Privacy

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data are all data with which you can personally be identified.

1.2 The controller for the data processing on this website within the meaning of the GDPR is R&G Faserverbundwerkstoffe GmbH, Im Meißel 7, 71111 Waldenbuch, Germany, Tel.: 07157 530460, Fax: 07157 530470, E-Mail: info@r-g.de. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 The controller has appointed a data protection officer; he can be reached as follows: “ELECTRONIC IMAGE CONSULTING, Jens Eilers, Bredkamp 64a, 22589 Hamburg, +49 (0)40 – 87 97 05 37, datenschutz{at}r-g.de”

2) Data Collection When Visiting Our Website

2.1 When you use our website purely for informational purposes — i.e., you do not register or otherwise provide us with information — we only collect those data that your browser transmits to the website’s server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us in order to display the website to you:

  • The website visited
  • Date and time at the moment of access
  • Amount of data sent in bytes
  • Source/referrer from which you reached the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymised form)

The processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. A transfer or other use of the data does not take place. We reserve the right, however, to retrospectively check the server-log files if there are concrete indications of an unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the lock-symbol in your browser’s address bar.

3) Hosting & Content Delivery Network

3.1 For the hosting of our website and the presentation of the page contents we use a provider that performs its services either by itself or via selected subcontractors exclusively on servers within the European Union.

All the data collected on our website are processed on these servers.

We have concluded a contract for order-processing with the provider which ensures the protection of the data of our site visitors and prohibits unauthorised disclosure to third parties.

3.2 Cloudinary

We use a Content Delivery Network by the following provider: Cloudinary Ltd., 3400 Central Expressway, Suite 110, Santa Clara, CA 95051, USA

This service enables us to deliver large media files such as graphics, page contents or scripts more quickly via a globally distributed network of servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. We have concluded an order-processing contract with the provider which ensures the protection of the data of our site visitors and prohibits unauthorised disclosure to third parties.

For the transmission of data to the USA the provider relies on Standard Contractual Clauses of the European Commission which are intended to ensure compliance with the European data protection level.

4) Cookies

In order to make a visit to our website attractive and to allow the use of certain functions, we use cookies — small text files which are stored on your end device. Some of the cookies are automatically deleted after closing your browser (so-called “session cookies”), while others remain on your end device and allow us to save your page settings (so-called “persistent cookies”). In the latter case you can find the storage period in the overview of your web browser’s cookie settings.

If individual cookies used by us also process personal data, the processing is carried out pursuant to Art. 6(1)(b) GDPR for the performance of a contract, pursuant to Art. 6(1)(a) GDPR in the case of consent given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interest in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

You can configure your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

In the course of contacting us (e.g., via contact form or e-mail) personal data are processed — exclusively for the purpose of dealing with and answering your enquiry and only to the extent necessary.

The legal basis for processing this data is our legitimate interest in answering your enquiry pursuant to Art. 6(1)(f) GDPR. If your contact aims at concluding a contract then the additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted as soon as it is clear from the circumstances that the relevant matter has been conclusively clarified and provided that no statutory retention obligations oppose deletion.

6) Data Processing When Opening a Customer Account

Pursuant to Art. 6(1)(b) GDPR personal data are further collected and processed in the necessary scope if you provide us with them when opening a customer account. Which data are required for the account opening can be inferred from the input mask of the respective form on our website.

Deletion of your customer account is possible at any time and can be effected by a message to the above-mentioned address of the controller. After deletion of your customer account your data will be deleted provided that all contracts concluded via the account have been fully settled, no statutory retention obligations oppose deletion and there is no legitimate interest of ours in further storage.

7) Use of Customer Data for Direct Advertising

Rapidmail

The dispatch of our email-newsletter is carried out via the following provider: rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany

On the basis of our legitimate interest in an effective and user-friendly newsletter marketing we pass on the data you provided when registering for the newsletter pursuant to Art. 6(1)(f) GDPR to this provider so that they handle the newsletter dispatch on our behalf.

Subject to your explicit consent pursuant to Art. 6(1)(a) GDPR the provider also carries out a statistical success evaluation of newsletter campaigns via Web Beacons or counting pixels in the sent emails which can measure opening rates and specific interactions with the newsletter content. Device information (e.g., time of access, IP address, browser type and operating system) are also collected and evaluated, but not merged with other data sets.
You can withdraw your consent to newsletter-tracking at any time with effect for the future.

We have concluded an order-processing agreement with the provider which protects the data of our site visitors and prohibits passing it on to third parties.

8) Data Processing for Order Fulfilment

8.1 To the extent necessary for fulfilling the contract for delivery and payment purposes, the personal data collected by us will be passed on pursuant to Art. 6(1)(b) GDPR to the transport company commissioned and to the credit institution commissioned by us.

Insofar as we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data you transmitted during the order in order to inform you personally under our legal information obligations pursuant to Art. 6(1)(c) GDPR. Your contact data are used strictly for the purpose of notifications about updates owed by us and are processed by us only to the extent necessary for the respective notification.

For the handling of your order we also cooperate with the service provider(s) listed below, who support us wholly or partly in executing the concluded contracts. According to the following information certain personal data are passed on to these service providers.

8.2 Use of payment service providers (payment services)

– Amazon Pay

On this website one or more online payment options of the following provider are available: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg

If you select a payment option of the provider for which you pay in advance (for example credit card payment), your payment data (including name, address, bank and card information, currency and transaction number) provided during the ordering process and information on the content of your order are passed on to the provider pursuant to Art. 6(1)(b) GDPR. The data are passed on for the sole purpose of processing payment with the provider and only to the extent necessary for this purpose.
– ipayment

On this website one or more online payment options of the following provider are available: 1&1 Internet AG, Elgendorfer Str. 57, 56410 Montabaur, Germany

If you select a payment option of the provider for which you pay in advance (for example credit card payment), your payment data (including name, address, bank and card information, currency and transaction number) provided during the ordering process and information on the content of your order are passed on to the provider pursuant to Art. 6(1)(b) GDPR. The data are passed on for the sole purpose of processing payment with the provider and only to the extent necessary for this purpose.
– PayPal

On this website one or more online payment options of the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment option for which we pay in advance, your payment data (including name, address, bank and card information, currency and transaction number) provided during the ordering process and information about the content of your order are passed on to the provider pursuant to Art. 6(1)(b) GDPR. The data are passed on for the sole purpose of processing payment with the provider and only to the extent necessary for this purpose.

If you select a payment option for which we pay in advance, you are also requested in the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, if applicable data on an alternative payment method).

In such cases—in order to safeguard our legitimate interest in determining your creditworthiness—these data are forwarded by us pursuant to Art. 6(1)(f) GDPR to the provider for a credit check. The provider checks on the basis of the personal data you provided as well as further data (such as shopping cart, invoice amount, order history, payment experiences) whether the payment option selected by you can be granted with regard to payment and/or default risk.

The credit information may include probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Among other things, address data are included in the calculation of the score values.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be authorised to process your personal data if this is necessary for the contractual payment processing.

9) Web Analytics Services

9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

By default, Google Analytics 4 places cookies when you visit the website; these are small text files stored on your device and collect certain information. This information also includes your IP address, which however is truncated by Google to exclude direct personal reference.

The information is transmitted to Google servers and processed there. Transfers to Google LLC in the USA may also occur.

Google uses the collected information on our behalf to evaluate your use of the website, to compile reports on website activities for us and to provide further services connected with website and internet usage. The IP address transmitted by your browser in the context of Google Analytics and truncated is not merged with other data by Google. The data collected within the usage of Google Analytics 4 are stored for the period of two months and then deleted.

All processing described above, in particular the setting of cookies on the used device, only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR.
Without your consent, the use of Google Analytics 4 during your site visit does not occur. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the “cookie-consent tool” provided on the website.

We have concluded an order processing agreement with Google which ensures the protection of the data of our site visitors and prohibits unauthorised disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/en/privacy/, https://policies.google.com/privacy and at https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the special function “demographic characteristics” and can thereby create statistics that make statements about the age, gender and interests of site visitors. This is done by analysing advertising and information from third-party providers. This can identify target groups for marketing activities. However, the collected data cannot be assigned to a specific person and are deleted after storage for the duration of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to allow cross-device reports. If you have activated personalised ads and linked your devices with your Google account, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, Google can analyse your usage behaviour across devices and create database models, among other things for cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can deactivate the “Personalised ads” function in the settings of your Google account. Follow the instructions at this page: https://support.google.com/my-ad-center-help/answer/12155764?hl=en
Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=en

User IDs
As an extension to Google Analytics 4, the “User IDs” function may be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, created an account on this website and log in with this account on different devices, your activities including conversions can be analysed across devices.

Collection of user-provided data
In order to improve the analytical results for users whose contact data we have obtained in the context of business or business-like relationships, we use the function “collection of user-provided data”.
Subject to your express consent pursuant to Art. 6(1)(a) GDPR, we transmit one or more files with aggregated customer data relating to you (especially email address and telephone number) electronically to Google. Google does not obtain access to clear-text data, but automatically encrypts the information in the customer files during the transmission process with a special algorithm. The encrypted information may then only be used by Google to match existing Google accounts created by the affected persons.
The processing serves the refinement of measurement data, improves cross-device user traceability and enables the integration of analytical results into advertising personalisation and conversion-tracking functions of Google Ads.
You may revoke your consent to us at any time with effect for the future. Further information on Google’s data protection measures with regard to the transmission of customer data can be found here: https://support.google.com/google-ads/answer/6334160?hl=en&ref_topic=10550182

For data transfers to the USA the provider has committed to the EU-US Data Privacy Framework, which is intended to ensure compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

9.2 Google Tag Manager

This website uses the “Google Tag Manager”, a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and controlling them via a uniform user interface and linking them to conditions. The Google Tag Manager itself does not store information on users’ end devices or read such information. It also does not perform any standalone data analyses. However, when a page is called up, your IP address is transmitted to Google and stored there if applicable. A transfer to servers of Google LLC in the USA is also possible.

This processing is only carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. Without such consent, the use of Google Tag Manager during your visit to the site does not take place. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service via the “cookie-consent tool” provided on the website.

We have concluded an order-processing agreement with the provider which ensures the protection of data of our site visitors and prohibits unauthorised transfer to third parties.

For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which is intended to ensure compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Further legal information on Google Tag Manager can be found at https://business.safety.google/intl/en/privacy/ and https://policies.google.com/privacy

10) Retargeting/Remarketing and Conversion Tracking

10.1 Meta Pixel with Enhanced Data Matching

Within our online offering we use in the mode of Enhanced Data Matching the “Meta Pixel” service of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quay, Dublin 2, Ireland (“Meta”).

If a user clicks on an advertisement placed by us on Facebook or Instagram, the URL of our linked page is expanded by a parameter using “Meta Pixel”. This URL parameter is then registered in the user’s browser via a cookie that our linked page sets. In addition, this cookie collects specific customer data such as e-mail address that we collect on our website linked to the Facebook or Instagram ad during processes such as purchase completions, account registrations or sign-ups (enhanced data matching). The cookie is then read and enables the transfer of the data including the specific customer data to Meta.

We use “Meta Pixel” with enhanced data matching in order to make our advertising (so-called “Ads”) on Facebook and/or Instagram more effective and to ensure that they correspond to the interests of users or have certain features (such as interests in specific topics or products, which we infer from the visited web pages) that we transmit to Meta (so-called “Custom Audiences”).

In addition, we analyse the effectiveness of our advertisements by tracking whether users who clicked on an ad were forwarded to our website (conversion). Compared to the standard version of “Meta Pixel”, the enhanced data matching function helps us to measure the effectiveness of our advertising campaigns more accurately by capturing more attributed conversions.

All transmitted data are stored and processed by Meta so that assignment to the respective user profile is possible and Meta may use the data for its own advertising purposes in accordance with Meta’s Data Use Terms ( https://www.facebook.com/about/privacy/). The data may allow Meta and its partners to display ads on and off Facebook.

All processing described above — in particular the setting of cookies for the reading of information on the used end device — is only carried out if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the “cookie-consent tool” provided on the website.

We have concluded an order-processing agreement with the provider which ensures the protection of data of our site visitors and prohibits unauthorised transfer to third parties.

The information generated by Meta is normally transferred to a server of Meta and stored there; in this context a transfer to servers of Meta Platforms Inc. in the USA may also occur.

For data transfers to the USA the provider has committed to the EU-US Data Privacy Framework, which is intended to ensure compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

10.2 Google Ads Remarketing

This website uses retargeting technology of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited. No further data processing takes place unless you have consented to Google linking your Internet- and app-browser history with your Google account and to information from your Google account being used to personalise ads that you view on the web. If you are logged in to Google during the visit to our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose your personal data are temporarily linked by Google with Google Analytics data for the formation of audiences. In the context of the use of Google Ads remarketing, a transfer of personal data to the servers of Google LLC in the USA may also occur.

All processing described above — in particular the setting of cookies for reading of information on the used end device — is only carried out if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. Without your consent, the use of retargeting technology during your visit to the site does not take place.

You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service in the “cookie-consent tool” provided on the website.

For data transfers to the USA the provider has committed to the EU-US Data Privacy Framework, which is intended to ensure compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Details about the processing initiated by Google and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

Further information about Google’s privacy policies can be found here: https://business.safety.google/intl/en/privacy/ and https://policies.google.com/privacy

10.3 Microsoft Advertising

This website uses retargeting technology of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

This allows visitors to our websites who have already shown interest in our shop and our products to be targeted with personalised, interest-based advertising. The display of the advertising media is based on a cookie-based analysis of past and current user behaviour, although no personal data are stored. In cases of retargeting technology a cookie is stored on your computer or mobile device to record pseudonymised data about your interests and thus tailor the advertising to the stored information. These cookies are small text files that are stored on your computer or mobile device. This way you are shown ads that are very likely to correspond with your product and information interests.

All processing described above — in particular the setting of cookies for the reading of information on the used end device — is only carried out if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. Without your consent, the use of retargeting technology during your visit to the site does not take place.

You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service in the “cookie-consent tool” provided on the website.

For data transfers to the USA the provider has committed to the EU-US Data Privacy Framework, which is intended to ensure compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

10.4 Google Ads Conversion Tracking

This website uses the online advertising programme “Google Ads” and, within the scope of Google Ads, conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

We use the Google Ads offering to draw attention to our attractive offers on external websites using advertising media (so-called Google AdWords). With regard to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.

The cookie for conversion tracking is set when a user clicks on an ad placed by Google. Cookies are small text files which are stored on your end device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was forwarded to this page. Every Google Ads customer receives a different cookie. Cookies can thus not be tracked across the websites of Google Ads customers. The information collected by means of the conversion cookie is used to compile conversion statistics for Google Ads customers who have decided on conversion tracking. The customers receive the total number of users who clicked on their ad and were forwarded to a page marked with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

In the context of the use of Google Ads a transfer of personal data to the servers of Google LLC in the USA may also occur.

Details about the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing described above — in particular the setting of cookies for the reading of information on the used end device — is only carried out if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the “cookie-consent tool” provided on the website.

You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser-plug-in available at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=en

To engage users whose data we have received in the context of business or business-like relationships in a more interest-driven manner, we use in the context of Google Ads a function for customer matching. For this purpose we transmit one or more files with aggregated customer data (especially email addresses and telephone numbers) electronically to Google. Google does not receive access to unencrypted data, but encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to match existing Google accounts created by the affected persons. This enables the delivery of personalised advertising across all services linked with the respective Google account.

The transfer of customer data to Google only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may revoke this consent at any time with effect for the future. Further information on the privacy measures by Google with regard to the customer-matching function can be found here: https://support.google.com/google-ads/answer/6334160?hl=en&ref_topic=10550182
Google’s privacy policies can be viewed here: https://business.safety.google/intl/en/privacy/ and https://policies.google.com/privacy

For data transfers to the USA the provider has committed to the EU-US Data Privacy Framework, which is intended to ensure compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

10.5 Microsoft Advertising Universal Event Tracking

This website uses conversion-tracking technology of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

For the use of Universal Event Tracking a tag is placed on each page of our website which interacts with the conversion-cookie set by Microsoft. This interaction makes user behaviour on our website traceable and sends the information thus captured to Microsoft. The purpose is that certain predefined goals such as purchases or leads can be statistically captured and evaluated so that the alignment and content of our offers can be more interest-driven. The tags are at no time used for personal identification of users.

All processing described above — in particular the setting of cookies for the reading of information on the used end device — is only carried out if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. Without your consent, the use of retargeting technology during your visit to the site does not take place.

You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service in the “cookie-consent tool” provided on the website.

For data transfers to the USA the provider has committed to the EU-US Data Privacy Framework, which is intended to ensure compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

10.6 Reddit Tracking Pixel

This website uses the conversion-tracking technology of the following provider: Reddit Inc., 420 Taylor Street, San Francisco, CA 94102, USA

If you arrived from an advertisement on the domain of the provider, tracking using cookies and/or similar technologies (tracking pixels, web-beacons, pings or HTTP-requests) can be used to trace the success of the advertisement on our website.

For this purpose certain device- and browser-information including potentially your IP address are read via the tracking technology in order to capture and evaluate user actions predefined by us (for example completed transactions, leads, search queries on the website, views of product pages). This enables the creation of statistics about user behaviour on our website after referral from an advertisement which serve us to optimise our offer.

All processing described above — in particular the setting of cookies for the reading of information on the used end device — is only carried out if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the “cookie-consent tool” provided on the website.

We have concluded an order-processing agreement with the provider which ensures the protection of the data of our site visitors and prohibits unauthorised transfer to third parties.

For the transfer of data to the USA the provider relies on the Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

11) Website Functionalities

11.1 YouTube

This website uses plugins for the display and playback of videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data can also be transmitted to: Google LLC, USA.

If you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers at the latest at the time the video is played, in order to load the content. In doing so, certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also sets cookies in order to collect information about user behaviour, produce playback statistics and prevent misuse.

If you are logged in to a user account with the provider during your visit, your data when clicking on a video will be assigned directly to your account. If you do not wish this assignment to your account, you must log out before pressing the play button.

All aforementioned processing, in particular the setting of cookies to read information on the end device used, is only carried out if you have given your explicit consent pursuant to Art. 6(1)(a) GDPR. You can revoke the consent you have given at any time with effect for the future by disabling this service via the “cookie-consent tool” provided on the website.

For data transmissions to the USA the provider has adhered to the EU-US Data Privacy Framework, which is intended to ensure compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

11.2 Google Maps

This website uses an online map service of the following provider: Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service for displaying interactive (land) maps in order to visually present geographical information. By using this service our location is shown to you and any journey there is facilitated.

Already when you access the sub-pages in which the map from Google Maps is embedded, information about your use of our website (for example your IP address) is transmitted to Google servers and stored there. In this context a transfer to servers of Google LLC in the USA may also occur. This takes place regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged into Google, your data is directly assigned to your account. If you do not want this association with your Google profile, you must log out before activating the button. Google stores your data (even for non-logged-in users) as usage profiles and evaluates them.

The collection, storage and evaluation take place pursuant to Art. 6(1)(f) GDPR on the basis of Google’s legitimate interest in displaying personalised advertising, market research and/or demand-oriented design of Google websites. You have a right to object to the creation of these user profiles; for the exercise of this you must contact Google. If you do not agree to the future transmission of your data to Google in the context of using Google Maps, it is also possible to disable the web service completely by switching off JavaScript in your browser. Google Maps and thus the map display on this website cannot then be used.

Where legally required, we have obtained your consent pursuant to Art. 6(1)(a) GDPR for the processing of your data as described above. You may revoke the consent you have given at any time with effect for the future. To exercise your right of withdrawal, please follow the possibility to lodge an objection described above.

For data transmissions to the USA the provider has adhered to the EU-US Data Privacy Framework, which is intended to ensure compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Further information on Google’s privacy policies can be found here: https://business.safety.google/intl/en/privacy/

11.3 Google Translate

This website uses via an API integration the translation service “Google Translate” of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). In order that the translation into your selected national language is displayed automatically, the browser you use connects to the Google servers. Google uses so–called “cookies”, which are text files stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the truncated IP address) is normally transmitted to a Google server and stored there; in this context a transfer to servers of Google LLC in the USA may also occur.

All aforementioned processing, in particular the setting of cookies to read information on the end device used, is only carried out if you have given your explicit consent pursuant to Art. 6(1)(a) GDPR. You may revoke the consent you have given at any time with effect for the future by disabling this service via the “cookie-consent tool” provided on the website.

For data transmissions to the USA the provider has adhered to the EU-US Data Privacy Framework, which is intended to ensure compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Further information on Google’s privacy policies can be found here: https://business.safety.google/intl/en/privacy/

12) Tools and Miscellaneous

Cookie-Consent Tool

This website uses in order to obtain effective user consents for cookie-requiring cookies and cookie-based applications a so-called “cookie-consent tool”. When the page is called up users are shown the “cookie-consent tool” in the form of an interactive user interface in which consents for specific cookies and/or cookie-based applications may be given by ticking a box. By using the tool all cookies/services requiring consent are only loaded if the respective user grants the corresponding consent by ticking the box. This ensures that only in case of a given consent such cookies are set on the respective user’s end device.

The tool technically sets necessary cookies in order to store your cookie preferences. Personal user data are generally not processed in this context.

If in individual cases personal data are processed for the purpose of storing, assigning or logging cookie settings (such as the IP address), this takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in lawful, user-specific and user-friendly consent management for cookies and thus in a lawful design of our website.

Further legal basis for the processing is also Art. 6(1)(c) GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

Where necessary, we have concluded an order-processing agreement with the provider which ensures the protection of data of our site visitors and prohibits unauthorised transfer to third parties.

Further information on the operator and the settings options of the cookie-consent tool can be found directly in the respective user interface on our website.

13) Rights of the Data Subject

13.1 The applicable data protection law grants you the following data-subject rights vis-à-vis the controller with respect to the processing of your personal data (rights to information and intervention), whereby the legal basis for the respective exercise is referenced:

  • Right of access pursuant to Art. 15 GDPR;
  • Right to rectification pursuant to Art. 16 GDPR;
  • Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR;
  • Right to restriction of processing pursuant to Art. 18 GDPR;
  • Right to notification pursuant to Art. 19 GDPR;
  • Right to data portability pursuant to Art. 20 GDPR;
  • Right to withdraw issued consents pursuant to Art. 7(3) GDPR;
  • Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 RIGHT TO OBJECT

WHEN WE PROCESS YOUR PERSONAL DATA BASED ON OUR PREDOMINANT LEGITIMATE INTEREST AFTER BALANCING INTERESTS, YOU HAVE AT ANY TIME THE RIGHT TO OBJECT FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE SHALL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS POSSIBLE IF WE CAN PROVE COMPULSORY PROTECTION WORTHY REASONS FOR THE PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA CONCERNING YOU FOR SUCH ADVERTISING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE SHALL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

14) Duration of Storage of Personal Data

The duration of the storage of personal data is measured on the basis of the respective legal basis, the processing purpose and – if applicable – additionally on the basis of the respective statutory retention period (e.g. commercial and tax retention periods).

Where personal data is processed on the basis of an express consent pursuant to Art. 6(1)(a) GDPR, the data concerned are stored until you withdraw your consent.

If statutory retention periods exist for data which is processed within the framework of contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, such data will — after expiry of the retention periods — routinely be deleted, provided they are no longer required for contract fulfilment or contract initiation and/or we no longer have a legitimate interest in further storage.

When personal data is processed on the basis of Art. 6(1)(f) GDPR, such data are stored until you exercise your right of objection pursuant to Art. 21(1) GDPR, unless we can show compelling reasons worthy of protection for the processing which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

When personal data is processed for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, such data are stored until you exercise your right of objection pursuant to Art. 21(2) GDPR.

Unless other information in this declaration with respect to specific processing situations states otherwise, stored personal data will in any case be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.