Privacy policy

Name and contact details of the controller
Responsible for the collection and use of personal data within the meaning of data protection law is

PROTEKTORWERK Florenz Maisch GmbH & Co. KG
Viktoriastrasse 58
D-76571 Gaggenau
Tel. (0 72 25) 977-0
Fax (0 72 25) 977-111
e-mail: info@protektor.com
Internet: www.protektor.com

Managing Directors: Dr. Christof Maisch (Chairman of the Management Board), Marius Buschmann, Dr. Andreas Metzger, Dr. Jörg Böllhoff

Sales ID no. DE 144 007 542
Register court: Mannheim HRA 520033

Further information about our company can be found in the imprint of our homepage www.protektor.com.

Contact details of the data protection officer of the controller
You can contact our data protection officer as follows:

Ms. Iris Armbruster
PROTEKTORWERK Florenz Maisch GmbH & Co. KG
Viktoriastraße 58
D-76571 Gaggenau
Phone +49 (0)7225 / 977 – 202
E-mail address: datenschutz@protektor.de

Legal basis for the processing of personal data
In general, the following applies to the processing of personal data by us

• Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 (a) of the EU General Data Protection Regulation (GDPR) as the legal basis for the processing of personal data.
• When processing personal data that is required to fulfill a contract with you, Art. 6 para. 1 letter b) GDPR as the legal basis. This also applies if the processing is necessary to carry out pre-contractual measures.
• Insofar as the processing of personal data is necessary to fulfill a legal obligation to which we are subject, Art. 6 para. 1 letter c) GDPR as the legal basis.
• In the event that your vital interests or those of another natural person require the processing of personal data, Art. 6 para. 1 letter d) GDPR as the legal basis.
• If processing is necessary for the purposes of the legitimate interests pursued by us or by a third party and your interests, fundamental rights and freedoms do not override these interests, Art. 6 para. 1 letter f) GDPR as the legal basis for processing.

Data erasure and storage duration
We generally erase or block personal data as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which we as the controller are subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

In concrete terms, this means that if we process personal data on the basis of consent to data processing (Art. 6 (1) (a) General Data Protection Regulation, GDPR for short), processing will end when you withdraw your consent, unless there is another legal basis for processing the data, which is the case if we are still entitled to process your data for the purpose of fulfilling the contract at the time of withdrawal or if data processing is necessary to safeguard our legitimate interests (see below in each case).

If, in exceptional cases, we process the data on the basis of our legitimate interests (Art. 6 (1) (f) GDPR) in the context of a prior assessment, we will store them until the legitimate interest no longer exists, the assessment comes to a different conclusion or you have effectively objected in accordance with Art. 21 GDPR (see the visually highlighted “Information on special right of objection” under C.).

If we process the data to fulfill the contract, we store the data until the contract has been finally fulfilled and processed and no more claims can be asserted from the contract, i.e. until the statute of limitations has expired. The general limitation period according to § 195 BGB is three (3) years. However, certain claims, such as claims for damages, only become time-barred after 30 years (see Section 197 BGB). If there is justified reason to assume that this is relevant in individual cases, we will store the personal data for this period. The aforementioned limitation periods commence at the end of the year (i.e. on December 31) in which the claim arose and the creditor becomes aware of the circumstances giving rise to the claim and the identity of the debtor or should have become aware of them without gross negligence.

We would like to point out that we are also subject to statutory retention obligations for tax and accounting reasons. These require us to retain certain data, which may include personal data, for a period of six (6) to ten (10) years as proof of our accounting. These retention periods take precedence over the aforementioned deletion obligations. The retention periods also begin at the end of the relevant year, i.e. on December 31.

Source of the personal data
The personal data processed by us originate primarily from the data subjects themselves, for example by them

• As a user of our website, you transmit information such as your IP address to our web server via the web browser and your end device (e.g. a PC, smartphone, tablet or notebook),
• interested parties can request information material or an offer from us,
• as customers place an order with us or conclude a contract with us,
• request information material, press releases, statements, etc. as a representative of the press,

as suppliers supply us with goods or provide us with services and the like as agreed.

Only in very exceptional cases can the personal data processed by us also originate from third parties, for example if a person is acting on behalf of a third party.

General categories, purposes and legal bases for the processing of personal data
We process the following categories of personal data:

• Users of our website,
• Interested parties,
• Representative of the press,
• customers, as well as
• Suppliers.

Depending on the category of data involved, we process personal data for the following purposes and on the basis of the respective legal basis of the General Data Protection Regulation (GDPR):

User data: We collect and process non-personal data from users of our website. It is not possible for us to assign the data to specific persons. The IP address is only processed anonymously. If, in exceptional cases, personal data is affected, we process it to protect our legitimate interests on the basis of Art. 6(1)(f) GDPR. Our legitimate interests in this sense are our interest in the security and integrity of our website and the data on our web server (in particular fault and error detection, as well as tracking unauthorized access), as well as marketing interests and interests in statistical surveys (to improve our website and our services and offers). As part of a balancing of interests, we have come to the conclusion that the data processing is necessary to safeguard the aforementioned legitimate interests and that your interests or fundamental rights and freedoms, which require the protection of personal data, do not prevail.

Data of interested parties/data of press representatives: Insofar as we process data of parties interested in our services or of press representatives, this only takes place if you enter this data in an input field or by e-mail for the purpose of the request and send it to us. These entries are voluntary for you. We then process this data exclusively for processing your request to us. The processing of this data voluntarily transmitted to us for the purpose of providing information about our services is carried out as pre-contractual processing in accordance with Art. 6 para. 1 letter b) GDPR and/or on the basis of the consent given by you through transmission in accordance with Art. 6 (1) lit. a) GDPR.

Customer data: We process the data of our customers for the purpose of contract processing in accordance with Art. 6 (1) lit. b) GDPR and/or on the basis of consent granted pursuant to Art. 6 (1) letter a) GDPR. This also applies to processing operations that are necessary for the implementation of pre-contractual measures (e.g. in the context of the preparation and negotiation of offers).

Supplier data/business partner data: We process the data of our suppliers and business partners for the purpose of contract processing in accordance with Art. 6(1)(f) GDPR. b) GDPR and/or on the basis of consent granted pursuant to Art. 6 (1) letter a) GDPR. This also applies to processing operations that are necessary for the implementation of pre-contractual measures (e.g. in the context of the preparation and negotiation of offers).

Recipients or categories of recipients of personal data Your personal data
will only be passed on or otherwise transmitted to third parties if this is necessary for the purpose of contract processing (e.g. to process an order) or for billing purposes (e.g. to process a payment transaction when purchasing goods or services), if there is a legitimate interest in the disclosure/transmission and your interests or fundamental rights and freedoms do not outweigh this or if you have given your prior effective consent.

• Categories of recipients can be
• Service providers (publishers, printers, etc.)
• Shipping service providers, suppliers
• Payment service providers, banks
• Tax consultant

It is possible to subscribe to a free newsletter on our website or by sending us a request. When you register for the newsletter, the data from the input screen is transmitted to us. These are

• The e-mail address (mandatory field), and
• Your first and last name and your country of origin (optional).

When registering for the newsletter, the following data is also collected (opt-in verification):

• Your IP address and
• Date and time of your registration.

This serves to prevent misuse of the services or your e-mail address and to comply with our legal obligation to prove that an opt-in, i.e. express consent to receive the newsletter, has actually been given by the e-mail address.

Your consent is obtained for the processing of the data as part of the registration process and reference is made to this privacy policy.

Registration for our newsletter takes place in a so-called double opt-in procedure. This means that you will receive an e-mail after registration asking you to confirm your registration. This confirmation is necessary so that no one can log in with other people’s e-mail addresses. Clicking on the link with which you confirm the registration leads to a data collection of your IP address and the exact time (date and time) of the click. This data processing serves to comply with our legal obligation to prove that an opt-in, i.e. express consent to receive the newsletter, has actually been given by the e-mail address.

Purpose of data processing: The purpose of collecting and processing the user’s e-mail address is to deliver the newsletter. We use the e-mail address for advertising purposes. The collection of the IP address and time when clicking on the confirmation link in the double opt-in email serves to comply with our legal obligation to obtain express consent.
The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used. A possible storage beyond the unsubscription of the newsletter for up to three years serves the purpose of proving a previously given consent and a possible defense against claims.

Legal basis for data processing: The legal basis for the processing of data after registration for the newsletter by the user is your consent in accordance with Art. 6 para. 1 letter a) GDPR.
The legal basis for storing the IP address and time when you click on the confirmation link in the double opt-in email and for possible further storage for up to three years after you unsubscribe from the newsletter is our legitimate interest pursuant to Art. 6 para. 1 letter f) GDPR. The legitimate interest in this case is to be able to prove that you have previously given your consent and to defend against claims derived from this.

Duration of storage: The data is deleted as soon as it is no longer required for the purpose for which it was collected. Your e-mail address will therefore be stored for as long as the subscription to the newsletter is active.

We may store the unsubscribed e-mail addresses together with the data collected when confirming the consent to receive the newsletter for up to three years on the basis of our legitimate interests before we delete them in order to be able to prove that consent was previously given. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time.

The other personal data collected during the registration process is generally deleted after a period of seven days.

Possibility of objection and removal: The subscription to the newsletter can be canceled at any time free of charge and in any form. For this purpose, you will find a corresponding link in every newsletter.
This also enables you to withdraw your consent to the storage of personal data collected during the registration process.
Please also note the additional options and information regarding our mailing service provider Marketo in the following paragraphs.

The newsletter is sent via the mailing service provider “Marketo”. We have concluded a contract with the company Marketo EMEA Ltd. Ireland, 4-6 Riverwalk,, Citywest Business Campus, D24 DCW0, Ireland. We have also concluded an order processing contract with Marketo Ireland, in which Marketo provides us with suitable guarantees that enable us to process the data on behalf of Marketo.

The email addresses of our newsletter recipients, as well as their other data described in this newsletter notice, are stored on Marketo’s servers. Marketo uses this information to send and analyze the newsletter on our behalf. Furthermore, Marketo may, according to its own information, use this data to optimize or improve its own services, e.g. for the technical optimization of the dispatch and presentation of the newsletter or for economic purposes in order to determine from which countries the recipients come. However, Marketo does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.

All information on data processing and Marketo’s policies can be found here: https://www.marketo.com/company/legal/

Order form

You can send us your sample order using the sample order form available in the app. If you use this option, the data entered in the input mask will be transmitted to us and stored.

The following information is requested as part of the order form:

• Salutation
• First name,
• Surname,
• Company,
• Industry,
• E-mail address,
• Street,
• House number,
• ZIP CODE,
• Location

This is mandatory information that we require in order to process your order.

The following data is also stored at the time the message is sent:

• The IP address of the user,
• Date and time of dispatch

As part of the sending process, you will be informed again about data processing and referred to this privacy policy.

Purposes of data processing: The processing of personal data from the input mask serves us to process and fulfill your order. The other personal data processed during the sending process is used to prevent misuse of the form and to ensure the security of our information technology systems. If you use the option to save your order data for the next order, the purpose of further data processing is also to make it easier for you to place your next order.

Legal basis for data processing: The legal basis for the processing of data is the conclusion of a contract with you and thus Art. 6 para. 1 letter b) GDPR (implementation of contractual measures). The legal basis for the continued storage of your order data for the next order is the consent you have given (Article 6(1)(f) GDPR). a) GDPR). The legal basis for the processing of other personal data processed during the sending process is our legitimate interest in data processing in accordance with Art. 6 para. 1 letter f) GDPR, which in this case is to prevent misuse of the order form and to ensure the security of our information technology systems.

Duration of storage: The data will be deleted as soon as the contract between you and us has been fully concluded and completed and the limitation period for all claims arising from this contract has expired. If you use the option to save your data for the next order, we will save your data accordingly until you inform us that you no longer wish us to do so or you revoke your consent to the further storage of your order data. You can do this informally at any time. The data may be subject to a retention obligation under commercial or tax law, which then takes precedence. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

Objection and removal option: If you wish to avoid this data processing, please refrain from ordering a sample via this method. You can also order samples via our other contact channels.

You can contact us via various channels if you wish. You will also find an e-mail address, telephone number and fax number on the website. Even if you send us an e-mail, call us or send us a fax, we will inevitably process your personal data. This is because at least the personal data transmitted by e-mail, fax or telephone will be stored by us or our systems.

Data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation.

Purposes of data processing: The processing of personal data transmitted by e-mail, fax or telephone serves us to process your contact and your request. We absolutely need your e-mail address, your fax number or your telephone number in order to be able to reply at all. This also constitutes the legitimate interest in processing the data.

Legal basis for data processing: The legal basis for the processing of data is Art. 6 para. 1 lit. a GDPR if consent has been given, which can be seen in the establishment of contact. 1 letter a) GDPR and otherwise our legitimate interest in data processing pursuant to Art. 6 para. 1 letter f) GDPR.
If the contact or your request is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 letter b) GDPR (implementation of pre-contractual measures).

Duration of storage: The data is deleted as soon as it is no longer required for the purpose for which it was collected.

For personal data sent by e-mail, this is the case when the respective conversation with you has ended and we have then waited a waiting period of up to 3 months to see whether we may need to revisit your request or the details of the communication. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

Fax data is stored separately from print data in the fax machine’s memory. After printing the fax, the occupied memory space is released again so that the next fax can be received and stored there. Parts of the fax can remain temporarily in the device’s memory after printing until they are overwritten by the next fax received. As a rule, this leads to automatic deletion of the data after 1-2 weeks. If it is a computer fax, we will receive your fax as an e-mail and the information on e-mails will apply accordingly. In the case of an incoming telephone call or an outgoing call to us, your telephone number or your name/company name stored with your telephone provider as well as the date and time of the call will be stored in our telephone system in a so-called ring buffer, which overwrites the oldest data with new data. As a rule, this leads to automatic deletion of the data in the telephone system after approx. 3-4 months. The communication may be subject to a retention obligation under commercial or tax law, which then takes precedence (see the explanations above on “Data erasure and storage period”). Right of objection and removal: You have the option at any time to revoke your consent to the processing of personal data or to object to further data processing on the grounds of legitimate interest (see the reference to the special right of objection under C. of this data protection information). In such a case, the conversation cannot be continued. You can withdraw your consent or object to further data processing by sending us an informal message (e.g. by e-mail). All personal data stored in the course of contacting us will be deleted in this case.

We only collect and use users’ personal data when they use our website insofar as this is necessary to provide a functional website and our content and services. The collection and use of personal data of our users generally only takes place with the consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons and/or the processing of the data is permitted by law.

Provision of the website and creation of log files
For technical reasons, our system automatically collects data and information each time the website is accessed. These are stored in the server’s log files. These are:

• Date and time of access,
• URL (address) of the referring website (referrer),
• Web pages that are accessed by the user’s system via our website,
• Screen resolution of the user,
• Retrieved file(s) and message about the success of the retrieval,
• Amount of data sent,
• the user’s Internet service provider,
• Browser, browser type and browser version, browser engine and engine version,
• Operating system, operating system version, operating system type, and
• the anonymized IP address and the Internet service provider of the user.

This data is processed separately from other data. This data is not processed together with other personal data of the user. It is not possible for us to assign this data to a specific person.

Web analysis by our provider Allinkl: Our website is hosted by the provider ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, D-02742 Friedersdorf. This automatically offers a web analysis of the use of our website without us having any influence on it. The data collected automatically for the provision of the website is processed here by the provider into anonymized statistics and made available to us. However, we do not use these analyses.

Purposes of data processing: The temporary processing of data by the system is necessary to enable the content of our website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. Storage in log files takes place to ensure the functionality of the website. In addition, we use the data to optimize our offer and the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.

Legal basis for data processing: The temporary storage of data and log files is carried out on the legal basis of Art. 6(1)(f) GDPR. Our overriding legitimate interest in this data processing lies in the aforementioned purposes.

Duration of storage: The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the calling client.

Objection and removal option: The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user. However, the user can stop using the website at any time and thus prevent the further collection of the aforementioned data.

Contact forms are available on our website which can be used to contact us electronically about various areas and topics. If you use this option, the data entered in the input mask will be transmitted to us and stored. The subsequent data processing always relates to the respective topic that is linked to the contact form.

You can use our general contact form to send us a message at any time. The information requested can be found in detail on the web form. Mandatory fields are clearly marked with an asterisk. The data that we request as mandatory fields is required in order to process your data entry.

You can also request article master data from us using the web form. The information requested there can be found in detail on the web form. Mandatory fields are clearly marked with an asterisk. The data that we request as mandatory fields is required in order to process your data entry.

You can also request our price lists at any time via the web form on the website. The information requested there can be found in detail on the web form. Mandatory fields are clearly marked with an asterisk. The data that we request as mandatory fields is required in order to process your data entry.

The following data is also stored at the time the message is sent:

• The IP address of the user,
• Date and time of dispatch

The data defined as mandatory fields are those that we absolutely need to answer your request or process your contact.

As part of the sending process, you will be informed again about data processing and referred to this privacy policy.

Alternatively, you can contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored.

No data will be passed on to third parties in this context. The data is used exclusively for processing the conversation.

Purposes of data processing: The processing of the personal data from the input mask serves us to process the establishment of contact and to process your request. If contact is made, this also constitutes the legitimate interest in processing the data. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

Legal basis for data processing: The legal basis for data processing is our legitimate interest in data processing pursuant to Art. 6 para. 1 letter f) GDPR. The legitimate interest lies in the fact that we have to process your data in order to be able to process your request or contact you at all and, if necessary, to be able to answer it. If the contact or your request is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 letter b) GDPR (implementation of pre-contractual measures). The legal basis for the processing of other personal data processed during the sending process is our legitimate interest in data processing in accordance with Art. 6 para. 1 letter f) GDPR, which in this case is to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage: The data is deleted as soon as it is no longer required for the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The communication may be subject to a retention obligation under commercial or tax law, which then takes precedence (see the explanations above on “Data erasure and storage period”). The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

Right of objection and removal: You have the option to object to further data processing at any time on the grounds of legitimate interest (see reference to special right of objection under C. of this data protection information). In such a case, the conversation cannot be continued. The objection to further data processing is made possible by informal notification to us (e.g. by e-mail). All personal data stored in the course of contacting us will be deleted in this case.

A contact form is used on our website, which can be used to contact us electronically for the purpose of application. If you use this option, the data entered in the input mask will be transmitted to us and stored.

The application procedure requires applicants to provide us with their application data. The necessary applicant data are marked in our contact forms and can otherwise be found in the job descriptions. Basically, this includes personal details, postal and contact addresses and the documents belonging to the application, such as cover letter, CV and certificates. Applicants can also voluntarily provide us with additional information. By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the type and scope set out in this privacy policy.

Insofar as special categories of personal data within the meaning of Art. 9 Para. 1 GDPR, their processing is additionally carried out in accordance with Art. 9 para. 2 letter b) GDPR (e.g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants, their processing is additionally carried out in accordance with Art. 9 para. 2 letter a) GDPR (e.g. health data if this is necessary for the exercise of the profession).

The data is transmitted to us in encrypted form in accordance with the state of the art.

If you would like to send us an online application, you can do so via our special web form, which you can find here: www.protektor.de/de/jobsprotektor/bewerbungsformular/.

The information requested there can be found in detail on the web form. Mandatory fields are clearly marked with an asterisk. The data that we request as mandatory fields is required in order to process your data entry.

The following data is also stored at the time the message is sent:

• The IP address of the user,
• Date and time of dispatch.

This data will not be passed on to third parties. The data will be used exclusively for processing the application.

Purposes of data processing: We process the applicant data only for the purpose and within the scope of the application process in accordance with the legal requirements. Applicant data is processed to fulfill our (pre-)contractual obligations as part of the application process

The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

Legal basis for data processing: The legal basis for the processing of data is Art. 6 para. 1 lit. a GDPR if consent has been given. 1 letter b) GDPR (implementation of pre-contractual measures) and otherwise our legitimate interest in data processing pursuant to Art. 6 para. 1 letter f) GDPR.

Duration of storage: The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is the case when the application phase has ended, the vacant position has been filled and there is no other opportunity to make you any other offers in response to your application. The deletion takes place, subject to a justified revocation by the applicant, after a period of six months so that we can answer any follow-up questions about the application and meet our obligations to provide evidence under the Equal Treatment Act. Invoices for any travel expense reimbursements are archived in accordance with tax regulations. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest. In the event of a successful application, the data provided by applicants may be processed by us for the purposes of the employment relationship.

Right of objection and removal: You have the option to object to further data processing at any time on the grounds of legitimate interest (see reference to special right of objection under C. of this data protection information). In such a case, your application cannot be considered further. The objection to further data processing is made possible by informal notification to us (e.g. by e-mail). All personal data stored in the course of the application will be deleted in this case.

Applicants’ data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time.

Application by e-mail or by post
Applicants can also send us their applications by e-mail. Please note, however, that e-mails are generally not sent in encrypted form and applicants must ensure that they are encrypted themselves. We can therefore accept no responsibility for the transmission path of the application between the sender and receipt on our server and therefore recommend using an online form or sending it by post. This is because instead of applying via the online form and e-mail, applicants still have the option of sending us their application by post.

In addition, the information above on contacting us by e-mail and on data processing when applying via our contact forms also applies to your application by e-mail or by post.

On our website, you have the option of creating your own customer master data or changing your existing customer master data using a separate web form.

The information requested can be found in detail on the web form. Mandatory fields are clearly marked with an asterisk. The data that we request as mandatory fields is required in order to process your data entry.

Alternatively, you can contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored.

No data will be passed on to third parties in this context. The data is used exclusively for processing in the context of our customer database.

Purposes of data processing: The processing of personal data from the input mask serves to enable us to create you as a customer or to correct or supplement your customer master data. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

Legal basis for data processing: The legal basis for the processing of data is Art. 6 para. 1 letter b) GDPR (implementation of pre-contractual or contractual measures) on the basis of the existing or future customer relationship with you. In addition, data processing is also based on our legitimate interest in data processing in accordance with Art. 6 para. 1 letter f) GDPR. The legitimate interest lies in the aforementioned purposes. The legal basis for the processing of other personal data processed during the sending process is our legitimate interest in data processing in accordance with Art. 6 para. 1 letter f) GDPR, which in this case is to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage: The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is the case when the customer relationship with you has ended. In our view, the customer relationship is terminated when it can be inferred from the circumstances that you no longer wish to place orders with us or you expressly inform us of this. Data processing for contractual measures may be subject to a retention obligation under commercial or tax law, which then takes precedence (see the explanations above on “Data erasure and storage period”). The additional personal data collected during the sending process will be deleted after seven days at the latest.

Objection and removal option: You can inform us at any time that you wish to be deleted from the customer database or that you do not wish to place any further orders with us. We will then delete your customer data insofar as it is not subject to retention. You have the option to object to further data processing at any time on the grounds of legitimate interest (see reference to special right of objection under C. of this data protection notice). In such a case, the conversation cannot be continued. The objection to further data processing is made possible by informal notification to us (e.g. by e-mail). You can also use the PDF available for download on the above-mentioned page, print it out, enter the data manually and send it to us. We will then enter the data you have entered into our customer system for further processing of our customer relationship.

When individual pages are called up, we use so-called cookies. These are small text files that are stored on your end device (PC, smartphone, tablet, etc.). When you visit a website, a cookie may be stored by your browser. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

Third-party cookies may also be used. These cookies could also enable an analysis of the user’s surfing behavior. If this is the case, we will inform you about this separately in this privacy policy directly in the information about the respective third-party tools (such as analysis tools, plugins, etc.).

When you visit our website, you will be informed about the use of cookies for analysis purposes and your consent to the processing of the personal data used in this context will be obtained.

Cookies are used to make our website usable or to make it more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. The following data is temporarily stored in the cookies:

• Language settings
• Watch list regarding products/goods

Our content management system also uses technically necessary cookies to enable functions such as logging into the administrator area or, if applicable, writing and posting comments for registered visitors (if activated by us). The setting of cookies is necessary to recognize logged-in visitors.

Purpose of data processing: The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. This requires the browser to be recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles.

Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer.

Legal basis for data processing: The legal basis for the processing of personal data using cookies is Art. 6 para. 1 letter f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a GDPR if the user has given consent to this. 1 letter a) GDPR[TS8], as well as a legitimate interest on our part based on the aforementioned purposes pursuant to Art. 6 para. 1 letter f) GDPR.

Duration of storage: Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our service providers (third-party providers) to recognize your browser on your next visit (persistent cookies).

Otherwise, we store the data collected on the basis of a legitimate interest until the legitimate interest no longer exists, the consideration comes to a different result or you have effectively objected in accordance with Art. 21 GDPR (see the visually highlighted “Note on special right of objection” under C.). It is checked regularly, at least once a year, whether the legitimate interest still exists. In particular, our interest no longer exists if the data is no longer of sufficient relevance to us with regard to the evaluation and statistics of website use due to the passage of time, which can be assumed after three years at the latest.

Objection and removal options Cookies are stored on your computer and transmitted from it to our website. You therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be automated. Such a “Do-Not-Track” setting of your browser is understood by us as an objection to the further collection and use of your personal data. Note: If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

This website uses Google Analytics, a web analysis service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site.

We would like to point out that on this website Google Analytics has been extended by the code “anonymizeIp” in order to ensure an anonymized collection of IP addresses (so-called IP masking)[TS11]. By activating IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Further information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/.

Purpose of data processing: The purpose of using the analysis tool or analysis cookies is to improve the quality of our website and its content. This enables us to find out how the website is used and thus constantly optimize our offer. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Legal basis for data processing: The legal basis for the processing of personal data is Art. 6 para. 1 letter f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes. The company Google Inc. has joined the “EU-US Privacy Shield”, which means that data transfer to the USA is permitted.

Duration of storage: The cookies are stored on the user’s computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be automated. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Otherwise, we store the data collected on the basis of a legitimate interest until the legitimate interest no longer exists, the consideration comes to a different result or you have effectively objected in accordance with Art. 21 GDPR (see the visually highlighted “Note on special right of objection” under C.). It is checked regularly, at least once a year, whether the legitimate interest still exists. In particular, our interest no longer exists if the data is no longer of sufficient relevance to us with regard to the evaluation and statistics of website use due to the passage of time, which can be assumed after three years at the latest.

Objection and removal option: You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

Alternatively, you can prevent the collection by Google web analysis services by clicking on the following link. An opt-out cookie is set to prevent the future collection of your data when you visit this website: Deactivate Google Tracking

We use the web analysis tool “Matomo” for the needs-based design of our websites. Matomo creates user profiles on the basis of pseudonyms. For this purpose, permanent cookies are stored on your end device and read by us. In this way, we are able to recognize and count returning visitors. The session recording service records individual user sessions. We can play back recorded sessions and thus analyze the use of our website. Data entered in forms is not recorded and is not visible at any time.

The data processing takes place on the basis of your consent in accordance with § 25 para. 1 TTDSG, Art. 6 para. 1 lit. a GDPR, provided that you have given your consent via our banner. You can revoke your consent at any time. Please make the appropriate settings via our banner.

Further information on Matomo’s terms of use and data protection regulations can be found at: https://matomo.org/privacy/

AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). We use Google Remarketing as part of Google AdWords. This means that a cookie is stored in your browser when you visit our website. Cookies are small text files. These cookies are not used to personally identify users. If you visit certain websites and the cookie has not yet expired, Google and we can recognize that you have clicked on a Google AdWords ad and have been redirected to the corresponding page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers.

The remarketing function of Google Inc. is used to present interest-based advertisements to visitors to the website as part of the Google advertising network.

Google uses information (but not personal data, such as your name or e-mail address) about your visits to this and other websites in order to display advertisements about products and services that may be of interest to you. A pseudonymous identification number (ID) is assigned to your browser in order to check which ads have been displayed in your browser and which ads have been accessed. The cookies do not contain any personal information. The use of cookies only enables Google and its partner websites to place ads based on previous visits to our or other websites on the Internet. The information generated by the cookies is transmitted by Google to a server in the USA for analysis and stored there. A transfer of data by Google to third parties only takes place on the basis of legal regulations or as part of order data processing. Under no circumstances will Google combine your data with other data collected by Google.

Further information on Google Remarketing and Google’s privacy policy can be found at: https://policies.google.com/privacy

If you would like to know more about these methods or what options you have to prevent this information from being used, click here: www.google.de/policies/technologies/ads/.

Google carries out the international data transfers associated with the use of the Remarketing or GoogleAds service on the basis of the EU standard contractual clauses: https://policies.google.com/technologies/ads

You can see how Google Remarketing uses data here: https://support.google.com/google-ads/answer/7664943?hl=de&ref_topic=3122875

Purpose of data processing: Google Remarketing is used for the purpose of improving the quality of our website and its content by showing you advertising that is optimized to your actual individual needs and interests. This enables us to find out how the website is used and thus constantly optimize our offer. In addition, the use of this service enables us to make our website more attractive in order to encourage you to visit our website again.

Legal basis for data processing: The legal basis for the processing of personal data is Art. 6 para. 1 letter f) GDPR, i.e. an overriding legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes, in particular our legitimate interest in presenting our services through advertising and marketing and optimizing them for you and other users.

Duration of storage: The cookies are stored in your browser and transmitted by it to our site. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be automated. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Objection and removal option / opt-out: You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

If you specifically do not wish to use Google’s remarketing function, you can deactivate it by making the appropriate settings at http://www.google.com/settings/ads . Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

If you use Google Chrome as your browser, a plugin that deactivates personalized advertising can be installed under the website https://www.google.com/settings/ads/plugin in addition to the decisions made in the “Settings” menu. Please note, however, that you will receive just as much advertising as before – it will just no longer be tailored to your surfing habits.

You can also opt out of further tracking by clicking HERE.

Notwithstanding the above options, you have the right to object to the processing of your personal data by us at any time on grounds relating to your particular situation. If we cannot demonstrate compelling legitimate grounds for further processing which override your interests, rights and freedoms, or if we process your data for the purpose of direct marketing, we will no longer process your data (see Art. 21 GDPR). You can contact us by post or e-mail. A technical procedure that you use, e.g. a unique technical information that your web browser transmits to us (“do-not-track” message).

We use the Google Tag Manager from Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA to use the remarketing measures just described. This service provided by Google allows website tags to be managed via an interface. The Google Tag Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tag Manager triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it remains in place for all tracking tags, provided that these are implemented with Google Tag Manager.

The Google Tag Manager therefore does not lead to any additional data processing, but merely makes it easier to set tags within the website. Additional personal data is therefore not processed through the use of Google Tag Manager.

Further information about data processing by Google can be found in Google’s privacy policy. You can also change your settings there in the data protection center so that you can manage and protect your data.

Here you will find further instructions on how to manage your own data in connection with Google products.

This website uses Google Maps, a map service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), to display an interactive map. By using Google Maps, information about your use of this website (including your IP address) may be transmitted to a Google server in the USA and stored there.

Google may transfer the information obtained through Maps to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. Nevertheless, it would be technically possible for Google to identify at least individual users on the basis of the data received. It is possible that personal data and personality profiles of users of the website could be processed by Google for other purposes over which we have and can have no influence.

Purpose of data processing: Google Maps is used for the purpose of improving the quality of our website and its content and to provide you with a simple, useful and well-known map service for orientation, for displaying our company headquarters, for planning your journey, etc.

Legal basis for data processing: The legal basis for the processing of personal data using Google Maps is Art. 6 para. 1 letter f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes. The company Google Inc. has joined the “EU-U.S. Privacy Shield”, meaning that data transfer to the USA is permitted.

Duration of storage: As a user, you can decide for yourself whether to execute the Java Script code required for the tool via your browser settings. You can deactivate or restrict the execution of Java Script by changing the settings in your Internet browser. Note: If the execution of Java-Script is deactivated, it is possible that not all functions of the website can be used to their full extent.

Otherwise, we store the data collected on the basis of a legitimate interest until the legitimate interest no longer exists, the consideration comes to a different result or you have effectively objected in accordance with Art. 21 GDPR (see the visually highlighted “Note on special right of objection” under C.). It is checked regularly, at least once a year, whether the legitimate interest still exists. In particular, our interest no longer exists if the data is no longer of sufficient relevance to us with regard to the evaluation and statistics of website use due to the passage of time, which can be assumed after three years at the latest.

Objection and removal option: You have the option of deactivating the Google Maps service in a simple manner and thus preventing the transfer of data to Google: To do this, deactivate JavaScript in your browser. To prevent the execution of Java-Script code altogether, you can also install a Java-Script blocker, such as the browser plug-in NoScript (e.g. www.noscript.net or www.ghostery.com
). Note: If the execution of Java-Script is deactivated, it may no longer be possible to use all functions of the website to their full extent.

The privacy policy and terms of use for Google products and specifically for Google Maps can be found at https://policies.google.com/technologies/product-privacy?hl=de

Description and scope of data processing: Protektorwerk Fl. Maisch GmbH uses services of the company Marketo EMEA Limited, Cairn House South County Business Park, Leopardstown, Dublin 18 Ireland (“Marketo”), for example to send our newsletter, to invite you to webinars and events and to download information about our company and our products (“digital services”).

For this evaluation, the e-mails sent contain so-called web beacons, also known as tracking pixels. These single-pixel image files make it possible to record your user behavior. Tracking is not possible if you have deactivated the display of images in your e-mail program by default. If you display the images manually, the above-mentioned tracking takes place.

We record when you read our e-mails, which links you click on in them and draw conclusions about your personal interests. We link this data to actions you have taken on our website. Marketo stores the information collected in this way on its server in the European Union or the European Economic Area (EU or EEA).

If you use one of our digital services for which you have completed the registration process (for example, for our newsletter), Marketo also supports us in analyzing your usage behavior on our website. For this purpose, a text file (cookie, see also section 5) is stored on your computer, which enables us to recognize you when you visit our website again.

Purpose of data processing: We analyze how you use our website and other digital content such as videos, banners and downloads that are posted online on our website. This allows us to tailor our offers to your individual needs so that you receive less randomly scattered offers overall. We use the data obtained in this way to tailor our digital services to your interests and make them available to you accordingly.

Duration of storage: The cookie on your system expires after 24 months. You can prevent the storage of cookies by selecting the appropriate settings in your browser software.

Objection and removal options
If you register for one of our digital services and provide personal data via a registration form in this context, we will obtain your separate declaration of consent. In doing so, you consent to the data processing in the scope described in the context of the use of our digital services, such as newsletters, invitations to webinars and events and the associated analysis of your user behavior as described in this section.

As a user, you have the option of canceling your registration at any time. You can change the data stored about you at any time. Please contact the following e-mail address: datenschutz@protektor.com.

This website also uses the Google Site Search function. Site Search is an extension of the Google Analytics analysis tool. Detailed information on Google Analytics can be found directly here under the heading “Use of the Google Analytics analysis tool”. This integrated search service enables a full-text search for content on our website and for us to analyze the search terms entered in this way. This function allows us to gain an insight into what users are specifically looking for on our website or in our store. This in turn enables us to improve our offers, products and their findability. The search function can be accessed via a search box integrated into the individual web pages.

By entering a search term in the search box and pressing the enter key or the search icon (magnifying glass symbol), the user activates the search function and the search results page is called up, which loads the corresponding search results from Google using a plugin provided by Google.

The plugin developed and provided by Google is integrated into the search results page without any changes (“as is”). The plugin enables automated communication (data exchange) between the search results page called up and the Google service when the search results page is called up. The use of the search function provided by Google involves a dynamic transfer of data by the service provider Google to the search results page.

In principle, no data is transferred to Google if only our websites are accessed in which the “Google user-defined search” is integrated. Data is only transferred to Google after the user has activated the search box, started a full-text search and called up the search results page. By using the search function within the search results page, user data is also transmitted to Google at the same time. Without using the search function, however, no such data transfer takes place.

We would like to point out that the processing, in particular the storage, deletion and use of any personal data that may be transferred is the responsibility of Google itself and that we have no influence on the type and scope of the data transferred or on its further processing by Google.

If you are logged in to Google at the same time, the Google service is able to assign the information directly to your user profile. You should log out to avoid the collection of profile information about you.

Purpose of data processing: Google Site Search is used for the purpose of improving the quality of our website and its content. By using Site Search, we learn how the search is used, what specifically is searched for and which searches may not lead to a corresponding offer and can thus constantly optimize our offer for users.

Legal basis for data processing: The legal basis for the processing of personal data is Art. 6 para. 1 letter f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes. The company Google Inc. has joined the “EU-US Privacy Shield”, which means that data transfer to the USA is permitted.

Duration of storage: We store the data collected on the basis of a legitimate interest until the legitimate interest no longer exists, the consideration comes to a different result or you have effectively objected in accordance with Art. 21 GDPR (see the visually highlighted “Reference to special right of objection” under C.). It is checked regularly, at least once a year, whether the legitimate interest still exists. In particular, our interest no longer exists if the data is no longer of sufficient relevance to us with regard to the evaluation and statistics of website use due to the passage of time, which can be assumed after three years at the latest.

Insofar as cookies are transmitted to your computer and from it to us or Google as a result of the process, we would like to point out that you as the user have full control over the use of cookies in your browser. You can deactivate or restrict the transmission of cookies in your browser settings. Cookies that have already been saved can also be deleted there at any time. Note: If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Objection and removal option: You can prevent the storage of cookies by setting your browser software accordingly. We would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link(http://tools.google.com/dlpage/gaoptout?hl=de).

You can easily prevent data processing by Google in Site Search by not using the internal search function on our site.

Further information from Google on the handling of user data (privacy policy) can be found at: http://www.google.com/intl/de/policies/privacy.

We use the Hubspot tool from HubSpot, Inc, 25 First St., 2nd floor, Cambridge, Massachusetts 02141, USA. This is a system in which we process data and addresses of interested parties and potential customers for the purposes of advertising and marketing. Hubspot, Inc. has joined the EU-U.S. Privacy Shield and thus guarantees an adequate level of data protection.

We have also concluded a data processing agreement with Hubspot, as HubSpot processes the aforementioned data on our behalf, i.e. stores it on its servers.

You can view HubSpot’s privacy policy here: legal.hubspot.com/privacy-policy

Purposes of data processing: The data is processed by and for the purposes of marketing and advertising. The data processing concerns exclusively data of companies and, if applicable, their representatives or contact persons. We use the data to promote our offer to potential new customers.

Legal basis for data processing: Data is processed on the legal basis of Art. 6(1)(f) GDPR. Our overriding legitimate interest in this data processing lies in the aforementioned purposes.

Duration of storage: The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is the case for data that we collect on the basis of a legitimate interest if the legitimate interest no longer exists, the consideration comes to a different result or you have effectively objected in accordance with Art. 21 GDPR (see the visually highlighted “Note on special right of objection” under C.). It is checked regularly, at least once a year, whether the legitimate interest still exists. In particular, our interest no longer exists if the data is no longer of sufficient relevance to us with regard to the evaluation and statistics of website use due to the passage of time, which can be assumed after three years at the latest.

Right to object and right to erasure: If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 letter f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR on grounds relating to your particular situation.

If you would like to exercise your right to object, simply send an e-mail to datenschutz@protektor.de

Use of the WhatsApp sharing button
On our website, you have the option of sending a post or a link directly to your contacts on the WhatsApp messaging service.
No data is retrieved from WhatsApp by accessing the website with the sharing button. Only when you click on the button does WhatsApp learn the origin of the website. However, as no personal data is used here, this is merely so-called referrer information, which is generated each time a link is called up.

Only a link will be sent to the recipient you have previously selected in your contact list. Data processing does not take place as a result. In particular, this does not enable any data processing by the WhatsApp operator. Ultimately, sharing the link is the same as if you had entered the link yourself on WhatsApp to send it to a person of your choice.

Use of the Facebook plugin
Our website also contains so-called social plugins, which are small software programs of the social network Facebook. These are operated exclusively by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter referred to as Facebook). You can recognize these plugins on our website by the Facebook logo or the addition “Like”.

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers in the USA, which in turn transmits the content of the plugin to your browser and integrates it into the website.

As a result, the information that you have visited our website is forwarded to Facebook. If you are logged in to Facebook via your personal user account while visiting our website, Facebook can assign the website visit to this account. By interacting with plugins, e.g. by clicking on the “Like” button or leaving a comment, this information is transmitted directly to Facebook and stored there.

If you wish to prevent such data transmission, you must log out of your Facebook account before visiting our website. However, certain data, such as your IP address, the time of the click, the browser you are using, etc., will still be transmitted to Facebook. Logging out only prevents the data from being assigned to a specific Facebook account.

Purpose of data processing: The Facebook plugin is used for the purpose of enabling direct feedback (“Like”) or the direct sharing of our posts and information (“Share”) and thus our advertising and marketing interests. For the purpose and scope of data collection by Facebook, the further processing and use of your data there, as well as your rights in this regard and setting options in your Facebook account to protect your privacy, please refer directly to Facebook’s data protection information (http://de-de.facebook.com/privacy/explanation.php).

Legal basis for data processing: The legal basis for the processing of personal data is Art. 6 para. 1 letter f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.

Duration of storage: As a user, you can decide for yourself whether to execute the Java Script code required for the tool via your browser settings. You can deactivate or restrict the execution of Java Script by changing the settings in your Internet browser. Note: If the execution of Java-Script is deactivated, it is possible that not all functions of the website can be used to their full extent.

Objection and removal option: If you do not want Facebook to be able to associate your visit to our website with your Facebook account, please log out of your Facebook user account and block the execution of script content from Facebook in your browser, e.g. with the script blockers from www.noscript.net or www.ghostery.com.

Use of the Twitter Tweet button
Our website uses the “Tweet” button of the social network Twitter, which is operated by Twitter Inc., 750 Folsom Street, Suite 600, San Francisco, CA 94107, United States (“Twitter”). The “Tweet” button can be recognized by the dark blue bird.

When you access a web page on our website that contains such a button, your browser establishes a direct connection to the Twitter servers. The content of the “Tweet” button is transmitted by Twitter directly to your browser, which integrates it into your Twitter message. We therefore have no influence on the scope of the data that Twitter collects with the button. To the best of our knowledge, only the IP address of the user and the URL of the respective website are transmitted when the button is accessed, but not used for purposes other than displaying the button. Interactions, in particular the clicking of a “Re-Tweet” button, are also passed on to Twitter.

Purpose of data processing: The Twitter plugin is used for the purpose of enabling direct feedback or the direct sharing of our posts and information (“tweet”) and thus our advertising and marketing interests. The purpose and scope of the data collection and the further processing and use of the data by Twitter as well as your rights in this regard and setting options to protect your privacy can be found in Twitter’s data protection information: twitter.com/en/privacy

Legal basis for data processing: The legal basis for the processing of personal data is Art. 6 para. 1 letter f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.

Duration of storage: As a user, you can decide for yourself whether to execute the Java Script code required for the tool via your browser settings. By changing the settings in your Internet browser, you can deactivate or restrict the execution of Java Script and thus also prevent it from being saved. Note: If the execution of Java-Script is deactivated, it is possible that not all functions of the website can be used to their full extent.

Objection and removal option: If you are a Twitter member and do not want Twitter to collect data about you via our website and link it to your member data stored on Twitter, you must log out of Twitter before visiting our website.
You can prevent the execution of the Java Script code required for the tool by setting your browser software accordingly.
To prevent the execution of Java Script code altogether, you can also install a Java Script blocker, such as the NoScript browser plug-in (e.g. www.noscript.net or www.ghostery.com).

You also have the option of changing your data protection settings on Twitter in your account settings at http://twitter.com/account/settings.

Use of the Instagram social plugin
Functions and content of the Instagram service are integrated on our website. This is a service provided by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA.

If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram.

This may include, for example, content such as images, videos or texts and buttons with which users can express their favor regarding the content, subscribe to the authors of the content or our contributions. If the users are members of the Instagram platform, Instagram can assign the access to the above-mentioned content and functions to the users’ profiles there.

Purpose of data processing: The Instagram plugin is used for the purpose of enabling direct feedback or the direct sharing of our posts and information via the Instagram network and thus for our advertising and marketing interests. Details on data collection (purpose, scope, further processing, use) as well as your rights and setting options can be found in Instagram’s privacy policy. Instagram provides this information at instagram.com/about/legal/privacy/.

Legal basis for data processing: The legal basis for the processing of personal data is Art. 6 para. 1 letter f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.

Duration of storage: As a user, you can decide for yourself whether to execute the Java Script code required for the tool via your browser settings. By changing the settings in your Internet browser, you can deactivate or restrict the execution of Java Script and thus also prevent it from being saved. Note: If the execution of Java-Script is deactivated, it is possible that not all functions of the website can be used to their full extent.

Objection and removal option: If you are an Instagram customer and do not want Instagram to collect data about you via our website and link it to your data stored on Instagram, you must log out of Instagram before visiting our website.
You can prevent the execution of the Java Script code required for the tool by setting your browser software accordingly.
To prevent the execution of Java Script code altogether, you can also install a Java Script blocker, such as the browser plugin NoScript (e.g. <link typo3 www.noscript.net _blank external-link-new-window internal link in current>www.noscript.net or www.ghostery.com).

In connection with the product catalog, the app offers the option of watching YouTube videos (provider: YouTube LLC 901 Cherry Ave, 94066 San Bruno, CA, USA (hereinafter “YouTube”)) to view the products and on the website. We have integrated these YouTube videos in YouTube’s extended data protection mode, which blocks the setting of YouTube cookies until you actively click on playback.

The videos are therefore only reloaded and YouTube cookies are only set when you give your consent to the setting of YouTube cookies by clicking on such a video for the first time.

The YouTube videos accessed on the website are integrated in YouTube’s extended data protection mode, which blocks the setting of YouTube cookies until you actively click on playback. By clicking on the play button, you consent to YouTube setting cookies on the device you are using, which may also be used to analyze user behavior for market research and marketing purposes. You can find more information on the use of cookies by YouTube in Google’s cookie policy at https://policies.google.com/technologies/types?hl=de.

YouTube is a subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.

Each time a product on which a YouTube video has been integrated is called up, the app will play the relevant video from YouTube. As part of this process, YouTube and Google receive information about which product is being accessed. If you are logged in to YouTube at the same time, YouTube recognizes which specific product page you are visiting when you access a product page that contains a YouTube video. This information is collected by YouTube and Google and assigned to your YouTube account.

YouTube’s privacy policy provides information about the collection, processing and use of personal data by YouTube and Google and can be accessed here: http://www.google.de/intl/de/policies/privacy.

Purpose of data processing: YouTube videos are embedded for the purpose of presenting our products to you using multimedia content and thereby enhancing and improving the user experience. As this makes our website more attractive, the use of YouTube also serves our marketing and advertising purposes.

Legal basis for data processing: The legal basis for the processing of personal data with regard to the setting of cookies by YouTube after your first click on one of the videos is Art. 6 para. 1 letter a) GDPR, i.e. your expressly granted consent. The legal basis for embedding the videos themselves is Art. 6 para. 1 letter f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.

Duration of storage: We do not store any personal data relating to the use of YouTube videos. The accesses and views of the individual videos are analyzed by us, but without reference to a specific person. We have no influence on the storage by YouTube or Google itself. The exact circumstances of data processing there can be found in Google’s data protection information(http://www.google.de/intl/de/policies/privacy).

Possibility of objection and removal: YouTube and Google always receive information that the respective user has visited our website if the user is logged in to YouTube at the same time; this takes place regardless of whether the person concerned clicks on a YouTube video or not. If you do not want this information to be transmitted to YouTube and Google, you can prevent the transmission by logging out of your YouTube account before accessing the app.

You can also find options to minimize data processing by Google in the YouTube account settings. As the video portal belongs to Google, the settings can be found in the general configuration of the Google account. Under “Activity settings” you will not only find options for web and location history, but also special functions for data protection on YouTube. Firstly, you can pause the video search history so that your search queries are no longer saved. You can also switch off the video playback history so that not all of your watched videos are saved. Otherwise, you can avoid data processing by not accessing product pages with YouTube videos.

The website and thus the data transmissions via it are encrypted according to the SSL standard (https protocol).

There is an intention to transfer personal data to the United States of America (USA). There is an adequacy decision by the EU Commission which states that personal data may be transferred to the USA if the recipient has acceded to the EU-U.S. Privacy Shield. Personal data is therefore only transferred to recipients in the USA who have demonstrably acceded to the EU-U.S. Privacy Shield.

The intention relates specifically to the transfer of data to the following companies:

• Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). as provider of the web analysis tool Google Analytics and the map service Google Maps.
• YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA as the provider of an Internet video portal from which videos are integrated into our website. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.
• LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland as provider of the Slideshare service, as well as ComScore, Inc. 11950 Democracy Drive, Suite 600 , Reston, VA 20190, USA and Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA as provider of the web analysis tool Google Analytics.
• Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA as provider of the social network Facebook and the analysis tools Facebook Pixel, Custom Audiences and Facebook Conversion.
• Twitter Inc, 750 Folsom Street, Suite 600, San Francisco, CA 94107, USA as provider of the short message service Twitter.
• Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA as provider of the social network Instagram.
• HubSpot, Inc, 25 First St., 2nd floor, Cambridge, Massachusetts 02141, USA as provider of the CRM tool HubSpot.
• Company Marketo EMEA Limited, Cairn House South County Business Park, Leopardstown, Dublin 18 Ireland (“Marketo”)

The aforementioned companies have joined the EU-U.S. Privacy Shield [TS14] and have submitted to a level of regulation comparable to the EU level of data protection. The transfer of data to these companies is therefore permissible in principle. Furthermore, in the case of order processing, corresponding order processing contracts have been concluded with these companies to secure the data and our rights to issue instructions.

If your personal data is processed, you are the “data subject” and you have the following rights vis-à-vis us as the controller:

Right to information
You have the right to obtain confirmation from us free of charge as to whether we are processing personal data concerning you. If this is the case, you have a right to information about this personal data and to further information, which you can find in Art. 15 GDPR. You can contact us by post or e-mail.

Right to rectification
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. You also have the right – taking into account the above-mentioned purposes of processing – to request the completion of incomplete personal data, including by means of a supplementary declaration. You can contact us by post or e-mail.

Right to erasure
You have the right to obtain the erasure of personal data concerning you without undue delay where one of the conditions set out in Art. 17 GDPR applies. You can contact us by post or e-mail.

Right to restriction of processing
You have the right to obtain from us restriction of processing where one of the conditions set out in Art. 18 GDPR applies. You can contact us by post or e-mail.

Right to information
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients by the controller.

Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, where the requirements of Art. 20 GDPR are met. You can contact us by post or e-mail.

Right to object to processing based on legitimate interest
If we exceptionally process personal data on the basis of Art. 6(1)(f) GDPR (i.e. based on legitimate interests), you have the right to object to the processing of your personal data by us at any time on grounds relating to your particular situation. If we cannot demonstrate compelling legitimate grounds for further processing which override your interests, rights and freedoms, or if we process your data for the purpose of direct marketing, we will no longer process your data (see Art. 21 GDPR). You can contact us by post or e-mail.

A technical procedure that you use, e.g. a unique technical information that your web browser transmits to us (“do-not-track” message).

Right to withdraw consent
You have the right to withdraw your consent to the collection and use of personal data at any time with effect for the future. You can contact us by post or e-mail. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

Automated decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Unless the decision is necessary for entering into, or the performance of, a contract between you and us, it is authorized by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or it is based on your explicit consent.
We do not carry out any such automated decision-making.

Voluntary nature of the provision of data
If the provision of personal data is required by law or contract, we will always point this out when collecting the data. In some cases, the data we collect is required for the conclusion of a contract, namely if we would otherwise not be able to fulfill our contractual obligation to you, or not sufficiently. You are under no obligation to provide the personal data. However, failure to provide it may mean that we are unable to perform or offer a service, action, measure or similar requested by you or that it is not possible to conclude a contract with you.

Right to lodge a complaint with a supervisory authority
Without prejudice to any other rights, you have the right to lodge a complaint with a supervisory authority for data protection at any time, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes data protection law.

Responsible for us: The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Königstraße 10A, 70173 Stuttgart, website: www.baden-wuerttemberg.datenschutz.de.

clickbio

We use the clickbio.de service of clickbio UG i.G., Alte, Stuttgarter Straße 105, 70195 Stuttgart, Germany, to provide visitors to our [Instagram/Tiktok/Twitch] page with hyperlinks to other profiles of [company name on other social media platforms, our website and this privacy policy. When you use the link page, your IP address is transmitted to the provider. This is anonymized by the service provider and not processed further. The provider also does not use cookies. Further information on data protection at clickbio can be found here: https://www.clickbio.de/privacy