PRIVACY POLICY

We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point about which of your personal data we collect when you visit our website and for what purposes these are used.

This privacy policy appliesto the website of Ruthmann Holdings GmbH, which can be accessed under the domain ruthmann.de and the various subdomains ("our website").

Who is responsible and how do I contact you?

Person in charge
for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

Ruthmann Holdings GmbH
Ruthmannstraße 4
48712 Gescher
DE

Data protection supervisor

We have appointed a data protection officer who  can be reached via the e-mail address datenschutz@ruthmann.de or via the above contact details. Please provide postal messages to the data protection officer with the addition "Data protection – personal / confidential

What is it about?

This privacy statement meets the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth,  e-mail address, IP address or user behaviour at Visiting a website. Information in which we cannotmake any reference to your person (or only with an unreasonable effort), e.g. by anonymization, are not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal Basis and a defined purpose.

Stored personal data will be deleted  as soon as the purpose of the processing has been achieved and there are no legitimategrounds for further storage of the data. We will inform you in the individual processing processes about the specific storage periods or storage periods. Criteria for storage. Irrespective of this, we store your personal data in individual cases for the  establishment, exercise  or defence of legal claims and in the event of legal retention obligations.

What rights do I have?

Under the conditions of  the statutory provisions of the General Data Protection Regulation (GDPR), you as a data subject have the following rights:

  • Information pursuant to Article 15 GDPR  about the data  stored about you in the form of informative information on the details of the processing as well as a copy of your data; 
  • Correction in accordance with Article 16 GDPR of incorrect or incomplete data stored by us;
  • Deletion pursuant to Article 17 GDPR of the data stored by us, insofar as the processing is not necessary to exercise the right to freedom of expression and information, to a legal obligation is necessary for reasons of public interest or for the establishment, exercise or defence of legal claims;
  • Restriction of processing in accordance with Article 18 GDPR, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you reject their deletion because you need them to assert, exercise or defend legal claims or because you object to the processing pursuant to Article 21 GDPR.
  • Datatransferability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the  scope of  consent pursuant to Art. 6 para. 1 lit. a GDPR or on the basis of a contract pursuant to Art. 6 para. 1 lit. b GDPR and this by have  been processed by automated means. You will receive your data in a structured, valid and machine-readable format or format. we transmit the data directly to another controller, as far as this is technically feasible.
  • Objection pursuant to Art. 21 GDPR against the processing of your personal data, insofar as this is based on Art. 6 para. 1 lit. e, f GDPR and there are grounds for this which arise from your particular situation or the objection is directed against direct marketing. The right to object does not exist if predominant, mandatory grounds for protection for the processing are proven or if the processing for Assertion, exercise or defence of legal claims. Insofar as the right to object does not exist in the case of individual processing operations, this is stated there.
  • Revocation in accordance with Article 7 (3) GDPR of your consent with effect forthe future.
  • Complaint pursuant to Article 77  GDPR to a supervisory authority if you believe that  the processing of  your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your place of residence, your place of work or our company headquarters. 

Who gets my data?

We only pass on your personal data, which we process on our website, to third parties if this is necessary for the fulfilment of the purposes and in the Individual cases of the legal basis (e.g. Consent or  protection of legitimate interests). In addition, we pass on personal data to third parties in individual cases if this serves to assert, execute or defend legal claims. Possible recipients can then open e.g. Law enforcement agencies, lawyers, economic auditors, courts, etc. 

Insofar as we use service providers for the operation of our website who process personal data in accordance with Art. 28 GDPR in the context of order processing on our behalf, these recipients may be awareof your personal data. Further information on the  use of processors and web services can be found in the overview of the individual processing operations.

Cookies

Some of the websites use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Cookies that are required to carry out the electronic communication process or to provide certain functions desired by you (e.g. shopping cart function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for the analysis of your surfing behaviour) are stored, these are treated separately in this data protection declaration.

 
This Cookie Policy has been created and updated by CookieFirst.com.

 

How is my data processed in detail?

Below we inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data and the respective Storage period. An automated decision in individual cases, including profiling, does not take place.

Provision of the website

Type and scope of processing

When you access and use our  website, we collect the personal data that your browser automatically transmits to our server. The following information is stored temporarily in a so-called Log file saved:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the  accessing computer
• Time of the server request
• IP address

Purpose and legal basis

The processing is carried out to safeguard  our  overriding legitimate interest in displaying our website  and ensuring security and stability on the basis of Art. 6 para. lit. f GDPR. The collection of data and the storage in log files is absolutely necessary forthe operation of the website. There is no right to object to  processing due to the exception under Article 21 (1) GDPR. Insofar as the further storage of the log files is required by law, the processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR. There is no legal or contractual obligation to provide the data, but it  is technically notpossible to access our website without providing the data.

Hosting
Our website is not hosted by ourselves, but by a service provider who processes the aforementioned data on our behalf in accordance with Article 28 GDPR for the purpose of the website. 

Storage period
The aforementioned data will be stored for the duration of the display of the website. 

Technical storage period
The aforementioned data for the display of the website are stored for a maximum of 7 days for technical reasons. 

Contact

Type and scope of processing

On our website we offer you to contact us via a form provided. The information collected via mandatory fields is required to process the request. In addition, you can voluntarily provide additional information that you believe is necessary for processing the contact request. 

When using the contact form, your personal data will not be passed on to third parties.

Purpose and legal basis

The processing of your  data by using our contact form takes place for the  purpose of communication and processing of your  request on the basis of your consent in accordance with Art. 6  para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as your consent or access to information on your terminal device within the meaning of the TTDSG. If your request relates to an existing contractual relationship with us, the processing for the  purpose of fulfilling the contract is carried out on the basis of Art. 6 para. 1 lit. b GDPR. There is no legal or contractual obligation to provide your data, however, the processing of  your request without the provision of the information in the mandatory fields is not possible. possibly. If you do not wish to provide this data, please contact us by other means.

Storage period

If you use the contact form on the basis of your consent, we store the collected data of each request for a period of three years, starting with the completion of your request or until to withdraw your consent.

Storage period contractual relationship

If you use the contact form in the  context of a contractual relationship, we store the collected data of each request for a period of [three years] from the end of the contractual relationship. 

Registration on this website

You can register on our website to use additional features on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will refuse the registration.

For important changes, such as the scope of the offer or technically necessary changes, we use the e-mail address provided during registration to inform you in this way.

The processing of the data entered during registration takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. For this purpose, an informal message by e-mail to us is sufficient. The legality of the data processing already carried out remains unaffected by the revocation.

The data collected during registration will be stored by us as long as you are registered on our website and will then be deleted. Legal retention periods remain unaffected.

Microsoft Teams

We use Microsoft Teams. Provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Details on data processing can be found in the privacy statement of Microsoft Teams: https://privacy.microsoft.com/de-de/privacystatement.

Contract processing

We have concluded a contract for order processing (DPA) with the above-mentioned provider. This is a contract prescribed by data protection law that ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Newsletter

Type and scope of processing

If you register on  our  website to receive our newsletter, we collect your e-mail address [as well as your name...  ] and store this information together with the date of registration and your IP address.  You will then receive an e-mail in which you must confirm your registration for the newsletter (double opt-in).  If you do not confirm  the registration within [XX hours], it will be  automatically processed and the data will not be processed forsending the newsletter. 

To send the newsletter, we use a service provider who processes your personal data on our behalf in accordance with Art. 28 GDPR. Your data will not be passed on to third parties.

Purpose and legal basis

We process your  data for the  purpose of sending newsletters on  the basis of  your consent in accordance with Art. 6 para. 1 lit. a GDPR.  By unsubscribing from the newsletter,  you candeclare your revocation at any time with  effect forthe future  in accordance with Article 7 (3) GDPR  . There is no legal or contractual obligation to provide your data, but it is not possible to  send the newsletter without providing  your data  .

Storage period

After registering for the  newsletter, we store the data until confirmation of the registration. After successful confirmation, we store your data until you revoke your consent (unsubscribe from the newsletter) as well as for technical reasons. maximum 7 days.

Handling of applicant data

We offer you the opportunity to apply to us. In the following we inform you about the  scope, purpose and use of  your personal data collected during the application process. We assure you that the collection, processing and use of your data is carried out in accordance with applicable data protection law and all other legal provisions   and that your Data will be kept strictly confidential.

If you send us an application, we process your associated personal data (e.g.   Contact and communication data, application documents, notes in the context of application interviews, etc.), insofar as this is necessary for the decision on the establishment of an employment  This is the case in the United Kingdom. The legal basis for this is § 26 BDSG according to German law (initiation of an employmentrelationship), Art. 6 para. 1 lit. b DSGVO (general contract initiation) and – if you have a have given consent – Art. 6 para. 1 lit. a GDPR. The consent can be revoked at any time. Your personal data will be passed on within our company exclusively to persons who are involved in the processing of your application.

If the application is successful, the data submitted by you will be processed on the basis of § 26 BDSG and Art. 6 para. 1 lit. b DSGVO for the purpose of carrying out   the employment relationship stored in our data processing systems.

If we are unable to make you a job offer, reject a job offer or withdraw your application, we reserve the right to Data on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) up to 6 months from the end of the application process (rejection or withdrawal of the application) with us to be kept. Subsequently, the data will be deleted and, if available, the physical application documents will be destroyed. The storage serves in  particular for purposes of proof in the  event of a legal dispute. If it can be seen that the data will be required after expiry of the 6-month period (e.g. due to an imminent or pending legal dispute), a deletion will only take place if the purpose forfurther storage Removed. A  longer storage may also take place if  you have given your consent (Art. 6 para. 1 lit. a GDPR) or if statutory retention obligations of the solution.

Handling of data of businesspartners (customers, interested parties, suppliers) 

We collect personal data for the  purpose of contract execution, for the fulfilment of contractual and pre-contractual obligations as well as for direct advertising. The data collection and data processing is necessary for the execution of the contract and is based on Article 6 (1) (b) GDPR. The use of personal data for advertising purposes represents a legitimate interest of our company (Art. 6 para. 1 f) GDPR). A transfer of the data to third parties takes place if this is necessary for the fulfillment of the order (e.g.  Complaints) is necessary. The data will be deleted as soon as they are no longer necessary for the purpose of their processing. You have the right to object to the use of your data for direct marketing purposes at any time. In addition, you are entitled to request information about the data stored by us about you and,in the event of incorrectness of the  data, the correction or to require the deletion of the data in the case of inadmissible data storage. To assert your rights, please use the above contact details.

Cookiefirst

Type and scope of processing

We have integrated Cookiefirst on our website. Cookiefirst is a consent of Digital Data Solutions B.V., Plantagemiddenlaan 42A, 1018 DH Amsterdam, The Netherlands, with which consent to the storage of cookies can be obtained and documented. Cookiefirst uses cookies or other web technologies to recognize users and to store the consent given or revoked.

Purpose and legal basis

The use of the service is based on the legally required consent to receive the use of cookies in accordance with Art. 6 para. 1 lit. c. GDPR. 

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Digital Data Solutions B.V. definitely. Further information can be found in the privacy statement for Cookiefirst: https://cookiefirst.com/legal/data-processing-agreement/.

Google Analytics

Type and scope of processing

We use Google  Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer.
This includes, for example, the number of visits to our online offer, visited subpages and the length of stay of visitors.

Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users.

This information is used, among other things, to compile reports on the activity of the website.

Purpose and legal basis

The use of Google Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.

We intend to transfer personal data to third partiesoutside the European Economic Area, in particular the USA. In cases where there is no adequacy decision of the European Commission (e.g. in the USA) we have agreed with the recipients of the data other suitable guarantees within the meaning of Art. 44 et seq. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4. June 2021. A copy of these standard contractual clauses can be found at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D09….

In addition, prior to such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you can obtain via the consent in the Consent Manager (or other forms, registrations, etc.). grant. We would like to point out that in the case of third-countrytransfers, unknown risks (e.g. the data processing by security authorities of the third country, the exact scope and consequences of which  we  do not know for you, over which we have no influence and from which you  may not be aware of). 

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

IP anonymization

We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser Plugin

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent the collection of your data on future visits to this website: Disable Google Analytics.

More information on the handling of user data by Google Analytics can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Contract processing

We have concluded a contract data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographics in Google Analytics

This website uses the "demographic features" function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third parties. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google Account or generally prohibit the collection of your data by Google Analytics as described in the section "Objection to data collection".

Google Maps

Type and scope of processing

We use the map service Google Maps to create driving directions. Google Maps is a service of Google Ireland Limited, which displays a map  on our website.
When you access this content on our website, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, your IP address and, if applicable, your IP address.   Browser data as your user-agent  is transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google Maps.  

Purpose and legal basis
The use of Google Maps is based on your consent in accordance with Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Maps: https://policies.google.com/privacy.

Google Tag Manager

Type and scope of processing
We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags across a surface and allows us to control the precise integration of services on our website.
This allows us to  flexibly integrate additional services in order  to evaluate user access to our website. 

Purpose and legal basis

The use of Google Tag Manager is based on  your consent in accordance with Art. 6 para. 1  lit. a. DSGVO and § 25 para. 1 TTDSG.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy statement for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-po….

Google reCAPTCHA

Type and scope of processing

We have integrated components of Google reCAPTCHA on our website. Google reCAPTCHA  is a  service of Google Ireland Limited and enables us to distinguish whether a  contact request originates from a natural person or is automated by means of a Programs happens. When you access this content, you connect to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, using your IP address and, if applicable, your IP address. Browser data as your user-agent is transmitted. Furthermore, Google reCAPTCHA records the user's dwell time and mouse movements in order to distinguish automated queries from human ones. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google reCAPTCHA.  

Purpose and legal basis

The use of Google reCAPTCHA is based on your consent in accordance with Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG 

We intend to transfer personal data to third partiesoutside the European Economic Area, in particular the USA. In cases where there is no adequacy decision of the European Commission (e.g. in the USA) we have agreed with the recipients of the data other suitable guarantees within the meaning of Art. 44 et seq. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4. June 2021. A copy of these standard contractual clauses can be found at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D09….

In addition, prior to such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you can obtain via the consent in  the  Consent Manager (or other forms, registrations,  etc.). grant. We would like to point out that in the case of third-countrytransfers, unknown risks (e.g. the data processing by security authorities of the third country, the exact scope and consequences of which we do not know for you, over which we have no influence and from which you may not be aware of). 

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy statement forGoogle reCAPTCHA: https://policies.google.com/privacy?hl=en-US.

YouTube Video

Type and scope of processing
We have integrated YouTube video on our website. YouTube Video is a component of YouTube, LLC's video platform where users can upload content, share it over the Internet,  and get detailed statistics.

YouTube videoallows us to integrate content from the platform into our website.
YouTube Video uses cookies  and other browser  technologies to  evaluate user behavior,  recognize users and  create user profiles.  This information is used,  among other things, to  analyse the activity of the  content listened to and  to create reports.   If a user is registered with YouTube,  LLC, YouTube Video  can associate the videos played with the profile.

When you access this content, you establish a connection to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, whereby your IP address and, if applicable, your IP address  and, if applicable, your IP address. Browser data as your user-agent is transmitted.

Purpose and legal basis

The use of the service is based on  your consent in accordance with Art. 6 para. 1  lit. a. DSGVO and § 25 para. 1 TTDSG.

We intend to  transfer personal data to third partiesoutside the European Economic Area, in particular the USA. In cases where there is no  adequacy decision of the European Commission (e.g. in the USA) we have agreed with the recipients of the data other suitable guarantees within the  meaning of Art. 44 et seq. GDPR. Unless  otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4. June 2021. A copy of these standard contractual clauses can  be found at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D09….

In addition, prior to such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you  can obtain via the  consent in  the  Consent Manager (or other forms, registrations,  etc.).   grant. We would like to point out that in the case of  third-countrytransfers, unknown risks (e.g. the data processing by security authorities of the third country, the exact scope and consequences of which we do not know for you, over which we have no influence and  from  which you may not be aware of). 

Storage period

The specific storage period of the  processed data cannot be influenced by  us, but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube video: https://policies.google.com/privacy.
 

Yumpu CDN

Type and scope of processing

We use Yumpu CDN  to properly provide the content of  our website. Yumpu CDN is a service of i-magazine AG, which acts as a Content Delivery Network (CDN) on our website in order to  provide the functionality of other services of i-magazine AG. For these services, you will find a separate section in this Privacy Policy. This section is only about using the CDN.

A CDN helps to make content of our online offer, in particular files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed  servers. When you access this content, you establish a connection to servers of i-magazine AG, Gewerbestrasse 3 9444 Diepoldsau, Switzerland, whereby your IP address and, if applicable, your IP address and, if applicable, your IP address is used.  Browser data as your user-agent is transmitted. These data are processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Yumpu CDN.  

Purpose and legal basis

The use of the Content Delivery Network is based on  our  legitimate interests, i.e. interest  in secure  and efficient provision as  well as the optimization of  our online offer in accordance with Art. 6 para. 1 lit. f. GDPR. 

Storage duration
 
The specific storage period of the processed data cannot be influenced by us, but is determined by i-magazine AG. Further information can be found in the privacy statement for Yumpu CDN: https://www.yumpu.com/de/info/privacy_policy.

Privacy Policy for Social Networks

The party responsible for data processing is:

Ruthmann Holdings GmbH, Ruthmannstraße 4, 48712 Gescher

A data protection officer has been appointed, who can be reached via the e-mail address datenschutz@ruthmann.de. Please send postal letters with the addition "Data protection – personal/confidential" to the address of our company. 

We maintain publicly accessible profiles on social networks. The social networks we use in detail can be found below. Social networks such as Facebook, Xing, etc. can usually comprehensively analyze your user behavior when you visit their website or a website with integrated social media content (e.g. Like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing operations. 

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your device or by collecting your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are logged in or were logged in.

Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and data protection provisions of the respective social media portals.

Legal basis

Our social media appearances are intended to ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR).

Controller and assertion of rights

If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against .dem operator of the respective social media portal (e.g. against Facebook).

Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely based on the corporate policy of the respective provider.

Storage duration

The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for its storage no longer applies, you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions – esp. Retention periods – remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Social networks in detail

Facebook

We have a profile on Facebook. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified according to the EU-US Privacy Shield.

We have concluded an agreement with Facebook on joint responsibility for the processing of data (Controller Addendum). This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook fan page. You can view this agreement at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum

You can adjust your advertising settings independently in your user account. To do this, click on the following link and log in:
https://www.facebook.com/settings?tab=ads

Details can be found in Facebook's privacy policy:
https://www.facebook.com/about/privacy/

XING

We have a profile on XING. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Details on how they handle your personal data can be found in XING's privacy policy:
https://privacy.xing.com/de/datenschutzerklaerung

LinkedIn

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn is certified according to the EU-US Privacy Shield. LinkedIn uses advertising cookies.

If you wish to disable LinkedIn advertising cookies, please use the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Details on how they handle your personal data can be found in LinkedIn's privacy policy:
https://www.linkedin.com/legal/privacy-policy

YouTube

We have a profile on YouTube. The provider is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube is a company owned by Google. Details on their handling of personal data can be found in Google's privacy policy:
https://policies.google.com/privacy?hl=de&gl=de

TikTok

We have a profile on TikTok. Responsible for data processing is TikTok Technology Limited ("TikTok Ireland") and TikTok Information Technologies UK Limited ("TikTok UK"). TikTok is a company belonging to Beijing Bytedance Technology Ltd., 48 Zhichun Lu Jia, Haidian Qu, Beijing, PR China. 

We have entered into a joint controller agreement with TikTok in the processing of data. This agreement sets out which data processing operations we or TikTok are responsible for when you visit our TikTok profile. This agreement can be viewed at the following link: https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms. If you have given advertising consent, TikTok will use your data to show you personalized advertising. Details on their handling of personal data can be found in TikTok's privacy policy:
https://www.tiktok.com/legal/privacy-policy-eea?lang=de 

Chatwerk

We use Chatwerk (hereinafter: ‘Chatwerk’) to process user enquiries via chat. The provider is Inbox Solutions GmbH, Pretzfelder Straße 7 - 11, 90425 Nuremberg, Germany.

The messages sent to us remain with us until you ask us to delete them or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time. There is no legal or contractual obligation to provide your data, but it is not possible to process your enquiry without providing the information in the mandatory fields. If you do not wish to provide this data, please contact us by other means.

Further information can be found in the privacy policy: https://chatwerk.de/datenschutzerklaerung/.

Order processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which guarantees that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.