We manage our website and internet pages according to the regulated principles set out below. We are committed to full compliance with the statutory provisions for data protection, and always endeavour to adhere to the principles of data avoidance and data minimisation.
1. Name and address of the controller
The controller for the purposes of the General Data Protection Regulation and other data protection laws applicable in Member States of the European Union and other provisions related to data protection is:
Sürther Hauptstraße 190b
Telephone: +49 2236 896473
2. Explanation of terms
Our data protection declaration is based on the principles of clarity and transparency. However, should there be any uncertainty in relation to the use of various terminology, the relevant definitions can be found here [https://gdpr-info.eu/art-4-gdpr/].
3. Legal basis for the processing of personal data
We will process your personal data such as your name, first name, email address and IP address etc. only if there is a legal basis for doing so. According to the General Data Protection Regulation, there are three provisions which are particularly relevant in relation to this:
- You have given us your consent for the processing of your personal data for one or more purposes, in accordance with article 6 para. 1 a) of the General Data Protection Regulation (GDPR). You will be informed in detail by us of the purpose(s) of the data processing, and the documentation of your express consent will be held by us.
- Your data may be processed for the performance of contractual commitments, or in order to take measures prior to entering into a contract with you, in accordance with article 6 para. 1 b) of the GDPR.
- The processing of personal data may also take place where it is necessary for the legitimate interests of the controller, except where such interests are overridden by your interests or your fundamental rights and freedoms, in accordance with article 6 para. 1 f) of the GDPR.
We will, however, at the relevant point always direct you to the legal basis on which the processing of your data takes place.
4. Transfer of personal data
We do not transfer your personal data to third parties for purposes other than those which are listed below. We will only transfer your personal data to third parties if:
- You have given your express consent to this, in accordance with article 6 para. 1 a) of the GDPR,
- the transfer according to article 6 para. 1 f) of the GDPR is necessary for the enforcement, execution or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
- there is a legal obligation to transfer your data according to article 6 para. 1 c) of the GDPR,
- it is legally permissible and according to article 6 para. 1 b) of the GDPR is necessary for the processing of contractual relationships with you.
5. Period of storage and deletion of data
We store all personal data which you provide only for as long as necessary in order to fulfil the purposes for which the data has been transferred, or as long as is required by law. Once the purpose has been fulfilled, or the statutory storage period has expired, the data will either be erased or blocked by us.
6. SSL Encryption
This website uses SSL encryption for security reasons and to protect the transfer of confidential information such as the inquiries which you send to us as the website operator. You can see that the connection is secure when the address line in the browser changes from "http://" to "https://" and also when you see the lock symbol in your browser line. If the SSL encryption is active, data which has been transferred to us cannot be read by third parties.
7. Collection and storage of personal data, including type and purpose of use
a) Visiting the website
When you access our website, information is automatically sent to our website server by the browser on your end device. This information will be temporarily stored in a so-called log file. The following data is collected without any action on your part and stored until it is automatically deleted:
• IP address of the inquiring computer
• Date and time of access
• Name and URL of the accessed file
• Website from which the access was made (Referrer URL)
• the browser which was used, and where appropriate the operating system of your computer as well as the name of the access provider.
The aforementioned data is processed by us for the following purposes:
• ensuring a smooth connection set-up with the website
• ensuring a user-friendly dialogue with the website
• analysis of system security and stability
• for other administrative purposes.
Data which can be attributed to your person, such as the IP address, will be deleted after 7 days at the latest. If data is stored for longer than this, then the data will be anonymised so that it can no longer be traced to you.
The legal basis for the processing of the data is article 6 para. 1 f) of the GDPR. Our legitimate interest follows from the above-listed data collection purposes. In no way do we use the collected data for the purpose of making inferences about you.
b) Conclusion of contract
In the context of the establishment of the contractual relationship, in accordance with article 6 para.1 b) of the GDPR, only personal data which is essential for the execution of the contract will be processed.
If you provide any additional voluntary information, this will only be processed on the basis of your explicit consent in accordance with article 6 para. 1 a) of the GDPR. We use this voluntary information to provide a customer-friendly service, and to constantly improve it.
Content of newsletter and registration data
We will only send you a newsletter if you have requested us to do so and you have provided your consent in accordance with article 6 para. 1 a) of the GDPR, or for legitimate interests in relation to marketing purposes in accordance with article 6 para. 1 f) of the GDPR.
The newsletters contain customer information if new sector reports have been published. To register for the newsletter, it is sufficient to provide your email address. If you provide further voluntary information such as your name and/or gender, then this information will be used exclusively for the purpose of personalising the newsletters which are sent to you.
If you no longer wish to receive our newsletter, then you can withdraw your consent to receive the newsletter in future at any time. In order to do this, you can click on the unsubscribe link at the end of each newsletter or you can send an email to the following email address: firstname.lastname@example.org. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.
d) Contact form/email contact
You can contact us at any time by filling in the form available on our website. In order to use the contact form, the provision of a name is required for a personal salutation, and a valid email address is necessary in order that we can respond appropriately, knowing from whom the inquiry has come. If you contact us using the form on the website, the information which you provide in the form, including your contact details, and your IP address will be processed in accordance with article 6 para. 1 b) of the GDPR for the purpose of carrying out pre-contractual measures in response to your inquiry, or for the exercise of our legitimate interest, namely carrying out our business activities.
You are of course welcome to send us an email instead, using the address on our website. In this instance, we will store and process your email address and the information provided in the email in accordance with article 6 para. 1 b) and 1 f). of the GDPR, in order to process your inquiry. The inquiries and the associated data will be deleted after a period of 3 months at the latest, unless they are required for a further contractual relationship.
In the following we explain the different types of cookies which we use.
- a) Session cookies
In order to make the use of our offer more pleasant for you, we use so-called session cookies to recognise that you have already visited individual pages of our website. After you leave the website, these cookies are automatically deleted.
- b) Temporary cookies
- Optimisation cookies
9. Rights of the data subject
You have the following rights:
According to article 15 of the GDPR you have the right to request information about your personal data which is processed by us. This right to information includes information about
• the purposes of processing
• the categories of personal data
• the recipients or categories of recipient to whom your data has been or will be disclosed
• the planned storage period or at least the criteria for determining the storage period
• the existence of a right to rectification, erasure, restriction of processing or objection
• the existence of a right of appeal to a regulatory body
• the origin of your personal data, in the case where it was not collected by us
• the existence of automated decision-making including profiling and where applicable, significant information about the details
In accordance with article 16 of the GDPR you have the right to have any incorrect or incomplete personal data stored by us corrected without delay.
In accordance with article 17 of the GDPR, you have the right to demand we delete your personal data without delay, in so far as further processing is not necessary for one of the following reasons:
• to exercise the right to freedom of expression and information
• for compliance with a legal obligation which requires processing under the law of the European Union or the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
• for reasons of public interest in the area of public health pursuant to article 9 para. 2 h) and para. 2 i) and article 9 para. 3 of the GDPR
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to article 89 para. 1 of the GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the purposes of such processing
• for the assertion, exercise or defence of legal claims
d) Restriction of processing
In accordance with article 18 of the GDPR, you have the right to demand that the processing of your data is restricted where one of the following applies:
• You contest the accuracy of the personal data.
• The processing is unlawful and you oppose the erasure of the personal data.
• We no longer require the personal data for processing, but you nevertheless require the data for the assertion, exercise or defence of legal claims.
• You have objected to the processing of the data in accordance with article 21 para. 1 of the GDPR.
e) Informing you
If you have requested the rectification or erasure of your personal data, or the restriction of its processing in accordance with article 16, article 17 para. 1 and article 18 of the GDPR, we will inform all recipients to whom your personal data has been disclosed, unless this proves to be impossible or involves a disproportionate effort. You can request that we inform you of these recipients.
You have the right to receive the personal data which you have provided to us in a structured, commonly used and machine-readable format. You also have the right to request that this data be transferred to a third party as long as the processing is carried out by automatic means and is based on consent pursuant to article 6 para. 1 a) or article 9 para. 2 a) of the GDPR, or on a contract pursuant to article 6 para. 1 b) of the GDPR.
g) Withdrawal of consent
In accordance with article 7 para. 3 of the GDPR, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent before the withdrawal. In the future, we will then no longer be allowed to continue the data processing that was based on your withdrawn consent.
In accordance with article 77 of the GDPR you have the right to complain to a regulatory body if you believe that the processing of your personal data violates the provisions of the GDPR.
If your personal data is processed on the basis of legitimate interests in accordance with article 6 para. 1 f) of the GDPR, you have the right to object to the processing of your personal data pursuant to article 21 of the GDPR, provided that there are grounds for doing so which arise from your particular situation or the objection is against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without the need for specifying the particular situation. If you would like to make use of your right of revocation or objection, it is sufficient to send an e-mail to email@example.com.
j) Automated individual decision-making including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which has legal consequences for you or affects you in a similarly significant way. This does not apply if the decision
i. is necessary for the conclusion or performance of a contract between you and us
ii. is permitted by legislation of the European Union or the Member States to which we are subject, and the legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests
iii. is made with your explicit consent.
However, these decisions must not be based on certain categories of personal data in accordance with article 9 para. 1 of the GDPR, unless article 9 para. 2 a) or 2 g) of the GDPR apply, and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
With regard to the cases outlined in i) and iii), we take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, including the right to at least obtain the intervention of a person on our side for you to set out your position and contest the decision.
10. Changes to our data protection declaration
If we amend our data protection declaration, the changes will be indicated on our website.