Privacy Policy

This is a translation for convenience. The German version is the legally binding one.

1 · Definitions

This privacy policy uses the terminology of the General Data Protection Regulation. Among the terms explained are: personal data, data subject, processing, restriction of processing, profiling, pseudonymisation, controller, processor, recipient, third party and consent.

2 · Name and address of the controller

3 · Cookies

This website uses cookies. Data subjects can prevent cookies from being set at any time through the corresponding setting in their browser, and can delete cookies that have already been set. If cookies are disabled, not all functions of the website may be fully usable.

4 · Collection of general data and information

Each time the website is accessed, general data and information are recorded automatically and stored in the server log files:

• Browser type and version
• Operating system used
• Referrer, that is the website from which the access originates
• Sub-pages accessed
• Date and time of access
• IP address and internet service provider
• Further data serving to avert danger in the event of attacks

These data are stored separately from any personal data of a data subject and are evaluated only in anonymous form.

5 · Contact option via the website

If a data subject contacts us via the contact form or by e-mail, the personal data transmitted are stored automatically. They are not passed on to third parties. The data are stored solely for the purpose of processing and answering the enquiry.

6 · Routine erasure and blocking of personal data

Personal data are processed and stored only for the period necessary to achieve the purpose of storage, or for such period as provided for by European or national legislation. If the purpose ceases to apply or a storage period expires, the data are routinely blocked or erased.

7 · Rights of the data subject

Data subjects have in particular the following rights:

• The right to obtain confirmation as to whether data are being processed
• The right of access to the stored data
• The right to rectification of inaccurate data
• The right to erasure (the „right to be forgotten“)
• The right to restriction of processing
• The right to data portability
• The right to object to processing
• The right not to be subject to a decision based solely on automated processing
• The right to withdraw consent with effect for the future

An informal message to the controller is sufficient to exercise these rights.

8 · Google Analytics (with anonymisation)

The operating company is Google Ireland Limited, Gordon House, Barrow Street, Dublin D04 E5W5, Ireland. Analysis is carried out with IP anonymisation enabled via the _gat._anonymizeIp extension, which truncates the IP address before any transfer to the United States takes place.

Collection by Google Analytics can be disabled using the browser add-on at tools.google.com/dlpage/gaoptout.

9 · LinkedIn

The operating company is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. For privacy matters outside the United States, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland is responsible.

LinkedIn sets cookies through its partners. These include Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame. Setting these cookies can be declined in the LinkedIn settings.

10 · Legal bases for processing

Depending on the purpose, processing is based on Article 6 (1) (a) to (f) GDPR, in particular consent, performance of a contract, legal obligation, vital interests and legitimate interests.

11 · Legitimate interests

Where processing is based on Article 6 (1) (f) GDPR, our legitimate interest lies in carrying out our business activities for the benefit of the well-being of our employees and shareholders.

12 · Storage period

The criterion for the storage period of personal data is the respective statutory retention period. Once the period expires, the data are routinely erased, provided they are no longer required for the performance or initiation of a contract.

13 · Statutory or contractual obligation to provide data

The provision of personal data is in part required by law and in part necessary under a contract. Without such provision it may not be possible to conclude a contract. Before data are provided, the controller explains whether the information is required and what the consequences of not providing it would be.

14 · Automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

Back to the home page