The following gives a simple overview of what happens to your personal information when you visit our website.
1. General Information
Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.
Notice concerning the party responsible for this website
The party responsible for processing data on this website is:
68789 St. Leon-Rot
Tel.: +49 (0) 6227 65504 0
The responsible party is the natural or legal person, who alone or jointly with others decides on the purposes and means of processing personal data (names, eMail adresses, etc.).
Contact details of the data protection officer
Creditreform Compliance Services GmbH
Tel.: +49 (0) 6227 65504 0
Revocation of your consent to the processing of your data
Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
Right to file complaints with regulatory authorities
If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. The competent regulatory authority for matters related to data protection legislation is the data protection officer of the German state in which our company is headquartered.
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Postfach 10 29 32
Right to data portability
You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
Information, blocking, deletion
As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. If you have further questions on the topic of personal data, you can contact us (responsible party) or our data protection officer.
Opposition to promotional emails
We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received.
2. Data processing
Legal basis of the data processing
To be able to offer you our website and the services associated with it, we process personal data based on the following legal principles:
• Consent (Art. 6 para. 1 lit. a) DSGVO)
• for the performance of contracts (Art. 6 para. 1 lit. b) DSGVO
• based on a balancing of interests (Art. 6 para. 1 lit. f) DSGVO)
• to fulfil a legal obligation (Art. 6 para. 1 lit. c) DSGVO)
We will refer to the relevant terms in connection with the respective processing so that you can classify on which basis we process personal data.
If personal data is processed based on your consent, you have the right to revoke this consent at any time with effect for the future.
If we process data based on a balancing of interests, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 DSGVO.
When you visit our website, personal data is processed to be able to display the contents of the website on your terminal device.
For the pages to be displayed in your browser, the IP address of the terminal device you use must be processed. Additional information about the browser of your terminal device is also processed.
We are obliged by data protection law to also guarantee the confidentiality and integrity of the personal data processed with our IT systems.
For this purpose and out of this interest, the following data is recorded based on a weighing of interests:
• IP address in case of faulty access to Internet pages "Error Log" (for a maximum of 7 days)
• Operating system of the calling computer
• Browser version of the calling computer
• Name of the retrieved file
• Date and time of retrieval
• data volume transferred
• Referring URL
The IP address will be deleted after 7 days at the latest from all systems used in connection with the operation of this website. We can then no longer establish a personal reference from the remaining data.
The data is also used to determine and correct errors on the Internet pages.
We offer a contact form on our website which you can use to request information about our products or services or to contact us in general. We have marked the data that is absolutely necessary for you to answer an inquiry as mandatory fields. Any other data fields are voluntary.
We need this information to process your inquiry, to address you correctly and to send you an answer. Data processing is carried out for concrete inquiries for the fulfilment of a contract or the initiation of a contract. In the case of general inquiries, processing is based on a weighing of interests.
Inquiries received via the contact form on our website are processed electronically by us to answer your inquiry. In this context, other persons or departments and possibly third parties may also become aware of the contents of the form which you have sent.
The transmission of the form data via the Internet is carried out via encrypted connections.
You can also subscribe to an e-mail newsletter on our website. In addition to the voluntary information in the respective form, we only process your e-mail address for this purpose. However, this is also mandatory to send you the newsletter.
You can unsubscribe from the newsletter at any time. Alternatively, you will find a link to unsubscribe in every newsletter e-mail.
To be able to analyse the popularity of our newsletter mailings and to optimize them, we log when e-mails are opened and links are clicked. This usage analysis is based on a weighing of interests. You can object to this processing by unsubscribing from the newsletter.
When sending the newsletter, our service provider ("Chimpify") may also use service providers outside the European Union. In this case, the service provider shall ensure that the conditions for an adequate level of data protection within the meaning of Art. 44 et seq. DSGVO exist.
Cookies are used on our Internet pages. Cookies are small pieces of text information that are stored in your terminal device via your browser. The cookies are necessary to enable certain functions of our internet pages.
We use both session cookies, which are automatically deleted by your browser immediately after the end of your visit to the website.
In the area of web analysis, however, we also use so-called persistent cookies, which are not automatically deleted at the end of your visit to our website.
You have the option of preventing the setting of cookies by making the appropriate settings in your browser. However, we would like to point out that the use of our Internet pages may then only be possible to a limited extent. No programs or other applications are installed or started on your computer by cookies.
On this website the web analysis tool "Stetic" is used. The purpose of its use is the "needs-based design" of this website, which is based on a balancing of interests. The web analysis also enables us to detect and correct errors on the website, e.g. due to incorrect links. Stetic uses so-called "cookies". These are text files that are stored on your computer and which enable an analysis of your use of the website.
Google Web Fonts
We use so-called Google Webfonts on our Internet pages. These fonts are loaded from Google servers, which serve to improve the design of the website. The data processing is based on a balancing of interests, whereby our interest lies in an attractive design of the website.
We do not know what kind of data are collected and how they are used by the respective social network. It is very likely that at least the following data are collected even if you are not signed in:
• IP address
• time when the website was accessed
• URL of the website that uses the plugin
• location-based information (on mobile devices)
• device-related information (e.g. the operating system used and browser information)
• websites which were visited previously for advertising purposes
• data of uninvolved third parties (e.g. e-mail addresses (in case of recommendations)).
Unless otherwise specified, it can be assumed that the following technologies are used for data processing:
• cookies (e.g. permanent storage of your login data), this can also happen via third party providers such as advertising customers
• log files (storage of the cookie data on the service’s servers)
• analysis scripts (e.g. tracking of the clicking behavior on a website)
• forwarding of posted links
• local data storage (e.g. permanent storage of pictures)
Data protection provisions about the application and use of Instagram
On this website, the controller has integrated components of the service Instagram. Instagram is a service that may be qualified as an audiovisual platform, which allows users to share photos and videos, as well as disseminate such data in other social networks.
The operating company of the services offered by Instagram is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which an Instagram component (Instagram button) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to the download of a display of the corresponding Instagram component of Instagram. During the course of this technical procedure, Instagram becomes aware of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in at the same time on Instagram, Instagram detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site—which specific sub-page of our Internet page was visited by the data subject. This information is collected through the Instagram component and is associated with the respective Instagram account of the data subject. If the data subject clicks on one of the Instagram buttons integrated on our website, then Instagram matches this information with the personal Instagram user account of the data subject and stores the personal data.
Instagram receives information via the Instagram component that the data subject has visited our website provided that the data subject is logged in at Instagram at the time of the call to our website. This occurs regardless of whether the person clicks on the Instagram button or not. If such a transmission of information to Instagram is not desirable for the data subject, then he or she can prevent this by logging off from their Instagram account before a call-up to our website is made.
Further information and the applicable data protection provisions of Instagram may be retrieved under www.help.instagram.com and www.instagram.com/about/legal/privacy.
Data protection provisions about the application and use of LinkedIn
The controller has integrated components of the LinkedIn Corporation on this website. LinkedIn is a web-based social network that enables users with existing business contacts to connect and to make new business contacts. Over 400 million registered people in more than 200 countries use LinkedIn. Thus, LinkedIn is currently the largest platform for business contacts and one of the most visited websites in the world.
With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a LinkedIn component (LinkedIn plug-in) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to the download of a display of the corresponding LinkedIn component of LinkedIn. Further information about the LinkedIn plug-in may be accessed under https://developer.linkedin.com/plugins. During the course of this technical procedure, LinkedIn gains knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in at the same time on LinkedIn, LinkedIn detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site—which specific sub-page of our Internet page was visited by the data subject. This information is collected through the LinkedIn component and associated with the respective LinkedIn account of the data subject. If the data subject clicks on one of the LinkedIn buttons integrated on our website, then LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores the personal data.
LinkedIn receives information via the LinkedIn component that the data subject has visited our website, provided that the data subject is logged in at LinkedIn at the time of the call-up to our website. This occurs regardless of whether the person clicks on the LinkedIn button or not. If such a transmission of information to LinkedIn is not desirable for the data subject, then he or she may prevent this by logging off from their LinkedIn account before a call-up to our website is made.
Data protection provisions about the application and use of YouTube
On this website, the controller has integrated components of YouTube. YouTube is an Internet video portal that enables video publishers to set video clips and other users free of charge, which also provides free viewing, review and commenting on them. YouTube allows you to publish all kinds of videos, so you can access both full movies and TV broadcasts, as well as music videos, trailers, and videos made by users via the Internet portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, UNITED STATES. The YouTube, LLC is a subsidiary of the Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a YouTube component (YouTube video) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding YouTube component. Further information about YouTube may be obtained under https://www.youtube.com/yt/about/en/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in on YouTube, YouTube recognizes with each call-up to a sub-page that contains a YouTube video, which specific sub-page of our Internet site was visited by the data subject. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.
YouTube and Google will receive information through the YouTube component that the data subject has visited our website, if the data subject at the time of the call to our website is logged in on YouTube; this occurs regardless of whether the person clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their own YouTube account before a call-up to our website is made.
YouTube’s data protection provisions, available at www.google.com/intl/en/policies/privacy, provide information about the collection, processing and use of personal data by YouTube and Google.
Using Social Plugins with Shariff Solution
We use share buttons of social networks on our website with the purpose to make our offers better known. The legal basis is Art. 6 I lit. f GDPR. Our commercial purposes are a legitimate interest within the meaning of the GDPR.
The protection of your personal data is very important to us. For this reason, we do not use share buttons of the social networks on our website as plugins. We use the c't project "Shariff" on our website. "Shariff" uses only an HTML link to integrate the share buttons as a graphic in our website, so that when you visit our website, your Internet browser is still not connected to the server of the social network. Only after actively clicking on the share buttons of the respective social network will a new browser window open with the website of the respective social network. You leave our website and can in the new browser window (possibly after entering your login data as a member) with the local plugins of the respective provider to establish a direct connection.
The share buttons are indicated by icons or small stylized symbols.
More information about "Shariff" can be found at http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html
We integrate the following social networks on our website with "Shariff":
Facebook plugins with Shariff solution
We use the social plugins from social network Facebook, Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA.
We do not know and cannot influence whether and, if so, which personal data Facebook collects from you.
LinkedIn plugins with Shariff solution
We use the social plugins of the online LinkedIn service, LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
We do not know if and which personal data LinkedIn collects from you.
XING plug-ins with Shariff solution
We use on our website social plugins of the social network XING, Xing SE, Dammtorstraße 30, 20354 Hamburg, Germany.
We do not know if and which personal data XING collects from you.
TWITTER plug-ins with Shariff solution
We use on our website social plugins of the social network Twitter, Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA.
Purposes of processing personal data
We process the data for the operation of our website and the fulfilment of contractual obligations towards our customers or the protection of our legitimate interests.
In case of inquiries from you outside an active customer relationship, we process the data for sales and advertising. You can object to the use of your personal data for advertising purposes at any time.
If you provide us with data voluntarily, e.g. in forms, and this data is not required for the fulfilment of our contractual obligations, we process this data with the justified assumption that the processing and use of this data is in your interest.
Recipient/passing on of data
Data that you provide to us will not be passed on to third parties. In particular, your data will not be passed on to third parties for their advertising purposes.
However, we may use service providers for the operation of this website or further products or services from us. Here a service provider may get knowledge of personal data. We select our service providers carefully - especially concerning data protection and data security - and take all measures required by data protection law for permissible data processing.
Data processing outside the European Union
Insofar as personal data is processed outside the European Union, you can see this in the previous explanations.
Data processing outside the EU takes place with regard to the sending of e-mail. Here our service provider "Chimpify" uses the provider "Sendgrid". The necessary measures have been taken to ensure an adequate level of data protection. For this purpose, the so-called EU standard contract clauses are applied, which can be found on the Internet pages of the EU Commission.