1. Data protection at a glance
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator whose contact details are stated on the legal notice page of this website.
How do we collect your data?
One type is the data you provide us with. This can be, for example, data that you enter in a contact form.
Other data is collected by our IT systems when you visit the website, either automatically or after you have given your consent. This applies mainly to technical data (e.g., your internet browser, operating system, or time of page view) which is collected automatically as soon as you enter this website.
For which purposes do we use your data?
Some of the data is collected to ensure error-free display of the website. Other data types may be used to analyze your user behavior.
What rights do you have regarding your data?
At any time, you have the right to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You furthermore have the right to request the rectification or erasure of this data. If you have given your consent to data processing, you can revoke this consent at any time with effect for the future. Also, you have the right to request the restriction of the processing of your personal data under certain circumstances. In addition, you have the right to file a complaint with the competent supervisory authority.
For all questions on the above regulations as well as all further questions on the matter of data protection, you can contact us at any time at the address stated on the legal notice page.
Analysis tools and third-party tools
When visiting this website, your surfing behavior may be statistically analyzed. This is done primarily with so-called analysis programs.
2. Hosting and content delivery networks (CDN)
This website is hosted by an external service provider (the provider). The personal data collected on this website is stored on the provider’s servers. This may include primarily IP addresses, contact requests, meta and communication data, contract data, contact data, names, page impressions and other data generated via a website.
The provider is used for the purpose of fulfilling the contract with our potential and current customers (Art. 6 para. 1 letter b GDPR) and in the interest of a secure, fast, and efficient provision of our website executed by a professional provider (Art. 6 para. 1 letter f GDPR).
Our provider will only process your data to the extent necessary to fulfill its contractual obligations and follow our instructions regarding this data.
We are using the following provider:
10587 Berlin (Germany)
3 General and mandatory information
We would like to point out that all data transmission on the Internet (e.g., when communicating by e-mail) can be subject to security vulnerabilities. Complete protection of data against access by third parties is impossible.
Statement on the person responsible
The person responsible for data processing on this website is:
Oberdürrbacher Str. 6
97209 Veitshöchheim (Germany)
Phone: +49 (0)931 329430
The responsible party is the natural or legal person who, acting alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, e-mail addresses, or similar).
Information on data transfer to the USA
Among others, tools created and run by companies based in the USA are integrated on our website. If these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without the possibility for you as a data subject to take legal action against this. It can therefore not be ruled out that US authorities (e.g., intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.
Revocation of your consent to data processing
Many data processing operations are admissible only with your express consent. You may revoke your consent once given at any time. The legality of the data processing carried out until that revocation by that time remains unaffected by it.
Right to object to data collection in special cases and the right to object to data collection for direct marketing purposes (Art. 21 GDPR).
If your personal data is processed for the purpose of direct marketing, you have the right to object to the processing of your personal data for such marketing; this also applies for the profiling to the extent that is related to such direct marketing. If you object, your personal data will no longer be used for the purpose of direct marketing (objection under Art. 21 para. 2 GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in the member state of their habitual residence, their place of work or the place of the alleged violation. The right of appeal is without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to have all data we process automatically, based on your consent or in performance of a contract, handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done if technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator, this site uses SSL or TLS encryption. An encrypted connection can be identified by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in the address bar of your browser.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Right of access, erasure, and rectification
Within the applicable legal provisions, you have, at any time, the right to access your stored personal data, learn about its origin and recipient and the purpose of data processing and, if applicable, a right to rectification or erasure of this data, all free of charge. For questions on the above as well as for further questions on the matter of personal data, you can contact us at any time at the address stated on the legal notice page.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. In order to do this, you may contact us at any time at the address given on the legal notice page. The right to restriction of processing exists in the following cases:
If you dispute the accuracy of your personal data stored by us, we usually need time for verification measures. During the verification, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data happened or is happening unlawfully, you can request the restriction of data processing instead of erasure.
If we no longer need your personal data, but you need it in order to exercise, defend or establish legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.
If you have lodged an objection pursuant to Art. 21 para. 1 GDPR, a balancing between your interests and our interests must be carried out. Until it is determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data may only be processed (beyond its storage) with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a member state.
Objection to advertising e-mails
We hereby prohibit the use of contact data published due to the obligation to issue a legal notice page for the transmission of advertising and information material we have not expressly requested. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails.
4. Data collection on this website
Our internet pages use so-called “cookies”. Cookies are small text files and do not cause any damage to your terminal equipment. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.
In some cases, cookies from third-party companies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g., cookies for processing of payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or the display of videos). Other cookies are used to analyze user behavior or to display advertising.
Cookies that are required to carry out the electronic communication process (necessary cookies), to provide certain functions that you have requested (functional cookies, e.g., for the shopping cart function) or to optimize the website (e.g., cookies for counting visits) are stored on the basis of Art. 6 para. 1 letter f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies has been obtained, the storage of the cookies in question is based exclusively on this consent (Art. 6 para. 1 letter a GDPR); the consent can be revoked at any time.
You can adjust your browser settings in order to be informed about the placing of cookies and allow for cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies at the end of a session when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
Cookie consent with Consent Manager Provider
Our website uses the cookie consent technology of Consent Manager Provider to obtain your consent to the storage of certain cookies on your terminal device and to document this in accordance with data protection law. The provider of this technology is Jaohawi AB, Håltegelvägen 1b, 72348 Västerås (Sweden); website: https://www.consentmanager.de (hereinafter “Consent Manager Provider”).
When you enter our website, a connection is made to Consent Manager Provider’s servers to obtain your consents and other statements regarding cookie use. Subsequently, Consent Manager Provider stores a cookie in your browser in order to be able to link the consents or their revocation to you as a user. The data collected this way will be stored until you ask us to delete it, you delete the Consent Manager Provider cookie yourself, or the purpose for storing of the data no longer applies. Mandatory legal storage obligations remain unaffected.
Contract on order processing
We have concluded an order processing contract with Consent Manager Provider. This is a contract required by data protection law which guarantees that Consent Manager Provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with GDPR.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
Browser type and browser version
Operating system used
Host name of the accessing computer
Time of the server request
This data is not merged with other data sources.
The collection of this data is based on Art. 6 para. 1 letter f GDPR. The website operator has a legitimate interest in the technically error-free display and the optimization of its website – for this purpose, the server log files must be collected.
If you send us inquiries via the contact form, your data from this inquiry form, including the contact data you provided, will be stored by us for the purpose of processing the inquiry and for possible follow-up questions. We do not share this data without your consent.
The processing of this data is based on Art. 6 para. 1 letter b GDPR, provided that your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 para. 1 letter f GDPR) or on your consent (Art. 6 para. 1 letter a GDPR) if it has been obtained.
The data you entered in the contact form will be stored by us until you ask us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g., after we completed processing your request). Mandatory legal provisions, in particular retention periods, remain unaffected.
Inquiry by e-mail, telephone, or fax
If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, inquiry text) will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.
The processing of this data is based on Art. 6 para. 1 letter b GDPR if your request is related to the performance of a contract or is necessary for the performance of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests sent to us (Art. 6 para. 1 letter f GDPR) or on your consent (Art. 6 para. 1 letter a GDPR) if it has been obtained.
The data you send us in contact requests will be stored by us until you ask us to delete it, you revoke your consent to store it, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions, in particular legal retention periods, remain unaffected.
5 Newsletter and postal advertising
If you would like to receive the newsletter offered on the website, we need your e-mail address as well as information that allows us to verify that you are the owner of the e-mail address and that you agree to receive the newsletter. Further data is collected only if you agree to it. We use this data exclusively for sending the requested information and do not share it with third parties.
The processing of the data entered in the newsletter registration form depends on your consent (Art. 6 para. 1 letter a GDPR). You can revoke your consent to the storage of the data, of the e-mail address and to its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out by then remains unaffected by the revocation.
The data you provide for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter. It will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data that has been stored by us for other purposes remains unaffected by this.
After you have unsubscribed from the newsletter, your e-mail address may be added, by us or the newsletter service provider, to a blacklist in order to prevent future mailings. The data from the blacklist will be used for this purpose only and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements applicable for mailing of newsletters (legitimate interest in the sense of Art. 6 para. 1 letter f GDPR). The data storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
MailChimp with deactivated performance measurement
This website uses the services of MailChimp for mailing newsletters. The provider is the Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308 (USA).
MailChimp is a service that, among other things, facilitates the mailing of newsletters. If you enter data for the purpose of receiving newsletters (e.g., an e-mail address), this data is stored on MailChimp’s servers in the USA. We have deactivated performance measurement with MailChimp, so that MailChimp will not evaluate your behavior when opening our newsletters.
If you do not want your data to be transferred to MailChimp, you must unsubscribe from the newsletter. For this purpose, we provide an appropriate link in every newsletter mail. Furthermore, you may unsubscribe from the newsletter directly on our website.
The data processing is based on your consent (Art. 6 para. 1 letter a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out by then remains unaffected by the revocation.
The data you have provided to us for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter. It will be deleted from the newsletter distribution list after you unsubscribe. Data that has been stored by us for other purposes remains unaffected by this.
After you have unsubscribed from the newsletter distribution list, your e-mail address may be stored, by us or the newsletter service provider, in a blacklist in order to prevent future mailings. The data from the blacklist will be used only for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements applicable for mailing newsletters (legitimate interest in the sense of Art. 6 para. 1 letter f GDPR). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
Conclusion of a data processing agreement
We have concluded a so-called “Data-Processing-Agreement” with MailChimp in which we oblige MailChimp to protect our customers’ data and not to share it with third parties.
We use your address in compliance with all legal requirements applicable for mailing of postal advertising.
The legal basis for this is our legitimate interest in direct advertising pursuant to Art. 6 para. 1 sent. 1 letter f in conjunction with recital 47 GDPR. If appropriate consent has been obtained, the processing is based exclusively on Art. 6 para. 1 letter a GDPR; the consent can be revoked at any time. More specific regulations may be communicated to you, if necessary, during data collection and take precedence over the present regulation.
Your address will be stored by us until the purpose for data processing no longer applies. If you file a legitimate request for erasure, or revoke your consent to postal advertising, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, the data will be deleted after these reasons no longer apply.
We use the following service provider for our postal mailings:
Oberdürrbacher Str. 6
97209 Veitshöchheim (Germany)
Conclusion of a contract for order processing
We have concluded an order processing contract with the company we use to send our postal advertising which guarantees that our contractual partner processes your personal data only in accordance with our instructions and in compliance with GDPR.
6. Plugins and tools
Google Web Fonts (local hosting)
This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally. There is no connection to Google servers.
7. E-Commerce and payment providers
Processing of data (customer and contract data)
We collect, process, and use personal data only to the extent necessary for the establishment, configuration, or modification of the legal relationship (master data). This is done based on Art. 6 para. 1 letter b GDPR which permits the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process, and use personal data concerning the use of this website (usage data) only to the extent necessary to enable the user to use the service or us to bill the user.
The collected customer data will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.
8. Audio and video conferencing
For communicating with our customers, we use, among others, online conference tools. The respective tools are listed below. When you communicate with us in a video or audio conference online, your personal data is collected and processed by us and the provider of the respective conferencing tool.
In the process, the conferencing tools collect all data that you provide/enter while using the tools (email address and/or your phone number). Furthermore, the conference tools process the duration of the conference, start and end (time) of participation in the conference, number of participants and other “context information” related to the communication process (metadata).
Furthermore, the provider of the tool processes all technical data required to execute the online communication. This includes IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker and the type of connection.
If content is exchanged, uploaded, or otherwise made available within the tool, this content is also stored on the servers of the tool providers. Such content includes, but is not limited to, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared while using the service.
Please note that we do not have full control over the data processing operations conducted by the tools used. Our options largely depend on the company policy of the respective provider. For further information on data processing by the conference tools, please refer to the privacy statements of the respective tools, which we have listed below this.
Purpose and legal basis
The conference tools are used for communication with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 sent. 1 letter b GDPR). Furthermore, the use of the tools serves the general facilitation and acceleration of communication with us or our company (legitimate interest in the sense of Art. 6 para. 1 letter f GDPR). If consent has been obtained, the tools in question are used based on this consent; your consent can be revoked at any time with effect for the future.
The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you request us to do so, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal retention periods remain unaffected.
We have no influence on the storage period of your data stored by the operators of the conference tools for their own purposes. Please contact the operators of the conference tools for details.
Conference tools used
We use the following conference tools:
Skype for Business