Privacy Policy
We are delighted that you have shown interest in our company.
Data protection is of a particularly high priority for the
management of the Swiss Innovation Technology GmbH. The use of
the web pages of the Swiss Innovation Technology GmbH is
possible without any specification of personal data. However, if
a data subject wants to use special services of our enterprise
via our website, processing of personal data could become
necessary. If processing of personal data is necessary and there
is no legal basis for such processing, we will generally seek
consent of said data subject.
The processing of personal data, such as the name, address,
e-mail address, or telephone number of a data subject shall
always be in line with the General Data Protection Regulation
(GDPR), and in accordance with the country-specific data
protection regulations applicable to the Swiss Innovation
Technology GmbH. By means of this data protection declaration,
our company would like to inform the general public about the
type, scope and purpose of the personal data we collect, use and
process. Furthermore, the data subjects are informed of their
rights by means of this data protection declaration.
As the controller, the Swiss Innovation Technology GmbH has
implemented numerous technical and organizational measures to
ensure the most complete protection of personal data processed
through this website. However, Internet-based data transmissions
can always be vulnerable to security risks, so absolute
protection may not be guaranteed. For this reason, every data
subject in question is free to transfer personal data to us via
alternative means, for example by telephone.
1. Definitions
The data protection declaration of Swiss Innovation Technology
GmbH is based on the terms used by the European legislator for
the adoption of the General Data Protection Regulation (GDPR).
Our data protection declaration should be legible and
understandable for the general public as well as our customers
and business partners. To ensure this, we would like to first
explain the terminology used.
Among others, we use the following terms in this data protection
declaration:
-
Personal data
Personal data means any information relating to an
identified or identifiable natural person (hereinafter
“data subject”). An identifiable natural person is one
who can be identified, directly or indirectly, in
particular by reference to an identifier such as a name,
an identification number, location data, an online
identifier or to one or more factors specific to the
physical, physiological, genetic, mental, economic,
cultural or social identity of that natural person.
-
Data subject
Data subject is any identified or identifiable natural
person, whose personal data is processed by the
controller responsible for the processing.
-
Processing
Processing is any operation or set of operations which
is performed on personal data, whether or not by
automated means, such as collection, recording,
organization, structuring, storage, adaptation or
alteration, retrieval, consultation, use, disclosure by
transmission, dissemination or otherwise making
available, alignment or combination, restriction,
erasure or destruction.
-
Restriction of processing
Restriction of processing is the marking of stored
personal data with the aim of limiting their future
processing.
-
Profiling
Profiling means any type of automated processing of
personal data consisting the use of personal data to
evaluate certain personal aspects relating to a natural
person, in particular to analyze or predict aspects
concerning that natural home > data protection
declaration data protection declaration person’s job
performance, economic situation, health, personal
preferences, interests, reliability, behavior, location
or change of location.
-
Pseudonymization
Pseudonymization is the processing of personal data in
such a manner that the personal data can no longer be
attributed to a specific data subject without the use of
additional information, provided that such additional
information is kept separately and is subject to
technical and organizational measures to ensure that the
personal data is not attributed to an identified or
identifiable natural person.
-
Controller or controller responsible for processing.
The controller or controller responsible for processing
is the natural or legal person, public authority, agency
or other body which, alone or jointly with others
determines the purposes and means of the processing of
personal data. Where the purposes and means of such
processing are determined by Union or Member State law,
the controller or the specific criteria for its
designation may be provided for by Union or Member State
law.
-
Processor
Processor is a natural or legal person, public
authority, agency or other body which processes personal
data on behalf of the controller.
-
Recipient
Recipient is a natural or legal person, public
authority, agency or another body to which the personal
data is disclosed, whether a third party or not.
However, public authorities which may receive personal
data in the framework of a specific inquiry in
accordance with Union or Member State law shall not be
regarded as recipients.
-
Third Party
Third party is a natural or legal person, public
authority, agency or body other than the data subject,
the controller, the processor and the persons authorized
to process the personal data under the direct
responsibility of the controller or the processor.
-
Consent
Consent is any freely given indication of the data
subject's wishes for the specific case in an informed
and unambiguous manner, in the form of a statement or
any other unambiguous affirmative act by which the data
subject indicates that he or she consents to the
processing of personal data relating to him or her.
2. Name and address of the controller
The controller within the meaning of the General Data Protection
Regulation, other data protection laws applicable in the Member
States of the European Union and other provisions with data
protection character is:
Swiss Innovation Technology GmbH
Sägestrasse 5
8280 Kreuzlingen
Switzerland
Email:
info@sinntech.ch
Website:
www.wasniowski.ch
3. Name and address of the data protection officer
The data protection officer of the controller is:
Swiss Innovation Technology GmbH
Sägestrasse 5
8280 Kreuzlingen
Switzerland
Email:
info@sinntech.ch
Website:
www.wasniowski.ch
Any data subject may contact our data protection officer
directly at any time with any questions or suggestions regarding
data protection.
4. Cookies
The internet pages of Swiss Innovation Technology GmbH use
cookies. Cookies are text files that are stored on a computer
system via an Internet browser.
Numerous Internet pages and servers use cookies. Many cookies
contain a so-called cookie ID. A cookie ID is a unique
identifier of the cookie. It consists of a string of characters
through which Internet pages and servers can be assigned to the
specific Internet browser in which the cookie was stored. This
allows visited Internet pages and servers to differentiate the
individual browser of the data subject from other Internet
browsers that contain other cookies. A specific internet browser
can be recognized and identified via the unique cookie ID.
Through the use of cookies, the Swiss Innovation Technology GmbH
can provide the users of this website more user-friendly
services that would not be possible without the cookie setting.
By means of a cookie, the information and offers on our website
can be optimized for the user. Cookies allow us, as previously
mentioned, to recognize our website users. The purpose of this
recognition is to make it easier for users to utilize our
website. The user of a website that uses cookies, e.g. does not
have to re-enter his or her access data each time he or she
visits the website, because this is handled by the website and
the cookie stored on the user’s computer system. Another example
is the cookie of a shopping cart in an online store. The online
store remembers the items that a customer has placed in the
virtual shopping cart via a cookie.
The data subject may, at any time, prevent the setting of
cookies through our website by means of a corresponding setting
of the Internet browser used and may thus permanently object to
the setting of cookies. Furthermore, cookies that have already
been set can be deleted at any time via an Internet browser or
other software programs. This is possible in all common Internet
browsers. If the data subject deactivates the setting of cookies
in the Internet browser used, not all functions of our website
may be entirely usable.
5. Collection of general data and information
The website of the Swiss Innovation Technology GmbH collects a
series of general data and information when accessing and using
the website by a data subject or automated system. This general
data and information is stored in the log files of the server.
The following data may be collected: (1) the browser types and
versions used, (2) the operating system used by the accessing
system, (3) the website from which an accessing system accesses
our website (so-called referrer), (4) the sub-websites that are
accessed via an accessing system on our website, (5) the date
and time of an access to the website, (6) an Internet protocol
address (IP address), (7) the Internet service provider of the
accessing system and (8) other similar data and information that
serve to avert danger in the event of attacks on our information
technology systems.
When using this general data and information, the Swiss
Innovation Technology GmbH does not draw any conclusions about
the data subject. Rather, this information is needed (1) to
deliver the contents of our website correctly, (2) to optimize
the contents of our website and the advertising for these, (3)
to ensure the long-term functionality of our information
technology systems and the technology of our website, and (4) to
provide law enforcement authorities with the information
necessary for prosecution in the event of a cyber attack.
Therefore, the Swiss Innovation Technology GmbH analyzes
anonymously collected data and information on one hand, and on
the other hand, with the aim of increasing the data protection
and data security of our enterprise so that we can ultimately
ensure an optimal level of protection for the personal data we
process. The anonymous data of the server log files are stored
separately from any personal data submitted by a data subject.
6. Contact possibility via the website
Based on statutory provisions, the website of the Swiss
Innovation Technology GmbH contains information that enables a
quick electronic contact to our company, as well as direct
communication with us, which also includes a general address of
the so- called electronic mail (e-mail address). If a data
subject contacts the controller by e-mail or by using a contact
form, the personal data transmitted by the data subject will be
stored automatically. Such personal data transmitted on a
voluntary basis by a data subject to the controller will be
stored for the purposes of processing or contacting the data
subject. There is no disclosure of this personal data to third
parties.
7. Routine erasure and blocking of personal data.
The controller processes and stores personal data of the data
subject only for the period of time necessary to achieve the
purpose of storage or insofar as this has been provided for by
the European Directive and Regulation or other legislator in
laws or regulations to which the controller is subject.
If the storage purpose ceases to apply or if a storage period
prescribed by the European Directive and Regulation Maker or
another competent legislator expires, the personal data will be
routinely blocked or deleted in accordance with the statutory
provisions.
8. Rights of the data subject
-
Right to confirmation
Each data subject shall have the right granted by the
European legislator to obtain confirmation from the
controller as to whether personal data concerning him or
her are being processed. If a data subject wishes to
exercise this right of confirmation, he or she may, at
any time, contact any employee of the controller.
-
Right of access
Any person concerned by the processing of personal data
has the right, granted by the European legislator, to
obtain information from the controller, about the
personal data stored about him or her and a copy of that
information, free of charge, at any time. In addition,
the European Directive and Regulation Legislator grant
the data subject access to the following information:
- the purposes of processing
- the categories of personal data processed
-
the recipients or categories of recipients to whom
the personal data have been or will be disclosed, in
particular in the case of recipients in third
countries or international organizations
-
if possible, the planned duration for which the
personal data will be stored or, if this is not
possible, the criteria for determining this duration
-
the existence of a right to obtain the rectification
or erasure of personal data concerning him or her,
or to obtain the restriction of processing by the
controller, or a right to object to such processing
-
the existence of a right of appeal to a supervisory
authority
-
if the personal data is not collected from the data
subject: Any available information about the origin
of the data
-
The existence of automated decision-making,
including profiling, pursuant to Article 22(1) and
(4) of the GDPR and, at least in these cases,
meaningful information about the logic involved and
the scope and intended effects of such processing
for the data subject.
Furthermore, the data subject shall have the right to
obtain information as to whether personal data have been
transferred to a third country or to an international
organization. If this is the case, the data subject also
has the right to obtain information about the
appropriate safeguards in connection with the transfer.
If a data subject wishes to exercise this right of
access, he or she may, at any time, contact an employee
of the controller.
-
Right to rectification
Every person affected by the processing of personal data
has the right granted by the European Directive and
Regulation legislator to demand the immediate
rectification of any inaccurate personal data concerning
him or her. Furthermore, the data subject has the right
to request the completion of incomplete personal data -
also by means of a supplementary declaration - taking
into account the purposes of the processing.
If a data subject wishes to exercise this right of
rectification, he or she may, at any time, contact any
employee of the controller.
-
Right to erasure (right to be forgotten)
Any person affected by the processing of personal data
has the right granted by the European Directive and
Regulation legislator to obtain from the controller the
erasure of personal data concerning him or her without
delay, where one of the following grounds applies and
insofar as the processing is not necessary:
-
The personal data were collected or otherwise
processed for such purposes for which they are no
longer necessary.
-
The data subject revokes his or her consent on which
the processing was based pursuant to Art. Art. 6
Abs. 1 Buchstabe a DS-GVO or Art. 9 Abs. 2 Buchstabe
a DS-GVO and there is no other legal basis for the
processing.
-
The data subject objects to the processing pursuant
to Art. 21 Abs. 1 DS-GVO and there are no overriding
legitimate grounds for the processing, or the data
subject objects to the processing pursuant to Art.
21 Abs. 2 DS-GVO.
-
The personal data have been processed unlawfully.
-
The erasure of the personal data is necessary for
compliance with a legal obligation under Union or
Member State law to which the controller is subject.
-
The personal data has been collected in relation to
information society services offered pursuant to
Art. 8 Abs. 1 DS- GVO.
If one of the previously mentioned reasons applies, and
a data subject wishes to arrange for the deletion of
personal data stored by the Swiss Innovation Technology
GmbH, he or she may, at any time, contact any employee
of the controller. The employee of the Swiss Innovation
Technology GmbH shall arrange for the erasure request to
be complied with immediately.
If the personal data was made public by the Swiss
Innovation Technology GmbH and our company is
responsible pursuant to Art. 17 Abs. 1 DS-GVO to erase
personal data, the Swiss Innovation Technology GmbH
shall implement reasonable measures, including technical
measures, to monitor the available technology and the
cost of implementation in order to inform other data
controllers which process the published personal data
that the data subject has requested from those other
data controllers to erase all links to or copies or
replications of the personal data, unless the processing
is necessary. The employee of the Swiss Innovation
Technology GmbH will arrange the necessary in individual
cases.
-
Right to restriction of processing
Any person concerned by the processing of personal data
has the right granted by the European Directive and
Regulation legislation to obtain the restriction of
processing from the controller where one of the
following conditions is met:
-
The accuracy of the personal data is contested by
the data subject for a period enabling the
controller to verify the accuracy of the personal
data.
-
The processing is unlawful, the data subject objects
to the erasure of the personal data and requests
instead the restriction of the use of the personal
data.
-
The controller no longer needs the personal data for
the purposes of the processing, but the data subject
needs it for the assertion, exercise or defense of
legal claims.
-
The data subject has objected to the processing
pursuant to Art. 21 Abs. 1 DS-GVO and it is not yet
clear whether the legitimate grounds of the
controller override those of the data subject.
If one of the aforementioned conditions is met, and a
data subject wishes to request the restriction of
personal data stored by the Swiss Innovation Technology
GmbH, he or she may, at any time, contact any employee
of the controller. The employee of the Swiss Innovation
Technology GmbH will arrange the restriction of the
processing.
-
Right to data portability
Each data subject concerned by the processing of
personal data has the right, granted by the European
Directive and Regulation, to obtain personal data
concerning him or her, which has been provided by the
data subject to a controller, in a structured, commonly
used and machine-readable format. He or she also has the
right to transmit such data to another controller
without hindrance from the controller to whom the
personal data has been provided, provided that the
processing is based on consent pursuant to Art. 6 Abs. 1
Buchstabe a DS-GVO or Art. 9 Abs. 2 Buchstabe a DS- GVO
or on a contract pursuant to Art. 6 Abs. 1 Buchstabe b
DS-GVO and the processing is carried out by automated
means, unless the processing is necessary for the
performance of a task carried out in the public interest
or in the exercise of official authority vested in the
controller.
Furthermore, when exercising the right to data
portability pursuant to Art. 20 Abs. 1 DS-GVO, the data
subject shall have the right to obtain that the personal
data be transferred directly from one controller to
another controller where technically feasible and
provided that this does not adversely affect the rights
and freedoms of other individuals.
In order to assert the right to data portability, the
data subject may at any time contact any employee of the
Swiss Innovation Technology GmbH.
-
Right to object
Any person affected by the processing of personal data
has the right granted by the European Directive and
Regulation to object at any time, on grounds relating to
his or her particular situation, to the processing of
personal data concerning him or her which is carried out
on the basis of Art. 6 Abs. 1 Buchstaben e oder f
DS-GVO. This also applies to profiling based on these
provisions.
The Swiss Innovation Technology GmbH shall no longer
process the personal data in the event of the objection,
unless we can demonstrate compelling legitimate grounds
for the processing which override the interests, rights
and freedoms of the data subject, or for the assertion,
exercise or defense of legal claims.
If the Swiss Innovation Technology GmbH processes
personal data for direct marketing purposes, the data
subject shall have the right to object at any time to
processing of personal data processed for such
marketing. This also applies to the profiling, insofar
as it is related to such direct marketing. If the data
subject objects to the Swiss Innovation Technology GmbH
to the processing for direct marketing purposes, the
Swiss Innovation Technology GmbH will no longer process
the personal data for these purposes.
In addition, the data subject has the right, on grounds
relating to his or her particular situation, to object
to processing of personal data concerning him or her
which is carried out by the Swiss Innovation Technology
GmbH for scientific or historical research purposes, or
for statistical purposes pursuant to Art. 89 Abs. 1
DS-GVO, unless such processing is necessary for the
performance of a task carried out in the public
interest.
In order to exercise the right to object, the data
subject may directly contact any employee of the Swiss
Innovation Technology GmbH or another employee. The data
subject is also free to exercise his/her right to object
by means of automated procedures using technical
specifications in connection with the use of information
society services, notwithstanding Directive 2002/58/EG.
-
Automated decisions in individual cases, including
profiling
Any data subject concerned by the processing of personal
data shall have the right, granted by the European
Directive and Regulation legislative, not to be subject
to a decision based solely on automated processing,
including profiling, which produces legal effects
concerning him or her or similarly significantly affects
him or her, unless the decision (1) is necessary for
entering into, or the performance of, a contract between
the data subject and the controller, or (2) is permitted
by Union or Member State law to which the controller is
subject and that law contains suitable measures to
safeguard the data subject's rights and freedoms and
legitimate interests, or (3) is made with the data
subject's explicit consent.
If the decision (1) is necessary for entering into, or
the performance of, a contract between the data subject
and the data controller, or (2) it is made with the data
subject's explicit consent, the Swiss Innovation
Technology GmbH shall implement suitable measures to
safeguard the data subject's rights and freedoms and
legitimate interests, which include at least the right
to obtain the intervention of a data subject on the part
of the controller, to express his or her point of view
and contest the decision.
If the data subject wishes to exercise the rights
concerning automated decisions, he or she may, at any
time, contact any employee of the controller.
-
Right to withdraw consent under data protection law
Any data subject concerned by the processing of personal
data has the right, granted by the European Directive
and Regulation-maker, to withdraw consent to the
processing of personal data at any time.
If the data subject wishes to exercise the right to
withdraw consent, he or she may, at any time, contact
any employee of the controller.
9. Data protection during applications and the application
process
The controller collects and processes the personal data of
applicants for the purpose of handling the application
procedure. The processing may also take place electronically.
This in particular is the case if an applicant submits relevant
application documents to the controller by electronic means, for
example by e-mail or via a web form located on the website. If
the controller concludes an employment contract with an
applicant, the transmitted data will be stored for the purpose
of processing the employment relationship in compliance with the
statutory provisions. If the controller does not conclude an
employment contract with the applicant, the application
documents will be automatically deleted two months after
notification of the rejection decision, provided that no other
legitimate interests of the controller conflict with such
deletion. Other legitimate interest in this sense is, for
example, a duty to provide evidence in proceedings under the
General Equal Treatment Act (AGG).
10. Data protection provisions on the use and application of
Facebook
The controller has integrated components of the company Facebook
on this website. Facebook is a social network.
A social network is a social meeting place operated on the
Internet, an online community that generally allows users to
communicate with each other and interact in virtual space. A
social network can serve as a platform for sharing opinions and
experiences or enables the Internet community to provide
personal or company-related information. Facebook enables users
of the social network to create private profiles, upload photos
and network via friend requests, among other things.
The operating company of Facebook is Facebook, Inc., 1 Hacker
Way, Menlo Park, CA 94025, USA. The controller of personal data,
if a data subject lives outside the USA or Canada, is Facebook
Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin
2, Ireland.
Each time one of the individual pages of this website operated
by the data controller is called up and on which a Facebook
component (Facebook plug-in) has been integrated, the Internet
browser on the information technology system of the data subject
is automatically caused by the respective Facebook component to
download a representation of the corresponding Facebook
component from Facebook. A complete overview of all Facebook
plug- ins can be found at
https://developers.facebook.com/docs/plugins/?locale=de_DE.
Within the scope of this technical procedure, Facebook receives
knowledge of which specific sub-page of our website is visited
by the data subject.
If the data subject is logged into Facebook at the same time,
Facebook recognizes which specific sub-page of our website the
data subject is visiting each time the data subject calls up our
website and for the entire duration of the respective stay on
our website. This information is collected by the Facebook
component and assigned by Facebook to the respective Facebook
account of the data subject. If the data subject activates one
of the Facebook buttons integrated on our website, for example
the "Like" button, or if the data subject makes a comment,
Facebook assigns this information to the personal Facebook user
account of the data subject and stores this personal data.
Facebook always receives information via the Facebook component
that the data subject has visited our website if the data
subject is simultaneously logged into Facebook at the time of
calling up our website; this takes place regardless of whether
the data subject clicks on the Facebook component or not. If the
data subject does not want this information to be transmitted to
Facebook, he or she can prevent the transmission by logging out
of his or her Facebook account before accessing our website.
The data policy published by Facebook, which can be accessed at
https://de-de.facebook.com/about/privacy/, provides information
about the collection, processing and use of personal data by
Facebook. It also explains which setting options Facebook offers
to protect the privacy of the data subject. In addition, various
applications are available that make it possible to suppress
data transmission to Facebook. Such applications can be used by
the data subject to suppress data transmission to Facebook.
11. Privacy policy on the use and application of Google
Analytics (with anonymization function)
The controller has integrated the Google Analytics component
(with anonymization function) on this website. Google Analytics
is a web analysis service. Web analysis is the collection,
compilation and evaluation of data about the behavior of
visitors to websites. A web analysis service collects, among
other things, data on which website a data subject came to a
website from (so-called referrers), which subpages of the
website were accessed or how often and for how long a subpage
was viewed. A web analysis is mainly used for the optimization
of a website and for the cost- benefit analysis of internet
advertising.
The operating company of the Google Analytics component is
Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA
94043-1351, USA.
The controller uses the addition "_gat._anonymizeIp" for web
analysis via Google Analytics. By means of this additive, the IP
address of the Internet connection of the data subject is
shortened and anonymized by Google if access to our Internet
pages is from a Member State of the European Union or from
another State party to the Agreement on the European Economic
Area.
The purpose of the Google Analytics component is to analyze the
flow of visitors to our website. Among other things, Google uses
the data and information obtained to evaluate the use of our
website, to compile online reports for us showing the activities
on our website, and to provide other services related to the use
of our website.
Google Analytics sets a cookie on the information technology
system of the data subject. What cookies are has already been
explained above. By setting the cookie, Google is enabled to
analyze the use of our website. By each call of one of the
individual pages of this website, which is operated by the
controller and on which a Google Analytics component has been
integrated, the internet browser on the information technology
system of the data subject is automatically caused by the
respective Google Analytics component to transmit data to Google
for the purpose of online analysis. As part of this technical
process, Google obtains knowledge of personal data, such as the
IP address of the data subject, which Google uses, among other
things, to track the origin of visitors and clicks and
subsequently enable commission calculations.
By means of the cookie, personal information, for example the
access time, the place from which an access originated and the
frequency of visits to our website by the data subject, is
stored. Each time the data subject visits our website, this
personal data, including the IP address of the internet
connection used by the data subject, is transmitted to Google in
the United States of America. This personal data is stored by
Google in the United States of America. Google may disclose this
personal data collected via the technical procedure to third
parties.
The data subject can prevent the setting of cookies by our
website, as already described above, at any time by means of an
appropriate setting of the Internet browser used and thus
permanently object to the setting of cookies. Such a setting of
the Internet browser used would also prevent Google from setting
a cookie on the information technology system of the data
subject. In addition, a cookie already set by Google Analytics
can be deleted at any time via the internet browser or other
software programs.
Furthermore, the data subject has the option to object to the
collection of data generated by Google Analytics and related to
the use of this website as well as to the processing of this
data by Google and to prevent such processing. For this purpose,
the data subject must download and install a browser add-on
under the link https://tools.google.com/ dlpage/gaoptout. This
browser add-on informs Google Analytics via JavaScript that no
data and information regarding visits to Internet pages may be
transmitted to Google Analytics. The installation of the browser
add-on is considered by Google as an objection. If the
information technology system of the data subject is deleted,
formatted or reinstalled at a later point in time, the data
subject must reinstall the browser add-on in order to deactivate
Google Analytics. Provided that the browser add-on is
uninstalled or deactivated by the data subject or another person
attributable to his or her sphere of control, there is the
option of reinstalling or reactivating the browser add-on.
Further information and the applicable Google privacy policy can
be found at https://www.google.de/intl/de/policies/ privacy/ and
at http://www.google.com/analytics/terms/de.html. Google
Analytics is explained in more detail under this link
https://www.google.com/intl/de_de/analytics/.
12. Privacy policy on the use and application of Google+
The controller has integrated the Google+ button as a component
on this website. Google+ is a so-called social network. A social
network is a social meeting place operated on the Internet, an
online community that generally allows users to communicate with
each other and interact in virtual space. A social network can
serve as a platform for sharing opinions and experiences or
enables the Internet community to provide personal or
company-related information. Among other things, Google+ allows
users of the social network to create private profiles, upload
photos and network via friend requests.
The operating company of Google+ is Google Inc, 1600
Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
By each call of one of the individual pages of this website,
which is operated by the controller and on which a Google+
button has been integrated, the internet browser on the
information technology system of the data subject is
automatically caused by the respective Google+ button to
download a representation of the corresponding Google+ button
from Google. As part of this technical process, Google receives
knowledge of which specific subpage of our website is visited by
the data subject. More detailed information on Google+ is
available at https:// developers.google.com/+/.
If the data subject is logged into Google+ at the same time,
Google recognizes which specific sub-page of our website the
data subject is visiting each time the data subject calls up our
website and for the entire duration of the respective stay on
our website. This information is collected by the Google+ button
and assigned by Google to the respective Google+ account of the
data subject.
If the data subject activates one of the Google+ buttons
integrated on our website and thus submits a Google+1
recommendation, Google assigns this information to the personal
Google+ user account of the data subject and stores this
personal data. Google stores the Google+1 recommendation of the
data subject and makes it publicly available in accordance with
the terms and conditions accepted by the data subject in this
regard. A Google+1 recommendation made by the data subject on
this website will subsequently be stored and processed together
with other personal data, such as the name of the Google+1
account used by the data subject and the photo stored in this
account, in other Google services, for example the search engine
results of the Google search engine, the Google account of the
data subject or in other places, for example on websites or in
connection with advertisements. Furthermore, Google is able to
link the visit to this website with other personal data stored
by Google. Google further records this personal information with
the purpose of improving or optimizing Google's various
services.
Google always receives information via the Google+ button that
the data subject has visited our website if the data subject is
simultaneously logged into Google+ at the time of calling up our
website; this takes place regardless of whether the data subject
clicks on the Google+ button or not.
If the data subject does not want personal data to be
transmitted to Google, he or she can prevent such transmission
by logging out of his or her Google+ account before accessing
our website.
Further information and the applicable data protection
provisions of Google can be found at https://www.google.de/intl/
de/policies/privacy/. Further information from Google on the
Google+1 button can be found at https://
developers.google.com/+/web/buttons-policy.
13. Privacy policy on the use and application of Google AdWords
The controller has integrated Google AdWords on this website.
Google AdWords is an Internet advertising service that allows
advertisers to place ads in Google's search engine results as
well as in the Google advertising network. Google AdWords allows
an advertiser to specify certain keywords in advance, by means
of which an ad is displayed in Google's search engine results
exclusively when the user retrieves a keyword-relevant search
result using the search engine. In the Google advertising
network, the ads are distributed on topic-relevant websites by
means of an automatic algorithm and in compliance with the
previously defined keywords.
The operating company of the Google AdWords services is Google
Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to advertise our website by
displaying interest-relevant advertising on the websites of
third-party companies and in the search engine results of the
Google search engine and to display third-party advertising on
our website.
If a data subject accesses our website via a Google
advertisement, a so-called conversion cookie is stored by Google
on the data subject's information technology system. What
cookies are has already been explained above. A conversion
cookie loses its validity after thirty days and is not used to
identify the data subject. The conversion cookie is used to
track whether certain subpages, for example the shopping cart
from an online store system, have been called up on our website,
provided the cookie has not yet expired. Through the conversion
cookie, both we and Google can track whether a data subject who
arrived at our website via an AdWords ad generated a sale, i.e.
completed or cancelled a purchase of goods.
The data and information collected through the use of the
conversion cookie are used by Google to compile visit statistics
for our website. These visit statistics are in turn used by us
to determine the total number of users who were referred to us
via AdWords ads, i.e. to determine the success or failure of the
respective AdWords ad and to optimize our AdWords ads for the
future. Neither our company nor other advertisers of Google
AdWords receive information from Google by means of which the
data subject could be identified.
By means of the conversion cookie, personal information, for
example the Internet pages visited by the data subject, is
stored. Each time the data subject visits our website, personal
data, including the IP address of the internet connection used
by the data subject, is transmitted to Google in the United
States of America. This personal data is stored by Google in the
United States of America. Google may disclose this personal data
collected via the technical procedure to third parties.
The data subject can prevent the setting of cookies by our
website, as already described above, at any time by means of an
appropriate setting of the Internet browser used and thus
permanently object to the setting of cookies. Such a setting of
the Internet browser used would also prevent Google from setting
a conversion cookie on the information technology system of the
data subject. In addition, a cookie already set by Google
AdWords can be deleted at any time via the internet browser or
other software programs.
Furthermore, the data subject has the option to object to
interest-based advertising by Google. To do this, the data
subject must call up the link www.google.de/settings/ads from
any of the internet browsers he or she uses and make the desired
settings there.
Further information and the applicable data protection
provisions of Google can be found at https://www.google.de/intl/
de/policies/privacy/.
14. Privacy policy on the use and application of Instagram
The controller has integrated components of the service
Instagram on this website. Instagram is a service that qualifies
as an audiovisual platform and allows users to share photos and
videos and, moreover, to redistribute such data in other social
networks.
The operating company of the Instagram services is Instagram
LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.
Each time one of the individual pages of this website operated
by the controller is called up and on which an Instagram
component (Insta button) has been integrated, the internet
browser on the information technology system of the data subject
is automatically caused by the respective Instagram component to
download a representation of the corresponding component from
Instagram. Within the scope of this technical procedure,
Instagram receives knowledge about which specific subpage of our
website is visited by the data subject.
If the data subject is logged in to Instagram at the same time,
Instagram recognizes which specific sub-page the data subject is
visiting each time the data subject calls up our website and for
the entire duration of the respective stay on our website. This
information is collected by the Instagram component and assigned
by Instagram to the respective Instagram account of the data
subject. If the data subject activates one of the Instagram
buttons integrated on our website, the data and information thus
transmitted will be assigned to the personal Instagram user
account of the data subject and stored and processed by
Instagram.
Instagram always receives information via the Instagram
component that the data subject has visited our website if the
data subject is simultaneously logged into Instagram at the time
of calling up our website; this takes place regardless of
whether the data subject clicks on the Instagram component or
not. If the data subject does not want this information to be
transmitted to Instagram, he or she can prevent the transmission
by logging out of his or her Instagram account before accessing
our website.
Further information and the applicable data protection
provisions of Instagram can be found at https://
help.instagram.com/155833707900388 and
https://www.instagram.com/about/legal/privacy/.
15. Privacy policy on the use and application of Twitter
The controller has integrated components of Twitter on this
website. Twitter is a multilingual publicly accessible
microblogging service on which users can publish and distribute
so-called tweets, i.e. short messages limited to 280 characters.
These short messages can be accessed by anyone, including people
who are not registered with Twitter. However, the tweets are
also displayed to the so-called followers of the respective
user. Followers are other Twitter users who follow the tweets of
a user. Furthermore, Twitter makes it possible to address a
broad audience via hashtags, links or retweets.
The operating company of Twitter is Twitter, Inc., 1355 Market
Street, Suite 900, San Francisco, CA 94103, USA.
By each call of one of the individual pages of this website,
which is operated by the controller and on which a Twitter
component (Twitter button) has been integrated, the internet
browser on the information technology system of the data subject
is automatically caused by the respective Twitter component to
download a representation of the corresponding Twitter component
from Twitter. Further information on the Twitter buttons can be
found at https://about.twitter.com/de/ resources/buttons. Within
the scope of this technical procedure, Twitter receives
knowledge of which specific sub-page of our website is visited
by the data subject. The purpose of integrating the Twitter
component is to enable our users to disseminate the content of
this website, to make this website known in the digital world
and to increase our visitor numbers.
If the data subject is logged into Twitter at the same time,
Twitter recognizes which specific subpage of our website the
data subject is visiting with each call to our website by the
data subject and for the entire duration of the respective stay
on our website. This information is collected by the Twitter
component and assigned by Twitter to the respective Twitter
account of the data subject. If the data subject activates one
of the Twitter buttons integrated on our website, the data and
information thus transmitted will be assigned to the personal
Twitter user account of the data subject and stored and
processed by Twitter.
Twitter always receives information via the Twitter component
that the data subject has visited our website if the data
subject is simultaneously logged into Twitter at the time of
calling up our website; this takes place regardless of whether
the data subject clicks on the Twitter component or not. If the
data subject does not want this information to be transmitted to
Twitter, he or she can prevent the transmission by logging out
of his or her Twitter account before accessing our website.
The applicable data protection provisions of Twitter are
available at https://twitter.com/privacy?lang=de.
16. Privacy policy on the use and application of YouTube
The controller has integrated YouTube components on this
website. YouTube is an Internet video portal that allows video
publishers to post video clips free of charge and other users to
view, rate and comment on them, also free of charge. YouTube
allows the publication of all types of videos, which is why
complete film and TV shows, but also music videos, trailers or
videos made by users themselves can be accessed via the Internet
portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry
Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of
Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA
94043-1351, USA.
By each call of one of the individual pages of this website,
which is operated by the controller and on which a YouTube
component (YouTube video) has been integrated, the Internet
browser on the information technology system of the data subject
is automatically caused by the respective YouTube component to
download a representation of the corresponding YouTube component
from YouTube. Further information on YouTube can be found at
https:// www.youtube.com/yt/about/de/. Within the scope of this
technical procedure, YouTube and Google receive knowledge of
which specific sub-page of our website is visited by the data
subject.
If the data subject is logged into YouTube at the same time,
YouTube recognizes which specific sub-page of our website the
data subject is visiting by calling up a sub-page that contains
a YouTube video. This information is collected by YouTube and
Google and assigned to the respective YouTube account of the
data subject.
YouTube and Google always receive information via the YouTube
component that the data subject has visited our website if the
data subject is simultaneously logged into YouTube at the time
of calling up our website; this takes place regardless of
whether the data subject clicks on a YouTube video or not. If
the data subject does not want this information to be
transmitted to YouTube and Google, he or she can prevent the
transmission by logging out of his or her YouTube account before
accessing our website.
The privacy policy published by YouTube, which can be found at
https://www.google.de/intl/de/policies/privacy/, provides
information about the collection, processing and use of personal
data by YouTube and Google.
17. Legal basis of processing
Art. 6 I lit. a DS-GVO serves as the legal basis for our company
for processing operations in which we obtain consent for a
specific processing purpose. If the processing of personal data
is necessary for the performance of a contract to which the data
subject is a party, as is the case, for example, with processing
operations that are necessary for a delivery of goods or the
provision of another service or consideration, the processing is
based on Art. 6 I lit. b DS-GVO. The same applies to such
processing operations that are necessary for the implementation
of pre-contractual measures, for example in cases of inquiries
about our products or services. If our company is subject to a
legal obligation by which a processing of personal data becomes
necessary, such as for the fulfillment of tax obligations, the
processing is based on Art. 6 I lit. c DS-GVO. In rare cases,
the processing of personal data might become necessary to
protect vital interests of the data subject or another natural
person. This would be the case, for example, if a visitor were
to be injured on our premises and as a result his or her name,
age, health insurance data or other vital information had to be
passed on to a doctor, hospital or other third party. Then the
processing would be based on Art. 6 I lit. d DS-GVO Finally,
processing operations could be based on Art. 6 I lit. f DS-GVO.
Processing operations that are not covered by any of the
previously mentioned legal bases are based on this legal basis
if the processing is necessary to protect a legitimate interest
of our company or a third party, provided that the interests,
fundamental rights and freedoms of the data subject are not
overridden. Such processing operations are permitted to us in
particular because they were specifically mentioned by the
European legislator. In this respect, it took the view that a
legitimate interest could be assumed if the data subject is a
customer of the controller (Erwägungsgrund 47 Satz 2 DS-GVO).
18. Legitimate interests in the processing pursued by the
controller or a third party
If the processing of personal data is based on Art. 6 I lit. f
DS-GVO, our legitimate interest is the performance of our
business activities for the benefit of the well-being of all our
employees and our shareholders.
19. Duration for which the personal data are stored
The criterion for the duration of the storage of personal data
is the respective statutory retention period. After expiry of
the period, the corresponding data is routinely deleted,
provided that it is no longer required for the fulfillment of
the contract or the initiation of the contract.
20. Legal or contractual requirements for the provision of
personal data; necessity for the conclusion of the contract;
obligation of the data subject to provide the personal data;
possible consequences of failure to provide the data
We inform you that the provision of personal data is sometimes
required by law (e.g. tax regulations) or may also result from
contractual regulations (e.g. information on the contractual
partner). Sometimes, in order to conclude a contract, it may be
necessary for a data subject to provide us with personal data
that must subsequently be processed by us. For example, the data
subject is obliged to provide us with personal data if our
company concludes a contract with him or her. Failure to provide
the personal data would mean that the contract with the data
subject could not be concluded. Before providing personal data
by the data subject, the data subject must contact one of our
employees. Our employee will explain to the data subject on a
case-by-case basis whether the provision of the personal data is
required by law or contract or is necessary for the conclusion
of the contract, whether there is an obligation to provide the
personal data, and what the consequences of not providing the
personal data would be.
21. Existence of automated decision-making
As a responsible company, we do not use automated
decision-making or profiling.
This data protection declaration was created by the data
protection declaration generator of DGD Deutsche Gesellschaft
für Datenschutz GmbH, which performs
data protection audits
in cooperation with the
media law firm WILDE BEUGER SOLMECKE
.