The protection of your personal data when you visit our website is very important to us. All information about you, such as name, address, telephone number, e-mail address, account number, etc., as well as all information that can be traced back to you, are referred to as personal data. This also includes the IP address, which is automatically transmitted when you visit a website. This is technically mandatory.
We want you to know if and when we collect which data and how we use it. We have taken technical and organizational measures to ensure that data protection regulations are observed both by us and by any external service providers. In particular, we take into account the General Data Protection Regulation (GDPR) of the European Union (EU), which has been in force since May 25th, 2018, and the national TTDSG.
In principle, personal data is only collected on this website to the extent necessary for the purposes listed below. We give you information about what data is collected during your visit to the website and how it is used.
If you want to assert your rights (see below), please contact us as the person responsible for data processing on this website. If you want to contact us by email, please send it to email@example.com . Otherwise you will find our contact details in the impressum. When communicating in writing, please include the keyword "data protection" so that we can assign it internally.
If you have any general questions or concerns regarding data protection, please email our external data protection officer (DSB) Thomas Schneider (DSB Baden GmbH) at firstname.lastname@example.org . (Please include our company name in the subject line so that the external data protection officer can assign this better).
1. Legal bases
Personal data may only be "processed" if there is a valid legal basis for this. The processing is tied to a specific purpose. We process personal data that we can collect from you via this website on the basis of the following legal bases:
1.1 Weighing of interests in accordance with Article 6 (1) (f) GDPR
If tools are used that aim to make our website more customer-friendly, more efficient and more secure, this can take place within the framework of a weighing of interests, since the profile of user behavior is not created and the IP address of the visitor is only non-anonymized for a short time is saved.
We also process information that you provide to us for the purpose of a possible or existing business relationship (B2B relationship) as part of a weighing of interests.
1.2 Contractual relationship in accordance with Article 6 (1) (b) GDPR
If you, as a private individual, provide us with your personal information (e.g. as part of an application or product inquiry), we process this data as part of initiating a contract or to process the contractual relationship with you.
1.3 Fulfillment of a legal requirement in accordance with Article 6 (1) (c) GDPR
Insofar as we are subject to legal requirements, in order to comply with which we must process your personal data, this is done within the framework of this legal basis.
1.4 Consent in accordance with Article 6 (1) (a) GDPR
On rare occasions, we may wish to use the personal information you have provided us with for a purpose other than that intended. If this should happen and there is no other legal basis, we need your voluntary consent - which can be revoked at any time in the future - for which we will then ask you separately.
2. Website Access
When you visit our website, your IP address, which is technically required for communication, and other information are automatically transmitted. We log every access to our homepage and every possible retrieval of a file stored on the homepage.
name of retrieved file,
date and time of retrieval,
amount of data transferred,
Notification of successful retrieval and web browser.
For reasons of security and availability of the website and in accordance with § 12 TTDSG (malfunctions of telecommunications systems and misuse of telecommunications services), the IP address is also logged for a short period of maximum 7 days. This log is accessed for the above reasons, in particular to clarify security incidents and on the basis of existing legal bases for disclosure to law enforcement authorities for criminal prosecution. It is not possible for us to assign the data to a specific person. We do not merge this data with other data sources.
The basis for this processing is Art. 6 Paragraph 1 lit. f GDPR ("balancing of interests").
3. Information obligations according to Art. 13 GDPR
With the General Data Protection Regulation, we are obliged to provide appropriate information whenever personal data is collected directly from the data subject. As part of our website, we collect personal data from you and would therefore like to inform you accordingly. This survey is when we, for example
Collect your IP address for the technical provision of the website
use a web analysis tool that uses the IP address
Receive your entries in a contact module to communicate with us.
If you have provided us with personal data, we only use this to answer your inquiries and for technical administration. As an exception, the anonymized IP address can be used for statistical analysis. If the IP address is used further, this will be listed below.
Your personal data will only be passed on to third parties or otherwise transmitted if this is necessary for the purpose of contract processing, this is necessary for billing purposes, we are legally obliged to do so as part of order processing by subcontractors or you have given your prior consent. You have the right to revoke your consent at any time with effect for the future.
The deletion of the stored personal data takes place if you revoke your consent to storage, if their knowledge is no longer required to fulfill the purpose for which they were stored, i.e. the process has been completed and there are no legal deletion periods to the contrary, or if they are stored for other reasons legal reasons is inadmissible. In addition, your objection to processing can lead to the deletion of the stored data.
If the data cannot be deleted for technical reasons, we will make them anonymous so that a personal reference can no longer be established in the future.
All surveys and processing of this website are the responsibility of our company.
Additional detailed information can be found in the following points.
4. Contact form
When you contact us via our website, we collect various personal data from you using our forms. Some fields are mandatory, which we need for a meaningful processing of your request - other information is voluntary. Mandatory fields are marked with an asterisk. If all fields are seen as mandatory fields, this special marking is omitted.
The data you enter will be forwarded to our internal processing department by means of an unencrypted e-mail. Please note that you do not send us any confidential data or information for which encryption would be appropriate via this non-encrypted route.
We use this information to process your request. Insofar as it should be necessary for processing, we involve other bodies to process your request, taking into account the applicable legal regulations (e.g. in the context of order processing). If your details were transmitted for the purpose or as part of a business relationship with us, we will store your contact details in our internal systems. Your actual concern can also be kept in internal systems (e.g. ticket system, e-mail system) in order to enable the process of internal processing.
Since we assume an unlimited business cooperation, we only delete or anonymise this data on request (see your right to deletion later) or if the purpose for data storage no longer applies, provided that there are no legal retention periods or deletion periods to the contrary.
The legal basis for the processing of the information you have provided for the purpose of use is Article 6(1)(b) GDPR (business relationship with you) or Article 6(1)(b) GDPR in the context of a possible initiation or fulfillment of a business relationship with you or your employer. f GDPR (handling of interests to process your request).
5. Registration on our website
You can register on our website to use additional functions on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will refuse the registration.
For important changes, such as the scope of the offer or technically necessary changes, we use the e-mail address provided during registration to inform you in this way.
The processing of the data entered during registration is based on the initiation or fulfillment of a business relationship with you or the company that you represent as a natural person.
The data recorded during registration will be stored by us as long as you are registered on our website or a corresponding business relationship exists for this which requires this data and will then be deleted if there are no legal retention periods to the contrary.
We currently do not use a newsletter on our website.
Cookies are small text files that can be stored on your computer for various purposes. Cookies can have various functions. For example, some cookies enable the user to use the website more comfortably, others log user behavior or help to identify users when they visit a website again.
8. Use of web analysis programs
We do not use web analysis programs.
9. Map Service
We do not use a map service, but show a map in the form of an image. No personal data is transferred to other places.
10. Display of Videos
We have not directly integrated any tools for displaying videos on our website. However, you can use a link (see “special links” below) to jump to the website of the external service provider YouTube or Vimeo and watch the respective video there. Before doing so, please read our explanation below under "Links to other websites", because we have no influence on the behavior of the websites of external providers.
11. Links to other websites
Please note that when you call up a link, in some cases the third party (e.g. Facebook, Kununu, Xing, YouTube) analyzes how you got there. It can determine the starting address (our website), your IP address and other data. If you should also have your own account there and are logged in, the third party can assign this information to your account.
If you do not want this, please do not use the link on our website. Please note the data protection declarations of the third parties to whose website the link leads.
11.1. Dedicated links to Facebook, Instagram, YouTube and LinkedIn
11.2. Special link: YouTube or Vimeo
You have the opportunity to see video sequences. We have implemented this on our website so that you see an icon for this. By clicking on this image, you will be redirected to the YouTube website or Vimeo website via the link set up for this purpose. We have specially marked this with the text " View video on the YouTube page " or " View video on the Vimeo page ". Please note that when you click on the link/image, you are leaving our website.
12. Your rights – rights of the data subject under GDPR
Art. 12 – 23 GDPR regulate the rights of the data subject, ie your rights regarding the handling of your personal data. In relation to us, these are essentially:
Right to information at the latest at the time of collection in accordance with Art. 13 GDPR, which we comply with through this data protection declaration.
Right to information according to Art. 15 GDPR
Right to erasure according to Art. 17 GDPR
Right to restriction of processing according to Art. 18 GDPR
Right of objection according to Art. 21 GDPR
Where applicable: right to data portability according to Art. 20 GDPR
We will support you in accordance with the GDPR and other legal provisions so that you can assert your rights.
For inquiries regarding the exercise of your rights, please contact the office of our company indicated above. Please understand that, also in the interest of the rights of other people, we can only provide personal information if you can identify yourself appropriately.
You also have the right to lodge a complaint with a supervisory authority of your choice. The competent authority is usually the state data protection officer of the federal state in which our company is based - in our case this is the state data protection officer of Baden-Württemberg. A list of the data protection officers and their contact details can be found in the following link:
13. Security Notice
We endeavor to store your personal data by taking all technical and organizational measures in such a way that they are not accessible to third parties. In the case of communication via an unencrypted e-mail, we cannot guarantee complete data security, so we recommend an encrypted route or the postal service for confidential information.
14. SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from http:// to https:// and by the lock symbol in the browser line.
If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.