1. Contact details of the controller and data protection officer
73207 Plochingen, Germany
1.2 Data protection officer:
The data protection officer can be contacted via the address above or by email at email@example.com.
2. Purposes of the processing
2.1 Consent (Article 6 Paragraph 1a GDPR)
Processing of personal data for certain purposes (e.g. sending our newsletter by e-mail after clicking on the confirmation link which will be sent to you, forwarding to other third parties, production of images and videos with sound, publication of participation lists within the scope of events, data processing when using voluntary services, evaluation of data for marketing purposes) takes place if you have given us your consent.
2.2 Contractual or pre-contractual obligations (Article 6 Paragraph 1b GDPR)
We process personal data, the provision of which is necessary for the performance of a contract to which you are a party, or for the implementation of pre-contractual measures that take place in response to your request, e.g. via our website contact form. The purposes of the data processing depend on the specific contract (e.g. purchase contract, contract for work, delivery contract, employment contract) and may include, among other things, evaluations, advice as well as the implementation of further actions. If we offer events, we process your data for the planning, organisation and implementation of the events including event-related communication, for accommodation (e.g. in conference hotels), for the catering of participants and, if applicable, for the reimbursement of travel expenses. For digital events, we use online platforms such as Microsoft TEAMS, Moving Image, MeetYou or similar as described below.
We process personal data of employees for purposes of the employment relationship if this is necessary for the decision on the establishment of an employment relationship or, after the establishment of the employment relationship, for its implementation or termination or for the exercise or fulfilment of the rights and obligations resulting from a law. Within the framework of the balancing of interests, a transfer of data within the group takes place (a current overview of the group can be found here).
2.3 Legal regulations (Article 6 Paragraph 1c GDPR)
Due to legal obligations, data processing can take place for purposes connected to the prevention of fraud and money laundering, in order to fulfill monitoring and reporting obligations under tax laws and in order to provide information to the authorities as examples.
2.4 Consideration of interests (Article 6 Paragraph 1f GDPR)
In order to safeguard the legitimate interests of us or third parties, data processing is also carried out for certain purposes after prior weighing of interests, e.g. to secure house rights, safeguard legal claims, clarify criminal offences, determine default risks, optimise product development, supplier management and personnel recruitment, record and analyse the use of our newsletters, websites and apps to improve our online offering, optimise customer contact for advertising purposes such as contacting other companies by telephone, making image and sound recordings for advertising publication, displaying and publishing subscriber directories, sending advertising information by post (e.g. invitation to events, presentation of new products, etc.). This includes invitations to events, presentation of new products and services, optimised demand planning or to ensure data security.
3. Further data processing within the framework of the use of the websites
3.1 Contact form
We will only use the e-mail address recorded via our contact form for processing enquiries received through the contact form. Further details can be provided voluntarily, the processing of these data is carried out with your consent. After processing the enquiry, the collected data will be deleted.
3.2. Login for registered users
For investors, we offer the use of an internal area after registration on a login form. Registered users can call up investor information in the internal area. We use the data collected for the registration for the use of the internal area as well as the data accruing in the course of the use for the purpose of retrieving internal documents and for sending invitations to investor calls.
You have the option of subscribing to our newsletter via our website. To do this, we need your e-mail address and your declaration that you agree to receive the newsletter. In order to provide you with targeted information, we also collect and process information that you provide voluntarily, such as your name and address. As soon as you have registered for the newsletter, we will send you a confirmation e-mail with a link to confirm your registration. You can unsubscribe from the newsletter at any time by clicking on the unsubscribe link. We will then immediately delete your data in connection with the newsletter dispatch. To process the newsletter dispatch, we use the newsletter tool CleverReach from the provider CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany. The data you enter for the purpose of receiving the newsletter is stored on CleverReach's servers in Germany.CleverReach can be used, among other things, to organise and analyse the dispatch of newsletters. For example, we can see whether a newsletter message was opened and which links were clicked on. We can also see whether certain previously defined actions were carried out after opening / clicking (conversion rate). Basically, however, our evaluations only serve statistical purposes. If you do not want any analysis by CleverReach, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.
Detailed information on the functions of CleverReach can be found at the following link: www.cleverreach.com/en-de/newsletter-tool/newsletter-reporting/
The CleverReach data protection declaration can be found at: www.cleverreach.com/en-de/privacy-policy/.
3.4.1 Required cookies
We use necessary cookies to perform or facilitate the transmission of a message over an electronic communications network. In addition, we use necessary cookies to provide an information society service that you have specifically requested.
Required cookies in detail:
Name of the cookie: __cf_bm
Purpose: This cookie is used to distinguish between humans and bots.
Storage time: 30 minutes
Type of cookie: Necessary cookie
3.4.2 Statistics Cookies: Matomo
We use the open source software tool Matomo (formerly PIWIK) on our website to analyse the surfing behaviour of our users. This is an open source tool for web analysis. Matomo does not transmit data to servers that are outside of our control. Matomo does not collect session data without your consent. Your IP address is an anonymous identifier for us; we have no technical means of identifying you as a registered user with it. You remain anonymous as a user. We have set Matomo so that no tracking cookies are stored on users' devices. Through the aforementioned settings and anonymisation measures, we take into account the interest of users in the protection of their personal data in a special way. We understand this analysis as a component of our Internet service. We would like to use it to further improve our website and adapt it even more to the needs of our users. The following data is collected when individual pages of our website are called up:
- 2 bytes of the IP address of the calling system of the user
- The accessed website
- The website from which the user has accessed the accessed website (referrer)
- The subpages that are called from the called web page
- The time spent on the website
- The frequency of the website visit
The software runs exclusively on the servers of our website. Personal user data is only stored there. The data is not passed on to third parties. You can find more information about the privacy settings of the Matomo software under the following link: https://matomo.org/docs/privacy/.
You can generally object to the collection of data on the use of websites by activating the "Do Not Track" setting in your browser. We have configured Matomo to respect this setting. You can otherwise remove the checkbox tick set below. This will save a necessary "opt-out cookie" in your browser. Your future website visits will then no longer be collected by Matomo. Please note that this opt-out cookie will be deleted if you delete all cookies in your browser.
3.4.3 Statistics Cookies: Powermetrics
We use Powermetrics on our website to collect anonymous usage data for statistical purposes. Our goal is to understand general trends in our website traffic, not to track individual visitors. We do not profile individual visitors or share this data with anyone.
Powermetrics does not store any personally identifiable information. The information collected is anonymous and includes, but is not limited to, referring web pages, pages viewed on our website, length of visit, and device information (type, operating system, country, browser, and screen width). A full list of all data collected can be found here.
3.5 Anonymized or pseudonymized use options
In principle, you can visit our websites without providing us with personal data. Pseudonymous usage data will not be merged with the data of the bearer of the pseudonym. Pseudonymous usage profiles are not created.
3.6 Statistical evaluation of the visits to this Internet site
We collect, process and store the following data when this website or individual files of the website are accessed: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transferred, referer and UserAgent as well as notification of the success of the access (so-called web log).
3.7 Social networks / messengers: Instagram, LinkedIn, YouTube, Facebook, Induux
Instagram (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland): https://help.instagram.com/519522125107875?helpref=page_content
LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland): https://www.linkedin.com/legal/privacy-policy?_l=en_EN
YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland): https://policies.google.com/terms?hl=en
Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland): https://www.facebook.com/legal/terms
Induux (induux international gmbh, Gewerbestraße 36, 70565 Stuttgart, Germany): https://info.induux.com/datenschutz/
4. Recipient categories
In order to fulfil the intended purposes, access to the data required in each case may take place across departments and locations within our company as well as within our group of companies. Contractors used by us may also receive data for certain purposes, e.g. for IT services, document destruction and marketing. Other recipients of personal data may also include, for example, public authorities, credit and financial services institutions, lawyers and tax advisors or credit agencies.
5. Transfer to a third country or international organization
Data will only be transferred to third countries if, for example, this is necessary for the performance of a contract or is required by law, if you have given us your consent or if this is stipulated in a collective agreement or works agreement, e.g. as part of a group data transfer. Furthermore, in the context of the maintenance of IT components, it cannot be ruled out that an IT service provider from a third country (e.g. the USA) could, in rare cases, gain access to personal data. Otherwise, there is no transfer of personal data to third countries or to an international organisation.
6. Duration of the saving of data
Personal data is stored by us for the duration of the contractual relationship; in addition, statutory limitation periods are generally three years. After completion of an application selection procedure, we will generally delete your data within 3 months, provided that no employment with our company takes place. Various retention and documentation obligations apply, e.g. from the German Commercial Code (HGB) and the German Fiscal Code (AO), which last up to ten years.
7. Right of information, rectification, erasure, restriction, data portability
You have the right to information according to Art. 15 GDPR, the right to correction according to Art. 16 GDPR, the right to deletion according to Art. 17 GDPR, the right to restriction of processing according to Art. 18 GDPR and the right to data portability from Art. 20 GDPR. For this, please contact us.
8. Revocation of consent
You can revoke your consent at any time. You can also revoke the sending of our newsletter by clicking on the unsubscribe link in the newsletter. Please note that your revocation will only take effect in the future.
9. Existence of a right to complain
In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
10. Obligation to provide data
You are only required to provide the personal data that is necessary for the establishment, execution and termination of a contract or that we are legally obliged to collect. If you do not provide us with the necessary information and documents, we may not enter into or continue the business relationship requested by you.
11. Automated decision making in individual cases
As a matter of principle, we do not use fully automated decision-making for the establishment and implementation of the business relationship. Should we use such procedures in individual cases, we will inform you of this separately, insofar as this is required by law.
12. Categories of personal data
We process the following categories of personal data, for example: Personal master data, contract master data, contract performance and termination data, order data, data for the fulfilment of legal obligations, creditworthiness data, scoring/rating data, advertising and sales data, data about your use of our offered telemedia (e.g. time of calling up our websites, apps or newsletters, pages clicked on by us or entries) as well as other data comparable to the categories mentioned.
13. Data sources
We process data that we have received from you in the course of our business relationship as well as data permissibly transmitted to us by other third parties. On the other hand, we collect data from publicly accessible sources (e.g. trade and debtor directories, commercial registers, press).
Right of objection in an individual case
For reasons connected to your specific situation, you have the right to raise an objection at any time against the processing of personal data relating to you which takes place in accordance with Article 6 Paragraph 1e GDPR (data processing in the public interest) and Article 6 Paragraph 1f GDPR (data processing in accordance with a consideration of interests); this also applies to any profiling based on this provision. Should you raise an objection, we will no longer process your personal data, unless we can provide proof of mandatory protective reasons for the processing which outweigh your interests, rights and freedoms or if the processing is necessary to assert, exercise or defend legal claims.
Right to objection against the processing of data for purposes connected to direct advertising
We process your personal data in order to carry out direct advertising. You have the right to object to the processing of personal data relating to you for the purposes of such advertising at any time; this also applies to the profiling, should it be connected to such direct advertising. Should you object to the processing for purposes connected to direct advertising, we will no longer process your personal data for these purposes. The objection can be made informally and should be sent to the following address where possible:
73207 Plochingen, Germany