Privacy Policy.
Responsible Party
Gideon Goerts
1. General Information on Data Processing and Legal Basis
1.1. This privacy policy informs you about the nature, scope, and purpose of the processing of personal data within our online offering and the associated websites, features, and content (hereinafter collectively referred to as "online offering" or "website"). This privacy policy applies regardless of the domains, systems, platforms, and devices (e.g., desktop or mobile) on which the online offering is accessed.
1.2. For the terminology used, such as "personal data" or their "processing," we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
The personal data of users processed within the scope of this online offering includes inventory data (e.g., names, company names, addresses, phone numbers, and email addresses of customers), usage data (e.g., the web pages visited within our online offering), and content data (e.g., entries in the contact form).
1.3. The term "user" encompasses all categories of persons affected by data processing. These include our business partners, customers, prospects, and other visitors to our online offering. The terminology used, such as "user," is to be understood in a gender-neutral manner.
1.4. We process personal data of users only in compliance with the relevant data protection regulations. This means that user data will only be processed when legally permitted — in particular, when data processing is necessary for the provision of our contractual services (e.g., order processing) and online services, or is required by law, when user consent has been given, or based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation and security of our online offering within the meaning of Art. 6(1)(f) GDPR, particularly in audience measurement, creation of profiles for advertising and marketing purposes, and collection of access data and use of third-party services).
1.5. We note that the legal basis for consent is Art. 6(1)(a) and Art. 7 GDPR, the legal basis for processing to fulfill our services and carry out contractual measures is Art. 6(1)(b) GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6(1)(c) GDPR, and the legal basis for processing to safeguard our legitimate interests is Art. 6(1)(f) GDPR.
2. Security Measures
2.1. We take organizational, contractual, and technical security measures in accordance with the state of the art to ensure compliance with data protection regulations and to protect the data we process against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.
Security measures include, in particular, the encrypted transmission of data between your browser and our server.
3. Disclosure of Data to Third Parties and Third-Party Providers
3.1. Data is only disclosed to third parties within the framework of legal requirements. We only share user data with third parties when this is necessary, e.g., on the basis of Art. 6(1)(b) GDPR for contractual purposes, or on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR for the economic and efficient operation of our business.
3.2. Where we use subcontractors to provide our services, we take appropriate legal precautions as well as corresponding technical and organizational measures to protect personal data in accordance with the relevant legal regulations.
3.3. Where content, tools, or other means from other providers (hereinafter collectively referred to as "third-party providers") are used within the scope of this privacy policy and their stated registered office is in a third country, it is to be assumed that a data transfer to the countries of the third-party providers takes place. Third countries are countries in which the GDPR is not directly applicable law, i.e., generally countries outside the EU or the European Economic Area. Data is transferred to third countries only when an adequate level of data protection exists, user consent has been given, or other legal permission is in place.
4. Contact
4.1. When contacting us (via contact form or email), the user's information is processed for the purpose of handling the contact inquiry and its processing in accordance with Art. 6(1)(b) GDPR.
5. Comments and Contributions
5.1. When users leave comments or other contributions, their IP addresses are stored for 7 days based on our legitimate interests within the meaning of Art. 6(1)(f) GDPR.
5.2. This is done for our security in case someone leaves unlawful content in comments and contributions (insults, prohibited political propaganda, etc.). In such cases, we ourselves may be held liable for the comment or contribution and are therefore interested in the identity of the author.
6. Collection of Access Data and Log Files
6.1. Based on our legitimate interests within the meaning of Art. 6(1)(f) GDPR, we collect data on every access to the server on which this service is located (so-called server log files). Access data includes the name of the accessed web page, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider.
6.2. Log file information is stored for security reasons (e.g., to investigate abuse or fraud) for a maximum of seven days and then deleted. Data whose further retention is necessary for evidentiary purposes is exempt from deletion until the respective incident has been finally resolved.
7. Cookies & Audience Measurement
7.1. Cookies are pieces of information transferred from our web server or third-party web servers to users' web browsers and stored there for later retrieval. Cookies may be small files or other types of information storage.
7.2. We use "session cookies," which are only stored for the duration of the current visit to our website (e.g., to enable the storage of your login status or the shopping cart function and thus the use of our online offering). A session cookie stores a randomly generated unique identification number, a so-called session ID. A cookie also contains information about its origin and the retention period. These cookies cannot store any other data. Session cookies are deleted when you end your use of our online offering and, e.g., log out or close the browser.
7.3. Users are informed about the use of cookies in the context of pseudonymous audience measurement within this privacy policy.
7.4. If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in their browser's system settings. Stored cookies can be deleted in the browser's system settings. The exclusion of cookies may lead to functional restrictions of this online offering.
7.5. You can object to the use of cookies for audience measurement and advertising purposes via the Network Advertising Initiative's deactivation page (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/).
8. Integration of Third-Party Services and Content
8.1. Within our online offering, we use content or service offerings from third-party providers based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6(1)(f) GDPR) to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content"). This always requires that the third-party providers of this content perceive the IP address of the users, as without the IP address they could not send the content to their browsers. The IP address is thus required for the display of this content. We endeavor to use only content whose respective providers use the IP address solely for content delivery. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, visit times, and other information about the use of our online offering, as well as be linked with such information from other sources.
Third-Party Provider Overview
Cookie notice plugin "Cookie Consent by Insites" by Silktide Ltd. The integration is carried out via a server call to Cloudflare, Inc, https://www.cloudflare.com/ (typically in the USA). Privacy Policy: https://www.cloudflare.com/security-policy/.
9. User Rights
9.1. Users have the right, upon request, to receive free information about the personal data we have stored about them.
9.2. In addition, users have the right to rectification of inaccurate data, restriction of processing, and deletion of their personal data. Where applicable, users may exercise their rights to data portability and, in the event of assumed unlawful data processing, file a complaint with the competent supervisory authority.
9.3. Users may also revoke their consent, generally with effect for the future.
10. Deletion of Data
10.1. Data stored by us is deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If user data is not deleted because it is required for other and legally permissible purposes, its processing is restricted. This means the data is blocked and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax law reasons.
10.2. According to legal requirements, data is retained for 6 years pursuant to § 257(1) HGB (commercial books, inventories, opening balance sheets, annual financial statements, commercial correspondence, accounting documents, etc.) and for 10 years pursuant to § 147(1) AO (books, records, management reports, accounting documents, commercial and business correspondence, documents relevant for taxation, etc.).
11. Right to Object
Users may object to the future processing of their personal data in accordance with legal requirements at any time. The objection may be made in particular against processing for direct marketing purposes.
12. Changes to the Privacy Policy
12.1. We reserve the right to amend this privacy policy to adapt it to changed legal situations or to changes in the service and data processing. However, this only applies with regard to declarations on data processing. If user consent is required or if components of the privacy policy contain provisions of the contractual relationship with users, changes are only made with the consent of the users.
12.2. Users are asked to regularly inform themselves about the content of this privacy policy.