Privacy policy

Thank you for visiting our website. We would like to inform you about the handling of your data according to Article 13 of the German Data Protection Regulation (DSGVO).

Responsibility

Responsibility for the data processing described below is held by the body named in the imprint.

Usage data

When you visit our web pages, usage data is stored on our web server as a log for statistical purposes and evaluated to improve the quality of our web pages. This data set consists of:

• the name and address of the requested content;
• the date and time of the query;
• the amount of data transferred;
• the access status (content transferred, content not found);
• the description of the web browser and operating system used; and
• the referral link, which indicates from which page you have reached our page.

This log data is evaluated without identifying information.

Storage of the IP address for security purposes

In addition, we store the full IP address transmitted by your web browser for a strictly specific purpose for a period ¬of seven days, in the interest of being able to detect, limit and eliminate attacks on our websites. After this period, we delete or anonymize the IP address. The legal basis for this practice is Article 6 paragraph 1 p. 1 lit. f DSGVO.

Data security

To protect your data from unwanted access as comprehensively as possible, we take technical and organizational measures. We use an encryption process on our websites. Your data is transferred from your computer to our server and vice versa via the Internet using TLS encryption. In most cases you can recognize this by the appearance of the closed lock symbol in the status bar of your browser, and the prefix https:// in the address line.

Cookies

Required cookies

We use cookies on our websites, which are necessary for the use of our websites.

Cookies are small text files that are stored on your terminal device and can be read. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.

We do not use these required cookies for analysis, tracking or advertising purposes.

These cookies only contain information about certain settings and do not identify a user. They may also be necessary to enable user guidance, security and implementation of the site.

We use these cookies on the basis of Article 6 paragraph 1 p. 1 lit. f DSGVO.

You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent for you. You can also delete cookies at any time via the appropriate browser setting and prevent the setting of new cookies. Please note that our websites may then not be displayed correctly and some functions may no longer be technically available.

Visitor measurement

We use web analysis tools to design our websites in line with requirements. These create usage profiles based on pseudonyms. For this purpose, permanent cookies are stored on your end device and read by us. In addition, it is possible that we retrieve recognition features for your browser or end device (e.g. a so-called browser fingerprint or your unabbreviated IP address). In this way, we are able to recognize returning visitors and count them as such.

These usage profiles, which are created on the basis of pseudonyms, contain evaluations of the following usage parameters, among others:

• If possible, the source of the user (via search engine ads, redirection through other websites or similar);
• The duration of website use;
• The amount, sequence and names of visited pages;
• The number of sessions (sessions) on the website;
• Country, region and, if applicable, city from which the access is made;
• Functions used on the website and clicks made ("events");
• Searches performed on the website;
• Information about the used variants of the website within the scope of so-called A/B tests;
• Information about the browser, device, operating system, etc. used during access.

The data processing is based on your consent according to Article 6 paragraph 1 p. 1 lit. a DSGVO or § 15 para. 3 p. 1 TMG, if you have given your consent via our banners.

Which third-party providers do we use in this context?

Below we list the third-party providers with whom we work in connection with visitor measurement. If the data is processed outside the EU or EEA in this context, please note that there is a risk that authorities may access the data for security and monitoring purposes without you being informed or having the right to appeal.

If you use and submit forms on our website, the personal data you submit is stored in applications of the provider Pardot LLC/Salesforce Inc. and processed by us. Enrichment with data from the usage profiles created on the basis of pseudonyms does not take place unless you have given us permission to do so when submitting the form.

The purpose of combining usage information with your personal data is to get to know you better as a potential customer and to provide you with information on our websites and by e-mail that is of particular interest to you personally. In addition, it allows us to evaluate the efficiency of our communication measures.

If you wish to revoke this authorization or, more generally, to delete the personal data submitted via the forms, please contact: pardot-data-privacy@baslerweb.com.

Third-party tracking technologies for advertising purposes

We use cross-device tracking technologies so that you can be shown targeted advertising on other websites based on your visit to our websites and so that we can see how effective our advertising efforts have been.

The data processing is based on your consent according to Article 6 paragraph 1 p. 1 lit. a DSGVO or § 15 para. 3 p. 1 TMG, if you have given your consent via our banner. Your consent is voluntary and can be revoked at any time.

How does the tracking work?

When you visit our websites, it is possible that the third-party providers mentioned below retrieve recognition features for your browser or terminal device (e.g. what is known as a browser fingerprint), evaluate your IP address, store or read recognition features on your terminal device (e.g. cookies) or gain access to individual tracking pixels.

The individual features can be used by the third-party providers to recognize your terminal device on other websites. We can commission the corresponding third-party providers to display advertising that is based on the pages visited on our site.

What does cross-device tracking mean?

If you log in to the third-party provider with your own user data, the respective recognition features of different browsers and end devices can be linked to each other. If, for example, the third-party provider has created a separate feature for the laptop, desktop PC or smartphone or tablet you use, these individual features can be assigned to each other as soon as you use a service of the third-party provider with your login data. In this way, the third-party provider can also target our advertising campaigns across different end devices.

Which third-party providers do we use in this context?

Below we list the third-party providers with whom we cooperate for advertising purposes. If the data is processed outside the EU or EEA in this context, please note that there is a risk that authorities may access the data for security and monitoring purposes without you being informed or having the right to appeal. If we use providers in unsafe third countries and you consent, the transfer to a third country will be based on Article 49 (1) lit. a DSGVO.

Contact form

You have the option to contact us via our contact form. To use our contact form, we first need from you the data for the fields marked as mandatory.

We use this data on the basis of Article 6 paragraph 1 p. 1 lit. f DSGVO to answer your inquiry.

Your data will only be processed to respond to your inquiry. We will delete your data if it is no longer required and there are no legal retention obligations to the contrary.

With regard to the processing according to Article 6 paragraph 1 p. 1 lit. f DSGVO, you have the right to object at any time. For this purpose, please contact the e-mail address provided in the imprint.

Social plugins

We enable you to use social plugins. For reasons of data protection, however, we only integrate the social plugins we use in deactivated form. When you call up our websites, no data is therefore transmitted to social media services.

However, you have the option of activating and using the social plugins integrated on our websites. For this purpose, we use a solution that results in all data and functions required to display the social plugin being provided by our web server in a first step. Only when you decide to activate the respective social plugin and click on the corresponding preview image or icon, is a connection to the servers of the operator of the respective social media service established by your browser in a second step.

When you activate a plugin, the social media service receives your IP address and, among other things, knowledge about your visit to our websites. This occurs regardless of whether you have an account with the respective social media service. If you are logged in, the data can be directly assigned to your social media profile.

Overall, we have no influence on whether and to what extent the respective social media service processes personal data after activation. However, it is likely that the social media service will create usage profiles from your data and use them for the purpose of personalized advertising. In addition, your data will be used to inform other users of the social media service about your activities on our websites.

The embedding is based on your consent according to Article 6 paragraph 1 p. 1 lit. a DSGVO or § 15 para. 3 p. 1 TMG, if you have given your consent by clicking on the thumbnail. Please note that the embedding of many social plugins leads to your data being processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and monitoring purposes without you being informed or being able to appeal. If we use providers in unsafe third countries and you consent, the transfer to an unsafe third country will be based on Article 49 (1) lit. a DSGVO.

If you no longer wish your personal data to be processed by the activated social plugins, you can prevent future processing by no longer clicking on the preview image or icon of the respective social plugin.

Once you have clicked on a preview image, the third-party content is immediately reloaded. If you do not want such reloading on other pages, please do not click the thumbnails.

Your consent to marketing communication

We use your contact data for the purpose of direct marketing, provided that we have legitimate interests in doing so (Art. 6 para. 1 p. 1 lit. f DSGVO or other applicable laws as the case may be) or have received your express consent (Art. 6 para. 1 p. 1 lit. a DSGVO or other applicable laws as the case may be) to contact you by e-mail and/or telephone for marketing communication purposes. In this context, we usually process contact data (e.g. name, postal address, e-mail address, telephone numbers) as well as your interests/preferences in relation to our products for, e.g.

• Invitations to events or trade fairs,
• offers and information on our services and products by e-mail,
• Christmas/New Year greetings,
• Invitation to participate in customer surveys or market research.

If you have given your consent for marketing communications , you can revoke this consent at any time without giving reasons. In the case of direct marketing communcations based on our legitimate interests, you have the right to object at any time.

Newsletter registration and dispatch

You can order a newsletter on our website. Please note that we need certain data (at minimum your e-mail address) to subscribe to the newsletter.

The newsletter will only be sent if you have given us your express consent pursuant to Article 6 (1) p. 1 lit. a DSGVO. After placing an order on our websites, you will receive a confirmation email to the email address you provided (this is known as double opt-in). You can revoke your consent at any time. You can easily revoke your consent, for example, by clicking on the unsubscribe link in every newsletter.

By creating an individual confirmation link, we can record that the consent was confirmed under the e-mail address as provided. In this context, we also store the time at which the confirmation was made. The corresponding data processing is based on Article 6 paragraph 1 p. 1 lit. f DSGVO and is carried out in the interest of being able to account for the legality of the newsletter transmission.

If you order our newsletter, we ask you to agree to further newsletter tracking as part of the ordering process.

If you give us the corresponding consent according to Article 6 paragraph 1 p. 1 lit. a DSGVO, we integrate individual tracking pixels into our newsletters, with which we can recognize when the newsletter sent to you was accessed or opened, and individualize the links present in the newsletter to be able to evaluate when you clicked on which link.

Should you wish to revoke your consent, use the link provided in any newsletter to unsubscribe or adjust your consent.

Map services

On our websites, we embed map services that are not stored on our servers. To ensure that calling up our web pages with embedded map services does not automatically lead to content from the third-party provider being reloaded, we only display locally stored preview images of the maps in a first step. This does not provide the third-party provider with any information.

Only after a click on the preview image, is the content of the third-party provider reloaded. This provides the third-party provider with the information that you have accessed our site as well as the technically necessary usage data in this context. We have no influence on the further data processing by the third-party provider. By clicking on the preview image, you give us your consent to reload content from the third-party provider.

The embedding is based on your consent according to Article 6 paragraph 1 p. 1 lit. a DSGVO or § 15 para. 3 p. 1 TMG, provided that you have previously given your consent by clicking on the preview image.

Please note that the embedding of some map services may result in your data being processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and monitoring purposes without informing you or allowing you to seek redress. If we use providers in unsafe third countries and you consent, the transfer to an unsafe third country will be based on Article 49 (1) lit. a DSGVO.

On our websites, we embed map services that are not stored on our servers. When you call up our pages with embedded map services, the content of the third-party provider that provides the map services is reloaded. This provides the third-party provider with the information that you have accessed our site and the usage data that is technically required in this context.

We have no influence on the further data processing by the third-party provider.

The embedding is based on Article 6 paragraph 1 p. 1 lit. f DSGVO and in the interest of enabling you to use map services.

Storage duration

Unless we have already informed you in detail about the storage period, we delete personal data when they are no longer required for the aforementioned processing purposes and no legal retention obligations prevent deletion.

Other processors

We share your data with service providers who support us in the operation of our websites and related processes as part of order processing pursuant to Article 28 of the DSGVO. These are, for example, hosting service providers. Our service providers are strictly bound by instructions to us and are contractually obligated accordingly.

Below, we name the processors with whom we work, where have not already done so in the preceding text of the privacy policy. If data is transferred outside the EU or EEA in this context, we provide information on the appropriate level of data protection.

Your rights as a data subject

When your personal data is processed, the GDPR grants you certain rights as a data subject:

Right of access (Article 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Article 15 of the GDPR.

Right to rectification (Article 16 DSGVO)

You have the right to request the correction of inaccurate personal data concerning you and, if necessary, the completion of incomplete data without delay.

Right to erasure (Article 17 DSGVO)

You have the right to request that personal data concerning you be deleted without undue delay, provided that one of the reasons listed in detail in Article 17 of the DSGVO applies.

Right to restriction of processing (Article 18 DSGVO)

You have the right to request the restriction of processing if one of the conditions listed in Article 18 of the DSGVO is met, e.g. if you have objected to the processing, for the duration of the review by the controller.

Right to data portability (Article 20 DSGVO)

In certain cases, which are listed in detail in Article 20 of the DSGVO, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party.

Right of withdrawal (Article 7 DSGVO)

If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 (3) DSGVO. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

Right of objection (Article 21 DSGVO)

If data is collected on the basis of Article 6 (1) p. 1 lit. f DSGVO (data processing for the protection of legitimate interests) or on the basis of Article 6 (1) p. 1 lit. e DSGVO (data processing for the protection of public interest or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right of appeal to a supervisory authority (Article 77 DSGVO)

Pursuant to Article 77 of the DSGVO, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data relating to you violates data protection provisions. The right of complaint may be asserted in particular before a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

Assertion of your rights

Unless otherwise described above, please contact the office mentioned in the imprint to assert your data protection rights.

Contact details of the data protection officer

Our external data protection officer will be happy to provide you with information on the subject of data protection under the following contact details:

datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen (Germany)
Web: www.datenschutz-nord-gruppe.de
office@datenschutz-nord.de

If you contact our data protection officer, please also indicate the responsible office in the imprint.