8.  Processing of personal data

8.1.      Visit our website

When you visit our website, your browser transmits certain data to our web server for technical reasons. This involves the following data (so-called server log files):

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Operating system and its access status / HTTP status code
• Amount of data transferred
• Website from which the request comes ("referrer URL")
• Browser, language and version of the browser software
• Retrieved Files

This data is not stored together with other personal data of the user.

The temporary storage of the user's IP address by our web server is technically necessary in order to be able to display the website. For this purpose, your IP address must be saved for the duration of the session.

The above data is stored in the log files to ensure the functionality of our website. This data is also used by us to optimize our website and to ensure the security of our information technology systems (e.g. to detect attacks). An evaluation of the data for marketing purposes does not take place in this context.

The legal basis for the temporary storage of this data and the log files is Article 6 (1) (f) GDPR. Our legitimate interest is the technically error-free presentation and optimization of our website - the server log files must be recorded for this purpose

The above data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of the data stored in the log files, this is the case after 365 days. Storage beyond this is possible if this data is required (e.g. to investigate attacks, acts of abuse or fraud). Data whose further storage is required for evidence purposes are excluded from deletion until the respective incident has been finally clarified.

For technical reasons, the collection of data for the provision of the website and its storage in log files is absolutely necessary for the operation of our website. You therefore have no possibility of objection.

8.2.       Contact form

There is a contact form on our website that you can use to request a visit or a callback. You can also order the new ACE catalogue.

If you send us inquiries via the contact form, we collect company, name data, function, address data, communication data including e-mail address. The data marked with * are mandatory fields. The other data processed during the sending process (e.g. IP address, date, time) serve to prevent misuse of the form and to ensure the security of our information technology systems.

If you send us inquiries via the contact form, we process your personal data in order to answer your inquiry and process your request. We save your data in case of follow-up questions. We do not pass on this data without your consent.

If your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures (e.g. offer), processing takes place on the basis of Art. 6 Para. 1 lit. b) DSGVO. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Article 6 (1) (f) GDPR).

If you contact us, your personal data will be processed by our internal departments responsible for the matter.

The data transmitted to us will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case when the respective conversation with the user has ended and it can be inferred from the circumstances that the facts in question have been finally clarified. If the request is made as part of a contractual relationship or for pre-contractual measures, we will store the data collected for a period of ten years in accordance with the statutory retention periods.

You have the option to revoke the processing of your personal data at any time. In such a case, the conversation cannot be continued. Please send a revocation to info@ace-int.eu. In this case, all personal data stored in the course of making contact will be deleted, provided there are no statutory retention periods.

There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing this information.

8.3.      Inquiries by email or phone

If you contact us via the e-mail addresses provided or by telephone, we will process the data transmitted with your request. These are name data, telephone number, e-mail address and the message text

We process your personal data for the purpose of processing your request. We will not pass on this data without your consent.

This data is processed on the basis of Article 6 (1) (b) GDPR if your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Article 6 (1) (f) GDPR).

If you contact us, your personal data will be processed by our internal departments responsible for the matter.

The data transmitted to us will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case when the respective conversation with the user has ended and it can be inferred from the circumstances that the facts in question have been finally clarified. If the request is made as part of a contractual relationship or for pre-contractual measures, we will store the data collected for a period of ten years in accordance with the statutory retention requirements.

You have the option to revoke the processing of your personal data at any time. In such a case, the conversation cannot be continued. Please send a revocation to info@ace-int.eu. In this case, all personal data stored in the course of making contact will be deleted, provided there are no statutory retention periods.

8.4.      Applications

If you are interested in working for ACE Stoßdämpfer GmbH, you can apply to us online. Under the menu item "Jobs & Careers" you will find positions that we have advertised. You can also submit an unsolicited application.

We have listed vacancies under the “Careers” section.

If you are interested in working for our company, you can apply to us online by email. We process the personal data that you transmit to us as part of your application.

We process your personal data to carry out the application process and for the decision to establish an employment relationship, in particular for the selection process of suitable candidates and the administrative implementation of the application process.

The legal basis for the processing of your personal data in the application process is Art. 6 Para. 1 lit, b) GDPR i. V. m § 26 paragraph 1 BDSG.

The recipient of your personal data is the HR department and the manager responsible for the job advertisement.

In principle, only those persons who need it for the proper course of the application process have access to your data.

We do not pass on your personal data to third parties unless you have expressly consented to the data being passed on or we are obliged to pass on data due to legal provisions and/or official or court orders.

A data transfer to a third country or to an international organization does not take place.

We do not use automated decision-making.

If your application does not lead to an employment relationship, we will delete your personal data no later than 4 months after the end of the application process (e.g. the announcement of the rejection decision), taking into account the legal period of action under the AGG, unless you have given us your consent in accordance with Art. 6 Para. 1 lit. a) GDPR for the long-term storage of your personal data in order to be able to consider you for new job offers if necessary. In this case, we will ask you for a separate consent in accordance with Article 6 Paragraph 1 Letter a) GDPR.

If your application was successful and leads to an employment relationship with us, we will take your application documents into our personnel administration system and into yours to the extent necessary on the basis of Art personnel file. In this case, your application documents will not be deleted until your employment relationship has ended and another three years have passed since the end of the year.

You can have the personal data you have transmitted to us renewed or deleted at any time upon request. To do this, send an email to karriere@ace-int.eu. This does not apply if you have applied for a specific position with us in an ongoing application process. In this case, we will store the information you provide for this position until the statutory time limits for bringing an action have expired (in particular Section 15 AGG).

8.5.      Online shop

As a commercial customer, you can order products from our range in our online shop. For the ordering process, we process company data as well as the name and contact details of the contact person. A customer account is created with the first order, with which you can place future orders faster, save multiple shipping addresses and view your order history.

We process your data for order processing and the provision of contractual services. The legal basis is Article 6 Paragraph 1 Letter b) GDPR.

Orders are subject to statutory retention periods for commercial and tax reasons. These are 6 years in accordance with Section 257 (1) HGB and 10 years in accordance with Section 147 (1) AO.

If you have created a user account, you can have it deleted at any time if you wish. The data processed in connection with an order are subject to commercial and tax retention periods.

data transmission

If you order goods from us, we pass on your personal data to the transport company responsible for the delivery and to the payment service provider responsible for processing the payment. Only data that the respective service provider needs to fulfill its task will be released. The legal basis for this is Article 6 (1) (b) GDPR, which permits the processing of data to fulfill a contract or to take steps prior to entering into a contract.

payment service provider

We integrate payment services from third party companies on our website. Payment is processed with the help of the payment service provider your payment GmbH (formerly "CrefoPayment GmbH & Co. KG"), Schloßstr. 20, 12163 Berlin (hereinafter "CrefoPay"), to whom we pass on your personal data provided during the ordering process and information about your order in accordance with Article 6 (1) (b) GDPR.

The payment service provider is used on the basis of Art. 6 Para. 1 lit. b GDPR (contract processing) and in the interest of a payment process that is as smooth, convenient and secure as possible (Art. 6 Para. 1 lit. f GDPR). Insofar as your consent is requested for certain actions, Article 6 (1) (a) GDPR is the legal basis for data processing; Consent can be revoked at any time for the future. The contract and data protection provisions of the provider GrefoPay apply to these transactions. He is responsible for data protection. CrefoPay's currently valid data protection guidelines can be found at https://media.crefopay.de/files/AGBs_und_Datenschutz guidelines.pdf

 

9.  Cookies

Our website uses so-called "cookies". Cookies are small text files that are stored in the cache of your Internet browser when you access the website. They do not cause any damage to your computer and do not contain any malicious software such as viruses or Trojans.

In some cases, cookies from third-party companies can also be stored on your end device when you enter our site ("third-party cookies"). These enable us or you to use certain services of the third-party company (e.g. cookies to process payment services or display videos).

Whether and which cookies we use when you visit our website depends on which areas and functions of our online offer you use and whether you have consented to the use of cookies that are not technically necessary. You can find further information and decision-making options in the privacy settings, which you can recognize by the corresponding symbol on the left-hand side of the screen.

Cookies have different functions. We need technically necessary (essential) cookies for the smooth operation of our website (e.g. for the shopping cart functionality). Other cookies are used to evaluate user behavior or to display advertising.

Cookies that are required to carry out the electronic communication process, to provide certain functions you want (e.g. for the shopping cart function) or to optimize the website (e.g. cookies for measuring web audience) (necessary cookies). stored on the basis of Article 6 (1) (f) GDPR, unless another legal basis is specified. As a website operator, we have a legitimate interest in the storage of necessary cookies for the technically error-free and optimized provision of our services. If consent to the storage of cookies and comparable recognition technologies was requested, processing takes place exclusively on the basis of this consent (Art. 6 Para. 1 lit. a DSGVO and § 25 Para. 1 TDDDG); the consent can be revoked at any time.

If cookies are used by third-party companies or for analysis purposes, we will inform you of this separately in this data protection declaration and, if necessary, ask for your consent.

Use of Usercentrics

This website uses Usercentrics' consent technology to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, website: https://usercentrics.com/de/ (hereinafter "Usercentrics").

When you enter our website, the following personal data is transferred to Usercentrics: Your consent(s) or the revocation of your consent(s) Your IP address Information about your browser Information about your device Time of your visit to the website Usercentrics also saves a cookie in your browser in order to be able to allocate the given consent or its revocation to you. The data collected in this way is stored until you request us to delete it, delete the Usercentrics cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention requirements remain unaffected. Usercentrics is used to obtain the legally required consent for the use of
certain technologies. The legal basis for this is Article 6 (1) (c) GDPR.

order processing

We have concluded an order processing contract (AVV) with usercentrics. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed according to our instructions and in compliance with the GDPR

 

We use cookies that are only stored temporarily for the duration of a session (“session cookies”) or permanently (“permanent cookies”) on your end device. Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser. All information about cookies and their storage periods are listed in our usercentrics consent management tool. Here you can also manage each individual cookie yourself.

You can also set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.

 

10.  Analytics Tools and Advertising

10.1.      Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables us to analyze the behavior of website visitors.

We receive various usage data, such as B. Page views, length of stay, operating systems used and origin of the user. This data is assigned to the respective end device of the user. There is no assignment to a user ID.

Furthermore, we can use Google Analytics to record your mouse and scrolling movements and clicks, among other things. Furthermore, Google Analytics uses various modeling approaches to supplement the recorded data sets and uses machine learning technologies for data analysis.

Google Analytics uses technologies that enable the user to be recognized for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the USA and stored there.

Processing with the help of Google Analytics enables us to analyze the surfing behavior of our website visitors. By evaluating the data obtained, we can compile the use of the individual components of our website. This helps us to improve our website and its user-friendliness.

The use of this service is based on your consent in accordance with Article 6 Paragraph 1 Letter a GDPR and Section 25 Paragraph 1 TDDDG. The consent can be revoked at any time. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/ .

IP anonymization

We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data

browser plug-in

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de . You can find more information on how Google Analytics handles user data in the Google data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de .

order processing

We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

10.2.      Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool that we can use to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not save any cookies and does not carry out any independent analyses. It is only used for the administration and display of the tools integrated via it. However, the Google Tag Manager records your IP address, which can also be transmitted to Google's parent company in the United States. The Google Tag Manager is used on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in the quick and easy integration and management of various tools on its website. If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 Para B. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.

10.3.      Microsoft Clarity

This website uses Clarity. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, https://docs.microsoft.com/en-us/clarity/ (hereinafter "Clarity"). This is a tool to analyze user behavior, in particular to record visits (only with an anonymized IP address) to this website.

In particular, Clarity records mouse movements, mouse clicks and keyboard interactions and creates a graphic representation of which part of the website users scroll most frequently (heat maps). Clarity may also record sessions so that we can view site usage in the form of videos. We also receive information about general user behavior within our website.

We use cookies to use Clarity. The above service is used on the basis of Article 6 (1) (a) GDPR and Section 25 TDDDG. The consent can be revoked at any time.

Clarity uses technologies that enable the user to be recognized for the purpose of analyzing user behavior (e.g. cookies or the use of device fingerprinting). Your personal data is stored on Microsoft servers (Microsoft Azure Cloud Service) in the USA.

Microsoft uses so-called standard contractual clauses (Article 46 (2) and (3) GDPR) as the basis for data processing for recipients based in third countries. Standard contractual clauses are templates provided by the EU Commission and are intended to ensure that your data also comply with European data protection standards if they are transferred to third countries and stored there. Through these clauses, Microsoft undertakes to comply with European data protection standards when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementation decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de   

More details about Clarity's privacy policy can be found here:
https://docs.microsoft.com/en-us/clarity/faq .

order processing

We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed according to our instructions and in compliance with the GDPR

Consent to data collection and storage can be revoked at any time with effect for the future. Microsoft uses the system developed by the Digital Advertising Alliance to provide the opportunity to opt out of using Clarity. You can opt out of Clarity telemetry by selecting "Microsoft" at the following website: https://optout.aboutads.info/?c=2&lang=EN . If you install the "Protect My Choices" app for your browser, you can ensure that your opt-out preference is saved.

10.4.      Google Ads

We use Google Ads. This is an online advertising program from Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data (e.g. location data and interests) available from Google (target group targeting). As the website operator, we can evaluate this data quantitatively, for example by analyzing which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.
The use of this service is based on your consent in accordance with Article 6 Paragraph 1 Letter a GDPR and Section 25 Paragraph 1 TDDDG. The consent can be revoked at any time. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/ .

10.5.      Double click

We use Google DoubleClick functions on our website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter "DoubleClick").

DoubleClick is used to show you interest-based ads across the Google advertising network. With the help of DoubleClick, the advertisements can be tailored to the interests of the respective viewer. For example, our advertising can be displayed in Google search results or in advertising banners connected to DoubleClick.

In order to be able to show users interest-based advertising, DoubleClick must recognize the respective
viewer and be able to assign the websites they have visited, clicks and other information on user behavior to them. For this purpose, DoubleClick uses cookies or comparable recognition technologies (e.g. device fingerprinting). The information collected is combined into a pseudonymous user profile in order to display interest-based advertising to the user concerned.

The use of this service is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TDDDG. Consent can be revoked at any time. For more information on how to object to the advertisements displayed by Google, see the following links: https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated

10.6.      LinkedIn Insight Tag

This website uses LinkedIn's Insight Tag. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

With the help of the LinkedIn Insight Tag we receive information about the visitors of our website. If a website visitor is registered with LinkedIn, we can, among other things, analyze the professional key data (e.g. career level, company size, country, location, industry and job title) of our website visitors and thus better align our site to the respective target groups. We can also use LinkedIn Insight Tags to measure whether visitors to our website make a purchase or take another action (conversion measurement). The conversion measurement can also take place across devices (e.g. from PC to tablet). LinkedIn Insight Tag also offers a retargeting function, with the help of which we can show visitors to our website targeted advertising outside of the website, whereby, according to LinkedIn, the advertising addressee is not identified. LinkedIn itself also collects so-called log files (URL, referrer URL, IP address, device and browser properties and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted from LinkedIn after seven days. The remaining pseudonymised data will then be deleted within 180 days. The data collected by LinkedIn cannot be assigned to specific individuals by us as the website operator. LinkedIn will store the personal data collected from website visitors on its servers in the USA and use it for its own advertising purposes. Details can be found in LinkedIn's data protection declaration at https://www.linkedin.com/legal/privacy-policy#choices-oblig

legal basis

The above service is used exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 TDDDG. The consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs

Objection to the use of LinkedIn Insight Tag

Object to the analysis of usage behavior and targeted advertising by LinkedIn under the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Furthermore, LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To prevent LinkedIn from linking data collected on our website to your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

order processing.

We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed according to our instructions and in compliance with the GDPR.

 

11.  Social media

11.1.      LinkedIn

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Each time a page on this website that contains LinkedIn elements is accessed, a connection to the LinkedIn servers is established. LinkedIn will be informed that you have visited this website with your IP address. If you click LinkedIn's "Recommend" button and are logged into your LinkedIn account, LinkedIn is able to assign your visit to this website to you and your user account. We would like to point out that as the provider of the pages, we have no knowledge of the content of the data transmitted or how it is used by LinkedIn. Insofar as consent has been obtained, the above-mentioned service is used on the basis of Article 6 (1) (a) GDPR and Section 25 TDDDG. The consent can be revoked at any time. If no consent has been obtained, the use of the service is based on our legitimate interest in the widest possible visibility on social media. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=de

For more information, see LinkedIn's privacy policy at:
https://www.linkedin.com/legal/privacy-policy

 

12. Plugins and tools

12.1.      YouTube in privacy mode

This website includes videos from YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in the extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the extended data protection mode does not necessarily exclude the transfer of data to YouTube partners. This is how YouTube establishes a connection to the Google DoubleClick network, regardless of whether you are watching a video. As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. Furthermore, YouTube can save various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can receive information about visitors to this website. This information is used, among other things, to collect video statistics, to improve user-friendliness and to prevent attempts at fraud. If necessary, after the start of a YouTube video, further data processing operations can be triggered over which we have no influence.

YouTube is used in the interest of an attractive presentation of our online offers. This represents a legitimate interest within the meaning of Article 6 Paragraph 1 Letter f GDPR. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Article 6 Paragraph 1 Letter a GDPR and Article 25 Paragraph 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time. You can find more information about data protection on YouTube in their data protection declaration at: https://policies.google.com/privacy?hl=de

12.2.      Google Fonts (local)

This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally. There is no connection to Google servers . Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's data protection declaration: https://policies.google.com/privacy?hl=de

12.3.      hCaptcha

We use hCaptcha (hereafter "hCaptcha") on this website. The provider is Intuition Machines Inc. 2211 Selig Dr, Los Angeles, CA 90026, United States (hereinafter "IMI"). hCaptcha is intended to check whether data entry on this website (e.g. in a contact form) is done by a human or by an automated program. For this purpose, hCaptcha analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters a website with activated hCaptcha. For the analysis, hCaptcha evaluates various information (e.g. IP address, how long the website visitor spends on the website or mouse movements made by the user). The data collected during the analysis is forwarded to IMI. If hCaptcha is used in "invisible mode", the analyzes run completely in the background. Website visitors are not informed that an analysis is taking place. The storage and analysis of the data takes place on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and from SPAM. If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 Para B. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.
The data processing is based on standard contractual clauses contained in the Data Processing Addendum to the IMI General Terms and Conditions or the Data Processing Agreements. For more information about hCaptcha, see the privacy policy and terms of use at the following links: https://www.hcaptcha.com/privacy and https://hcaptcha.com/terms

12.4.      Userlike

We use Userlike (hereinafter "Userlike") to process user inquiries via our support channels or via live chat systems. The provider is Userlike UG (limited liability), Probsteigasse 44 – 46, 50670 Cologne. Messages you send to us can be saved in the Userlike ticket system or answered in live chat by our staff. If you communicate with us via Userlike, we and Userlike store, among other things, your name and your e-mail address, if you have provided them, and your chat history. This data is summarized in a profile.

The messages addressed to us remain with us until you ask us to delete them or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular statutory retention periods - remain unaffected. Userlike is used on the basis of Article 6 (1) (f) GDPR. We have a legitimate interest in processing your inquiries as quickly, reliably and efficiently as possible. If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 Para B. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time. Further information can be found in Userlike's data protection declaration: https://www.userlike.com/de/data-privacy and https://www.userlike.com/de/blog/live-chat-software-datenschutz-dsgvo .

Order processing

We have concluded an order processing contract (AVV) with userlike. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed according to our instructions and in compliance with the GDPR.

12.5.      Trusted Shops

For our online shop, we use the Trusted Shops rating platform from the provider Trusted Shops GmbH, Subbelrather Straße 15c, 50823 Cologne. You can find more information about data processing by Trusted Shops at https://www.trustedshops.de/impressum-datenschutz/#datenschutz   

 

13.  Data security and hosting

We take technical, contractual and organizational measures to ensure the security of data processing in accordance with the state of the art. In this way, we ensure that the provisions of data protection laws, in particular the General Data Protection Regulation, are observed and that the data we process is protected against destruction, loss, alteration and unauthorized access. These security measures also include the encrypted transmission of data between your browser and our servers. Please note that SSL encryption is only activated for transmissions carried out over the Internet if the key symbol appears in your browser window and the address begins with https://. SSL (Secure Socket Layer) uses encryption technology to protect data transmission from illegal data access by third parties. If this option is not available, you can also decide not to send certain data over the Internet.

 

14.  Your rights

If we process your personal data, you are the data subject i. s.d. General Data Protection Regulation (GDPR) and have the following rights towards us:

Right to information (Article 15 GDPR): You have the right to request information about the personal data processed about you. This right also includes a copy of the relevant data.

Right to rectification (Article 16 GDPR). You have the right to demand the immediate correction of personal data concerning you if they are incorrect. Taking into account the purposes of the processing, you have the right to request that the personal data concerning you be completed if it is incomplete.

Right to erasure (Art. 17 GDPR). You have the right to demand that the personal data concerning you be deleted immediately if one of the reasons given there applies.

Right to restriction of processing (Article 18 GDPR). You have the right to request that the processing of your personal data be restricted if one of the reasons given there applies.

Right to data portability (Art. 20 GDPR). You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and you have the right, under certain circumstances, to transmit this data to another person responsible without hindrance.

object (Art. 21 GDPR). You have the right to object to the processing of your data at any time for reasons that arise from your particular situation, insofar as the data processing is based on a weighing of interests in accordance with Article 6 (1) (f) GDPR. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR. If you file an objection, we will no longer process your personal data unless there are demonstrably compelling reasons for processing that are worthy of protection, or the processing serves to assert, exercise or defend legal claims.

Revocation of consent (Art. 7 Para. 3 GDPR). In accordance with Art. 7 Para. 3 GDPR, you have the right to revoke your consent to the processing of personal data at any time.

appeal (Article 77 GDPR). You have the right to complain to a data protection supervisory authority (Article 77 GDPR). You can find an overview of the German supervisory authorities at https://www.datenschutzkonferenz-online.de/datenschutzaufsichtsbehoerden.html

The supervisory authority responsible for our location is: The State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf, Tel. 0211/38424-0, www.ldi.nrw.de , email: poststelle@ldi.nrw.de

 

15.  Changes to the Privacy Policy

We reserve the right to change the data protection declaration in order to adapt it to changed legal situations or changes to the service and data processing. However, this only applies with regard to declarations on data processing. If user consent is required or parts of the data protection declaration contain provisions of the contractual relationship with the user, the changes will only be made with the consent of the user.

Please inform yourself regularly about the content of the data protection declaration.

Status of the data protection declaration: January 20, 2023