TIS GmbH legal information

Privacy policy

Table of contents
1. General information

• How do we collect data?
• What do we use your data for?
• What rights do you have with regard to your data?

2. Name and contact details of the person responsible
3. Contact details of the company data protection officer:
4. Scope and purpose of the processing of personal data

A) When visiting this website

• Server log files
• Cookies
• Consent management by Borlabs
• Third-party tools with tracking or analysis functions:

a) Google Analytics
b) Google Fonts
c) Google Maps
d) Cloudflare Turnstile
e) Youtube
f) Facebook plugins

• Use of our website contact form

B) When sending newsletters
C) In business contact with our company

• Employee data
• Customer data
• Supplier data
• Contact by e-mail
• Contact in the context of trade fairs and events

D) When using our offers in social media

• Facebook fan page
• LinkedIN-Page
• Instagram fan pages

5. Legal basis for data processing
6. Storage period
7. Recipient of the data
8. Rights of data subjects

• Right to information
• Right to rectification or completion
• Right to erasure
• Right to restriction of processing
• Notification obligation of the controller
• Right to data portability
• Right to object

9. Right to withdraw your consent to data processing
10. Right of appeal to the data protection supervisory authority
11. Status and updating of this privacy policy

 

1. General information
Thank you for your interest in our software solutions, services and other offers. Data protection and data security are a high priority for us. We therefore comply with the standards of the GDPR and other applicable data protection regulations.

The subject of data protection is personal data. According to Art. 4 No. 1 GDPR, this is all information relating to an identified or identifiable natural person, i.e. data with which you can be personally identified. This includes, for example, information such as name, postal address, email address, telephone number or payment details.

The following information provides a simple overview of what happens to your personal data when you visit our website.

For detailed information on the subject of data protection, please refer to the following sections of this privacy policy.

How do we collect data?
On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form. Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.

What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors. Other data can be used to analyze your user behavior.

What rights do you have with regard to your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time using the addresses provided in this privacy policy if you have any further questions on the subject of data protection. You also have the right to lodge a complaint with the competent supervisory authority.

Analysis tools and tools from third-party providers
When you visit our website, your surfing behavior may be statistically evaluated. This is mainly done using cookies and so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following sections.

2. Name and contact details of the person responsible
The controller responsible for data processing on this website is
TIS Technische Informationssysteme GmbH
represented by the managing directors Markus Vinke and Fabian Bielefeld

Müller-Armack-Str. 8
46397 Bocholt

Phone: 02871 2722-0
Fax: 02871 2722-99
E-mail: kontakt@tis-gmbh.de

3. Contact details of the company data protection officer:
We have appointed a data protection officer for our company. You can contact our data protection officer in the following ways:

André Korte
DSB Münster GmbH
Martin-Luther-King-Weg 42-44
48155 Münster

Phone: 0251 7187-110
E-mail: datenschutz@dsb-ms.de

4. Scope and purpose of the processing of personal data

A) When visiting this website
Server log files
When you use our website, certain connection data and data provided by your internet browser are temporarily stored. In order to ensure the proper and secure operation of our website, the following data is recorded and stored in log files:

• IP address of the calling computer
• Operating system of the calling computer
• Browser version of the calling computer
• Name of the retrieved file
• Date and time of retrieval
• Referring URL
• Type of end device (e.g. desktop/smartphone)
• Connection logging

The logging of this data and its processing in log files is technically absolutely necessary for the proper and secure operation of the website.

The legal basis for the (initial) storage and/or readout of data from your device therefore results from Section 25 (2) No. 1 TDDDG.

The processing of this personal data is justified in accordance with Art. 6 para. 1 lit. f GDPR. Our company has a legitimate interest in data processing for this purpose

• quickly establish the connection to the company's website,
• to enable a user-friendly use of this website,
• recognize and ensure the security and stability of the systems and
• to facilitate and improve the administration of this website

The processing is expressly not carried out for the purpose of gaining knowledge about the person visiting this website.

The data is deleted as soon as the purposes for which it was collected have been achieved. In the case of data collection for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after three days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that an assignment of the calling client is no longer possible.

Cookies
Cookies are small text files that the browser stores on your device when you visit a website. As soon as you visit our website, information is collected and stored via cookies. The advantage of cookies for you is that your surfing experience can be made as positive as possible, as your habits and needs can be recognized in this way. If you do not want cookies to be stored on your device, you can prevent this by changing the settings in your browser software. Cookies that have already been saved can also be deleted there. However, if technically necessary cookies are deactivated, it will no longer be possible to use this website in full.

The most common types of cookies are explained below for your understanding:

• Session cookies: While you are active as a user on a website, a session cookie is temporarily stored in your computer's memory during your connection to our server, in which a session identifier is stored, e.g. to prevent you from having to log in again each time you change pages. Session cookies are deleted when you log out or lose their validity as soon as your session has ended.

• Permanent cookies: A permanent cookie stores a file on your device for a certain period of time with a specified expiration date. These cookies allow websites to remember your information and settings on your next visit. This leads to faster and more convenient access, as you do not have to change your language settings again, for example. Once the expiration date has passed, the cookie is automatically deleted when you visit the website that created it.

• Third-party cookies: Third-party cookies are stored and managed by partners. These cookies can be used, for example, to carry out statistical analyses on our websites or for marketing activities.

• Technically necessary cookies: Technically necessary cookies help to make a website usable by enabling basic functions such as page navigation and access to secure areas of the website.
Some elements of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change. The cookies we use are technically absolutely necessary in order to be able to offer the website and its functions or the functions you have requested (e.g. language settings). The legal basis for storing and/or reading data from your device is Section 25 (2) No. 1 TDDDG. All other cookies are subject to consent (Section 25 (1) TDDDG) and are regulated by our consent management platform: When you visit our website for the first time, a banner is shown to you as a visitor, which informs you about the necessary cookies used and which helps you to consent to the use of cookies that are not absolutely necessary.

Consent management by Borlabs
1. Scope of the processing of personal data
We use the consent management tool Borlabs to obtain and record the necessary consent from users of our website, for example for analytics activities on our website.
Borlabs collects log file and consent data using JavaScript. This JavaScript makes it possible to inform users about their consent to certain tags on our website and to obtain, manage and document this consent.
The following data is processed:

1.1 Consent data (so-called consent data, namely anonymized logbook data, Consent ID, Processor ID, Controller ID, Consent Status, Timestamp)

1.2 Data of the devices used (so-called device data, including truncated IP addresses, device information, timestamp)

1.3 User data (so-called user data, including e-mail, ID, browser information, setting IDs, changelog)

2. Purpose of data processing
The purpose of data processing is to analyze and manage the consent given in order to comply with our obligation to manage consent in accordance with the GDPR and TDDDG.

3. Legal basis for data processing
The legal basis for the processing of personal data is Art. 6 para. 1 lit. c and Art. 6 para. 1 lit. f. (processing for the purposes of contract fulfillment, otherwise processing on the basis of a legitimate interest).

4. Duration of storage
The data is deleted as soon as it is no longer required. The associated cookie has a duration of 60 days. On the one hand, the storage is based on our accountability pursuant to Art. 5 para. 2 GDPR. This obliges us to comply with the processing of personal data in accordance with the General Data Protection Regulation.

5. Possibility of objection and removal
The function can be switched on and off in our "Privacy settings" by selecting the checkbox.

Third-party tools with tracking or analysis functions:
For all third-party tools listed in this section, you as the user decide on their use on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

If you agree to the storage and use of your data by the respective tracking tool, you can activate the use of the tool in our Consent Manager. When you use our website for the first time, the Consent Manager presents you with a banner in which you can individually specify whether and, if so, which tracking tools are to be used.

With the tracking measures used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you.
The respective data processing purposes and data categories can be found below in the descriptions of the corresponding individual tracking tools.

a) Google Analytics

We create pseudonymous user profiles with the help of Google Analytics in order to design our website in line with requirements. The operator of this service is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site.

If you agree to the storage and use of your data, you can activate the storage and use with the help of our Consent Manager.

The following data is collected and processed with the help of Google Analytics:

• Visited pages
• Browser information
• Click Path
• Date and time of the visit
• Device information
• Downloads
• Flash version
• IP address (anonymized)
• JavaScript support
• Purchase activity
• Usage data
• Referrer URL
• Location information
• Widget interactions

If the function is activated in the Consent Manager, your personal data is processed in the context of Google Analytics cookies on the basis of your consent in accordance with Article 6(1)(a) GDPR.

The information generated by the cookies about your use of our website is usually transmitted to a Google server in the USA and stored there. However, since we have activated IP anonymization on our website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and only shortened there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for us and providing other services relating to website activity and internet usage to us. We use Google Analytics, for example, to analyze clicks from Google Ads for purely statistical purposes.

Information about the use of data by Google can be found at:
http://www.support.google.com/analytics/answer/6004245 and at
www.google.com/policies/privacy/partners/.

You can also prevent the storage of cookies by selecting the appropriate settings in your browser software. In this case, an opt-out cookie is stored in your browser that prevents Google Analytics from storing usage data.

If you delete your cookies, the Google Analytics opt-out cookie will also be deleted. The opt-out must be reactivated when you visit our site again.

The information generated by the cookies about your use of this website, such as

• Browser type/version of the website visitor
• Operating system of the website visitor,
• Referrer URL (the previously visited page),
• Host name of the accessing computer (IP address),
• Time of the server request,
are transmitted to a Google server in the USA and stored there.

The personal data is stored for as long as it is required to fulfill the purpose of processing. The data will be deleted as soon as it is no longer required to achieve the purpose.

In addition to Google Ireland Limited, the data may be transferred to the following recipients in the USA as part of the processing:

• Google LLC.
• Alphabet Inc.

By your selection, with which you consent to the use of the service in our Consent Manager, you also consent to this data transfer to a third country in accordance with Article 49 para. 1 lit. a GDPR and assure that you are aware that an adequate level of data protection may not be guaranteed in these third countries.

The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on https://tools.google.com/dlpage/gaoptout. An opt-out cookie will be set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).
(Safeguarding your data - Analytics Help)

 

b) Google Fonts
We use Google Fonts on our website, a service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

This service enables us to use external fonts by loading the required fonts into the browser cache of your web browser when loading our website. This improves the visual presentation of our texts. If your browser does not support this function, a standard font from your computer will be used.

We use Google Fonts to optimize our website to make it more user-friendly. The legal basis for data processing is Article 6(1)(a) GDPR, i.e. your consent. You can revoke this consent at any time.

The Google fonts are installed locally on our web server, which means that, to our knowledge, no connections to Google servers and no data about your website visits are transmitted to Google.

Further information about Google Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.

c) Google Maps
This site uses the map service Google Maps, provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

In order to use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The operator of this website has no influence on this data transfer. If Google Maps is activated, Google may use Google Fonts for the purpose of uniform display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

Google Maps is used on the basis of Article 6(1)(a) GDPR, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

By your selection, with which you consent to the use of the service in our Consent Manager, you also consent to this data transfer to a third country in accordance with Article 49 para. 1 lit. a GDPR and assure that you are aware that an adequate level of data protection may not be guaranteed in these third countries.

Data transfer to the USA is currently carried out on the basis of the EU Commission's standard contractual clauses. Further details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

Further information on the handling of user data can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.

The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

You can revoke your consent at any time for the future via the Consent Management Tool. You can access the consent management tool via the link at the bottom of the website.

d) Cloudflare Turnstile

We use Cloudflare Turnstile on our website, a service provided by Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter referred to as “Cloudflare”).
This tool is used to check whether entries on our website are made by a natural person or automatically, for example by bots.

For this purpose, Turnstile analyzes the behavior of website visitors based on various characteristics (IP address, length of stay on the website, and mouse movements). This information is transmitted to Cloudflare for analysis.

Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in protecting our website from misuse and spam. If consent has been obtained, processing is also carried out on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG, in particular if it involves the storage of cookies or access to information on the user's end device (e.g. via device fingerprinting). Consent can be revoked at any time.

The transfer of personal data to Cloudflare is based on the Standard Contractual Clauses (SCC) approved by the EU Commission, which can be viewed here:
https://www.cloudflare.com/cloudflare-customer-scc/

Further information on data protection when using Cloudflare Turnstile can be found in Cloudflare's privacy policy at:
https://www.cloudflare.com/cloudflare-customer-dpa/

Cloudflare is also certified under the EU-US Data Privacy Framework (DPF), an agreement between the EU and the US to ensure an adequate level of data protection for data transfers to the US. Further information on Cloudflare's certification can be found at:
https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnZKAA0&status=Active

e) Youtube
Our website uses plugins from the video platform YouTube, which belongs to Google. The operator of the service and the plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

The operator in Europe is Google Ireland Limited Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is necessary for an appealing and technically functioning presentation of the video content of our online offer.

This processing is based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR. If you do not want YouTube to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future.

The personal data is stored for as long as it is required to fulfill the purpose of processing. The data will be deleted as soon as it is no longer required to achieve the purpose.

We would like to point out that without your consent you may not be able to use all the functions of our website - in particular the display of video content - to their full extent.

The following data may be collected and processed through the use of YouTube:

• Device information
• Viewed videos
• IP address
• Referrer URL

In addition to Google Ireland Limited, the data may be transferred to the following recipients and thus to the USA:

• Google LLC.
• Alphabet Inc.

By your selection, with which you consent to the use of the service in our Consent Manager, you also consent to this data transfer to a third country in accordance with Art. 49 para. 1 lit. a) GDPR and assure that you are aware that an adequate level of data protection may not be guaranteed in these third countries.

Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

f) Facebook plugins
This website uses Facebook social plugins, which are operated by Facebook Inc (1 Hacker Way, Menlo Park, California 94025, USA). The integrations can be recognized by the Facebook logo or the terms "Like" or "Share" in the Facebook colors (blue and white). Information on all Facebook plugins can be found in the following link: developers.facebook.com/docs/plugins/

The plugins are integrated with the help of the Shariff wrapper. This means that the plugins are not permanently active and do not collect the personal data of all website visitors without being asked. The actual function is only activated by clicking on the symbol, which is preceded by a corresponding notice about possible data transfer to the social network, which must also be confirmed.

You can find more information about the Shariff Wrapper plugin at WordPress at https://de.wordpress.org/plugins/shariff/

The activated plugins establish a direct connection between your browser and the Facebook servers. This only takes place after the plugin has been activated. The website operator has no influence whatsoever on the nature and scope of the data that the plugin transmits to the Facebook Inc. servers. You can find information on this here: www.facebook.com/help/186325668085084

The plugin informs Facebook Inc. that you as a user have visited this website. There is a possibility that your IP address will be stored. If you are logged into your Facebook account during your visit to this website, this information will be linked to it.

This website links to a Facebook "Like page" at the bottom of every page. By clicking on this link, you leave this website and establish a direct connection between your browser and the Facebook servers. Information on the data that is subsequently collected by Facebook Inc. can be found here: https://www.facebook.com/privacy/explanation

The processing of personal data takes place through the use of the described wrapper exclusively on the basis of your consent (by actively clicking on the desired plugin or the desired function) and thus on the basis of Article 6 para. 1 lit. a GDPR.

By your selection, with which you consent to the use of the service in our Consent Manager, you also consent to this data transfer to a third country in accordance with Article 49 para. 1 lit. a GDPR and assure that you are aware that an adequate level of data protection may not be guaranteed in these third countries.

Use of our website contact form
For questions of any kind, we offer you the opportunity to contact us via a form provided on the website.

The personal data required includes your name and a valid e-mail address so that we know who sent the request and can respond to it. You can provide further information voluntarily in the message text.

The personal data that you provide to us in the context of this contact request will only be used to answer your request or contact you and for the associated technical administration. It will not be passed on to third parties.

The legal basis for processing is Art. 6 para. 1 sentence 1 lit. b GDPR for customer inquiries, otherwise Art. 6 para. 1 sentence 1 lit. f GDPR. Data processing is carried out exclusively for the purpose of processing and responding to inquiries.

The personal data collected will be automatically deleted as soon as the request has been dealt with and there is no legal basis for further storage.

B) When sending newsletters
The data is processed by the "CleverReach" service. CleverReach is an order processor and offers us the opportunity to maintain, design and send out planned newsletters. We have concluded an order processing contract with CleverReach, in which we oblige the service provider to protect your data and not to pass it on to third parties. You can find more information about CleverReach here: https://www.cleverreach.com/de-de/datenschutz-und-sicherheit/.

We only store your personal data until you object to the processing and unless longer storage is legally required or permitted. In the event of obligations to permanently observe objections, we reserve the right to store the e-mail address in a blacklist solely for this purpose.

You can unsubscribe from our newsletter at any time, i.e. object to further receipt. You will find a link to unsubscribe from the newsletter either at the end of each newsletter or you can otherwise use one of the contact options provided above (preferably by email). In accordance with Art. 21 GDPR, you have a general right to object to the processing of personal data for the purpose of direct marketing, without the need to specify a particular situation. If you wish to exercise your right of revocation or objection, simply send an e-mail to the contact address listed above.

1. Purposes of the processing
We send newsletter e-mails with promotional information such as announcements about events and products, updates and personnel changes in our company.

To register for the newsletter, we collect the e-mail address and time stamp of consent. The purpose of collecting the e-mail address is to deliver the newsletter.

2. Legal basis of the processing
The legal basis for the processing of data after registration for the newsletter is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can only receive the newsletter if you have a valid email address and have registered to receive the newsletter.

In order to ensure your proper registration for the newsletter, i.e. to prevent unauthorized registrations on behalf of third parties, we will send you a confirmation e-mail after your first newsletter registration using the double opt-in procedure, in which we ask you to confirm your registration.

3. Recipient of the data
The data is processed by the CleverReach service. CleverReach is an order processor and offers us the opportunity to maintain and design newsletter distribution lists and to send them out as planned.

CleverReach GmbH & Co. KG
Schafjückenweg 2
26180 Rastede
Germany

We have concluded an order processing contract with CleverReach, in which we oblige CleverReach to protect your data and not to pass it on to third parties.

You can read more about CleverReach's data analysis here: www.cleverreach.com/de/funktionen/reporting-und-tracking/

You can view CleverReach's privacy policy here: .www.cleverreach.com/de/datenschutz/

4. Duration of data storage
We only store your personal data until your consent to processing is revoked, unless longer storage is legally required or permitted.

You can cancel your subscription to the newsletter at any time. For this purpose, you will find a link to unsubscribe in every newsletter. Alternatively, you can revoke your consent at any time by sending us an e-mail.

5. Performance analysis
Purposes of the processing
We analyze the sending and receipt of our newsletter in order to constantly optimize the content. For this purpose, we record, for example, how many users have opened our newsletter. The newsletters contain a small file that is retrieved from the sending server when the newsletter is opened.

The evaluations are used to recognize your reading habits and to adapt our content to you.

6. Categories of personal data
Technical information such as information of the browser and operating system and the IP address and time of access are collected as part of this access.

The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked.

7. Your rights
A separate revocation of the performance measurement is unfortunately not possible, in this case the entire newsletter subscription must be canceled or revoked. For this purpose, there is a corresponding unsubscribe link in every newsletter. Alternatively, you can revoke your consent at any time by sending us an e-mail.

8. Right to object
If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as this is done for reasons arising from your particular situation.

Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to specify a particular situation.
If you would like to exercise your right of revocation or objection, simply send an e-mail to the contact address listed above.

C) In business contact with our company
Employee data
This data is processed for the fulfillment of contracts within the framework of employment contracts and for fulfillment of legal obligations. Data is regularly transmitted to social security institutions, tax authorities and other bodies to fulfill legal obligations. The data will be deleted after the statutory retention periods have expired. There is no automated decision-making, including profiling, for this purpose.

This personal data is processed on the basis of Art. 6 para. 1 lit. b) and Art. 6 para. 1 lit. c GDPR (fulfillment of contract and legal obligation).

Employees of our company receive a detailed information sheet on the processing of employee data as part of the onboarding process and at any time on request.

Customer data
This data is processed as part of the execution of our contracts with customers and for the implementation of pre-contractual measures. The purposes of data processing are based on the needs of the customer and may also include sales and advisory discussions and similar. Furthermore, we process personal data for the initiation and fulfillment of contracts with suppliers and service providers on the basis of Art. 6 para. 1 lit. b GDPR.

Supplier data
This data is processed as part of the execution of our contracts with customers and for the implementation of pre-contractual measures. The purposes of data processing are based on the needs of the customer and may also include sales, consultations and similar. Furthermore, we process personal data for the initiation and fulfillment of contracts with suppliers and service providers on the basis of Art. 6 para. 1 lit. b GDPR.

Contact by e-mail
You can contact our company by e-mail. To process your request, we need your last name, an e-mail address and a telephone number.

The legal basis for the processing of personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR by sending the email. If the contact is aimed at the conclusion of a contract, the legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

Data processing is carried out exclusively for the purpose of processing and responding to inquiries. The personal data collected is automatically deleted as soon as the inquiry has been dealt with and there is no legal basis for further storage.

Contact in the context of trade fairs and events
If you provide us with your contact details, e.g. when visiting a trade fair, we will process this personal data in accordance with your request. The purposes of data processing are based on your needs and may also include consultations and the like. Furthermore, we process personal data for the initiation and fulfillment of contracts on the basis of Art. 6 para. 1 lit. b GDPR.

Should the data be required for legal prosecution after conclusion of the contractual relationship, data processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. Our interest then lies in the assertion of or defense against claims.

We process and store your personal data for as long as is necessary to fulfill the purposes of the processing or contractual, legal or statutory obligations. After that, the data will be deleted or its processing restricted.
Within the company, only those persons have access to your data who need it for the proper fulfillment of the contract. A transfer of data to third parties is not planned and will not be carried out.

D) When using our offers in social media
We operate publicly accessible channels on various social networks. When you visit these channels, various data processing operations are triggered. Data processing may differ depending on whether you are registered and logged in to the social media platform or whether you visit the site as a non-registered and/or non-logged-in user. When you access a post or the account, the IP address assigned to your device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your device can be used to track how you have moved around the network. Buttons integrated into websites enable the platform operators to record your visits to these websites and assign them to your respective profile. This data can be used to tailor content or advertising to you. If you want to avoid this, you should log out or deactivate the "stay logged in" function, delete the cookies on your device and restart your browser.

Further information about data processing in the social networks mentioned here can be found in their individual privacy policies.

https://de-de.facebook.com
https://www.linkedin.com
https://www.instagram.com

Our respective data processing of the specific social media platforms can be found in the following explanations.

Facebook fan page
If you visit our Facebook fan page, Meta Platforms, Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter referred to as "Facebook") will process your personal data in accordance with its privacy policy.

We would like to point out that you use this Facebook page and its functions at your own risk. This applies in particular to the use of the interactive functions (e.g. commenting, sharing or rating).

In accordance with the Facebook terms of use, we can identify the subscribers to our Facebook fan page and view their profiles and other information shared by them.

A joint responsibility with Facebook lies in the "Facebook Insight data", as well as in the processing of likes, comments, etc.

The data you enter on Facebook, in particular your user name and the content published under your account, will be processed by us to the extent that we may respond to your comments. The data you freely publish and disseminate on Facebook can thus be included by us in our offer and made accessible to our followers.

We use the "Facebook Insights" service for the purpose of statistical analysis and continuous optimization of our pages. These statistics are provided by Facebook. We have no influence on the processing of your data for this function. In this context, we receive anonymized data about the visitors to our Facebook fan page. It is not possible for us to identify you personally. We use this data to make our posts and activities more attractive for visitors to our Facebook fan page. The legal basis for the storage of "insight data" is our legitimate interest pursuant to Article 6 (1) (f) GDPR to optimize the fan page and make it attractive to our visitors.

If you contact us via Facebook Messenger to find out about our services or to provide us with your feedback, we process your personal data on the basis of our legitimate interest in responding to your request in accordance with Article 6(1)(f) GDPR and, if applicable, Article 6(1)(b) GDPR if your request is aimed at concluding a contract. As a rule, we receive the following data from you

- Surname, first name
- Gender
- Age, place of residence
- If applicable, user name and other information that you provide to us via your profile
- Information that you send us in your message or comment

The data will be deleted from the Facebook messenger as soon as it is no longer required for the purpose and there are no legal retention periods to the contrary. We assume that this is the case when the matter has been conclusively clarified and the respective conversation with the user has ended."

LinkedIN-Page
If you visit our LinkedIn page, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as "LinkedIn") will process your personal data in accordance with its privacy policy.

We would like to point out that you use this LinkedIn fan page and its functions at your own risk. This applies in particular to the use of the interactive functions (e.g. commenting, sharing or rating).
When you interact with our LinkedIn profile, we receive the following personal data:

- Surname, first name
- Gender
- E-mail address
- Telephone numbers
- Job title and company
- Place of residence
- Information that you send us in your message

To prevent LinkedIn from collecting the above-mentioned data, log out of LinkedIn.

If you contact us via LinkedIn, we process your personal data on the basis of our legitimate interest in responding to your request in accordance with Article 6 (1) (f) GDPR and, if applicable, Article 6 (1) (b) GDPR if your request is aimed at concluding a contract.

Instagram fan pages
If you visit our Instagram fan page, Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA (hereinafter referred to as "Instagram"), processes your personal data in accordance with its privacy policy.

We would like to point out that you use this Instagram page and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing or rating).

In accordance with the Instagram terms of use, we can identify the subscribers to our Instagram page and view their profiles and other information shared by you if they make their profile public.

The data you enter on Instagram, in particular your user name and the content published under your account, will be processed by us to the extent that we may respond to your comments. The data you freely publish and disseminate on Instagram can thus be included by us in our offer and made accessible to our followers.

For the purpose of statistical evaluation and continuous optimization of our pages, we use the "Insights" service. These statistics are provided by Instagram. We have no influence on the processing of your data for this function. In this context, we receive anonymized data about the visitors to our Instagram page. It is therefore not possible for us to identify you personally.
We use this data to make our posts and activity more attractive to visitors to our Instagram page. The legal basis for the storage of "Insight data" is our legitimate interest pursuant to Article 6(1)(f) GDPR in optimizing the fan page and making it attractive to our visitors.

If you contact us via a personal message on Instagram to find out about our services or to give us your feedback, we process your personal data on the basis of your consent in accordance with Article 6(1)(a) GDPR and, if applicable, in accordance with Article 6(1)(c) GDPR if your request is aimed at concluding a contract. As a rule, we receive the following data from you

- User name and other information that you provide to us via your profile
- Information that you send us in your message or comment

The data will be deleted from the personal messages as soon as they are no longer required to achieve the purpose and there are no legal retention periods to the contrary. We assume that this is the case when the matter has been conclusively clarified and the respective conversation with the user has ended.

5. Legal basis for data processing
Unless the legal bases have already been specifically stated in section 4, the following applies to data processing:

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

If the processing of personal data is necessary for the performance of a contract for consideration or free of charge, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

If the processing is necessary to fulfill a legal obligation to which we are subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interests, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

6. Storage period
Unless otherwise stated in this declaration in individual cases, we only store personal data for as long as is necessary to fulfill the purposes pursued.

Your personal data will be deleted as soon as the purpose of the data processing no longer applies.

If there are legitimate grounds for erasure within the meaning of Art. 17 (3) GDPR, such as a legal obligation to retain data, the processing of the data will be restricted during this period. A statutory retention obligation exists, for example, due to documentation obligations under tax and commercial law. In these cases, the data will be deleted when the reason for further storage no longer applies, e.g. when the legally prescribed storage period expires.

7. Recipient of the data
Within our company, only those departments receive your data that need it to fulfill their tasks.

Your personal data will not be transferred to third parties. Exceptions to this only apply if this is necessary for the processing of contractual relationships with you, if you have given your consent, if this is required by law or if we are authorized to pass it on.

This includes in particular the transfer of data to service providers commissioned by us (e.g. processors) or other third parties whose activities are necessary for the performance of the contract (e.g. car manufacturers, shipping companies, banks, debt collection agencies, lawyers, tax consultants, authorities, courts, experts, etc.). The transmitted data may only be used by the third parties for the purposes stated.

8. Rights of data subjects
You have the right to information, correction or addition, deletion, data portability, restriction and objection to the processing of your personal data within the framework of the applicable legal provisions.

We take the protection of your data very seriously. To ensure that personal data is not disclosed to third parties, please send your request by e-mail or by post, clearly identifying yourself, to the above address.

Right to information
You have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details. (Art. 15 GDPR)

Right to rectification or completion
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you or to have incomplete personal data completed. (Art. 16 GDPR)

Right to erasure
You have the right to request the erasure of your personal data stored by us, unless further processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims. (Art. 17 GDPR)

Right to restriction of processing
You have the right to request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR. (Art. 18 GDPR)

Notification obligation of the controller
If you have asserted your right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom we have disclosed your personal data of this rectification or erasure of the data or restriction of processing - unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients. (Art. 19 GDPR)

Right to data portability
You have the right to data portability, i.e. the right to receive the data we have stored about you in a commonly used, machine-readable format. (Art. 20 GDPR)

You also have the right to have your personal data, which we process on the basis of your consent or in fulfillment of a contract and by automated means, handed over to another controller in a commonly used, machine-readable format.

If you request the direct transfer of the data to another controller, this will only take place insofar as this does not restrict the rights and freedoms of other persons.

Right to object
You have the right to object, for reasons relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

9. Right to withdraw your consent to data processing
If we process your personal data on the basis of your consent, you have the right to withdraw this consent at any time with effect for the future.

In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent (e.g. statutory retention periods).

Your withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

10. Right of appeal to the data protection supervisory authority
Without prejudice to any other legal remedies, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged will inform you of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, which you can contact as follows:

Kavalleriestr. 2-4,
40213 Düsseldorf
poststelle@ldi.nrw.de
https://www.ldi.nrw.de/

You can find an overview of all supervisory authorities at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

11. Status and updating of this privacy policy
This privacy policy is valid as of May 2025.

We reserve the right to adapt the privacy policy at regular intervals to the underlying data processing processes or due to changes in the legal situation.