3. Collection of personal data when you visit our website(s)
When visiting our website(s) without personally providing information to us, personal data is collected by our web server collecting the data transmitted in connection with your access.
The data transmitted includes:
- Name of the access provider
- Browser type, version of browser software and language of the browser
- Operating system
- Date and time of access
- Content of access
- Amount of data transferred
- Access status (successful transmission/error)
- Website(s) the access was forwarded to
- Website(s) accessed
In addition to the aforementioned data collection, our website(s) collect data in connection with the usage of cookies (see Section 4. of this Privacy Notice).
Session cookies process information in so-called Session-IDs which serve towards identifying a person during continuous access to our website(s). Session-IDs are deleted automatically when closing the browser.
Persistent cookies will remain in the cookie files of your browser after the browser has been closed. Persistent cookies are deleted after a certain period of time has elapsed. The length of this period varies amongst the different cookies used.
Detailed information concerning third-party cookies can be found in Section 5. of this Privacy Notice.
5. Inclusion of third-party services and cookies
- Google Analytics
Our website(s) may use Google Analytics (‚GA‘), a web analysis service of Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“).
GA enables us to analyze the usage of our website(s) by cookie storage. On our behalf, GA creates reports concerning the activities on our website(s) and provides us with the respective information for statistical purposes and in order to optimize our website.
Anonymized data only (e.g. anonymized IP addresses, the date and time the page was viewed, the length of your stay or the page from which you came to our website) is stored and used on our server using Google Analytics technology. This information does not enable identification of visitors to this website. IP addresses are anonymized before they are stored. This means that Google will anonymize your IP address while the data is still within member states of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the US and anonymized there. The IP address which is transmitted by your browser will not be brought into contact with other data stored by Google.
You can deactivate GA with the following browser-plugin provided by Google: http://tools.google.com/dlpage/gaoptout?hl=de
1.2. Google Marketing/Re-Marketing-Services/Google Adsense
Our website(s) may use the online advertisement service Google AdSense (‘GAS’). This service allows us to integrate advertisements of third parties according to potential user interests. In general, these advertisements will be labeled as Google advertisements. In this context, statistical information about the user may be collected and transmitted to third parties (available at https://support.google.com/dfp_sb/answer/94149).
You can deactivate the service by using the opt-out mechanism provided by Google: http://www.google.com/ads/preferences
Further information concerning the usage of your personal data for advertising purposes, settings, and opt-out options can be found at https://policies.google.com/privacy/partners?hl=en (‘How Google uses data when you use our partners’ sites or apps’), https://policies.google.com/technologies/ads?hl=en (‘Advertising’), https://adssettings.google.com (‘Advertising Preferences’).
Our website(s) may use the online cartographic service Google Maps (‘GM’). The implementation of a map section may include the collection of personal data by Google. The form and extent of data collection in this context is determined by Google and may include the transmission of an IP address and a connection to a Google user account. If you do want to restrict the connection to a Google user account we advise you to log out before using the respective service. Further information concerning GM can be found at:
1.4. Google-Tage Manager / Google AJAX Search API
Our website(s) may use the Google Tag Manager and the Google AJAX Search API in order to administrate and browse our website(s). The form and extent of data collection in this context is determined by Google.
6. Contact possibility via E-Mail/contact form/use of comment functions
If you make use of the possibility to contact us via E-Mail or a provided contact form, the provided information (your E-Mail address, possibly your name and telephone number) will be saved by us in order to process your request. The personal data collected in this context will be deleted if the storage is no longer necessary for this purpose. Alternatively, we may restrict access to the stored data if legal retention periods apply.
If you contact us via E-Mail a secure transfer can only be guaranteed in case of encrypted communication. A transmission of confidential data shall be sent by postal mail.
The usage of comment functions on our website(s) includes the processing of the information provided by you and may include the processing of your IP address in this context.
Our website(s) may use social media plugins. We make use of the so-called two-click-solution, which means that initially no user data is transferred to the plugin providers when accessing our website(s). By clicking on the button of a social media plugin you are activating the plugin which may lead to a data transfer to the plugin provider and eventually the connection to an existing user profile. The plugin provider may be seated outside the European Union (e.g. USA) which may lead to a data transfer in a third country. To prevent/minimize data transfer in this context we advise you to delete cookies prior to activating the plugins. We do not determine the data collection in this context and advise you to take note of the applicable privacy notices of the respective plugin providers.
8. Purpose and legal basis of processing your personal data
In addition to the particular purposes mentioned, the processing of your personal data is required to display our website(s), to provide stability and security of our web servers and to improve the usability of our website(s).
The legal basis for processing your personal data is Art. 6 paragraph 1 sentence 1 f) GDPR. If personal data is processed on the basis of a consent, the legal basis is Art. 6 paragraph 1 sentence 1 a) GDPR.
9. Data transfer to third parties
In general data transfer to third parties is only conducted in the cases mentioned in this Privacy Notice. In addition, data transfer to third parties may occur if:
- we have received your explicit consent (Art. 6 paragraph 1 sentence 1 a) GDPR);
- the processing is necessary in connection with legal claims except if the respective interests are not overridden by the interests or fundamental rights and freedoms of the data subject (Art. 6 paragraph 1 sentence 1 f) GDPR);
- the processing is necessary for compliance with a legal obligation (Art. 6 paragraph 1 sentence 1 c) GDPR);
- the processing is necessary for the performance of a contract with the data subject or the performance of steps at the request of the data subject prior to entering into a contract (Art. 6 paragraph 1 sentence 1 b) GDPR)
10. Data deletion and data storage
Collected personal data will be deleted and/or the access to the data will be restricted if the purpose of the processing activity ceases to be relevant. Extended retention periods may apply in case of statutory legal provisions requiring further data retention.
11. Rights of the data subject and the right to lodge a complaint with a supervisory authority
With regard to the personal data processed you have the following rights according to Art. 12 – 23 GDPR:
- Right to information and access,
- Right to rectification and erasure,
- Right to restriction of processing
- Right to objection
- Right to data portability
In addition, you have the right to lodge a complaint with the competent data protection authority with regard to the processing of your personal data by us.
12. Data security
Personal data processed by us are protected against loss, falsification and unauthorized third-party access by adequate technical and organizational measures.
In order to provide a secure transmission of data between your browser and our systems, we generally use Secure Socket Layer (‘SSL’) encryption technology to encrypt communication between your browser and our web server. URLs of websites using an SSL-encryption start with https://.
13. Update of the Privacy Notice and contact to our Data Protection Officer
Our Privacy Notice may be updated according to changes to our website(s). You can find the current version of our Privacy Notice on our websites.
For further questions and suggestions in relation to data protection, you may contact our Data Protection Officer via the contact details provided under Section 2. of this Privacy Notice.