Introduction and Overview
We have drafted this privacy policy (Version 09.05.2022-312019031) in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 and applicable national laws to explain to you, as required, what personal data (referred to as "data") we, as the data controller, and our commissioned data processors (e.g., providers) process, will process in the future, and what lawful options you have. The terms used are to be understood in a gender-neutral manner.
In short: We provide comprehensive information about the data we process about you. Privacy policies typically sound very technical and use legal terminology. However, this privacy policy aims to describe the most important things to you as simply and transparently as possible. Where transparency is beneficial, technical terms are explained in reader-friendly terms, links to further information are provided, and graphics are used. In doing so, we inform in clear and simple language that we only process personal data in the course of our business activities when there is a corresponding legal basis. This is certainly not possible if one provides as concise, unclear, and legally technical explanations as are often standard on the internet when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps there is some information that you were not aware of. If you still have questions, we kindly ask you to contact the responsible party mentioned below or in the imprint, follow the links provided, and view further information on third-party sites. Our contact details can of course also be found in the imprint.
Scope
This privacy policy applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (data processors). By personal data, we mean information within the meaning of Art. 4 No. 1 GDPR, such as a person's name, email address, and postal address. The processing of personal data ensures that we can offer and bill our services and products, whether online or offline. The scope of this privacy policy includes:
In short: The privacy policy applies to all areas where personal data in the company is processed in a structured manner via the channels mentioned. If we enter into legal relationships with you outside of these channels, we will inform you separately if necessary.
Legal Basis
In the following privacy policy, we provide you with transparent information about the legal principles and regulations, i.e., the legal bases of the General Data Protection Regulation, which enable us to process personal data. Regarding EU law, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can read this EU General Data Protection Regulation online on EUR-Lex, the access point to EU law, at https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=celex%3A32016R0679.
We only process your data if at least one of the following conditions applies:
1. Consent (Article 6(1)(a) GDPR): You have given us consent to process data for a specific purpose. An example would be storing your entered data from a contact form.
2. Contract (Article 6(1)(b) GDPR): To fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we conclude a purchase contract with you, we need personal information beforehand.
3. Legal obligation (Article 6(1)(c) GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally obliged to keep invoices for accounting purposes. These usually contain personal data.
4. Legitimate interests (Article 6(1)(f) GDPR): In the case of legitimate interests that do not infringe on your fundamental rights, we reserve the right to process personal data. For example, we may need to process certain data to operate our website securely and economically efficiently. This processing is thus a legitimate interest.
Further conditions such as the exercise of tasks carried out in the public interest or in the exercise of official authority and the protection of vital interests do not usually apply to us. If such a legal basis should be applicable, it will be indicated at the respective point.
In addition to the EU regulation, national laws also apply:
If further regional or national laws are applicable, we will inform you about them in the following sections.
Contact Details of the Data Controller
If you have any questions about data protection or the processing of personal data, you will find below the contact details of the responsible person or entity:
BROCKHEUS e.K.
Hansapark 8,
39116 Magdeburg
Email: sleeping@brockheus.com
Phone: +4917655414897
Storage Duration
That we only store personal data for as long as it is absolutely necessary for the provision of our services and products is a general criterion for us. This means that we delete personal data as soon as the reason for data processing no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose has ceased, for example, for accounting purposes.
If you wish to have your data deleted or revoke your consent to data processing, the data will be deleted as soon as possible, provided there is no obligation to store it.
We will inform you below about the specific duration of the respective data processing, if we have further information about it.
Rights under the General Data Protection Regulation
In accordance with Articles 13 and 14 GDPR, we inform you about the following rights that you are entitled to, in order to ensure fair and transparent data processing:
- The purpose for which we process the data;
- The categories, i.e., the types of data processed;
- Who receives this data, and if the data is transferred to third countries, how security can be guaranteed;
- How long the data is stored;
- The existence of the right to rectification, erasure, or restriction of processing, and the right to object to processing;
- That you have the right to lodge a complaint with a supervisory authority (links to these authorities can be found below);
- The origin of the data, if we have not collected it from you;
- Whether profiling is carried out, i.e., whether data is automatically evaluated to create a personal profile of you.
- According to Article 16 GDPR, you have the right to have your data corrected, which means that we must correct data if you find errors.
- According to Article 17 GDPR, you have the right to erasure ("right to be forgotten"), which means that you can request the deletion of your data.
- According to Article 18 GDPR, you have the right to restrict processing, which means that we may only store the data but not use it further. - According to Article 19 GDPR, you have the right to
In short: You have rights – do not hesitate to contact the responsible entity listed above!
If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. For Austria, this is the Data Protection Authority, whose website you can find at https://www.dsb.gv.at/. In Germany, there is a data protection officer for each federal state. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI). For our company, the following local data protection authority is responsible:
Saxony-Anhalt Data Protection Authority Data
Protection Commissioner: Albert Cohaus (responsible)
Address: Leiterstraße 9, 39104 Magdeburg
Phone number: 03 91/818 03-0
Email address: poststelle@lfd.sachsen-anhalt.de
Website: https://datenschutz.sachsen-anhalt.de/datenschutz-in-sachsen-anhalt/
Security of Data Processing
To protect personal data, we have implemented both technical and organizational measures. Where possible, we encrypt or pseudonymize personal data. This makes it as difficult as possible for third parties to infer personal information from our data.
Article 25 GDPR speaks of "data protection by design and by default," meaning that security is always considered in both software (e.g., forms) and hardware (e.g., access to server rooms), and appropriate measures are taken. Below, if necessary, we will detail specific measures.
Communication
Communication Summary
👥 Data Subjects: All those who communicate with us via telephone, email, or online form
📓 Processed Data: e.g., telephone number, name, email address, entered form data. For more details, please refer to the respective communication method used. 🤝 Purpose: Processing communication with customers, business partners, etc.
📅 Storage Duration: Duration of the business case and legal requirements
⚖️ Legal Bases: Art. 6(1)(a) GDPR (Consent), Art. 6(1)(b) GDPR (Contract), Art. 6(1)(f) GDPR (Legitimate Interests)
When you contact us and communicate via telephone, email, or online form, personal data may be processed.
The data is processed for the purpose of handling and processing your inquiry and the associated business transaction. The data is stored for as long as necessary or as required by law.
Data Subjects
All those affected by the processes mentioned above who seek contact with us via the communication channels provided by us.
Telephone
When you call us, call data is pseudonymously stored on the respective end device and with the telecommunication provider used. Additionally, data such as name and telephone number may be sent by email and stored for response to the inquiry. The data is deleted once the business case is concluded and legal requirements permit.
When you communicate with us via email, data may be stored on the respective end device (computer, laptop, smartphone, etc.) and data is stored on the email server. The data is deleted once the business case is concluded and legal requirements permit.
Online Forms
When you communicate with us via online form, data is stored on our web server and may be forwarded to an email address provided by us. The data is deleted once the business case is concluded and legal requirements permit.
Legal Bases
The processing of data is based on the following legal bases:
Data Processing Agreement (DPA)
In this section we would like to explain to you what a data processing agreement is and why it is needed. Because the word “order processing agreement” is quite a tongue twister, we will often only use the acronym AVV here in the text. Like most companies, we do not work alone, but also use the services of other companies or individuals. Due to the involvement of various companies or service providers, we may pass on personal data for processing. These partners then act as processors with whom we conclude a contract, the so-called data processing agreement (AVV). The most important thing for you to know is that the processing of your personal data takes place exclusively according to our instructions and must be regulated by the AVV.
Who are processors?
As a company and website owner, we are responsible for all data that we process from you. In addition to those responsible, there can also be so-called processors. This includes every company or person who processes personal data on our behalf. More specifically and according to the GDPR definition: any natural or legal person, authority, institution or other body that processes personal data on our behalf is considered a processor. Processors can therefore be service providers such as hosting or cloud providers, payment or newsletter providers or large companies such as Google or Microsoft.
To make the terminology easier to understand, here is an overview of the three roles in the GDPR: Data subject (you as a customer or interested party) → Responsible (we as a company and client) → Processor (service provider such as web host or cloud provider)
Content of an order processing contract
As already mentioned above, we have concluded an AVV with our partners who act as processors. Above all, this states that the processor processes the data to be processed exclusively in accordance with the GDPR. The contract must be concluded in writing, although in this context the electronic contract conclusion is also considered “written”. The processing of personal data only takes place on the basis of the contract. The contract must contain the following:
• Binding to us as those responsible
• Categories of data subjects
• Type of personal data
• Type and purpose of data processing
• Subject and duration of data processing
• Place of data processing The contract also contains all of the processor’s obligations.
The most important duties are:
• To ensure data security measures
• to take possible technical and organizational measures to protect the rights of the data subject
• to maintain a data processing directory
• to cooperate with the data protection supervisory authority upon request
• carry out a risk analysis in relation to the personal data received
• Sub-processors may only be commissioned with the written consent of the person responsible
You can see what such an AVV looks like in concrete terms at https://www.wko.at/service/wirtschaftsrecht-gewerberecht/eu-dsgvo-mustervertrag-vertragsprocessing.html. A sample contract is presented here.
Cookies
Cookies summary
👥 Affected: Visitors to the website
🤝 Purpose: depending on the respective cookie. You can find more details about this below or from the manufacturer of the software that sets the cookie.
📓 Data processed: Depending on the cookie used. You can find more details about this below or from the manufacturer of the software that sets the cookie.
📅 Storage period: depending on the respective cookie, can vary from hours to years
⚖️ Legal basis: Art. 6 Para. 1 lit. a GDPR (consent), Art. 6 Para. 1 lit. f GDPR (legitimate interests)
What are cookies?
Our website uses HTTP cookies to store user-specific data.
Below we explain what cookies are and why they are used so that you can better understand the following privacy policy.
Whenever you surf the Internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text files in your browser.
These files are called cookies. One thing cannot be denied: Cookies are really useful little helpers. Almost all websites use cookies. To be more precise, they are HTTP cookies, as there are also other cookies for other areas of application. HTTP cookies are small files that our website stores on your computer. These cookie files are automatically stored in the cookie folder, the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.
Cookies store certain user data about you, such as language or personal page settings. When you visit our site again, your browser sends the “user-related” information back to our site. Thanks to cookies, our website knows who you are and offers you the settings you are used to. In some browsers each cookie has its own file, in others, such as Firefox, all cookies are stored in a single file.
The following graphic shows a possible interaction between a web browser such as: B. Chrome and the web server. The web browser requests a website and receives a cookie back from the server, which the browser uses again as soon as another page is requested.
HTTP cookie interaction between browser and web server
There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be evaluated individually because each cookie stores different data. The expiry time of a cookie also varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other “malicious” things. Cookies also cannot access information on your PC.
For example, cookie data might look like this:
Name: _ga
Value: GA1.2.1326744211.152312019031-9
Purpose: Differentiation of website visitors
Expiry date: after 2 years
A browser should be able to support these minimum sizes:
• At least 4096 bytes per cookie
• At least 50 cookies per domain
• At least 3000 cookies in total What types of cookies are there?
The question of which cookies we use in particular depends on the services used and is clarified in the following sections of the data protection declaration. At this point we would like to briefly discuss the different types of HTTP cookies.
There are 4 types of cookies:
Essential cookies
These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed when a user puts a product in the shopping cart, then continues surfing on other pages and only later checks out. These cookies do not delete the shopping cart, even if the user closes their browser window.
Purposeful cookies
These cookies collect information about user behavior and whether the user receives any error messages. These cookies are also used to measure the loading time and behavior of the website on different browsers.
Targeting cookies
These cookies ensure better user experience. For example, entered locations, font sizes or form data are saved.
Advertising cookies
These cookies are also called targeting cookies. They serve to provide the user with individually tailored advertising. This can be very practical, but also very annoying. Typically, when you first visit a website, you will be asked which of these types of cookies you would like to allow. And of course this decision is also saved in a cookie.
If you want to know more about cookies and are not afraid of technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Internet Engineering Task Force (IETF) Request for Comments called “HTTP State Management Mechanism” .
Purpose of processing via cookies
The purpose ultimately depends on the respective cookie. You can find more details about this below or from the manufacturer of the software that sets the cookie.
Which data is processed?
Cookies are little helpers for many different tasks. Unfortunately, it is not possible to generalize which data is stored in cookies, but we will inform you about the data processed or stored in the following data protection declaration.
Storage period of cookies
The storage period depends on the respective cookie and is further specified below. Some cookies are deleted after less than an hour, others can remain on a computer for several years. You also have an influence on the storage period. You can delete all cookies manually at any time via your browser (see also “Right to object” below). Cookies are also used, that are based on consent will be deleted at the latest after you revoke your consent, although the legality of storage remains unaffected until then.
Right to object – how can I delete cookies?
You decide for yourself how and whether you want to use cookies. Regardless of which service or website the cookies come from, you always have the option of deleting cookies, deactivating them or only partially allowing them. For example, you can block third-party cookies but allow all other cookies. If you would like to find out which cookies have been stored in your browser, if you want to change or delete cookie settings, you can do this in your browser settings:
Chrome: Delete, enable and manage cookies in Chrome
Safari: Manage cookies and site data with Safari
Firefox: Delete cookies to remove data that websites have placed on your computer
Internet Explorer: Deleting and managing cookies
If you generally do not want cookies, you can set your browser so that it always informs you when a cookie is to be set. This means you can decide for each individual cookie whether you allow the cookie or not. The procedure varies depending on the browser. The best thing to do is to search for the instructions in Google using the search term “delete cookies Chrome” or “deactivate cookies Chrome” in the case of a Chrome browser.
Legal basis
The so-called “Cookie Guidelines” have existed since 2009. This states that the storage of cookies requires your consent (Article 6 Para. 1 lit. a GDPR). However, there are still very different reactions to these guidelines within the EU countries. In Austria, however, this directive was implemented in Section 96 Paragraph 3 of the Telecommunications Act (TKG). In Germany, the cookie guidelines have not been implemented as national law. Instead, this directive was largely implemented in Section 15 Paragraph 3 of the Telemedia Act (TMG).
For absolutely necessary cookies, even if consent is not given, there are legitimate interests (Article 6 Para. 1 lit. f GDPR), which in most cases are of an economic nature. We want to provide website visitors with a pleasant user experience and certain cookies are often absolutely necessary for this.
If non-essential cookies are used, this will only happen with your consent. The legal basis in this respect is Article 6 Paragraph 1 Letter a GDPR. In the following sections you will be informed in more detail about the use of cookies if the software used uses cookies.
Web hosting introduction
Web hosting summary
👥 Affected: Visitors to the website
🤝 Purpose: professional hosting of the website and securing operations
📓 Processed data: IP address, time of website visit, browser used and other data. You can find more details about this below or with the web hosting provider you use.
📅 Storage period: depends on the respective provider, but usually 2 weeks
⚖️ Legal basis: Art. 6 Para. 1 lit.f GDPR (legitimate interests)
What is web hosting?
When you visit websites these days, certain information - including personal data - is created and stored automatically, including on this website. This data should be processed as sparingly as possible and only with justification. By the way, by website we mean the entirety of all websites on a domain, i.e. everything from the start page (homepage) to the very last subpage (like this one). By domain we mean, for example, example.de or musterexample.com.
If you want to view a website on a computer, tablet, or smartphone, you use a program called a web browser. You probably know a few web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari. We call it browser or web browser for short.
To display the website, the browser must connect to another computer where the website's code is stored: the web server. Operating a web server is a complicated and time-consuming task, which is why it is usually carried out by professional providers. the providers. These offer web hosting and thus ensure reliable and error-free storage of website data. A lot of technical terms, but please stay tuned, it gets better!
When the browser connects to your computer (desktop, laptop, tablet or smartphone) and during data transfer to and from the web server, personal data may be processed. On the one hand, your computer stores data, but on the other hand, the web server also needs to store data for a while to ensure proper operation.
A picture is worth a thousand words, so the following graphic shows the interaction between the browser, the Internet and the hosting provider.
Why do we process personal data?
The purposes of data processing are:
1. Professional website hosting and operational security
2. to maintain operational and IT security
3. Anonymous evaluation of access behavior to improve our offering and, if necessary, to prosecute or pursue claims
Which data is processed?
Even while you are visiting our website, our web server, which is the computer on which this website is stored, usually automatically saves data such as
• the complete internet address (URL) of the website accessed
• Browser and browser version (e.g. Chrome 87)
• the operating system used (e.g. Windows 10)
• the address (URL) of the previously visited page (referrer URL) (e.g. https://www.beispielquellsite.de/vondabinichkommen.html/)
• the host name and IP address of the device from which access is made (e.g. COMPUTERNAME and 194.23.43.121)
• Date and Time • in files called web server log files
How long is data stored?
As a rule, the above-mentioned data is stored for two weeks and then automatically deleted. We do not pass on this data, but we cannot rule out that this data will be viewed by authorities if illegal behavior occurs.
In short: Your visit will be logged by our provider (company that runs our website on special computers (servers)), but we will not pass on your data without consent!
Legal basis
The legality of the processing of personal data in the context of web hosting results from Article 6 Paragraph 1 Letter f of the GDPR (protection of legitimate interests), because the use of professional hosting from a provider is necessary to keep the company safe on the Internet and user-friendly presentation and to be able to track attacks and claims as a result if necessary.
There is usually a contract for order processing between us and the hosting provider in accordance with Art. 28 f. GDPR, which ensures compliance with data protection and guarantees data security.
Push notifications introduction
Push notifications summary
👥 Affected: Push notifications subscribers
🤝 Purpose: Notification of system-relevant and interesting events
📓 Processed data: Data entered during registration, usually also location data. You can find more details about this in the push notification tool used.
📅 Storage period: Data is usually stored for as long as is necessary to provide the services.
⚖️ Legal basis: Art. 6 Para. 1 lit. a GDPR (consent), Art. 6 Para. 1 lit. b GDPR (contract)
What are push notifications?
We also use so-called push notification services on our website, with which we can always keep our users up to date. This means that if you have agreed to the use of such push notifications, we can send you short news using a software tool. Push notifications are a form of text message that appear directly on your smartphone or on other devices such as tablets or PCs if you have signed up for them. You will also receive these messages if you are not on our website or are not actively using our offering. Data about your location and usage behavior can also be collected and stored.
Why do we use push notifications?
On the one hand, we use push notifications in order to be able to fully provide the services that we have contractually agreed with you. On the other hand, the messages also serve our online marketing. We can use these messages to bring you closer to our service or products. Especially if there is news in our company, we can inform you about it immediately. We want to get to know the preferences and habits of all our users as well as possible in order to continually improve our offering.
Which data is processed?
In order to receive push notifications, you must also confirm that you want to receive these notifications. The data collected during the consent process is also stored, managed and processed. This is necessary so that it can be proven and recognized that a user has agreed to receive push notifications. For this purpose, a so-called device token or push token is stored in your browser. The data about your location or the location of the device you use is usually also stored.
So that we always send interesting and important push messages, the handling of the messages is also statistically evaluated. For example, we can then see whether and when you open the message. With the help of these insights, we can adapt our communication strategy to your wishes and interests. Although this stored data can be assigned to you, we do not want to verify you as an individual. Rather, we are interested in the data collected from all our users so that we can make optimizations. You can find out exactly which data is stored in the data protection declarations of the respective service providers.
Duration of data processing
How long the data is processed and stored depends primarily on the tool we use. You can find out more about the data processing of the individual tools below. The data protection declarations of the providers usually state exactly which data and how long and processed for a long time. In principle, personal data is only processed for as long as is necessary to provide our services. When data is stored in cookies, the storage period varies greatly. The data can be deleted immediately after leaving a website, but they can also remain stored for several years. Therefore you should check each one View individual cookies in detail if you want to know more about data storage. You will usually also find informative information about the individual cookies in the data protection declarations of the individual providers.
Legal basis
It may also be that the push notifications are necessary so that certain obligations contained in a contract can be fulfilled. For example, so that we can communicate technical or organizational news to you. Then the legal basis is Article 6 Paragraph 1 Letter b GDPR.
If this is not the case, the push notifications will only be sent based on your consent. Our push messages may in particular have advertising content. The push messages can also be sent depending on your location, which your device displays. The analytical evaluations mentioned above are also based on your consent to receive such messages. The legal basis in this respect is Article 6 Paragraph 1 Letter a GDPR. You can of course revoke your consent or change various settings at any time in the settings.
Messenger & Communication Introduction
Messenger & Communication Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Contact requests and general communication between us and you
📓 Processed data: Data such as name, address, email address, telephone number, general content data, if applicable IP address You can find more details about the tools used in each case.
📅 Storage period: depends on the messenger & communication functions used
⚖️ Legal basis: Art. 6 Para. 1 lit. a GDPR (consent), Art. 6 Para. 1 lit. f GDPR (legitimate interests), Art. 6 Para. 1 sentence 1 lit. b. GDPR (contractual or pre-contractual obligations)
What are messenger & communication functions?
We offer various options on our website (such as messenger and chat functions, online or contact forms, email, telephone) to communicate with us. Your data will also be processed and stored to the extent necessary to answer your query and our subsequent measures.
In addition to classic means of communication such as email, contact forms or telephone, we also use chats and messengers. The most commonly used messenger function currently is WhatsApp, but there are of course many different providers that offer messenger functions specifically for websites. If content is encrypted end to end, this will be indicated in the individual data protection texts or in the data protection declaration of the respective provider. End-to-end encryption means nothing other than that the contents of a message are not visible to the provider. However, information about your device, location settings and other technical data may still be processed and stored.
Why do we use messenger & communication functions?
Opportunities to communicate with you are very important to us. Ultimately, we want to talk to you and answer any questions you may have about our service in the best possible way. Well-functioning communication is an important part of our service. With the practical messenger & communication functions, you can choose the ones you like most at any time. In exceptional cases, however, it may also happen that we do not answer certain questions via chat or messenger. This is the case when it comes to internal contractual matters. Here we recommend other communication options such as email or telephone.
We generally assume that we remain responsible under data protection law, even if we use the services of a social media platform. However, the European Court of Justice has decided that in certain cases the operator of the social media platform can be jointly responsible with us within the meaning of Article 26 GDPR. If this is the case, we will point this out separately and work on the basis of a relevant agreement. The essence of the agreement is set out below for the affected platform.
Please note that when using our built-in elements, your data may also be processed outside the European Union, as many providers, such as Facebook Messenger or WhatsApp, are American companies. This may mean that you may no longer be able to easily request or enforce your rights in relation to your personal data.
Which data is processed?
Exactly which data is stored and processed depends on the respective provider of the messenger and communication functions. Basically, this is data such as name, address, telephone number, email address and content data such as all the information that you enter into a contact form. In most cases, information about your device and the IP address are also stored. Data collected via a messenger & communication function is also stored on the providers’ servers.
If you want to know exactly what data is stored and processed by the respective providers and how you can object to data processing, you should carefully read the company's respective data protection declaration.
How long is data stored?
How long the data is processed and stored depends primarily on the tools we use. You can find out more about the data processing of the individual tools below. The data protection declarations of the providers usually state exactly which data is stored and processed for how long. In principle, personal data is only processed for as long as is necessary to provide our services. When data is stored in cookies, the storage period varies greatly. The data can be deleted immediately after you leave a website, but it can also remain stored for several years. Therefore, you should look at each individual cookie in detail if you want to know more about data storage. You will usually also find informative information about the individual cookies in the data protection declarations of the individual providers.
Right to object
You also have the right and the opportunity to revoke your consent to the use of cookies or third-party providers at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection through cookies by managing, deactivating or deleting cookies in your browser. For further information please refer to the consent section.
Since cookies can be used in messenger and communication functions, we also recommend our general data protection declaration about cookies. To find out exactly which of your data is stored and processed, you should read the data protection declarations of the respective tools.
Legal basis
If you have agreed that your data can be processed and stored through integrated messenger and communication functions, this consent is considered the legal basis for data processing (Art. 6 Para. 1 lit. a GDPR). We process your request and manage your data within the framework of contractual or pre-contractual relationships in order to fulfill our pre-contractual and contractual obligations or to answer inquiries. The basis for this is Article 6 Paragraph 1 Sentence 1 Letter b. GDPR. In principle, if you have given your consent, your data will also be stored and processed on the basis of our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in quick and good communication with you or other customers and business partners.
Social media introduction
Social Media Privacy Policy Summary
👥 Affected: Visitors to the website
🤝 Purpose: Presentation and optimization of our services, contact with visitors, interested parties, etc., advertising
📓 Data processed: Data such as telephone numbers, email addresses, contact details, user behavior data, information about your device and your IP address. You can find more details about this in the respective social media tool used.
📅 Storage period: depends on the social media platforms used
⚖️ Legal basis: Art. 6 Para. 1 lit. a GDPR (consent), Art. 6 Para. 1 lit. f GDPR (legitimate interests)
What is Social Media?
In addition to our website, we are also active on various social media platforms. User data can be processed so that we can specifically address users who are interested in us via social networks. In addition, elements of a social media platform may also be embedded directly into our website. This is the case, for example, if you click on a so-called social button on our website and are redirected directly to our social media presence. So-called social media or social media are websites and apps through which registered members can produce content, exchange content openly or in specific groups and network with other members. Why do we use social media? For years, social media platforms have been the place where people communicate and connect online. With our social media presence we can bring our products and services closer to interested parties. The social media elements integrated on our website help you to switch to our social media content quickly and without complications. The data that is stored and processed through your use of a social media channel has the primary purpose of being able to carry out web analyses. The aim of these analyzes is to be able to develop more precise and personal marketing and advertising strategies. Depending on your behavior on a social media platform, appropriate conclusions can be drawn about your interests using the evaluated data and so-called user profiles can be created. This also makes it possible for the platforms to present you with tailored advertisements. Cookies are usually set in your browser for this purpose and store data about your usage behavior.
We generally assume that we remain responsible under data protection law, even if we use the services of a social media platform. However, the European Court of Justice has decided that in certain cases the operator of the social media platform can be jointly responsible with us within the meaning of Article 26 GDPR. If this is the case, we will point this out separately and work on the basis of a relevant agreement. The essence of the agreement is then reproduced below for the affected platform.
Please note that when you use the social media platforms or our built-in elements, your data may also be processed outside the European Union, as many social media channels, such as Facebook or Twitter, are American companies. This may mean that you may no longer be able to easily request or enforce your rights in relation to your personal data.
Which data is processed?
Exactly which data is stored and processed depends on the respective provider of the social media platform. But usually it is data such as telephone numbers, email addresses, data that you enter in a contact form, user data such as which buttons you click, who you like or follow, when you visited which pages, information about Your device and your IP address. Most of this data is stored in cookies. Especially if you have a profile on the social media channel you are visiting and are logged in, data can be linked to your profile.
All data collected via a social media platform is also stored on the providers’ servers. This means that only the providers have access to the data and can give you the appropriate information or make changes.
If you want to know exactly what data is stored and processed by social media providers and how you can object to data processing, you should read the company's respective data protection declaration carefully. If you have any questions about data storage and data processing or want to assert the relevant rights, we recommend that you contact the provider directly.
Duration of data processing
We will inform you below about the duration of data processing if we have further information. For example, the social media platform Facebook stores data until it is no longer needed for its own purpose. However, customer data that is compared with your own user data will be deleted within two days. In general, we only process personal data for as long as it is absolutely necessary to provide our services and products. If required by law, for example in the case of accounting, this storage period can also be exceeded.
Right to object
You also have the right and the opportunity to revoke your consent to the use of cookies or third-party providers such as embedded social media elements at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection through cookies by managing, deactivating or deleting cookies in your browser.
Since cookies can be used in social media tools, we also recommend our general data protection declaration about cookies. To find out exactly which of your data is stored and processed, you should read the data protection declarations of the respective tools.
Legal basis
If you have agreed that your data can be processed and stored through integrated social media elements, this consent is considered the legal basis for data processing (Art. 6 Para. 1 lit. a GDPR). In principle, if you have given your consent, your data will also be stored and processed on the basis of our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in quick and good communication with you or other customers and business partners. However, we only use the tools if you have given your consent. Most social media platforms also set cookies on your browser to store data. We therefore recommend that you read our data protection text about cookies carefully and view the data protection declaration or the cookie guidelines of the respective service provider.
You can find information about specific social media platforms - if available - in the following sections.
All texts are copyrighted.
