Privacy policy

The purpose of this privacy policy is to inform you about the nature, scope and purpose of the processing of personal data (hereinafter also referred to simply as “data”). Personal data refers to any data that relates to you personally, such as your name, address, email address or your user behaviour. This privacy policy applies to all data processing operations carried out by us, both in the context of our core business and in relation to the online media we maintain.

 

Processing of your data in connection with our company’s core business

If you are our customer or business partner, or if you are interested in our services, the nature, scope and purpose of the processing of your data are determined by the contractual or pre-contractual relationship between us. In this context, the data we process includes all data that is or has been provided by you for the purpose of utilising the contractual or pre-contractual services and that is required to process your enquiry or the contract concluded between us. Unless otherwise stated in the further provisions of this privacy policy, the processing of your data and its disclosure to third parties is limited to those data that are necessary and appropriate for responding to your enquiries and/or for fulfilling the contract concluded between you and us, for safeguarding our rights, and for complying with legal obligations. We will inform you of which data are required for this purpose prior to or during the data collection process. Where we use third-party providers to deliver our services, the privacy policies of the respective third-party providers apply.

Data concerned:

• Master data (e.g. names, addresses)
• Payment details (e.g. bank details, invoices)
• Contact details (e.g. email address, telephone number, postal address)
• Contract details (e.g. subject matter of the contract, contract term)

Data subjects: prospective customers, business partners and contractual partners

Purpose of processing: fulfilment of contractual obligations, communication and responding to enquiries, administrative and organisational procedures

Legal basis: performance of a contract and pre-contractual enquiries, Article 6(1)(b) of the GDPR; legal obligation, Article 6(1)(c) of the GDPR; legitimate interest, Article 6(1)(f) of the GDPR

 

Your rights under the GDPR

Under the GDPR, you have the rights listed below, which you may exercise at any time by contacting the data controller named in section 1 of this privacy policy:

• Right of access: You have the right to request information from us as to whether we process any of your personal data, and if so, which data.
• Right to rectification: You have the right to request the rectification of inaccurate data or the completion of incomplete data.
• Right to erasure: You have the right to request the erasure of your data.
• Right to restriction: In certain circumstances, you have the right to request that we process your data only to a limited extent.
• Right to data portability: You have the right to request that we provide your data to you or to another controller in a structured, commonly used and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. The competent authority is the one in your usual place of residence, your place of work or our registered office.

Widerrufsrecht

You have the right to withdraw your consent to the processing of your data at any time.

Right to object

You have the right to object at any time to the processing of your data on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR. If you wish to exercise your right to object, we ask you to state your reasons. We will then no longer process your personal data, unless we can demonstrate to you that there are compelling legitimate grounds for the data processing which override your interests and rights.

Notwithstanding the above, you have the right at any time to object to the processing of your personal data for the purposes of marketing and data analysis.

Please send your objection to the contact address of the data controller given above.

When do we delete your data?

We will delete your data when we no longer need it or when you ask us to do so. This means that – unless otherwise stated in the specific privacy notices within this privacy policy – we will delete your data,

• if the purpose of the data processing no longer applies and the legal basis specified in the relevant privacy notices therefore no longer exists, for example
  • upon termination of the contractual or membership relationship between us (Article 6(1)(a) of the GDPR) or
  • once our legitimate interest in the further processing or storage of your data no longer applies (Article 6(1)(f) of the GDPR),
• if you exercise your right of withdrawal and there is no other legal basis for processing within the meaning of Article 6(1)(b) to (f) of the GDPR,
• if you exercise your right to object and there are no compelling legitimate grounds for not deleting the data.

However, if we are required to retain (certain parts of) your data for other purposes – for example, because of tax retention periods (typically 6 years for business correspondence or 10 years for accounting documents) or because the data is necessary for the assertion, exercise or defence of legal claims arising from contractual relationships (up to four years), or if the data is required to protect the rights of another natural or legal person, we will only delete (that part of) your data once these periods have expired. Until these periods have expired, however, we will restrict the processing of this data to these purposes (fulfilment of retention obligations).

 

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are placed and stored on the device you are using. Cookies are primarily used to exchange information between the device you are using and our website. This includes, amongst other things, the language settings on a website, your login status or the point at which a video was viewed.

When you visit our website, two types of cookies are used:

• Temporary cookies (session cookies): These store a so-called session ID, which allows various requests from your browser to be associated with the same session. Session cookies are deleted when you log out or close your browser.
• Persistent cookies: Persistent cookies remain stored even after you close your browser. This enables our website to recognise your computer when you return to our website. These cookies store information such as language settings or login details. They can also be used to track and store your browsing behaviour. This data may be used for statistical, marketing and personalisation purposes.

In addition to the above classification, cookies can also be categorised according to their purpose:

• Essential cookies: These are cookies that are strictly necessary for the operation of our website, such as those used to store logins or shopping baskets for the duration of your session, or cookies set for security reasons.
• Statistical, marketing and personalisation cookies: These are cookies used for analytical purposes or to measure reach. Such ‘tracking’ cookies may, in particular, store information about search terms entered or the frequency of page views. In addition, an individual user’s browsing behaviour (e.g. viewing specific content, using certain functions, etc.) may also be stored in a user profile. Such profiles are used to display content to users that corresponds to their potential interests. Where we use services that store cookies on your device for statistical, marketing and personalisation purposes, we will inform you of this separately in the following sections of our privacy policy or when seeking your consent.

Data concerned:

• Usage data (e.g. access times, pages visited)
• Communication data (e.g. information about the device used, IP address).

Data subjects: Users of our online services

Purpose of processing: Displaying our website, ensuring the operation of our website, improving our online offering, communication and marketing

Legal basis:
Legitimate interest, Article 6(1)(f) of the GDPR
Unless we obtain your consent to the use of cookies, we process your data on the basis of our legitimate interest in improving the quality and user-friendliness of our website, in particular its content and functions. You can object to the use of cookies set by us in the context of our legitimate interest via your browser’s security settings. There, you can choose whether to accept no cookies at all, accept them only when prompted, or set your browser to delete cookies every time you close it. If cookies are disabled for our website, you may no longer be able to use all of the website’s functions to their full extent.

Safety measures

We also implement state-of-the-art technical and organisational security measures to comply with data protection legislation and to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties.

Updates and changes to this privacy policy

This privacy policy is currently in force and is dated October 2024. It may become necessary to amend this privacy policy due to changes in legal or regulatory requirements.