Product enquiry: First name, surname, email, street, house number, post­code, town, country

We process personal data to handle your enquiries, to provide the services you have requested and to ensure compli­ance with laws and regu­la­tions.
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. a and b GDPR, as in each case your consent is given to the use of a form or the sending of infor­ma­tion and/​or a contrac­tual service is provided.

The personal data collected will be stored for as long as is neces­sary for the purposes described. If the data are subject to statu­tory reten­tion oblig­a­tions, for example under the AO (German Tax Code) or the HGB (German Commer­cial Code), it must be retained for six or ten years. Other­wise, the general storage prin­ci­ples described above apply.


Newslet­ters

1. Descrip­tion and scope of data processing

You can subscribe to a free newsletter on our website. When you register for the newsletter, the following data are collected and trans­mitted to us via the input screen:

  • Name of the user

  • IP address of the calling computer

  • Date and time of regis­tra­tion

  • Infor­ma­tion about the browser type and version used

  • The user’s oper­ating system

During the regis­tra­tion process, your consent to the processing of the data is obtained using the double opt-in proce­dure (double consent) with refer­ence to this data protec­tion decla­ra­tion. After the first act of consent, the user receives a confir­ma­tion email for the second act of consent. The veri­fied user autho­rises the website oper­ator to send him/​her newslet­ters by email. This proce­dure forms the basis for legally justi­fied email marketing. Consent for the newsletter can also be obtained by other means, e.g. in writing or by email.

On the basis of your consent, we will use the personal data stored by us to inform you about our prod­ucts, services and events.

To send the newsletter, the data are passed on to external service providers for contract processing and deleted again after the newsletter has been sent. The data will be used exclu­sively for sending the newsletter.

2. Purpose of data processing

The purpose of collecting the user’s email address and other personal data is to send the newsletter and to prevent misuse of the services or the email address used.

3. Legal basis for data processing

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. a and b GDPR, as your consent has been obtained for the sending of infor­ma­tion and a contrac­tual service is provided.

4. Dura­tion of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The user’s email address is there­fore stored for as long as the subscrip­tion to the newsletter is active. The other personal data collected during the regis­tra­tion process are gener­ally deleted after a period of seven days.

5. Possi­bility of objec­tion and dele­tion

You can revoke your consent at any time with future effect and cancel the newsletter, both via the unsub­scribe link in the indi­vidual mail­ings and infor­mally, e.g. by contacting info@sonax.de. Further infor­ma­tion on consent can be found in the section “Rights of the data subject”.

Cookies, plugins and web analytics

Below we describe in detail which cookies, analysis tools and plugins we use, which data are processed and how you can deac­ti­vate the analysis tools. The term “cookies” is also used as a generic term for plugins and analysis tools of all kinds.

1. What are cookies?

Cookies are placed when using our website. Cookies are small files that are auto­mat­i­cally created by the browser and stored on the user’s end device (laptop, tablet, smart­phone, etc.) when they visit the website. Cookies do not cause any damage to the end device and do not contain any viruses, Trojans or other malware. Infor­ma­tion is stored in the cookie that results in each case from the rela­tion­ship with the specific terminal device used. Cookies can be recog­nised and read auto­mat­i­cally during a visit in progress or on the next visit. However, this does not mean that the website oper­ator is directly informed of the iden­tity of the user.

Cookies make visiting the website more user-friendly by remem­bering personal settings or serve the adver­tising inter­ests of the website oper­ator. Cookies make it possible, in partic­ular, to deter­mine the frequency of use and number of users of the pages, to analyse page usage behav­iour and to make our offering more customer-friendly. So-called session cookies are used, among other things, to recog­nise that the user has already visited indi­vidual pages of the website. These are auto­mat­i­cally deleted after you leave the site.

If you leave our site and access third-party sites, cookies may also be placed by the target site. We are not legally respon­sible for these cookies. For infor­ma­tion on the use of these cookies by third parties and the infor­ma­tion stored therein, please refer to their privacy poli­cies.

2. Legal basis for cookies, analysis tools and plugins

We may store cookies on your device if they are tech­ni­cally neces­sary for the oper­a­tion of the website. Neces­sary cookies help to make a website usable by enabling basic func­tions such as page navi­ga­tion or language selec­tion. The website may not func­tion prop­erly without such cookies. The data processed for the afore­men­tioned purposes serve to safe­guard our legit­i­mate inter­ests, which are over­riding in the context of a balancing of inter­ests, and are there­fore neces­sary in accor­dance with the prin­ciple of propor­tion­ality. The legal basis for tech­ni­cally neces­sary cookies is Art. 6 para. 1 sentence 1 lit. f GDPR in conjunc­tion with § 25 para. 2 no. 2 TTDSG (the German Telecom­mu­ni­ca­tions-Tele­media Data Protec­tion Act).

We require your consent for all other cookie types. You can specif­i­cally select these as explicit opt-in consents in a dialogue window (cookie consent window) on your first visit to our website. This places a cookie in your system that contains your cookie settings and signals to our system which cookies have been accepted each time you visit our website. You can change or revoke your cookie settings on our website at any time. You can find infor­ma­tion on deac­ti­vating cookies below. The legal basis for all other cookie types is Art. 6 para. 1 sentence 1 lit. a GDPR, § 25 para. 1 TTDSG, insofar as you have given your consent.

If you delete all cookies, the cookie with your cookie settings will also be deleted, so you will have to set your cookie pref­er­ences again. The limi­ta­tion of cookies can lead to limited func­tion­ality of the website.

3. How do we use cookies, analysis tools and plugins? Purpose of data processing

Within the frame­work of the use of cookies, analysis tools and plugins, the name of the Internet service provider, requested files, IP address, access to indi­vidual pages, browser type, screen reso­lu­tion, colour depth, oper­ating system, search terms and refer­ence pages from which you have accessed our websites are processed, among other things.

The data contained in session cookies or other cookies are processed by us for the following purposes:

  • Ensuring the smooth oper­a­tion of the website

  • Ensuring easy use of our website

  • System secu­rity and stability

  • For further admin­is­tra­tive or adver­tising purposes

The data collected may be processed and used to improve the marketing of the websites, to increase the user-friend­li­ness of the websites and for other opti­mi­sa­tion purposes. The analysis required for marketing and opti­mi­sa­tion purposes does not gener­ally allow any direct conclu­sions to be drawn about your person or personal data. In partic­ular, no names, addresses, tele­phone numbers or other data that can be directly attrib­uted to indi­vid­uals are stored. The analysis only provides aggre­gated data, such as the number of visi­tors and page views.

Cookies make it possible, among other things, to customise our website to your wishes, to estab­lish connec­tions between different visits to our website or to save your pass­word in the browser so that you do not have to re-enter it each time.
Cookies can also be used for target group-orien­tated adver­tising. Third-party providers and auto­matic data collec­tion tools may also be autho­rised to use cookies so that they can support us in providing our own content and adver­tise­ments and in measuring the effec­tive­ness of our adver­tising measures. For regis­tered users, the data collected on our websites are not anony­mous. This infor­ma­tion may be used together with other infor­ma­tion we know or infer about you, such as your pref­er­ences, to provide you with customised content, services and adver­tise­ments.

We currently use the cookies auto­mat­i­cally listed and described in more detail in our cookie policy on our website.

4. Dura­tion of storage

Some cookies are deleted after the end of the browser session, i.e. after closing the browser (so-called “session cookies”). Other cookies remain on the end device and make it possible to recog­nise the user on the next visit (“persis­tent cookies”). The specific dura­tion of storage can be found in our cookie policy and in the overview in the cookie settings of your web browser. Other­wise, the general storage prin­ci­ples described above apply.

5. Deac­ti­va­tion of cookies

You can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. If you deac­ti­vate cookies completely, you may not be able to use all the func­tions of a website.

If you want to prevent cookies from being used, set your browser so that it deletes cookies from your hard drive, blocks all cookies or warns you before a cookie is stored so that you can decide on a case-by-case basis whether you want the cookie. Each browser differs in the way it manages cookie settings. They are described in more detail in the help menu of each browser. There it is explained how you can change your cookie settings. You can find the rele­vant browser infor­ma­tion at the following links, for example:

Internet Explorer: https://​support.microsoft.com/​en-us/​windows/​delete-and-manage-cookies-168d­ab11-0753-043d-7c16-ede5947fc64d
Firefox: https://​support.mozilla.org/​en-US/​kb/​clear-cookies-and-site-data-firefox, https://​support.mozilla.org/​en-US/​kb/​enhanced-tracking-protec­tion-firefox-desktop, https://​support.mozilla.org/​en-US/​kb/​block-websites-storing-cookies-site-data-firefox
Firefox for Android: https://​support.mozilla.org/​de/​kb/​cookies-aktivieren-deak­tivieren-firefox-android
Safari: https://​support.apple.com/​guide/​safari/​sfri11471/​mac
Chrome: http://​support.google.com/​chrome/​bin/​answer.py?hl=en&hlrm=en&answer=95647
Opera: https://​help.opera.com/​en/​latest/​web-pref­er­ences/

You will also find the options for deac­ti­va­tion directly in the descrip­tion of the cookies, plugins and tracking measures.

PIWIK PRO

This website uses Piwik PRO Analytics Suite, a web analytics service provided by Piwik PRO GmbH, Knese­beck­straße 62/​63, 10719 Berlin (here­inafter referred to as Piwik PRO). Piwik PRO is analytics soft­ware that uses cookies and tracking tools and collects personal data of website visi­tors such as IP addresses, browser finger­prints, oper­ating system, usage data, etc., creates user profiles based on browsing history and calcu­lates metrics related to website usage such as bounce rate, inten­sity of visits, page views, etc. All cookies and tracking tools used by Piwik PRO can be viewed under Cookies. All data processed by Piwik PRO are described under Data. We use the Tag Manager from Piwik PRO to control data collec­tion and processing through cookies and tracking tools. With the Tag Manager, we can create, imple­ment, test and adapt tags from templates, examine the processed data at any time, cate­gorise the tags used and acti­vate them in conjunc­tion with clear consent in order to meet data protec­tion require­ments. A detailed descrip­tion of the options can be found under Tag Manager. The general deac­ti­va­tion of cookies and tracking tools is described in the Cookies section. The purpose of data processing includes the analysis of user behav­iour, the creation of user profiles, conver­sion tracking, etc. in order to display person­alised content and carry out online campaigns. The legal basis for data processing is primarily your consent in accor­dance with Art. 6 para. 1 lit. a GDPR, which is obtained via the consent window (consent banner), but also our legit­i­mate interest in accor­dance with Art. 6 para. 1 lit. f GDPR to improve our website and customer approach. We use Piwik PRO’s Consent Manager to adapt the consent window (Consent Banner) to the website and the language used and to cate­gorise the data from the web analysis service and the Tag Manager so that the processing purpose corre­sponds to the selected consent. The Consent Manager enables us to design the consent window on our website in accor­dance with the require­ments of the TTDSG and the GDPR. A detailed descrip­tion of the config­u­ra­tion options can be found under Consent Manager. We use the cloud version of Piwik PRO (Piwik PRO Analytics Suite Cloud), which is hosted for us within the EU by Orange Flex­ible Engine France (FR Central) and ElastX Sweden (SWE Central). We have concluded a data processing agree­ment with Piwik PRO, which you can view at Data Processing Agree­ment. You can find the Piwik PRO online terms of service here: Online Service Terms. Piwik PRO does not pass on your data to other sub-proces­sors or third parties and does not use them for its own purposes. The term of data storage is regu­lated in the data processing contract and can be deter­mined by us. The data are stored for a period of 14 or 25 months. Further details on the processing of personal data by Piwik PRO can be found in the data protec­tion decla­ra­tion of Piwik PRO.

Google Maps

This website uses Google Maps to display maps and to create direc­tions. Google Maps is a service provided by Google Inc., 1600 Amphithe­atre Parkway, Moun­tain View, CA 94043, USA (here­inafter referred to as “Google”). If you use Google’s advanced func­tions, for example by clicking on the map displayed, you are using a Google service outside our sphere of influ­ence. In this case, the spec­i­fi­ca­tions and infor­ma­tion provided by Google in this context apply. On the Google website you will find further infor­ma­tion on the Google Terms of Use, addi­tional Terms of Use for Google Maps/​Google Earth, the legal notice for Google Maps/​Google Eart­hand the Google data protec­tion decla­ra­tion. In the data protec­tion decla­ra­tion you will find infor­ma­tion about what data are collected for what purpose and what Google does with these data. The processing of personal data by Google also takes place in the USA. To ensure an adequate level of data protec­tion for data trans­fers to the USA, Google has adopted the Data Privacy Framework certi­fi­ca­tion. The current certifi­cate from Google can be viewed here. Google also concludes the EU stan­dard contrac­tual clauses with its customers and busi­ness part­ners, see here and here. You can find the wording of the EU stan­dard data protec­tion clauses at https://​gsuite.google.com/​terms/​mcc_terms.html.

Google thereby under­takes to comply with the stan­dards and regu­la­tions of Euro­pean data protec­tion law. The legal basis for the processing and transfer of personal data to Google is your consent, based on Art. 6 para. 1 sentence 1 lit. a GDPR. We also base the use of Google on Art. 6 para. 1 lit. f GDPR, as the data processing serves the user-friend­li­ness of the website and is there­fore neces­sary to protect our legit­i­mate inter­ests. The general deac­ti­va­tion of cookies is described in the Cookies section.

Google Consent Mode

This website uses Google Consent Mode, an online service for user consent provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, or Google LLC, 1600 Amphithe­atre Parkway, Moun­tain View, CA 94043, USA (here­inafter referred to as ‘Google’).

Since 6 March 2024, market gate­keepers such as Google have been required by the Digital Markets Act (about DMA) to obtain and demon­strate user consent before processing their personal data for person­alised adver­tising. Conse­quently, in order to comply with the DMA in accor­dance with Google's contrac­tual require­ments, the imple­men­ta­tion of the consent mode has been manda­tory since 6 March 2024 if you wish to use all func­tions of Google Analytics and Google Ads without restric­tion.

The Google consent mode is there­fore a func­tion devel­oped by Google to imple­ment the legal oblig­a­tion under the DMA or to dele­gate it to us so that the consent of users is also effec­tive vis-à-vis Google. At the same time, as website oper­a­tors and data controllers, we remain obliged to obtain consent for cookies and tracking tools in accor­dance with Art. 6 para. 1 sentence 1 lit. a GDPR, § 25 para. 1 TDDDG via our consent manage­ment system (Consent Manage­ment System or consent banner).

With the consent mode, we as website oper­a­tors are addi­tion­ally contrac­tu­ally obliged by Google to obtain this consent and to prove it to Google via the consent mode. This results from Google's ‘Guide­lines on user consent in the EU’, which contain require­ments for obtaining consent. With the consent mode, we first inform Google about the consent status of our users. Google offers the consent mode in a simple and an advanced imple­men­ta­tion (Basic and Advanced Mode) with different func­tions.

In the advanced imple­men­ta­tion, a connec­tion to Google is estab­lished and the IP address is trans­mitted before the consent is requested. If the user refuses consent in the consent banner, no cookies are set, but the consent status and user activ­i­ties are never­the­less recorded via various types of pings and trans­mitted to Google. These pings enable Google to eval­uate user behav­iour even though consent has not been given, which raises data protec­tion concerns.

When using the simple imple­men­ta­tion, processes requiring consent are only imple­mented after the user has given the neces­sary consent. This means that a connec­tion to Google is only estab­lished once the website visitor has given their consent, thereby complying with data protec­tion require­ments. In this case, we have there­fore opted for the simple imple­men­ta­tion because it is prefer­able from a data protec­tion perspec­tive.

Further details on Google's consent mode can be found here and here. If you give your consent, the following data will be collected, processed and trans­mitted to Google within the scope of the consent mode.

When using tools such as ‘Google Ads’ or ‘Google Ads Conver­sion Track­ing’, Google uses tracking tech­nolo­gies and cookies that are stored on your device, in partic­ular in your browser. These tools are used to analyse user behav­iour, opti­mise content and display person­alised adver­tising. Conse­quently, we pass on personal data such as IP addresses, device infor­ma­tion, loca­tion data and surfing behav­iour to Google for processing and have there­fore concluded a contract with Google for order processing in accor­dance with Art. 28 GDPR. Details of the order data processing, in partic­ular the contrac­tual terms, dele­tion, etc., can be found here.

Google also trans­fers data to various third coun­tries. In this context, personal data is also processed by Google in the USA. To ensure an adequate level of data protec­tion for data trans­fers to the USA, Google has concluded the EU stan­dard contrac­tual clauses, see here and here, each with a variety of addi­tional data protec­tion infor­ma­tion. The wording of the EU stan­dard data protec­tion clauses can be found, for example, here or here. Google is also certi­fied under the EU-U.S. Data Privacy Frame­work. A current certifi­cate can be viewed here. Through the Data Privacy Frame­work and the Stan­dard Contrac­tual Clauses, Google under­takes to comply with the stan­dards and regu­la­tions of Euro­pean data protec­tion law.

The legal basis for the processing of personal data by Google's services is Art. 6 para. 1 sentence 1 lit. a GDPR, § 25 para. 1 TDDDG, insofar as you have given your consent. Further­more, we also base the use of Google services on Art. 6 para. 1 lit. f GDPR, as the processing of data is carried out for the purpose of opti­mising offers, services and marketing measures and there­fore serves to protect our legit­i­mate inter­ests.

You can revoke your consent at any time via the cookie settings, object to data processing or prevent the storage of cookies by adjusting your browser soft­ware settings accord­ingly (see above for details). However, we would like to point out that in this case, you may not be able to use all func­tions of this website to their full extent.

According to Google, the data is stored on secure servers and processed in encrypted form. In many cases, cookies are stored for 30 days to three months. Detailed infor­ma­tion on the use of cookies by Google can be found here. Compre­hen­sive infor­ma­tion on storage, storage dura­tion and dele­tion can be found in the Google privacy policy.

Further infor­ma­tion on data protec­tion in connec­tion with Google services can be found here and in the general Google privacy policy.

Google Ads

Below, we provide infor­ma­tion about how your data is processed by the Google Ads service, which we use on our website. Google Ads is an online adver­tising programme provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, or Google LLC, 1600 Amphithe­atre Parkway, Moun­tain View, CA 94043, USA (here­inafter referred to as ‘Google’). It is used by adver­tisers to place targeted adver­tise­ments, partic­u­larly in Google Search, on YouTube or on other websites in the Google adver­tising network (Display Network).

Func­tions and data processing

Google Ads enables us to target specific audi­ences. In online marketing, targeting means addressing precisely defined target groups with adver­tising. Based on the user data collected by Google (e.g. user loca­tions, inter­ests, etc.), we can display targeted adver­tise­ments. As the website oper­ator, we can then quan­ti­ta­tively eval­uate which search terms led to the display of our adver­tise­ments and how many adver­tise­ments led to a corre­sponding click behav­iour.

Key features of Google Ads:

  • Keyword targeting: Enables adver­tise­ments to be targeted at users based on specific keywords (key terms). The ads are displayed to users who search for these keywords or visit websites that are themat­i­cally rele­vant. This allows us to display our adver­tise­ments in the Google search engine or on third-party websites when the page user enters certain search terms in the Google search engine.

  • Loca­tion targeting: Ads can be targeted geograph­i­cally to specific regions, cities or a radius around a busi­ness loca­tion.

  • Demo­graphic targeting: Targeting can be based on age, gender, inter­ests and other demo­graphic char­ac­ter­is­tics.

  • Ad formats: Google Ads supports various ad formats such as text ads, image ads, video ads (espe­cially on YouTube), shop­ping ads (with product images and prices) and app ads.

  • Remar­keting: Enables us to target users who have already inter­acted with our website or our prod­ucts; for more details, see ‘Google Ads Remar­ket­ing’ below.

  • Conver­sion tracking: This is the measure­ment of the success of Google Ads ads, i.e. the recording of previ­ously defined goals or events (e.g. purchases, leads, book­ings, website visits) that are consid­ered successful from the adver­tis­er's point of view (= conver­sion or user action). The perfor­mance of the ads can thus be measured and opti­mised based on the defined goals. For more details, see ‘Google Ads Conver­sion Track­ing’ below.

  • Google Display Network: Extends the reach of adver­tising campaigns to a large number of partner websites, apps and Google services (such as Gmail and YouTube) and enables visual ad formats.

  • Google Shop­ping: Special ads for prod­ucts that appear directly in search results with images, prices and retailer infor­ma­tion.

  • YouTube adver­tising: Enables video ads to be placed in various formats before, during or after YouTube videos and in YouTube search results.

  • Perfor­mance analysis and reports: Compre­hen­sive tools for analysing campaign perfor­mance to help you make informed deci­sions about opti­mi­sa­tion.

  • Arti­fi­cial intel­li­gence (AI) and machine learning: Google is increas­ingly inte­grating AI and machine learning to auto­mat­i­cally opti­mise adver­tising campaigns and deliver ads across all Google adver­tising chan­nels.

Data cate­gories:

The use of Google Ads may result in the processing of the following data in partic­ular:

  • User data: IP address, device infor­ma­tion, browser infor­ma­tion, oper­ating system, pages visited, clicks on ads, search queries, date and time, requested URL, unique cookie ID

  • Conver­sion data: Infor­ma­tion about whether you have performed a specific action on our website after clicking on one of our Google Ads (e.g. purchase, contact). Google uses special conver­sion cookies for this purpose.

  • Remar­keting data: Infor­ma­tion about your inter­ac­tions with our website in order to show you person­alised adver­tising on other websites or in search results at a later date.

Cookies and tracking tech­nolo­gies:

Google Ads uses cookies and similar tracking tech­nolo­gies (here­inafter referred to as cookies). Cookies are stored on your device, in partic­ular in your browser, when you click on one of our Google Ads adver­tise­ments, for example. Cookies are used to eval­uate usage behav­iour. As a result, Google receives data for processing, which means that we enter into a ‘Vere­in­barung zwis­chen unab­hängig Verant­wortlichen’ and a ‘Vertrag zur Auftragsver­ar­beitung’ with Google; see below for details.

You can object to data processing at any time or prevent the storage of cookies by adjusting your browser soft­ware settings accord­ingly (see details above in the Cookies section or below under ‘Deac­ti­va­tion’). However, we would like to point out that in this case, you may not be able to use all func­tions of this website to their full extent.

Further infor­ma­tion on the use of cookies by Google can be found in Google's Cookie Policy and here. Google provides detailed infor­ma­tion on the types and purposes of cookies and the cate­gories of data collected at Server Logs.

Further infor­ma­tion with exten­sive links on the handling of adver­tising and data protec­tion can be found here.

Purpose of data processing

Google Ads serves as a marketing tool to increase our online visi­bility, reach poten­tial customers, achieve our marketing goals, promote our prod­ucts and services, and measure the effec­tive­ness of our adver­tising measures.

Legal basis for data processing

The legal basis for the processing of personal data by the Google Ads service is Art. 6 para. 1 sentence 1 lit. a GDPR, § 25 para. 1 TDDDG, insofar as you have given your consent via our consent banner or in another manner.

Further­more, we also base the use of Google Ads on Art. 6 para. 1 lit. f GDPR, as the processing of data is carried out for the opti­mi­sa­tion of offers, service, secu­rity and marketing measures and there­fore serves to safe­guard our legit­i­mate inter­ests.

Data recip­i­ents and transfer to third coun­tries

According to Google's assess­ment, both we as the website oper­ator and Google act inde­pen­dently as controllers of personal data with regard to data processing in Google Ads. We have there­fore concluded a corre­sponding 'Vere­in­barung zwis­chen unab­hängig Verant­wortlichen' with Google. Details can be found in the ‘Data Processing Terms between Controllers for Google Adver­tising Prod­ucts’.

However, according to Google's assess­ment, there are also Google Ads func­tions for which Google acts as a processor of personal data. Insofar as order processing takes place, we have concluded an order processing agree­ment with Google in accor­dance with Art. 28 GDPR. The details of the order data processing, in partic­ular the contrac­tual condi­tions, dele­tion, etc., can be found in the ‘Order Data Processing Terms for Google Adver­tising Prod­ucts’.

The data collected by Google Ads is trans­ferred to Google, where it is stored and processed. Google trans­fers data to third coun­tries, although we have no detailed knowl­edge of this. To ensure an adequate level of data protec­tion when trans­fer­ring data to unsafe third coun­tries, Google concludes the EU stan­dard contrac­tual clauses, see Google's ‘GDPR Commit­ment’ and ‘Legal Frame­work for Data Trans­fers’, each with a wealth of addi­tional data protec­tion infor­ma­tion. The wording of the EU stan­dard data protec­tion clauses used and concluded by Google can be found, insofar as there is coop­er­a­tion between inde­pen­dent controllers (controller-controller), under ‘Google Ads: Stan­dard Contrac­tual Clauses’ or, insofar as order processing (controller-processor) is involved, here.

The processing of personal data by Google also takes place in the USA. Google is certi­fied in this regard under the EU-U.S. Data Privacy Frame­work. Google's current certi­fi­ca­tion can be viewed in the ‘Data Privacy Frame­work List’. Through the Data Privacy Frame­work and the Stan­dard Contrac­tual Clauses, Google under­takes to comply with the stan­dards and regu­la­tions of Euro­pean data protec­tion law. Further infor­ma­tion on this can also be found in Google's Privacy Policy.

Storage period

The storage period for the data processed by Google is the respon­si­bility of Google. We have no influ­ence on how, to what extent and for how long Google processes or stores the data collected. According to Google, the data is stored on secure servers and processed in encrypted form. The cookies set by Google usually have a limited validity period. In many cases, cookies are stored for 30 days to three months. More detailed infor­ma­tion on the storage period can be found, for example, here.

Further infor­ma­tion on data protec­tion in connec­tion with Google Ads can be found under ‘Google Ads and GDPR’, in Google's general privacy policy and in the terms of use for Google Ads adver­tisers.

Contact

If you have any further ques­tions or prob­lems regarding data processing and data protec­tion, we recom­mend that you contact Google directly. The following options are avail­able for contacting Google.

You can find our own contact details above.

A detailed descrip­tion of your data protec­tion rights can be found below in the section ‘Rights of the data subject’.

Google Ads Conver­sion Tracking

We use the func­tions of Google Ads Conver­sion Tracking, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland or Google LLC 1600 Amphithe­atre Parkway Moun­tain View, CA 94043, USA (here­inafter referred to as ‘Google’) on our website to measure the success of adver­tising.

Perfor­mance measure­ment

‘Conver­sion track­ing’ records what happens after an online user inter­acts with our ads. This allows us to see whether a user has, for example, purchased some­thing, subscribed to our newsletter or called us.

User actions that we have defined as valu­able to our busi­ness are referred to as conver­sions.

Google conver­sion tracking makes it possible for Google and the website oper­ator to recog­nise whether the user has performed certain actions (e.g. purchases, leads, book­ings, website visits) that are consid­ered a success from the adver­tis­er's point of view (= conver­sion or user action) as a result of the adver­tise­ment. The perfor­mance of the ads can thus be measured and opti­mised based on prede­fined goals. In partic­ular, the following analysis data is processed:

  • Which prod­ucts and services are viewed or purchased and how often

  • Which buttons are clicked and how often

  • Total number of actions and users who clicked or purchased ads

This infor­ma­tion is used to compile conver­sion statis­tics. As the website oper­ator, we do not receive any infor­ma­tion that could be used to person­ally iden­tify users. Google uses special conver­sion cookies or compa­rable tech­nolo­gies to iden­tify or recog­nise users. Personal iden­ti­fi­ca­tion by Google cannot be ruled out.

Further details can be found at Google under ‘Conver­sion Tracking’.

Conver­sion linking

We have imple­mented the ‘conver­sion link­ing’ tag on all of our web pages that users reach when they click on one of our ads. This tag supports the measure­ment of click data so that conver­sions can be effec­tively tracked. When users click on our ads, the URL of the landing page on our website usually contains infor­ma­tion about the click. If a user of our websites performs an action that we have tagged as a conver­sion, the conver­sion is linked to the click that brought the visitor to our website using this infor­ma­tion.

The conver­sion link tag auto­mat­i­cally collects infor­ma­tion about the ad click in the landing page URLs and stores it in sepa­rate cookies and the local browser. Further detailed infor­ma­tion can be found at Google under ‘Conver­sion linking’.

Legal basis for data processing

The legal basis for the processing of personal data by the Google Ads Conver­sion Tracking service is Art. 6 para. 1 sentence 1 lit. a GDPR, § 25 para. 1 TDDDG, insofar as you have given your consent via our consent banner or in another manner.

Further­more, we also base the use of Google Ads Conver­sion Tracking on Art. 6 para. 1 lit. f GDPR, as the processing of data is carried out for the opti­mi­sa­tion of offers, services and marketing measures and there­fore serves to protect our legit­i­mate inter­ests.

A detailed descrip­tion of your data protec­tion rights can be found below in the section ‘Rights of the data subject’.

In all other respects, the infor­ma­tion provided above under ‘Google Ads’ and below under ‘Google Ads Remar­ket­ing’ also applies mutatis mutandis to ‘Google Ads Conver­sion Track­ing’.

Google Ads Remar­keting

We use the func­tions of Google Ads Remar­keting, a service for person­al­ising adver­tising provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland or Google LLC 1600 Amphithe­atre Parkway Moun­tain View, CA 94043, USA (here­inafter ‘Google’), on our website.

With Google Ads Remar­keting, online users can be shown person­alised, i.e. interest-based, adver­tising across the entire Google adver­tising network and on their various end devices (laptop, mobile phone, tablet, PC, etc.) (remar­keting or retar­geting). When users interact with our online offering, they can be assigned to specific target groups based on their usage and surfing behav­iour. The rele­vant infor­ma­tion is stored, for example, as cookies on the user's device and can be read there again so that interest-based, person­alised adver­tising can be displayed to the user across pages and devices depending on their previous usage and surfing behav­iour.

Person­alised adver­tising

On websites or apps where Google-managed ads are displayed, you may see person­alised adver­tising based on your previous actions and inter­ests.

Actions that trigger person­alised adver­tising and deter­mine its content include, in partic­ular, your previous account settings, inter­ac­tions with content or adver­tise­ments, and infor­ma­tion such as your email address, age, gender, etc., which you have provided on websites or apps.

Legal basis for data processing

The legal basis for the processing of personal data by the Google Ads Remar­keting service is Art. 6 para. 1 sentence 1 lit. a GDPR, § 25 para. 1 TDDDG, insofar as you have given your consent via our consent banner or in another manner.

Further­more, we also base the use of Google Ads Remar­keting on Art. 6 para. 1 lit. f GDPR, as the processing of data is carried out for the purpose of opti­mising offers, services and marketing measures and there­fore serves to protect our legit­i­mate inter­ests.

Deac­ti­va­tion

You can partially deter­mine which adver­tise­ments you see on other websites or apps by disabling person­alised adver­tising when Google-managed ads are deliv­ered. For more tech­nical infor­ma­tion on how to disable person­alised adver­tising, please refer to the Cookies section above and Google's ad options.

If you disable person­alised adver­tising, the data on your device that Google uses to person­alise ads will also be deleted.

Even after deac­ti­va­tion, you will continue to see ads, but they will no longer be person­alised. Instead, the ads will be based on general factors such as the time of day or the content of the website you are currently visiting.

In addi­tion, you can select the type of adver­tising (adver­tising topics, brands, etc.) you want to see and the data that may be used for person­al­i­sa­tion in Google's Ads Settings.

A detailed descrip­tion of your data protec­tion rights can be found below in the section ‘Rights of the data subject’.

In all other respects, the infor­ma­tion above under ‘Google Ads’ and ‘Google Ads Conver­sion’ also applies to ‘Google Ads Remar­ket­ing’.

Recaptcha

To protect the forms on this website, we use the “reCAPTCHA” service provided by Google Inc., 1600 Amphithe­atre Parkway, Moun­tain View, CA 94043 USA, here­inafter referred to as “Google”. By using this service, a distinc­tion can be made as to whether the corre­sponding input is of human origin or has been misused by auto­mated machine processing. The inte­gra­tion of the service requires the IP address and any other data required by Google for the reCAPTCHA service to be sent to Google. If you wish to prevent this, you must block the storage of cookies in your browser. The infor­ma­tion obtained is used in accor­dance with the Google terms of use: https://​poli­cies.google.com/​privacy?hl=en
The general deac­ti­va­tion of cookies is described in the Cookies section.

Digital Ocean

This website uses the hosting services of the cloud plat­form for virtual servers from Digital Ocean LLC, 101 Avenue of the Amer­icas, 10th Floor, New York, NY 10013, USA (here­inafter referred to as Digital Ocean). In connec­tion with the search func­tions offered, Digital Ocean processes the names, images, posi­tions and contact details (address, email address, tele­phone number) of the sales repre­sen­ta­tives and sales offices of those respon­sible. When you use our website, Digital Ocean collects and processes personal data in logfiles such as IP addresses, time­stamps and usage data. Digital Ocean’s server loca­tions are in Frank­furt in an ISO/​IEC 27001-certi­fied data centre and in the USA. We have concluded a data processing contract with Digital Ocean in accor­dance with Art. 28 GDPR, which can be viewed at https://​www.digi­talo­cean.com/​legal/​data-processing-agree­ment. Data transfer to the USA or inse­cure third coun­tries is legit­imised by the conclu­sion of the EU stan­dard contrac­tual clauses. In addi­tion, Digital Ocean is certi­fied under the EU-U.S. Data Privacy Frame­work. The details of data transfer to inse­cure third coun­tries can be found in Digital Ocean’s data protec­tion decla­ra­tion at https://​www.digi­talo­cean.com/​legal/​privacy-policy. The use of Digital Ocean serves the secure and func­tional provi­sion, admin­is­tra­tion and opti­mi­sa­tion of our website. The legal basis is founded on our legit­i­mate interest pursuant to Art. 6 para. 1 lit. f GDPR in being able to provide our website in accor­dance with the purposes described. All personal data will be deleted within the statu­tory periods. Further infor­ma­tion on data protec­tion and data processing by Digital Ocean can be found in Digital Ocean’s data protec­tion decla­ra­tion at https://​www.digi­talo­cean.com/​legal/​privacy-policy and in the GDPR FAQs of Digital Ocean.

Neon

This website uses the hosting services of the cloud plat­form for virtual servers from Neon Inc, 209 Orange Street, City of Wilm­ington, County of New Castle, Delaware 19801, USA (here­inafter referred to as Neon). In connec­tion with the search func­tions offered, Neon processes names, images, posi­tions and contact data (address, email address, tele­phone number) of the sales repre­sen­ta­tives and sales offices of the respon­sible parties. Neon’s servers are located in the USA. We have concluded a data processing contract with Neon in accor­dance with Art. 28 GDPR, which can be viewed at https://​neon.tech/​dpa. Data transfer to the USA or inse­cure third coun­tries is legit­imised by the conclu­sion of the EU stan­dard contrac­tual clauses. In addi­tion, Neon is certi­fied under the EU-U.S. Data Privacy Frame­work. Details on the transfer of data to inse­cure third coun­tries can be found in Neon’s data protec­tion decla­ra­tion at https://​neon.tech/​privacy-policy. Neon is used for the secure and func­tional provi­sion, admin­is­tra­tion and opti­mi­sa­tion of our website. The legal basis is founded on our legit­i­mate interest pursuant to Art. 6 para. 1 lit. f GDPR in being able to provide our website in accor­dance with the purposes described. Neon stores the personal data described for as long as the account is active or as long as it is required for the provi­sion of services. Further infor­ma­tion on data protec­tion and data processing by Neon can be found in Neon’s data protec­tion decla­ra­tion at https://​neon.tech/​privacy-policy, in the Neon Privacy Guide and at https://​neon.tech/​terms-of-service and https://​neon.tech/​docs/​secu­rity/​secu­rity-overview.

Swiftype Search/​Swiftype Auto­com­plete

Insofar as we obtain the consent of the data subject to the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.
Our websites use the “Swiftype” search tool (Elas­tic­search, Inc., 800 El Camino Real, Suite 350, Moun­tain View, CA 94040, USA or Elas­tic­search B.V., Rijns­burgstraat 11, 1059 AT Amsterdam, Nether­lands).

Swiftype uses cookies to process data such as stan­dard internet log data and details of the usage behav­iour of our website search. This serves to constantly improve our search in order to offer you a better search expe­ri­ence. Cookies are small files that are stored on computers or other devices by websites for the purpose of logging and improving the func­tion­ality of the website. Swiftype stores these data in a pseu­do­nymised user profile. They are not processed to iden­tify indi­vidual users or to compare them with other user data.

Cookies are stored on your device; you have full control over their use. You can deac­ti­vate cookies or restrict the transfer of data by cookies by changing the settings of your web browser. Cookies that have already been saved can be deleted at any time. After deac­ti­vating cookies, you may no longer be able to use the func­tions on our website to their full extent.
The general deac­ti­va­tion of cookies is described in the Cookies section.
Swiftype also offers further data protec­tion infor­ma­tion at
https://​www.elastic.co/​de/​legal/​privacy-state­ment
https://​swiftype.com/​privacy-and-gdpr-faq

Cloud­i­nary

Our website uses Cloud­i­nary, a cloud-based image and video manage­ment service for displaying embedded content. The service provider is the US company Cloud­i­nary Limited (here­inafter Cloud­i­nary), 111 W Evelyn Ave, Suite 206, Sunny­vale, CA 94086, USA. When you call up a page that contains content displayed via Cloud­i­nary, a connec­tion to the Cloud­i­nary server is estab­lished. To ensure an adequate level of data protec­tion for data trans­fers to the USA, Cloud­i­nary has certi­fied itself in accor­dance with the Data Privacy Frame­work certi­fi­ca­tion. The current certifi­cate from Cloud­i­nary can be viewed here. In addi­tion, Cloud­i­nary bases transfer on the Stan­dard Contrac­tual Clauses of the EU Commis­sion to ensure an adequate level of data protec­tion. Further infor­ma­tion on the inter­na­tional transfer of data by Cloud­i­nary can be found under “Transfer of Personal Infor­ma­tion” in the Cloud­i­nary Data Protec­tion Decla­ra­tion. The purpose of data processing is to provide you with opti­mised embedded content. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. Our legit­i­mate interest follows from the described purpose of data processing. We have concluded a Data Processing Agree­ment with Cloud­i­nary. Further data protec­tion infor­ma­tion can be found in the Cloud­i­nary Data Protec­tion Decla­ra­tion.

Face­book fan page data protec­tion decla­ra­tion

The controller for the Face­book plat­form as a whole is Meta Plat­forms Ireland Limited 4 Grand Canal Square, Dublin 2, Ireland or Meta Plat­forms Inc, 1 Hacker Way, Menlo Park, Cali­fornia 94025, USA (here­inafter referred to as Face­book). The controller for our own Face­book page is the controller for the website above.

When you visit our Face­book fan page, Face­book collects personal user data, e.g. through the use of cookies, tracking and similar tech­nolo­gies. This also applies to users who are not logged in or regis­tered with Face­book while visiting the site. The types of cookies and tools used by Face­book are described in detail in the Cookie policy. There you will also find a list of cookies and compa­rable tech­nolo­gies. Under Cookie settings you can manage the autho­rised cookies your­self.

Face­book trans­mits some of the infor­ma­tion collected to affil­i­ated compa­nies in the USA. Face­book bases this transfer on the Stan­dard Contrac­tual Clauses of the EU Commis­sion to ensure an adequate level of data protec­tion. In addi­tion, Meta Plat­forms, Inc., the parent company of Face­book, is certi­fied in accor­dance with the Data Privacy Frame­work. A current certifi­cate can be viewed here. Further infor­ma­tion on inter­na­tional data transfer by Face­book can be found at https://​www.face­book.com/​legal/​terms/​datapro­cessing and https://​www.face­book.com/​legal/​EU_da­ta_­trans­fer­_ad­dendum/​update.

Further infor­ma­tion on data processing by Face­book as a whole can be found in the Face­book data policy. How and to what extent personal user data are processed by Face­book is not trans­parent or veri­fi­able for us in detail.

We do not have full access to your personal data processed by Face­book, including your profile data. Only the publicly acces­sible infor­ma­tion in your profile is visible to us. You can deter­mine the scope of the infor­ma­tion publicly acces­sible in your profile your­self in the Face­book settings. There you can, for example, hide your likes or unfollow our Face­book page. Your profile will then no longer appear in the list of fans on our fan page.

With regard to your visit to our Face­book fan page, we receive anony­mous usage statis­tics from Face­book with the following infor­ma­tion, for example:

  • Range: Number of people accessing a specific post, advert, etc. and its change over time; number of user inter­ac­tions with a specific post and its change over time; advert perfor­mance (cost per click; number of people who have seen an advert)

  • Followers: Number and of people who follow our page over a certain period of time and its change over time

  • Demo­graphics: Average age of users, gender, place of resi­dence, language

We use the statis­tical infor­ma­tion to find out which content is well received by our users and what inter­ests our users have. This enables us to adapt the offers and contri­bu­tions on our website to the needs of our users and to contin­u­ously improve our website in line with our target group.

The legal basis for the processing of usage data and statis­tics is Art. 6 para. 1 lit. a GDPR, insofar as you have consented to the processing. The processing of the statis­tics is also based on a legit­i­mate interest in accor­dance with Art. 6 para. 1 lit. f GDPR, whereby our legit­i­mate interest results from the above descrip­tion of the purpose.

We cannot assign the statis­tical usage data to a specific profile or user or draw any other conclu­sions about an indi­vidual user. You can use your Face­book settings to decide how targeted adver­tising is displayed to you. Under Adver­tising settings you can customise your adver­tising pref­er­ences your­self in your user account.

Face­book compiles the statis­tics on the basis of usage data to which we have no access. We have concluded a Controller Addendum with Face­book which regu­lates which data processing oper­a­tions we or Face­book are respon­sible for when you visit our Face­book fan page. Face­book has assumed respon­si­bility for the processing of your usage data and has under­taken to protect your rights under the GDPR. You can view this agree­ment under the following link: https://​www.face­book.com/​legal/​terms/​page_­con­troller_ad­dendum
If you actively contact us, e.g. via posts, comments, forms or chat func­tions, we process your personal data, e.g. name, contact details, concerns, etc., to process your enquiry and commu­ni­cate with you. For this purpose, we store your data in our CRM system. Depending on the nature of your enquiry, the legal basis for this data processing is our legit­i­mate interest pursuant to Art. 6 para. 1 lit. f GDPR in order to process a general enquiry with you, or Art. 6 para. 1 lit. b GDPR if your enquiry is aimed at concluding a contract.
Your personal data will only be stored on our systems for as long as this is neces­sary in accor­dance with the above-mentioned purposes or for as long as there are statu­tory reten­tion oblig­a­tions.

There is no legal or contrac­tual oblig­a­tion for you to provide your personal data. However, you cannot use our Face­book fan page without your personal data being processed by Face­book.

Further infor­ma­tion on how we process personal data and what rights you have in this regard can be found in this data protec­tion notice. With regard to data processing by Face­book, we ask you to exer­cise your rights directly using the Face­book email address or contact options. With regard to our data processing, you will find the contact options above.

Insta­gram data protec­tion decla­ra­tion

The controller for the Insta­gram plat­form as a whole is Meta Plat­forms Ireland Limited 4 Grand Canal Square, Dublin 2, Ireland and Insta­gram, LLC1601 Willow Road, Menlo Park, Cali­fornia 94025, USA (here­inafter referred to as Insta­gram). The controller for our own Insta­gram page is the controller for the website above.

When you visit our Insta­gram page, Insta­gram collects personal user data, e.g. through the use of cookies, tracking and similar tech­nolo­gies. This also applies to users who are not logged in or regis­tered with Insta­gram while visiting the site. The types of cookies and tools used by Insta­gram are described in detail in the Cookie policy. There you will also find a List of cookies and similar tech­nolo­gies and further infor­ma­tion on how you can Manage cookies your­self.

Insta­gram trans­mits some of the infor­ma­tion collected to affil­i­ated compa­nies in the USA. Insta­gram bases the transfer on the Stan­dard Contrac­tual Clauses of the EU Commis­sion to ensure an adequate level of data protec­tion. Further infor­ma­tion on the use of the stan­dard contrac­tual clauses by Insta­gram can be found at https://​www.face­book.com/​help/​insta­gram/​272603474673152. In addi­tion, Meta Plat­forms, Inc., the parent company of Insta­gram, is certi­fied under the Data Privacy Frame­work. A current certifi­cate can be viewed here. Further infor­ma­tion on inter­na­tional data transfer by Meta Plat­forms, Inc. can be found at https://​www.face­book.com/​legal/​terms/​datapro­cessing and https://​www.face­book.com/​legal/​EU_da­ta_­trans­fer­_ad­dendum/​update.
Further infor­ma­tion on data processing by Insta­gram as a whole, in partic­ular which personal data Insta­gram processes for which purposes, can be found in the Privacy policy and in the Terms of use of Insta­gram. How and to what extent personal user data are processed by Insta­gram is not trans­parent or veri­fi­able for us in detail.

We do not have full access to your personal data processed by Insta­gram, including your profile data. Only the publicly acces­sible infor­ma­tion in your profile is visible to us. You can deter­mine the scope of the infor­ma­tion that is publicly acces­sible in your profile your­self in the Insta­gram settings. For example, you can decide to no longer follow our Insta­gram page there.

With regard to your visit to our Insta­gram page, we receive anony­mous usage statis­tics from Insta­gram with, for example, the following infor­ma­tion:

  • Range: Number and of people who open a specific post, advert, etc. and its change over time; number of user inter­ac­tions with a specific post and its change over time; advert perfor­mance (number of people who have seen an advert/​post); from this it is possible to deduce, for example, which adverts/​posts are better received than others.

  • Followers: Number and of people who follow our page over a certain period of time and its change over time

Insta­gram compiles the statis­tics on the basis of usage data to which we have no access. We use the statis­tical infor­ma­tion to find out which content is well received by our users and what inter­ests our users have. This enables us to adapt the offers and contri­bu­tions on our website to the needs of our users and to contin­u­ously improve our website in line with our target group.

The legal basis for the processing of usage data and statis­tics is Art. 6 para. 1 lit. a GDPR, insofar as you have consented to the processing. The processing of the statis­tics is also based on a legit­i­mate interest in accor­dance with Art. 6 para. 1 lit. f GDPR, whereby our legit­i­mate interest results from the above descrip­tion of the purpose.

We cannot assign the statis­tical usage data to a specific profile or user or draw any other conclu­sions about an indi­vidual user. You can use your Insta­gram settings to decide how targeted adver­tising is displayed to you. You can customise your adver­tising pref­er­ences your­self in your user account under adver­tising settings.

If you actively contact us, e.g. via posts, comments, forms or chat func­tions, we process your personal data, e.g. name, contact details, concerns, etc., to process your enquiry and commu­ni­cate with you. For this purpose, we store your data in our CRM system. Depending on the nature of your enquiry, the legal basis for this data processing is our legit­i­mate interest pursuant to Art. 6 para. 1 lit. f GDPR in order to process a general enquiry with you, or Art. 6 para. 1 lit. b GDPR if your enquiry is aimed at concluding a contract.

Your personal data will only be stored on our systems for as long as this is neces­sary in accor­dance with the above-mentioned purposes or for as long as there are statu­tory reten­tion oblig­a­tions.

There is no legal or contrac­tual oblig­a­tion for you to provide your personal data. However, you cannot use our Insta­gram page without Insta­gram processing your personal data.

Further infor­ma­tion on how we process personal data and what rights you have in this regard can be found in this data protec­tion notice. With regard to data processing by Insta­gram, we ask you to exer­cise your rights directly using the Insta­gram email address or contact options. With regard to our data processing, you will find the contact options above.

TikTok data protec­tion decla­ra­tion

TikTok is an inter­na­tional video portal where users can watch, share and upload mainly short video clips, espe­cially lip-sync and music videos. The controller for the TikTok plat­form as a whole is TikTok Tech­nology Limited 10 Earls­fort Terrace, Dublin, D02 T380, Ireland and the Chinese company ByteDance (here­inafter referred to as TikTok). The controller for our own TikTok page is the controller for the website above.

When you visit our TikTok page, TikTok collects and processes personal user data, in partic­ular profile data and user content, IP addresses, browser type, oper­ating system and other tech­nical data, usage data, loca­tion data, data about contacts, followers, etc. TikTok also processes personal user data through the use of cookies, tracking tools and similar tech­nolo­gies for the oper­a­tion and provi­sion of TikTok services and for adver­tising purposes.

TikTok uses tracking tech­nolo­gies to analyse how you use the plat­form, e.g. which pages you visit most frequently and how you interact with the content. This infor­ma­tion is used to eval­uate or report your activ­i­ties and behav­iour patterns as a user of the plat­form.

This also applies to users who are not logged in or regis­tered with TikTok during their visit to the site. The types of cookies and tools used by TikTok are described in detail in the Cookie policy. There you will also find a list of cookies and similar tech­nolo­gies as well as further infor­ma­tion on how you can manage cookies your­self. For example, you have the option of adjusting your device settings to control your adver­tising ID and can deac­ti­vate person­alised adver­tising. You can find further infor­ma­tion on how to configure data protec­tion and privacy settings on TikTok under Account privacy settings. You can also manage and deac­ti­vate cookies in your web browser, which is also possible without a TikTok account. However, this may affect the func­tion­ality of our TikTok page.

Further infor­ma­tion on data processing by TikTok overall, in partic­ular which personal data TikTok processes from you and for what purposes, can be found in the Privacy policy and in the Terms of Use of TikTok. How and to what extent personal user data are processed by TikTok is not trans­parent or veri­fi­able for us in detail.

We do not have full access to your personal data processed by TikTok, including your profile data. Only the publicly acces­sible infor­ma­tion in your profile is visible to us. You can deter­mine the scope of the publicly acces­sible infor­ma­tion in your profile your­self in the Privacy settings of TikTok. There you can, for example, no longer follow our TikTok page or specify which infor­ma­tion may or may not be shared.

For our TikTok page we receive from TikTok so-called “Page insights” (analytics). These are aggre­gated data that tell us how people interact with our site. Page Insights may be based on personal data collected in connec­tion with a visit or inter­ac­tion on our TikTok page. They contain aggre­gated usage statis­tics with, for example, the following infor­ma­tion:
Range: Number and of people who open a specific post, advert, etc. and its change over time; number of user inter­ac­tions with a specific post and its change over time; advert perfor­mance (number of people who have seen an advert/​post); from this it is possible to deduce, for example, which adverts/​posts are better received than others.

Followers: Number and of people who follow our page over a certain period of time and its change over time.

TikTok compiles the statis­tics on the basis of usage data to which we have no access, and we use the statis­tical infor­ma­tion to find out what content is well received by our users and what inter­ests our users have. This enables us to adapt the offers and contri­bu­tions on our website to the needs of our users and to contin­u­ously improve our website in line with our target group.

We cannot assign the statis­tical usage data to a specific profile or user or draw any other conclu­sions about an indi­vidual user. You can use your TikTok settings to decide how targeted adver­tising is displayed to you. You can customise your adver­tising pref­er­ences your­self in your user account under adver­tising settings.

TikTok trans­mits some of the infor­ma­tion collected to part­ners or group compa­nies in unsafe third coun­tries. In doing so, TikTok bases the transfer on the Stan­dard Contrac­tual Clauses of the EU Commis­sion to ensure an adequate level of data protec­tion. Through the stan­dard contrac­tual clauses, TikTok under­takes to comply with the Euro­pean level of data protec­tion, even if the data are processed in unsafe third coun­tries. Further infor­ma­tion on the use of the stan­dard contrac­tual clauses by TikTok can be found in the Privacy policy of TikTok.

The legal basis for the processing of usage data and statis­tics is Art. 6 para. 1 lit. a GDPR, insofar as you have consented to the processing. The processing of the statis­tics is also based on a legit­i­mate interest in accor­dance with Art. 6 para. 1 lit. f GDPR, whereby our legit­i­mate interest results from the above descrip­tion of the purpose. In partic­ular, we want to promote and opti­mise our offer and ensure effec­tive commu­ni­ca­tion with our users.

If you actively contact us, e.g. via posts, comments, forms or chat func­tions, we process your personal data, e.g. name, contact details, concerns, etc., to process your enquiry and commu­ni­cate with you. For this purpose, we store your data in our CRM system. Depending on the nature of your enquiry, the legal basis for this data processing is our legit­i­mate interest pursuant to Art. 6 para. 1 lit. f GDPR in order to process a general enquiry with you, or Art. 6 para. 1 lit. b GDPR if your enquiry is aimed at concluding a contract.

Your personal data will only be stored on our systems for as long as this is neces­sary in accor­dance with the above-mentioned purposes or for as long as there are statu­tory reten­tion oblig­a­tions. TikTok also stores data on servers in the USA or other third coun­tries. TikTok deter­mines the storage period in accor­dance with the respec­tive legal provi­sions and its internal guide­lines. We do not know how long TikTok stores your data.

There is no legal or contrac­tual oblig­a­tion for you to provide your personal data. However, you cannot use our TikTok site without it processing your personal data.

Further infor­ma­tion on how we process personal data and what rights you have in this regard can be found in this data protec­tion notice. With regard to our data processing, you will find the contact options above. With regard to data processing by TikTok, we ask you to exer­cise your rights directly via the TikTok legal notice, the email address or the contact options. You can contact TikTok’s data protec­tion officer using the online contact form provided by TikTok. Via the TikTok data protec­tion form you can request further data protec­tion infor­ma­tion.

YouTube data protec­tion decla­ra­tion

YouTube is a social network and online video portal of YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, a subsidiary of Google LLC, 1600 Amphithe­atre Parkway, Moun­tain View, CA 94043, USA. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (here­inafter referred to as “Google”) is respon­sible for all data processing in Europe.

The controller for our own YouTube page is the controller for the website above. In addi­tion, our website uses plugins and embedded videos from YouTube.

When you visit our YouTube page, YouTube, as the controller, collects personal user data, e.g. through the use of cookies. We cannot track or influ­ence which user data YouTube processes in detail. We also do not have full access to the processed data or your profile data. We can only view the publicly acces­sible infor­ma­tion on your profile that you your­self deter­mine in your YouTube settings.

We receive anony­mous statis­tics from YouTube regarding the use of our YouTube page, which contain the following infor­ma­tion:

  • Followers: Number of people who follow our YouTube page, including growth and devel­op­ment over a defined time frame.

  • Range: Number of people who see a specific contri­bu­tion. Number of inter­ac­tions with a post. From this, for example, it is possible to deduce which content is better received than others.

  • Ad perfor­mance: Number of people who have been reached with a post or paid advert and have inter­acted with it.

We use the statis­tics, from which we cannot draw any conclu­sions about indi­vidual users, to improve our YouTube page and to respond to the inter­ests of our users. We cannot link the statis­tical data with the profile data of our users or followers. You can use your YouTube settings to decide how targeted adverts are displayed to you.

The legal basis for the processing of usage data and statis­tics is Art. 6 para. 1 lit. a GDPR, insofar as you have consented to the processing. The processing of the statis­tics is also based on a legit­i­mate interest in accor­dance with Art. 6 para. 1 lit. f GDPR, whereby our legit­i­mate interest results from the above descrip­tion of the purpose.

If you actively contact us on YouTube, e.g. via comments, forms or chat func­tions, we process your personal data, e.g. name, contact details, concerns, etc., to handle your enquiry and commu­ni­cate with you. For this purpose, we store your data in our CRM system. Depending on the nature of your enquiry, the legal basis for this data processing is our legit­i­mate interest pursuant to Art. 6 para. 1 lit. f GDPR in order to process a general enquiry with you, or Art. 6 para. 1 lit. b GDPR if your enquiry is aimed at concluding a contract.

Your personal data will only be stored on our systems for as long as this is neces­sary in accor­dance with the above-mentioned purposes or for as long as there are statu­tory reten­tion oblig­a­tions.

There is no legal or contrac­tual oblig­a­tion for you to provide your personal data. However, you cannot use our YouTube page without YouTube processing your personal data.

When you visit our websites with a YouTube plugin, a connec­tion is estab­lished to the YouTube server and noti­fied which of our pages you are visiting. Videos from YouTube are displayed on our website using framing tech­nology and can be played directly from there.

This service is inac­tive by default, but you can acti­vate and deac­ti­vate it at any time by giving your consent. As soon as you click on the consent button and thereby declare your consent to view the content from YouTube, the connec­tion to YouTube is estab­lished.

Through the embed­ding tech­nology, YouTube places at least one cookie in the user’s browser and thus auto­mat­i­cally collects personal data of the website visitor, such as the IP address and behav­iour on the site, which is trans­mitted to Google. The legal basis for the processing of the data is your consent pursuant to Art. 6 para. 1 lit. a GDPR.

The data collected is processed by Google and may also be trans­ferred to coun­tries outside the Euro­pean Union. We have no influ­ence on the type and scope of the data processed by Google, the use or transfer of these data to third parties, in partic­ular to coun­tries outside the Euro­pean Union.

Data processing and transfer by Google takes place regard­less of whether or not you have a user account with YouTube or Google. If you are logged in to a user account, your data will be assigned directly to this account. If you do not wish to do this, you must log out of your user account before visiting our YouTube page or playing a video. The data trans­mitted to Google is stored by Google in the form of user profiles and used for adver­tising and market research purposes as well as for person­alised design. With the help of this analysis, Google can generate demand-opti­mised adver­tising (even for users who are not logged in). You can object to the creation of these user profiles. To do this, you must contact Google.

YouTube does not provide its own data protec­tion decla­ra­tion, but refers in the Use of YouTube to the data protec­tion provi­sions of Google. In the Google data protec­tion decla­ra­tion you can find out more about data processing by Google as well as your rights, settings options and the ability change your settings your­self. The processing of personal data by Google also takes place in the USA. To ensure an adequate level of data protec­tion for data trans­fers to the USA, Google has adopted the Data Privacy Frame­work certi­fi­ca­tion. The current certifi­cate from Google can be viewed here. Google also concludes the EU stan­dard contrac­tual clauses with its customers and busi­ness part­ners, see here and here. You can find the wording of the EU stan­dard data protec­tion clauses at https://​gsuite.google.com/​terms/​mcc_terms.html. Google thereby under­takes to comply with the stan­dards and regu­la­tions of Euro­pean data protec­tion law.

Further infor­ma­tion on how we process personal data and what rights you have in this regard can be found in this data protec­tion notice. With regard to data processing by YouTube, we ask you to exer­cise your rights directly via the YouTube email address or contact options. With regard to our data processing, you will find the contact options above.

We use YouTube in connec­tion with the “extended data protec­tion mode” func­tion in order to be able to show you videos. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legit­i­mate interest lies in improving the quality of our website. According to YouTube, the “Extended data protec­tion mode” func­tion means that the data described in more detail below is only trans­mitted to the YouTube server when you actu­ally start a video.
Without this “Extended data protec­tion”, a connec­tion to the YouTube server in the USA is estab­lished as soon as you call up one of our Internet pages on which a YouTube video is embedded.

LinkedIn data protec­tion decla­ra­tion

The controller for the LinkedIn plat­form as a whole is LinkedIn Ireland Unlim­ited Company, Wilton Place, Dublin 2, Ireland (here­inafter LinkedIn). The controller for our own LinkedIn page is the controller for the website above.

When you visit our LinkedIn page, LinkedIn collects personal user data, e.g. through the use of cookies, tracking and similar tech­nolo­gies. This also applies to users who are not logged in or regis­tered with LinkedIn while visiting the site. The types of cookies and tools used by LinkedIn are described in detail in the Cookie policy. You can find an indi­vidual list of cookies and compa­rable tech­nolo­gies in the Cookie table.

LinkedIn may transfer some of the infor­ma­tion collected to affil­i­ated compa­nies in the USA. To ensure an adequate level of data protec­tion for data trans­fers to the USA, LinkedIn has adopted the Data Privacy Frame­work certi­fi­ca­tion. The current certifi­cate from LinkedIn can be viewed here. In addi­tion, LinkedIn bases the transfer on the Stan­dard Contrac­tual Clauses of the EU Commis­sion to ensure an adequate level of data protec­tion. Further infor­ma­tion on the use of the stan­dard contrac­tual clauses by LinkedIn can be found at https://​de.linkedin.com/​legal/​l/​dpa and https://​www.linkedin.com/​legal/​l/​eu-sccs.
Further infor­ma­tion on data processing by LinkedIn as a whole can be found in the LinkedIn data protec­tion decla­ra­tion. How and to what extent personal user data are processed by LinkedIn is not trans­parent or veri­fi­able for us in detail.

We do not have full access to your personal data processed by LinkedIn, including your profile data. Only the publicly acces­sible infor­ma­tion in your profile is visible to us. You can deter­mine the scope of the publicly acces­sible infor­ma­tion in your profile your­self in your LinkedIn settings.

With regard to your visit to our site, we receive anony­mous usage statis­tics from LinkedIn with the following infor­ma­tion:

  • Range: Number of people accessing a specific post, advert, etc. and its change over time; number of user inter­ac­tions with a specific post and its change over time

  • Followers: Number and of people who follow our page over a certain period of time and its change over time

We use the statis­tical infor­ma­tion to find out which content is well received by our users and what inter­ests our users have. This enables us to adapt the offers and contri­bu­tions on our website to the needs of our users and to contin­u­ously improve our website in line with our target group.

The legal basis for the processing of usage data and statis­tics is Art. 6 para. 1 lit. a GDPR, insofar as you have consented to the processing. The processing of the statis­tics is also based on a legit­i­mate interest in accor­dance with Art. 6 para. 1 lit. f GDPR, whereby our legit­i­mate interest results from the above descrip­tion of the purpose.

We cannot assign the statis­tical usage data to a specific profile or user or draw any other conclu­sions about an indi­vidual user. You can use your LinkedIn settings to deter­mine whether and in what form targeted adver­tising is displayed to you.

LinkedIn compiles the statis­tics on the basis of usage data to which we have no access. LinkedIn has signed a Joint Controller Addendum in which LinkedIn has assumed respon­si­bility for the processing of usage data and has under­taken to protect your rights under the GDPR.

If you actively contact us, e.g. via posts, comments, forms or chat func­tions, we process your personal data, e.g. name, contact details, concerns, etc., to process your enquiry and commu­ni­cate with you. For this purpose, we store your data in our CRM system. Depending on the nature of your enquiry, the legal basis for this data processing is our legit­i­mate interest pursuant to Art. 6 para. 1 lit. f GDPR in order to process a general enquiry with you, or Art. 6 para. 1 lit. b GDPR if your enquiry is aimed at concluding a contract.
Your personal data will only be stored on our systems for as long as this is neces­sary in accor­dance with the above-mentioned purposes or for as long as there are statu­tory reten­tion oblig­a­tions.

There is no legal or contrac­tual oblig­a­tion for you to provide your personal data. However, you cannot use our LinkedIn page without your personal data being processed by LinkedIn.
Further infor­ma­tion on how we process personal data and what rights you have in this regard can be found in this data protec­tion notice. With regard to data processing by LinkedIn, we ask you to exer­cise your rights directly using the LinkedIn email address or contact options. With regard to our data processing, you will find the contact options above.

Xing data protec­tion decla­ra­tion

The controller for the Xing plat­form as a whole is New Work SE, Am Strandkai 1, 20457 Hamburg (here­inafter referred to as Xing). The controller for our own Xing page is the controller for the website above. There is a joint controller rela­tion­ship in place, whereby Xing has assumed respon­si­bility for the processing of usage data and has under­taken to protect your rights under the GDPR.

When you visit our Xing page, Xing collects personal user data, e.g. through the use of cookies, tracking and similar tech­nolo­gies. This also applies to users who are not logged in or regis­tered with Xing while visiting the site. The types of tracking tools used by Xing are described under Tracking. You can find a list of tracking tech­nolo­gies at Third-party providers.

Xing may transfer some of the infor­ma­tion collected to recip­i­ents in third coun­tries. Xing bases the transfer to unsafe third coun­tries on the Stan­dard Contrac­tual Clauses of the EU Commis­sion to ensure an adequate level of data protec­tion. Further infor­ma­tion on the use of the stan­dard contrac­tual clauses can be found in Xing’s data protec­tion decla­ra­tion under Third coun­tries.

Further infor­ma­tion on data processing by Xing as a whole can be found in the Xing data protec­tion decla­ra­tion or in the corre­sponding long version. How and to what extent personal user data are processed by Xing is not trans­parent or veri­fi­able for us in detail.
We do not have full access to your personal data processed by Xing, not even to your profile data. Only the publicly acces­sible infor­ma­tion in your profile is visible to us. You can deter­mine the scope of the publicly acces­sible infor­ma­tion in your profile your­self in your Xing settings.

Regarding your visit to our site, we receive anony­mous usage statis­tics (page insights) from Xing with the following infor­ma­tion:

  • Range: Number of people accessing a specific post, advert, etc. and its change over time; number of user inter­ac­tions with a specific post and its change over time

  • Followers: Number and of people who follow our page over a certain period of time and its change over time

  • Demo­graphics: Average age of visi­tors, gender, place of resi­dence, language

We use the statis­tical infor­ma­tion to find out which content is well received by our users and what inter­ests our users have. This enables us to adapt the offers and contri­bu­tions on our website to the needs of our users and to contin­u­ously improve our website in line with our target group.

The legal basis for the processing of usage data and statis­tics is Art. 6 para. 1 lit. a GDPR, insofar as you have consented to the processing. The processing of the statis­tics is also based on a legit­i­mate interest in accor­dance with Art. 6 para. 1 lit. f GDPR, whereby our legit­i­mate interest results from the above descrip­tion of the purpose.

Xing compiles the statis­tics on the basis of usage data to which we have no access. We cannot assign the statis­tical data to a specific profile or user or draw any other conclu­sions about an indi­vidual user. You can use your Xing settings to deter­mine whether and in what form targeted adver­tising is displayed to you.

If you actively contact us, e.g. via posts, comments, forms or chat func­tions, we process your personal data, e.g. name, contact details, concerns, etc., to process your enquiry and commu­ni­cate with you. For this purpose, we store your data in our CRM system. Depending on the nature of your enquiry, the legal basis for this data processing is our legit­i­mate interest pursuant to Art. 6 para. 1 lit. f GDPR in order to process a general enquiry with you, or Art. 6 para. 1 lit. b GDPR if your enquiry is aimed at concluding a contract.

Your personal data will only be stored on our systems for as long as this is neces­sary in accor­dance with the above-mentioned purposes or for as long as there are statu­tory reten­tion oblig­a­tions.

There is no legal or contrac­tual oblig­a­tion for you to provide your personal data. However, you cannot use our Xing page without your personal data being processed by Xing.

Further infor­ma­tion on how we process personal data and what rights you have in this regard can be found in this data protec­tion notice. With regard to data processing by Xing, we ask you to exer­cise your rights directly using the Xing email address or other contact options. With regard to our data processing, you will find the contact options above.

Use of Microsoft Teams

We use Microsoft Teams for video confer­ences. You can find the rele­vant data protec­tion provi­sions here.

Rights of the data subject

You have the various rights set out below on the basis of the data protec­tion provi­sions.

1. Right of access

You have the right to request infor­ma­tion about your personal data processed by us in accor­dance with Art. 15 GDPR. In partic­ular, you can request infor­ma­tion about the processing purposes, the cate­gory of personal data, the cate­gories of recip­i­ents to whom your data has been or will be disclosed, the planned storage period, the exis­tence of a right to recti­fi­ca­tion, erasure, restric­tion of processing or objec­tion, the exis­tence of a right of appeal, the origin of your data if it has not been collected by us, as well as the exis­tence of auto­mated deci­sion-making including profiling and, if applic­able, mean­ingful infor­ma­tion on its details.

2. Right to recti­fi­ca­tion

In accor­dance with Art. 16 GDPR, you have the right to demand the imme­diate recti­fi­ca­tion of incor­rect or incom­plete personal data stored by us.

3. Right to erasure

You have the right to request the dele­tion of your personal data stored by us in accor­dance with Art. 17 GDPR, unless the processing is neces­sary to exer­cise the right to freedom of expres­sion and infor­ma­tion, to fulfil a legal oblig­a­tion, for reasons of public interest or for the asser­tion, exer­cise or defence of legal claims.

4. Right to restric­tion of processing

You have the right to request the restric­tion of the processing of your personal data in accor­dance with Art. 18 GDPR if the accu­racy of the data is disputed by you, the processing is unlawful but you decline to delete it, or if we no longer need the data but you require it for the asser­tion, exer­cise or defence of legal claims, or you have lodged an objec­tion to the processing in accor­dance with Art. 21 GDPR.

5. Right to data porta­bility

In accor­dance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a struc­tured, commonly used and machine-read­able format or to request that it be trans­ferred to another controller.

6. Right to revoke the decla­ra­tion of consent under data protec­tion law

In accor­dance with Art. 7 (3) GDPR, you have the right to revoke your decla­ra­tion of consent under data protec­tion law at any time. As a result, we may no longer continue the data processing based on this consent in the future. The with­drawal of consent shall not affect the lawful­ness of processing based on consent before its with­drawal.

If you wish to make use of your right of cancel­la­tion, it is suffi­cient to send a corre­sponding message via all known commu­ni­ca­tion chan­nels, in partic­ular also by email to info@sonax.de.

7. Right to lodge a complaint with a super­vi­sory authority

You have the right to lodge a complaint with a super­vi­sory authority in accor­dance with Art. 77 GDPR. As a rule, you can contact the super­vi­sory authority of your usual place of resi­dence, your work­place or our company head­quar­ters. In Bavaria this is
Bayerisches Landesamt für Daten­schutza­uf­sicht
Prom­e­nade 18 91522 Ansbach
Tele­phone: 0981/​180093-0 Email: post­stelle@lda.bayern.de Internet: https://​www.lda.bayern.de

A list of the compe­tent state data protec­tion author­i­ties (for the non-public sector) with addresses can be found at https://​www.bfdi.bund.de/​EN/​Service/​Anschriften/​Laender/​Laender-node.html.

8. Right to object

If your personal data are processed on the basis of legit­i­mate inter­ests in accor­dance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accor­dance with Art. 21 GDPR, provided that there are reasons for this arising from your partic­ular situ­a­tion or the objec­tion is against direct adver­tising. In the latter case, you have a general right to object, which will be imple­mented by us without spec­i­fying a partic­ular situ­a­tion.

If you wish to exer­cise your right of objec­tion, it is suffi­cient to send a corre­sponding message via any known commu­ni­ca­tion channel, in partic­ular also by email to info@sonax.de.

After exer­cising your right to object, we will no longer process your personal data for these purposes unless we can demon­strate compelling legit­i­mate grounds for the processing which over­ride your inter­ests, rights and free­doms, or if the processing serves the estab­lish­ment, exer­cise or defence of legal claims. This does not apply if the processing is carried out for direct marketing purposes. We will then no longer process your personal data for this purpose.

9. Auto­mated deci­sion-making in indi­vidual cases including profiling

You have the right not to be subject to a deci­sion based solely on auto­mated processing, including profiling, which produces legal effects concerning you or simi­larly signif­i­cantly affects you. This does not apply if the deci­sion

(1) is neces­sary for the conclu­sion or fulfil­ment of a contract between you and the controller,

(2) is autho­rised by Union or Member State law to which the controller is subject and which also lays down suit­able measures to safe­guard your rights and free­doms and legit­i­mate inter­ests; or

(3) is made with your express consent.

However, these deci­sions may not be based on special cate­gories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and appro­priate measures have been taken to protect your rights and free­doms as well as your legit­i­mate inter­ests.

In the cases referred to in (1) and (3), the controller shall imple­ment suit­able measures to safe­guard your rights and free­doms and legit­i­mate inter­ests, at least the right to obtain human inter­ven­tion on the part of the controller, to express your point of view and to contest the deci­sion.

Data secu­rity

When you visit our website, we use the wide­spread SSL encryp­tion (Secure Socket Layer) in the TLS stan­dard (Trans­port Layer Secu­rity) in conjunc­tion with the highest encryp­tion level supported by your browser. As a rule, this involves 256-bit encryp­tion. If your browser does not support 256-bit encryp­tion, we will use 128-bit tech­nology instead. You can recog­nise whether an indi­vidual page of our website is trans­mitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suit­able tech­nical and organ­i­sa­tional secu­rity measures to protect your data against acci­dental or inten­tional manip­u­la­tion, partial or complete loss, destruc­tion or unau­tho­rised access by third parties. Our secu­rity measures are contin­u­ously improved in line with tech­no­log­ical devel­op­ments.

Purpose and legal basis of data processing

The secu­rity measures described are used on the basis of Art. 6 para. 1 sentence 1 lit. f, Art. 32 GDPR. The data processed in this way are required for secu­rity purposes to protect our legit­i­mate inter­ests and the inter­ests of third parties in accor­dance with Art. 6 para. 1 sentence 1 lit. f GDPR.

Ques­tions for the data protec­tion officer

If you have any ques­tions about data protec­tion, please send us an email or contact the person respon­sible for data protec­tion in our organ­i­sa­tion directly: Mrs Vera Schneider, Email: daten­schutz@sonax.de

Up-to-date­ness and amend­ment of this data protec­tion decla­ra­tion

This data protec­tion decla­ra­tion is dated February 2024. Due to the further devel­op­ment of our website and offers, e.g. when intro­ducing new services, or due to changed legal or offi­cial require­ments, it may become neces­sary to change this data protec­tion decla­ra­tion. We there­fore reserve the right to amend the data protec­tion decla­ra­tion at any time with future effect. The new data protec­tion decla­ra­tion will then apply to your next visit. We recom­mend that you read the current data protec­tion decla­ra­tion from time to time. The current data protec­tion decla­ra­tion can be found on our website at https://​www.sonax.com/​en/​footer/​legal/​privacy-policy.