Thank you very much for your interest in our website. The management at OTTO HAALBOOM Internationale Spedition e.K. strongly values data protection. The OTTO HAALBOOM Internationale Spedition e.K. website can generally be used without providing personal data. If the data subject wishes to use the special services offered on our company website, it may be necessary to process personal data. If the processing of personal data is necessary and no legal basis exists for processing, we generally obtain the consent of the data subject.
Personal data, for example the name, address, e-mail address or telephone number of a data subject is always processed in compliance with the General Data Protection Regulation and in compliance with the national data protection laws to which OTTO HAALBOOM Internationale Spedition e.K. is subject. In this data protection declaration our company seeks to provide the general public with information about the type, scope, and purpose of the personal data we collect, use, and process. This data protection declaration further provides the data subject with information about their rights.
OTTO HAALBOOM Internationale Spedition e.K. as the controller has implemented numerous technical and organisational measures to ensure the best possible protection of the personal data processed on this website. Nevertheless, online data transmissions can always have security flaws, so that absolute protection cannot be ensured. For this reason, all data subjects are free to transmit personal data to us using alternative means, such as the telephone.
1. Definitions
The data protection declaration of OTTO HAALBOOM Internationale Spedition e.K. is based on the terminology used by the European body issuing directives and regulations when adopting the General Data Protection Regulation (GDPR). Our data protection declaration is intended to be easy to read and comprehend for both the public as well as our customers and business partners. To ensure this we would like to first explain the terminology used.
This data protection declaration uses the following terms, among others:
a) personal data
Personal data refers to any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
b) data subject
Data subject refers to an identified or identifiable natural person whose personal data is processed by the controller.
c) Processing
Processing refers to any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation, or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
d) Restriction of processing
Restriction of processing refers to the marking of stored personal data with the aim of limiting their processing in the future.
e) profiling
Profiling refers to any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location, or movements.
f) pseudonymisation
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
g) controller
Data controller refers to the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the data controller or the specific criteria for its nomination may be provided by Union or Member State law.
h) processor
Data processor refers to a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
i) recipient
Recipient refers to a natural or legal person, public authority, agency, or another body to which the personal data are disclosed, whether a third party or not. However, public authorities, which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law, shall not be regarded as recipients.
j) third party
Third party refers to a natural or legal person, public authority, agency, or body other than the data subject, data controller, data processor, and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
k) consent
Consent of the data subject refers to any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
2. Controller name and address
In accordance with the GDPR, as well as other directives applicable in the member states of the European Union and other guidelines pertaining to data protection, the data controller is:
OTTO HAALBOOM Internationale Spedition e.K.
Hans-Duncker-Straße 9
21035 Hamburg
Germany
Phone: +49 (40) 7810795-0
E-mail: info@speditionhaalboom.de
Website: www.haalboom.de
3. Data protection officer
The data controller’s data protection officer is available at the following e-mail address:
datenschutzbeauftragter@speditionhaalboom.de
The data subject may direct any inquiries and suggestions regarding privacy to our data protection officer.
4. Cookies
The website of OTTO HAALBOOM Internationale Spedition e.K. uses cookies. Cookies are text files which are placed and stored on a computer system through a browser.
Many websites and servers use cookies. Many cookies have a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string, through which web pages and servers can be allocated to the precise web browser, in which the cookie was stored. This makes it possible to distinguish the visited web pages and servers as well as the data subject’s individual browser from other web browsers, which contain other cookies. A specific web browser can be recognised and identified by means of the unique cookie ID. By using cookies, OTTO HAALBOOM Internationale Spedition e.K. can provide the users of this website with more user-friendly services, which would not be possible without using cookies.
Using cookies, the information and offers on our website can be optimised in the interest of the users. As already pointed out, cookies allow us to recognise the users of our website. The purpose of this recognition is to simplify the use of our website for the users. The user of a website that uses cookies, for example, does not have to re-enter his or her access data during each visit, because this is done by the website and the cookie placed on the user’s computer. Another example are cookies for the shopping basket in online shops. An online shop uses cookies to remember the products a customer added to the virtual basket.
The data subject can prevent our website from installing cookies at any time by configuring the respective settings of the web browser being used, thus permanently objecting to cookies. Furthermore, cookies, which were already placed, can be deleted at any time via a web browser or other software. This is possible with all standard web browsers. If the data subject deactivates the placement of cookies in the web browser being used, the full range of all functions on our website may not be available.
5. Collection of general data and information
The OTTO HAALBOOM Internationale Spedition e.K. website collects a series of general data and information each time a data subject or automated system accesses the website. These general data and information are stored in the log files of the server. Storage may pertain to (1) browser types and version used, (2) the accessing operating system used, (3) the originating website from which a system accesses our website (so-called referrer), (4) the sub-pages, which direct the accessing system to our website, (5) the date and time of access to our website, (6) an Internet protocol address (IP address), (7) the Internet Service Provider of the accessing system, and (8) other similar data and information that serve the aversion of threats in case of attacks on our information technology systems. OTTO HAALBOOM Internationale Spedition e.K. does not draw conclusions about the data subject when using the general data and information. Rather, this information is required (1) to properly deliver the contents of our website, (2) to optimise the contents of our website as well as the advertising for it, (3) to ensure the permanent functionality of our information technology systems and the technology of our website, as well as to (4) provide law enforcement authorities with the necessary information in the event of a cyber attack. On the one hand, OTTO HAALBOOM Internationale Spedition e.K. anonymously collects the data and information for the purpose of statistical analysis and with the objective of increasing data protection and data security in our company, in order to ultimately ensure an ideal level of protection for the personal data we process. The anonymous data from the server log files are stored separately from all personal data indicated by a data subject.
6. Newsletter subscription
The OTTO HAALBOOM Internationale Spedition e.K. provides users the option to subscribe to our company’s newsletter. The personal data transmitted to the controller when subscribing to the newsletter is evident from the input screens. OTTO HAALBOOM Internationale Spedition e.K. regularly informs customers and business partners about company offers in a newsletter. The data subject can generally only receive our company’s newsletter if (1) the data subject has a valid e-mail address and (2) the data subject subscribes to the newsletter. As part of the double opt-in process, for legal reasons a confirmation e-mail is sent to the original e-mail address provided by the data subject. This confirmation e-mail serves to verify the owner of the e-mail address as the data subject authorised receiving the newsletter.
When subscribing the newsletter we further store the IP address of the data subject provided by the internet service provider (ISP) for the computer system used at the time it was subscribed and the time it was subscribed. Collecting this data is necessary to later track the (possible) misuse of the e-mail address of a data subject and therefore serves as a legal safeguard for the controller. The personal data collected when subscribing the newsletter is used solely to send our newsletter. Newsletter subscriber can further be notified by e-mail if required for the newsletter service or related registration, as in the case of changes to the newsletter service or in the event of technical changes to the newsletter service. The personal data collected in the context of the newsletter service is not transmitted to third parties. The data subject may unsubscribe from the newsletter at any time. The consent to the storage of personal data granted by the data subject for the purpose of sending the newsletter may be withdrawn at any time. Each newsletter includes a link to unsubscribe the newsletter. The newsletter can further be subscribed on the controller’s website at any time or the controller informed through other means.
7. Newsletter tracking
The OTTO HAALBOOM Internationale Spedition e.K. newsletter contains so-called counter pixels. A counter pixel is a mini graphic embedded in e-mails sent in HTML format to allow log file recording and log file analysis. This allows the statistical analysis of the success or failure of online marketing campaigns. The embedded counter pixel allows OTTO HAALBOOM Internationale Spedition e.K. to determine if and when a data subject opened an e-mail and which link in the e-mail the data subject clicked on.
The personal data collected via counter pixels in the newsletters are stored and analysed by the controller to optimise sending of newsletters and to improve the contents of future newsletters to the interests of the data subject. This personal data is not shared with third parties. Data subjects may at any time to withdraw their specific consent in this respect granted through the double opt-in process. After withdrawing consent the controller will erase this personal data. OTTO HAALBOOM Internationale Spedition e.K. automatically considers unsubscribing the newsletter as withdrawing consent.
8. Contact option via the website
Due to legal provisions, the OTTO HAALBOOM Internationale Spedition e.K. website contains information, which enables swift electronic contact as well as direct communication with our company, which also includes a general address and electronic mail (e-mail) address. If a data subject contacts the controller via e-mail or the contact form, the personal data submitted by the data subject are automatically stored. Such personal data submitted by the data subject to the controller on a voluntary basis are stored for the purpose of processing or contacting the data subject. These personal data are not transmitted to third parties.
9. Subscribing to comments on the website blog
Third parties can generally receive notifications to comments on the OTTO HAALBOOM Internationale Spedition e.K. blog. A commentator can specifically be notified to replies to his comments on a specific blog post. If a data subject uses the option to be notified of comments, the controller automatically sends a confirmation e-mail to verify through double opt-in the owner of the e-mail address specified requested this. The option to be notified of comments can be cancelled at any time.
10. Routine erasure and blocking of personal data
The data processor processes and stores the data subject’s personal data only for the time period needed to achieve the purpose of storage or if this is prescribed by the European legislative bodies, or any other legislator of laws or regulations to which the processor is subject.
In the event that the purpose of storage no longer applies, or a limitation period prescribed by the European legislative bodies or any other competent legislator, the personal data are routinely blocked or erased in accordance with the legal provisions.
11. Rights of the data subject
a) Right to confirmation
Every data subject has the right granted by the European legislative bodies to obtain from the data controller confirmation whether the personal data relating to him or her were processed. If a data subject wishes to exercise the right to confirmation, he or she may contact our data protection officer or any other staff member employed by the data controller at any time.
b) Right of access
The European legislative bodies grant every data subject the right to obtain from the data controller information regarding the data stored relating to him or her and to receive a copy of this information free of charge. Furthermore, the European legislative bodies grant the data subject the right to access the following information:
- the purposes of processing
- the categories of personal data being processed
- the recipients or categories of recipients, to whom the personal data were disclosed, in particular in the case of recipients in third countries or in the case of international organisations,
- if possible, the duration for which the personal data are intended to be stored; if this is not possible, the criteria for the determination of this duration,
- the existence of a right to correction or deletion of the personal data pertaining to the data subject or to a restriction of processing by the controller or a right of objection to this processing,
- the existence of the right to lodge a complaint with a supervisory authority;
- if the personal data were not collected from the data subject: All available information on the origin of the data,
- the existence of an automated decision making including profiling pursuant to Article 22(1) and (4) of the GDPR and – at least in these cases – conclusive information on the logistics involved as well as the consequences and the pursued objectives of such a processing for the data subject. Furthermore, the data subject has a right to obtain information regarding the transmission of personal data to a third country or an international organisation. If this is the case, the data subject also has the right to receive information on adequate guarantees in connection with the transmission. If a data subject wishes to exercise the right to information, he or she may contact our data protection officer or any other staff member employed by the data controller at any time.
c) Right to rectification
The European legislative bodies grant every data subject the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject further has the right to have incomplete personal data completed, including by means of providing a supplementary statement. If a data subject wishes to exercise the right to correction, he or she may contact our data protection officer or any other staff member employed by the data controller at any time.
d) Right to erasure (right to be forgotten)
The European legislative bodies grant every data subject the right to obtain from the data controller the erasure of personal data concerning him or her without undue delay and the data controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies and if processing is not required:
- The personal data were collected for purposes or otherwise processed, for which it is no longer required.
- The data subject withdraws his/her consent, on which the processing was based pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR and there is no other legal basis for said processing.
- The data subject files an objection to the processing pursuant to Article 21(1) of the GDPR and there are no paramount legitimate reasons for said processing or the data subject files an objection to the processing pursuant to Article 21(2) of the GDPR.
- The personal data were processed illegally.
- The deletion of personal data is required to meet a legal obligation according to EU law or the law of member states, which the responsible person is subject to.
- The personal data was collected with regard to the offered services of the information society pursuant to Article 8(1) of the GDPR.
If one of the above-mentioned grounds applies and a data subject wishes to exercise the right to erasing the data stored by OTTO HAALBOOM Internationale Spedition e.K., he or she may contact our data protection officer or any other staff member employed by the data controller at any time. The data protection officer of OTTO HAALBOOM Internationale Spedition e.K. or another staff member will immediately respond to the erasure request.
If OTTO HAALBOOM Internationale Spedition e.K. published the personal data and is obligated to erase the data in accordance with Article 17(1) of the GDPR, then OTTO HAALBOOM Internationale Spedition e.K. shall take reasonable steps under consideration of available technology and the cost of implementation, including technical measures, to inform other controllers of the personal data about the data subject’s request to erase any links to, or copies or replications of those personal data by such processors, if processing is not necessary. The data protection officer of OTTO HAALBOOM Internationale Spedition e.K. will immediately respond as appropriate on a case-by-case basis.
e) Right to restriction of processing
According to the European legislative bodies, every data subject has the right to request the restriction of processing from the controller if one of the following requirements is given:
- The data subject disputes the accuracy of the personal data and does so for a period, which enables the controller to review the accuracy of the personal data.
- The processing is illegal, the data subject objects to the erasure of the personal data and instead demands the restricted use of the personal data.
- The controller no longer requires the personal data for the purpose of processing however, the data subject requires the data, to assert, exercise or defend legal claims.
- The data subject has filed an objection to the processing pursuant to Article 21(1) of the GDPR and it is yet to be determined if the controller’s legitimate reasons outweigh those of the data subject.
If one of the above-mentioned prerequisites applies and a data subject wishes to exercise the right to limiting the personal data by OTTO HAALBOOM Internationale Spedition e.K., he or she may contact any staff member employed by the data controller at any time. The OTTO HAALBOOM Internationale Spedition e.K. staff member will immediately initiate the limitation of processing.
f) Right to data portability
According to the European legislative bodies, every data subject has the right to receive all personal data pertaining to the data subject, which was made available to a controller by the data subject, in a structured, conventional, and machine-readable format. Furthermore, the data subject has the right to transmit this data to another controller without being hindered by the controller to whom the personal data was made available to, provided that processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and processing is conducted with the help of automated processes, provided that processing is not required for the performance of a task, which is in the public interest or takes place in exercising public authority, which was transferred to the controller.
Further, pursuant to Article 20(1) of the GDPR, the data subject, in exercising his or her right to data portability, also has the right to achieve that the personal data is directly transferred from one data controller to another controller, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons.
To exercise the right to data portability, the data subject may contact any employee of OTTO HAALBOOM Internationale Spedition e.K..
g) Right to object
According to the European legislative bodies, every data subject has the right to object to the processing of personal data concerning the data subject at any time, on grounds relating to his or her particular situation based on Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.
In the event of an objection, OTTO HAALBOOM Internationale Spedition e.K. shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
If OTTO HAALBOOM Internationale Spedition e.K. processes personal data for the purpose of direct advertising, the data subject has the right to file an objection to the processing of personal data for the purpose of such advertising. This also applies to profiling, provided that it is linked to such direct advertising. If the data subject objects to the processing to OTTO HAALBOOM Internationale Spedition e.K. for purposes of direct advertising, OTTO HAALBOOM Internationale Spedition e.K. will no longer process the personal data for these purposes.
Furthermore, the data subject has the right, for reasons resulting from his or her special situation, to object to the processing of personal data pertaining to the data subject, which takes place at OTTO HAALBOOM Internationale Spedition e.K. for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) of the GDPR, unless such a processing is required to fulfil a task, which is in the public interest.
To exercise the right to object, the data subject may directly contact any employee of OTTO HAALBOOM Internationale Spedition e.K.. Irrespective of Directive 2002/58/EC, the data subject has the option, in connection with the use of information society services, of exercising his or her right to object via automated procedures that use technical specifications.
h) Automated individual decision-making, including profiling
According to the European legislative bodies, every data subject whose personal data are processed has the right not to be subject to a decision based solely on automated processing — including profiling —, which takes effect in view of the data subject or significantly comprises the data subject in a similar manner, provided that the decision (1) is not required for the conclusion or fulfilment of a contract between the data subject and the data controller, or is permissible (2) based on the legal guidelines of the European Union or member states, to whose laws the data controller is subject and these legal guidelines contain appropriate measures of maintaining the rights and freedom, as well as the legitimate interest of the data subject, or (3) with explicit consent of the data subject.
If the decision (1) is required for the conclusion or fulfilment of the contract between the data subject and the data controller, or (2) the data subject provides explicit consent, OTTO HAALBOOM Internationale Spedition e.K. will take appropriate measures to protect the rights and freedoms as well as the legitimate interests of the data subject, which at least include the right of obtaining the intervention of a person on the part of the controller, explanation of one’s own point of view and contesting the decision.
If a data subject wishes to exercise his or her rights relating to automated decisions, he or she may contact any staff member employed by the processor at any time.
i) Right to revoke data privacy consent
The European legislative bodies grant every data subject whose personal data are being processed the right to revoke from the controller without undue delay his or her consent to the processing of his or her personal data.
If a data subject wishes to exercise his or her right relating to revoking consent, he or she may contact any staff member employed by the processor at any time.
12. Data protection and applications
The controller collects and processes the personal data of applicants for application process purposes. Data may also be processed electronically. This particularly applies if an applicant submits the respective application documents to the controller electronically, for example by e-mail or using the web form on the website. If the controller enters into an employment contract with an applicant, the transmitted data will be saved for the employment purposes in compliance with statutory provisions. If the controller does not enter into an employment contract with the applicant, the application documents will automatically be erased two months after communicating the rejection unless required for other legitimate interests of the controller. Legitimate interest in this context also includes, for example, the burden of proof for proceedings under the General Act on Equal Treatment (AGG).
13. Data protection regulations for the use of Facebook
The controller has installed Facebook components on this website. Facebook is a social networking site. A social networking site is a social meeting place on the Internet, or online community, which typically enables users to communicate and interact with each other virtually. A social networking site can serve as a platform for the exchange of opinions or experiences or may allow an online community to provide personal or business-related information. Facebook enables the users of social networks to create private profiles, to upload pictures, and to network via friend requests.
Facebook is a service provided by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. For data subject residing outside of the USA or Canada, the data processor is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When opening one of the individual pages of this website operated by the controller that contains a Facebook component (Facebook Plugin), the respective Facebook component automatically prompts the web browser on the data subject’s IT system to download a playback of the respective Facebook component from Facebook. For a full list of all Facebook plugins please visit https://developers.facebook.com/docs/plugins/. During this technical process, Facebook obtains information about the specific subpage the data subject accessed on our website.
If the data subject is also logged into Facebook, Facebook recognises each time a data subject accesses our website and for the entire duration of the visit to our website, which specific subpage of our website the data subject is visiting. This information is collected by the Facebook component and connected with the data subject’s respective Facebook account. If a data subject, for example, uses a Facebook button embedded in our website, such as the “Like” button, or if the data subject submits a comment, Facebook connects this information with the personal Facebook user account of the data subject and stores these personal data.
Via the Facebook component, Facebook is always notified when the data subject visited our website, if the data subject is also logged into Facebook when visiting our website; this occurs irrespective of whether the data subject clicks on a Facebook component or not. If the data subject does not wish these data to be transmitted to Facebook, transmission thereof can be prevented by logging out of the Facebook account before visiting our website.
The privacy policy published by Facebook at https://www.facebook.com/about/privacy/ provides information about the collection, processing and use of personal data by Facebook. Further, the privacy policy explains which options Facebook offers for the purpose of data protection. Furthermore, a variety of applications is available, which make it possible to prevent the transmission of data to Facebook. The data subject can use these applications to prevent data from being transmitted to Facebook.
14. Data protection regulations for the use of Google Analytics (with anonymisation)
The controller has installed the component Google Analytics (with anonymisation) on this website. Google Analytics is a web analysis service. Web analysis is the collection, compilation and analysis of data and behaviour of visitors to websites. Among other things, web analysis service collects data about the website which redirected the data subject to a website (so-called referrer), the subpages of the website viewed and how often a subpage was viewed and for how long. A web analysis is primarily used to optimise a website and for internet advertising cost-benefit analysis purposes.
The Google Analytics component is provided by Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The controller uses the “_gat._anonymizeIp” function for web analysis through Google Analytics. With this function, Google anonymises the IP address of the data subject’s internet connection when accessing our website from a member state of the European Union or from other signatories to the Treaty on the European Economic Area.
The purpose of the Google Analytics component is to analyse the number of visitors to our website. Among other things, Google uses the data and information collected to analyse the use of our website, to generate online reports about activities on our website, and to provide other services related to the use of our website.
Google Analytics installs a cookie on the IT system of the data subject. Cookies were explained above. Installing the cookie allows Google to analyse the use of our website. When opening a page on the controller’s website with a Google Analytics component installed, the Google Analytics component automatically causes the web browser on the IT system of the data subject to transmit data to Google for the purpose of online analysis. During this technical process, Google receives personal data such as the IP address of the data subject, which among other things allows Google to determine the origin of the visitor and track clicks and subsequently calculate payments.
The cookies collect personal information such as the access time, location where the access originated, and how often the data subject visits our website. When visiting our website this personal data including IP address of the data subject’s internet connection are transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties. The data subject can prevent our website from installing cookies as described above at any time by configuring the respective settings of the web browser being used, thus permanently objecting to cookies. This configuration of the web browser being used would also prevent Google installing a cookie on the data subject’s IT system. A cookie previously installed by Google Analytics can at any time be erased via the web browser or other software.
The data subject further has the option to object to and prevent Google Analytics collecting and processing data related to the use of this website. To do so, the data subject must download and install a browser add-on available at https://tools.google.com/dlpage/gaoptout. This browser add-on uses JavaScript to inform Google Analytics that data and information about visits to websites must not be transmitted to Google Analytics. Google considers the installation of the browser add-on as an objection. If the data subject’s IT system is later erased, formatted or reinstalled, the data subject must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or disabled by the data subject or another person under his authority, the browser add-on can be reinstalled or activated again.
Set an opt-out cookie: Please click here to set the cookie and deactivate Google Analytics.
For more information and the applicable Google privacy policy please visit https://policies.google.com/privacy?hl=en&gl=uk and https://www.google.com/analytics/terms/gb.html. For a detailed description of Google Analytics please visit https://www.google.com/analytics/.
15. Data protection regulations for the use of Google Remarketing
The controller has installed Google Remarketing services on this website. Google Remarketing is a function of Google AdWords which allows a company to display advertising to internet users who have previously visited the company’s website. The integration of Google Remarketing therefore allows a company to create user-specific advertising, thus show the user advertising specific to their interests. Google Remarketing is a service provided by Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The purpose of Google Remarketing is to show advertising specific to interests. Google Remarketing allows showing advertisements tailored to the specific interests of internet users on other websites through the Google advertising network. Google Remarketing installs a cookie on the IT system of the data subject. Cookies were explained above. The cookie allows Google to recognise a visitor to our website when later opening websites which are part of the Google advertising network. When visiting a website which uses the Google Remarketing service, the internet browser of the data subject automatically identifies with Google. This technical process provides Google with personal data such as the IP address or browsing behaviour of the user, which Google among other things uses to display advertisements specific to interests.
The cookie stores personal information such websites the data subject has visited. When visiting our website this personal data including IP address of the data subject’s internet connection are therefore transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected using this technical process with third parties.
The data subject can prevent our website from installing cookies as described above at any time by configuring the respective settings of the web browser being used, thus permanently objecting to cookies. This configuration of the web browser being used would also prevent Google installing a cookie on the data subject’s IT system. A cookie previously installed by Google Analytics can at any time be erased via the web browser or other software.
The data subject further has the option to object to interest-based advertising from Google. To do so, the data subject must visit www.google.de/settings/ads from each internet browser used and change the settings. For more information and the applicable Google privacy policy, please visit https://policies.google.com/privacy.
16. Data protection regulations on the use of Google AdWords
The controller has installed Google AdWords on this website. Google AdWords is an internet advertising service which allows advertisers to display advertisements among Google search results as well as on the Google advertising network. Google AdWords allows an advertiser to define specific keywords which are used to only display advertisements among Google search results when the user enters search terms related to the keyword. The Google advertising network uses an automated algorithm based on the previously defined keywords to show advertisements on websites related to the topic.
Google AdWords is a service provided by Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to advertise our website by displaying interest-based advertisements on third party websites and among search results in the Google search engine, and to display advertisements for other companies on our website.
If a data subject visits our website through a Google advertisements, Google installs a so-called conversion cookie on the IT system of the data subject. Cookies were explained above. A conversion cookie expires after thirty days and is not used to identify the data subject. If the cookies is still valid, the conversion cookie enables tracking whether specific subpages, for example the cart in an online shop, on our website was opened. The conversion cookie allows both us and Google to track if a data subject who visited our website through an AdWords advertisement generated revenue, i.e. completed or cancelled a purchase.
Google uses the data and information collected from the use of the conversion cookie to generate statistics about traffic on our website. We in turn use these traffic statistics to determine the total number of users who were redirected to our website through AdWords advertisements, thus to determine the success or failure of the respective AdWords advertisement and optimise our future AdWords advertising. Google does not provide our company nor other Google AdWords advertisers with information which could be used to identify the data subject.
The conversion cookie stores personal information, for example websites the data subject has visited. When visiting our website this personal data including IP address of the data subject’s internet connection are therefore transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected using this technical process with third parties.
The data subject can prevent our website from installing cookies as described above at any time by configuring the respective settings of the web browser being used, thus permanently objecting to cookies. This configuration of the web browser being used would also prevent Google installing a conversion cookie on the data subject’s IT system. A cookie previously installed by Google AdWords can at any time be erased via the web browser or other software.
The data subject further has the option to object to interest-based advertising from Google. To do so, the data subject must visit www.google.de/settings/ads from each internet browser used and change the settings.
For more information and the applicable Google privacy policy, please visit https://policies.google.com/privacy.
17. Data protection regulations on the use of LinkedIn
The data controller has integrated LinkedIn Corporation components into this website. LinkedIn is a web-based social networking site, which enables the connection of users with existing professional contacts, as well as the development of new professional contacts. Over 400 million people registered use LinkedIn in more than 200 countries. This makes LinkedIn currently the largest platform for business contacts and one of the most visited websites in the world. LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. For privacy matters outside the United States, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.
Each time you visit our website, which is equipped with a LinkedIn component (LinkedIn plug-in), this component causes the browser used by the data subject to download a corresponding image of the LinkedIn component. More information about the LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins. As part of this technical process, LinkedIn obtains information as to which specific subpage of our website is visited by the data subject.
If the data subject is logged in to LinkedIn at the same time, LinkedIn recognises which specific subpage of our website the data subject is visiting each time the data subject accesses our website and for the entire duration of that person’s stay on our website. This information is collected by the LinkedIn component and assigned by LinkedIn to the respective LinkedIn account of the data subject. If the data subject clicks on an integrated LinkedIn button on our website, LinkedIn assigns this information to the personal LinkedIn user account of the data subject and saves this personal data. Via the LinkedIn component, LinkedIn will always receive information that the data subject has visited our website if the data subject is logged in to LinkedIn at the same time as accessing our website, regardless of whether the person concerned clicks on the LinkedIn component or not. If the data subject does not wish to transmit this information to LinkedIn in this way, he or she can prevent the transmission by logging out of his or her LinkedIn account before accessing our website.
LinkedIn offers the ability to unsubscribe from email messages, SMS messages, targeted ads, and manage ad settings at https://www.linkedin.com/psettings/guest-controls. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame which can set cookies. Such cookies can be rejected at https://www.linkedin.com/legal/cookie-policy. LinkedIn’s current privacy policy can be found at https://www.linkedin.com/legal/privacy-policy. Die Cookie-Richtlinie von LinkedIn ist unter https://www.linkedin.com/legal/cookie-policy abrufbar.
18. Data protection regulations on the use of Twitter
The data controller has installed components of Twitter on this website. Twitter is a publicly accessible multilingual microblogging service on which users can publish and disseminate “tweets”, i.e. short messages limited to 280 characters. These short messages can be accessed by anyone, including people who are not registered with Twitter. However, the tweets are also displayed to the “followers” of the respective user. Followers are other Twitter users who follow a user’s tweets. Twitter also enables a broad audience to be addressed via hashtags, links or retweets. Twitter is operated by Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. When opening one of the individual pages of this website operated by the controller that contains a Twitter component (Twitter Plugin), the respective Twitter component automatically prompts the web browser on the data subject’s IT system to download a playback of the respective Twitter component from Twitter. Further information on the Twitter buttons can be found at https://about.twitter.com/de/resources/buttons. During this technical process, Twitter obtains information about the specific subpage the data subject accessed on our website. The purpose of integrating the Twitter component is to enable our users to distribute the content of this website, to make this website known in the digital world and to increase our visitor numbers.
If the data subject is also logged into Twitter, Twitter recognises each time a data subject accesses our website and for the entire duration of the visit to our website, which specific subpage of our website the data subject is visiting. This information is collected by the Twitter component and connected with the data subject’s respective Twitter account. If the data subject clicks on one of the Twitter buttons integrated on our website, the data and information transmitted with it will be assigned to the personal Twitter user account of the data subject and stored and processed by Twitter.
Via the Twitter component, Twitter will always receive information that the data subject has visited our website if the data subject is logged in to Twitter at the same time as accessing our website, regardless of whether the person concerned clicks on the Twitter component or not. If the data subject does not wish to transmit this information to Twitter in this way, he or she can prevent the transmission by logging out of his or her Twitter account before accessing our website.
The current Twitter privacy policy is available at https://twitter.com/privacy?lang=en.
19. Data protection regulations for the use of Xing
The data controller has installed components of Xing on this website. Xing is a web-based social networking site, which enables the connection of users with existing professional contacts, as well as the development of new professional contacts. The individual users can create a personal profile on Xing. Companies are able to create corporate profiles, for example, and to post job vacancies on Xing.
XING AG is operated by, Dammtorstraße 29- 30, 20354 Hamburg, Germany.
When opening one of the individual pages of this website operated by the controller that contains a Xing component (Xing Plugin), the respective Xing component automatically prompts the web browser on the data subject’s IT system to download a playback of the respective Xing component from Xing. For more information about the Xing Plugins, please visit https://dev.xing.com/plugins. Within the scope of this technical procedure, Xing receives information about which specific sub-page of our website is visited by the data subject. If the data subject is also logged into Xing, Xing recognises each time a data subject accesses our website and for the entire duration of the visit to our website, which specific subpage of our website the data subject is visiting. This information is collected by the Xing component and connected with the data subject’s respective Xing account. If a data subject, for example, uses a Xing button embedded in our website, such as the “Share” button, Xing connects this information with the data subject’s personal Xing user account and stores these personal data.
Via the Xing component, Xing always obtains the information that the data subject visited our website, if the data subject is also logged into Xing when visiting our website; this occurs irrespective of whether the data subject clicks on a Xing component or not. If the data subject does not wish these data to be transmitted to Xing, transmission thereof can be prevented by logging out of the Xing account before visiting our website.
The privacy policy published by Xing at https://www.xing.com/privacy provides information about the collection, processing and use of personal data by Xing. Furthermore, Xing has published privacy information regarding the XING-Share button at https://www.xing.com/app/share?op=data_protection.
20. Legal basis for processing
Article 6 (I) (a) of the GDPR serves our company as a legal basis for processing operations, for which we obtain consent for a specific processing purpose. If the processing of personal data is required for the fulfilment of a contract, whose contracting party is the data subject, as is the case, for example, for processing operations required for the delivery of services or return services, Article 6 (I) (b) of the GDPR serves as the basis for processing. The same applies to processing operations required for the implementation of pre-contractual measures, for instance in cases of enquiries regarding our products or services. If our company is subject to a legal obligation requiring a processing of personal data, for instance for the fulfilment of fiscal obligations, said processing is based on Article 6 (I) (c) of the GDPR. In rare cases, the processing of personal data may become necessary to protect the vital interests of the data subject or another natural person. For example, this may be the case if a visitor is injured on our premises and his or her name, age, insurance information, or other vital information would need to be shared with a doctor, a hospital, or other third parties. Then, processing would be based on Article 6 (I) (d) of the GDPR. Finally, processing operations could be based on Article 6 (I) (f) of the GDPR. Processing operations, which are not covered by any of the aforementioned legal bases, are based on this legal basis if processing is required to protect a legitimate interest of our company or third party, provided that the interests, basic rights and fundamental freedom of the data subject are not predominant. We are entitled to these types of processing operations in particular because they are specifically mentioned by the European legislative bodies. The legislative bodies assume legitimate interest if the data subject is a customer of the data controller (Recital 47, Sentence 2 of the GDPR).
21. Legitimate interest in the processing pursued by the controller or a third party
Based on the processing of personal data pursuant to Article 6 (I) (f) of the GDPR, our legitimate interest is the operation of our business to benefit all of our employees and shareholders.
22. The duration for which the personal data are stored
The criterion for the storage period of personal data is the respective retention period stipulated by law. After the expiration of this retention period, the data are routinely erased if they are no longer needed for the fulfillment of the contract or contract conclusion.
23. Legal or contractual provisions regarding the provision of personal data; necessity for the conclusion of a contract; obligation of the data subject to provide the personal data; possible consequences of failure to provide the data
We hereby point out that the provision of personal data is in part prescribed by law (e.g. tax law) or may emerge from contractual requirements (e.g. information about the contractual partner). In the context of concluding a contract, it may be necessary that a data subject provides us with personal data, which we are then required to process. For example, the data subject is required to provide us with personal data if our company enters a contract with him or her. Failure to provide the personal data may make it impossible to conclude the contract with the data subject. Before the data subject provides personal data, the data subject shall contact one of our staff members. Our staff member will inform the data subject on a case-by-case basis, whether the provision of the personal data is legally or contractually required and whether there exists a requirement to provide the personal data, as well as the consequences that result from the failure to provide the personal data.
24. Existence of automatic decision-making
As a responsible company, we do not engage in automated decision-making or profiling.
This privacy policy was created using the privacy policy Generator of DGD, the German association for data protection, which is the Niederbayern-based external data protection officer, in cooperation with the data protection attorneys at Kanzlei WILDE BEUGER SOLMECKE | Rechtsanwälte.