Privacy notice

Privacy policy

We appreciate your interest in our company and our products and services and would like you to feel secure when visiting our website, also with regard to the protection of your personal data. We want you to know when we store which data and how we use it. We are subject to the provisions of the European General Data Protection Regulation (GDPR) as well as the supplementary provisions of the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG). We have taken suitable technical and organisational measures to ensure that both we and the service providers commissioned by us comply with data protection regulations.

This data protection notice applies to our online offers. This includes our websites, their functions and content as well as external online presences, such as our presences in social media. Likewise, this general data protection notice serves to inform you about further processing of your personal data and our fulfillment of the information obligations towards you.

The terms used in this privacy notice, such as data controller or personal data , are used in accordance with the definitions of the GDPR. For reasons of readability and thus also in the sense of a comprehensible information transfer, the naming of individual articles, paragraphs or the like is generally omitted.

Responsible

The responsible party within the meaning of the DSGVO and other national data protection laws of the member states as well as other data protection regulations is the

Our headquarter in Kirchzarten
Testo Industrial Services GmbH
Gewerbestraße 3
79199 Kirchzarten
GERMANY

Phone: +49 7661 90901-0
E-Mail: info(at)testotis.com
Web: www.testotis.com

Data Protection Officer

The responsible party has appointed a data protection officer. His contact details are privacy(at)testotis.com

You can contact our data protection officer directly at any time with questions about data protection and the enforcement of your rights listed below.

General information on data processing

Legal basis for the processing of personal data

Within the framework of data protection law, processing of personal data is generally not permitted unless there is a legally permissible reason for permission. We are obliged to inform you about the legal basis of the data processing

Insofar as we obtain your consent for processing operations of personal data, this serves as the legal basis.

When processing personal data that is necessary for the performance ofacontractto which you are a party, the performance of the contract serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as processing of personal data is necessary for compliance with a legal obligation to which we are subject, this shall serve as the legal basis.

In the event that vitalinterests of the data subject or another natural person make processing of personal data necessary, this serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and these interests, your fundamental rights and freedoms do not override, this serves as the legal basis for the processing.

Data transfer to third countries

The GDPR ensures a uniformly high level of data protection within the European Union (EU) and the European Economic Area (EEA). When selecting our service providers and cooperation partners, we therefore rely on European partners wherever possible when your personal data is to be processed.

If we have your data processed in a third country - i.e. outside the EU/EEA - this is always done in accordance with the legal requirements.

In addition to your express consent or contractually or legally required transfer, we only have your data processed in third countries with a recognized level of data protection, through a contractual obligation by so-called standard contractual clauses of the EU Commission, in the presence of certifications or binding internal data protection regulations.

Existence of automated decision making

We do not use automated decision making.

Recipients of the data / categories of recipients

Within our company, we ensure that only those persons receive your data who need them to fulfill contractual and legal obligations.

In some cases, we use carefully selected external service providers to process your data. If data is passed on to service providers within the framework of so-called order processing , this is done in accordance with the provisions of the DSGVO. Our order processors are carefully selected, bound by our instructions and inspected at regular intervals. We only commission processors who provide sufficient guarantees that appropriate technical and organizational measures are taken in such a way that the processing is carried out in accordance with the requirements of DSGVO and BDSG and ensures the protection of your rights.

Disclosure of personal data to third parties

As a matter of principle, we do not pass on any personal data to third parties without your express consent. If, in the course of processing, we nevertheless disclose your data to third parties, transmit it to them or otherwise grant them access to the data, this will also be done exclusively on the basis of one of the aforementioned legal grounds.

For example, we transmit data to payment service providers or suppliers if this is necessary for the fulfillment of the contract. If we are required to do so by law or by court order, we must transfer your data to the respective authorities entitled to receive such information.

Use of our online offer

In principle, you can use our online offer without disclosing your identity. In this section, we explain when and in what context we process data when you use our online offers, which offers from service providers we have implemented, how they work and what happens to your data.

Children

Our offer is basically aimed at adults. Persons under 16 years of age may not transmit any personal data to us without the consent of their parents or legal guardians.

Transport encryption

To ensure the security of your data during the transmission process, we use a state-of-the-art SSL/TLS encryption process.

Data collection when visiting our websites

Insofar as you use our websites for information purposes only, i.e. you do not register for an offer, conclude a contract with us or otherwise disclose information to us, we only collect the personal data that your browser transmits to our servers.

When you access our websites, we collect the following data, which is technically necessary for us to be able to display our websites to you and to ensure stability and security:

IP address of the visitor
Date and time of the request
Content of the request (concrete page)
Access status/HTTP status code
data volume transferred in each case
Website from which the request comes
Operating system of the visitor
Language and version of the browser software.

This data is temporarily stored in the log files of our system for a maximum of seven days. Storage beyond this is possible, but in this case the IP addresses are shortened or alienated so that it is no longer possible to assign the calling client. In this context, the log files are not stored together with other personal data relating to you. The legal basis for these processing operations is our legitimate interest.

Since the collection of data to display the websites and the storage of the data in log files is absolutely necessary for the operation of our websites and the maintenance of IT security, you do not have the option to object in this respect.

Inquiries to us

If you send us an inquiry via our website - for example, by using the contact form - your personal data will be processed in order to answer your inquiry:

Customer account

Personal data is required for the management of a customer account. The required data are marked with a "*" in the registration. By registering, you consent to the use of this data for the purpose of account management. For orders via the store, further data are required depending on the type of payment. For the purpose of processing electronic payments, we may cooperate with electronic payment service providers and transfer your personal data for these processing purposes.

Cookies use

General information on the use of cookies

In addition to the previously mentioned data, cookies are stored on your terminal device when you use our websites. Cookies are records that can be sent from a website to the browser, which stores them and sends them back. Different data can be stored in cookies, which are read by the entity that sets the cookie.

Legal basis

We use cookies in accordance with the legal requirements. We therefore obtain your prior consent to the use of cookies, unless this consent is not required by law. Consent is not necessary if the storage and reading of the information stored in cookies is absolutely necessary in order to provide the digital service you have expressly requested (i.e. our online offer). In all other cases, your consent is required. You can give this consent in advance, verifiably and revocably with the help of our Consent Management Tool.

Information on the legal basis under data protection law for the respective use of cookies can be found either in this data protection notice or in our cookie management platform.

Storage duration

Regarding the storage period, two different types of cookies can be used:

Session cookies: these cookies are deleted after you leave our online offer and close your browser.
Persistent cookies remain stored even after the browser is closed. For example, the login status or entered search terms can be stored. These cookies can also be used for range measurement.

Information on the storage period of the respective cookies can be found in our Cookie Management Platform.

Information about services used

Cookie Management Platform

We use a cookie management platform. This allows you to manage the cookies we use and the consents you have given, to find out more information about data processing using cookies, and to view the purpose and storage period of the cookies used in each case.

We use the Consent Management Platform "Usercentrics" of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. This service allows us to obtain and manage the consent of website users for data processing. Usercentrics is a recipient of your personal data and acts as a processor for us. Detailed information on the use of Usercentrics can be found at: https://https://usercentrics.com/privacy-policy/.

Usercentrics collects data generated by end users who use our website. When an end user provides consent, Usercentrics automatically logs the following data:

Browser information.
Date and time of access.
Device information.
The URL of the visited page.
Geographic location.
Website page path.
The consent status of the end user, which serves as proof of consent.

The consent status is also stored in the end user's browser so that the website can automatically read and follow the end user's consent in all subsequent page requests and future end user sessions for up to 12 months. The consent data (consent and revocation of consent) is stored for three years. The retention period corresponds to the regular limitation period pursuant to § 195 BGB. The data will then be deleted immediately or passed on to the responsible person in the form of a data export upon request.

The functionality of the website is not guaranteed without the described processing. There is no possibility for the user to object as long as there is a legal obligation to obtain the user's consent to certain data processing operations.

Event registration

We offer you the possibility to register online for our customer events. In doing so, we process your contact data for the purposes of registration, sending e-mails with information about the respective events, and other organizational purposes. As part of the registration process, we store information on your terminal device. This information is necessary for the proper functioning of the registration form. For the administration of our customer events we use the tool guestoo of the German company Code Piraten GmbH, Am Ruhmbach 44, 45149 Essen. Code Piraten GmbH has been engaged by us as a processor pursuant to Article 28 DSGVO.

Scheduling

We use Microsoft Bookings to offer you an uncomplicated way of making appointments. There you can see when we have free time slots available and can choose a date that suits you and book it by entering your details. You will then receive a confirmation e-mail and an appointment invitation

This service is provided by Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland or Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. The provider has been engaged by us as a processor in accordance with Article 28 GDPR.

Third country transfer

Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider in order to establish an appropriate level of data protection. The European Commission adopted its adequacy decision for the USA on 10 July 2023. Microsoft is certified according to the EU-US Privacy Framework.

Recipients / categories of recipients

Recipients of the data are/may be

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Legal basis

The legal basis for the use of Microsoft Bookings is your voluntarily granted consent.

Information on data processing by third parties

Google Analytics

If you have given your consent, Google Analytics is used on this website. This is a web analytics service provided by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google). This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze a user's activities across devices.

Scope of processing

Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics 4 has IP address anonymization enabled by default. Due to IP anonymization, your IP address will be truncated by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

However, we would like to expressly point out at this point that Google generally processes data for its own purposes, in particular also for the purpose of providing its web analysis and tracking service. Within the scope of Google Analytics, further usage data is collected that is to be assessed as personal data, such as identification features of the individual users, which also allow a link to an existing Google account, for example.

During your website visit, your user behavior is recorded in the form of events . Events can be:

Page views
First visit to the website
Session start
Your "click path", interaction with the website
Scrolls (whenever a user scrolls to the end of the page (90%))
Clicks on external links
internal queries
Interaction with videos
File downloads
ads seen / clicked
Language setting

Also recorded:

Your approximate location (region)
Your IP address (in shortened form)
technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
Your Internet provider

Processing purposes

On our behalf, Google will use this information for the purpose of evaluating your use of the website and compiling reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns].

Demographic characteristics

We use the "demographic characteristics" function of Google Analytics to display suitable advertisements to website visitors within the Google advertising network. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person.

E-commerce tracking

We use the "e-commerce tracking" function of Google Analytics. E-commerce tracking allows us to analyze the buying behavior of website visitors to improve our online marketing campaigns. Here, information such as orders placed, average order values, shipping costs and the time from viewing to purchasing a product is recorded. This data can be summarized by Google under a transaction ID, which is assigned to the respective user or his device.

Signals

We use Google Signals. This allows Google Analytics to capture additional information about users who have enabled personalized ads (interests and demographics) and ads can be delivered to these users in cross-device remarketing campaigns.

Google Remarketing

Google Remarketing analyzes your user behavior on our website (e.g. clicking on certain products) in order to classify you in certain advertising target groups and subsequently play suitable advertising messages to you when you visit other online offers (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Remarketing can be linked with Google's cross-device functions. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one end device (e.g. cell phone) can also be displayed on another of your end devices (e.g. tablet or PC).

Third country transfer

The European Commission adopted its adequacy decision for the USA on 10 July 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.

Recipients / categories of recipients

Recipients of the data are/could be

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Art. 28 DSGVO)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Duration of data storage

You can find out how long the cookies are stored on your end device from our Cookie Management Platform.

Legal basis

The legal basis for the use of Google Analytics is your voluntarily given consent.

Revocation

You can revoke your consent at any time with effect for the future by calling up the cookie settings and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.

Google Ads and Conversion Tacking

If you have given your consent, Google Ads including conversion tracking will be used on this website. This is a service of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter referred to as Google). Google Ads is a web analytics service We use conversion tracking for targeted advertising of our offer:

If you click on an ad placed by Google, the conversion tracking we use saves a cookie on your terminal device. When you visit a particular page of our website, both we and Google can evaluate that you have clicked on an ad placed by us on Google and that you have subsequently been redirected to our website.

Through the information collected in this way, Google provides us with statistics about the visit to our website. In addition, this provides us with information about the number of users who clicked on our ad(s) and about the pages of our website that were subsequently accessed. This information is used to create conversion statistics for Ads customers who have opted in to conversion tracking. The customers, i.e. we as the website operator, learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

Third country transfer

Recipients / categories of recipients

Recipients of the data are/could be

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Art. 28 DSGVO)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Duration of data storage

You can find out how long the cookies are stored on your end device from our Cookie Management Platform.

Legal basis

The legal basis for the use of Google Ads is your voluntarily given consent.

Revocation

Google Tag Manager

Our website uses Google Tags This is a service provided by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter referred to as Google). Google Tag Manager is a solution that allows us to manage website tags through one interface. Tags are small code elements on our website that are used, among other things, to measure traffic and visitor behavior.

The Tag Manager keeps track of a set of tags and trigger rules that determine when these tags should be used on us. When you visit our website, the current tag configuration is sent to your browser. It contains instructions on which tags to trigger. The Tag Manager takes care of triggering tags, which in turn may collect data. The Tag Manager itself does not access this data, as it is operated via a cookie-less domain and does not collect any personal data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

Google itself collects information about how the service is used and which tags are implemented and in what way. According to Google, this data is used to improve, maintain, protect and develop the service.

You can find more information in the Google Tag Manager Usage Guidelines and the Google Privacy Policy.

Hotjar Heat Maps

If you have given your consent, Hotjar is used on this website. This is session recording and heat mapping service provided by Hotjar Ltd, Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta.

We use Hotjar to better understand the needs of our users and to optimize the offer and experience on this website. Using Hotjar's technology, we get a better understanding of our users' experiences (e.g., how much time users spend on which pages, which links they click), and this helps us tailor our offering to our users' feedback. Hotjar works with cookies and other technologies to collect data about our users' behavior and about their end devices, in particular IP address of the device (collected and stored only in anonymized form during your website use), screen size, device type (Unique Device Identifiers), information about the browser used, location (country only), language preferred to view our website. Hotjar stores this information on our behalf in a pseudonymized user profile.

Recipients / categories of recipients

The recipients / categories of recipients of the collected data can be found in our Cookie Management Platform.

Duration of data storage

You can find out how long the cookies are stored on your end device from our Cookie Management Platform.

Legal basis

The legal basis for the use of Hotjar is your voluntarily given consent.

Revocation

LinkedIn Insight Tag

We use LinkedIn Conversion Tracking from LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn Conversion Tracking is a retargeting and analytics tool powered by the LinkedIn Insight Tag. The LinkedIn Insight tag enables the collection of data about visits to our website, including URL, referrer URL, IP address, device and browser characteristics, and timestamps. This data is encrypted, IP addresses are shortened, and members' unique IDs are removed within seven days to pseudonymize the data.

LinkedIn does not share any personally identifiable information with us, but only provides aggregate reports on website audience and ad performance. LinkedIn also provides retargeting for website visitors, so we can use this data to display targeted ads outside of our website without identifying the member. You can find more information about privacy at LinkedIn here.

Third country transfer

Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. A transmission of data to the USA and access by US-American cannot be excluded. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.

Recipients / categories of recipients

Recipients of the data are/could be

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Duration of data storage

You can find out how long the cookies are stored on your end device from our Cookie Management Platform.

Legal basis

The legal basis for the use of LinkedIn Insight Tag is your voluntarily given consent

Revocation

Microsoft Dynamics

On our websites, we use Microsoft Dynamics 365, a service for inbound and outbound marketing from Microsoft Corp, One Microsoft Way, Redmond, Washington, USA.

We use Dynamics to carry out marketing campaigns, for analysis purposes, and to address customers and potential customers in a target group-specific manner.

Processed data include, but are not limited to:

the amount of data transferred and browser information
Date and time of the visit
E-mail and IP address
Referrer URL

Third country transfer

Recipients / categories of recipients

Recipients of the data are/could be

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Duration of data storage

You can find out how long the cookies are stored on your end device from our Cookie Management Platform.

Legal basis

The legal basis for the use of Microsoft Dynamics is your voluntarily given consent.

Revocation

Google Maps

We use Google Maps to display our location. This is a service of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter referred to as Google ). We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to Google. Only if you click on Load map , personal data of you will be transmitted to Google and stored there The processed data may include in particular your IP addresses and location data, which, however, will not be processed without your consent.

Furthermore, by using Google Maps, you enter into a direct usage relationship with Google. You can find more information about Google'sterms of use and privacy policy here.

Recipients / categories of recipients

The recipient of the data collected is Google

Duration of data storage

You can find out how long the cookies are stored on your end device from our Cookie Management Platform.

Revocation

Youtube

We have integrated components from YouTube in various places. YouTube is an online video portal that allows posting videos. YouTube is the service of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google ). You can find more information about Google's terms of use and privacy policy here.

We embed the videos stored on YouTube using a so-called two-click solution. This means that when you call up a page in which a video is embedded, the video is initially deactivated and therefore does not load. Only after we have received your consent, the corresponding video will be loaded.

The integration of YouTube content takes place in the so-called extended data protection mode. YouTube provides this and thus ensures that initially no cookies are stored on your device. However, when the relevant pages are called up, the data mentioned above under Data collection when visiting our websites is transferred. However, this information cannot be attributed to you unless you have logged in to YouTube or another Google site before accessing the page or are permanently logged in. We would like to point out at this point that Google processes this data worldwide and therefore a third country transfer also takes place.

Third country transfer

Recipients / categories of recipients

Recipients of the data are/could be

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Art. 28 DSGVO)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Legal basis

The legal basis for the use of Youtube is your voluntarily given consent.

Revocation

Online offers in social media

We offer online services on various platforms in order to provide information and to be able to contact you.

We have no influence on the processing of personal data by the respective platform operator. As a rule, when you visit our offers there, cookies are stored in your browser by the platform operator, in which your usage behavior or interests are stored for market research and advertising purposes.

The usage profiles obtained in this way - usually across devices - are used by the platform operators to show you personalized advertising. The data processing may also affect persons who are not registered as users with the respective platform. In some circumstances, your data may be processed outside the area of the European Union, which may make it more difficult to enforce your rights. However, when selecting such platforms, we make sure that the operators undertake to comply with EU data protection standards.

The processing of your personal data when visiting one of our offers in social media is based on our legitimate interests in a diverse external presentation of our company and the use of an effective information opportunity and communication with you.

Detailed information on data processing in connection with the use of our offers on these platforms, objection options and the assertion of information rights can be obtained from the privacy policy of the relevant platform operator.

Facebook

Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Agreement on joint processing of personal data in accordance with the requirements of the GDPR.
Privacy policy of the provider

YouTube

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Instagram

Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Agreement on joint processing of personal data in accordance with requirements of the GDPR.
Privacy policy of the provider

LinkedIn

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

Agreement on joint processing of personal data in accordance with requirements of the GDPR.
Privacy policy of the provider

Xing

XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany

Newsletter

We offer you the possibility to subscribe to our free e-mail newsletter. We send this newsletter only with your consent. When registering for a newsletter, the data from the input mask (name and e-mail address) are transmitted to us and stored as long as the subscription to the newsletter is active.

For the processing of this data for the purpose of sending the newsletter, your consent is obtained and reference is made to this data protection notice. For the registration process, we use the so-called "double opt-in procedure". Once you have registered, you will receive an e-mail in which you must click on a link to confirm your registration. In this way, we prevent unauthorized third parties from logging in using your e-mail address.

We log the registration process in order to be able to prove the process in accordance with legal requirements. The IP address of the calling end device, date and time of the login are stored. The data you provide will be stored as long as the subscription to the newsletter is active.

You can cancel the subscription at any time. For this purpose, there is a corresponding unsubscribe link in every newsletter. This also enables you to revoke your consent. The legal basis for the processing of your data is your voluntarily given consent to receive newsletters.

If you purchase goods or services from us and provide us with your e-mail address, we reserve the right to use it for sending newsletters with direct advertising for our own similar goods or services. This serves to protect our legitimate interests in addressing our customers in an advertising manner, which outweigh our interests in the context of a balancing of interests. You can object to this use of your data at any time by sending a message to the contact options mentioned below or via the unsubscribe link in the advertising e-mail, without incurring any costs other than the transmission costs according to the basic rates. Insofar as the newsletter is sent on the basis of the sale of goods or services, we refer to the provisions of the Unfair Competition Act (UWG).

Analysis of opening rates/

Our newsletters contain a pixel-sized file (a so-called web beacon or tracking pixel), which is retrieved from our server when the newsletter is opened, or, if we use a shipping service provider, from their server. Technical information, such as information about the browser and your system, as well as your IP address and the time of the retrieval, are collected during this retrieval.

This information is used, among other things, for the technical improvement of our newsletter. In addition, we would like to determine your access time and reading behavior based on your retrieval location. This analysis includes determining whether newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to individual recipients. It is in no way in our interest to monitor individual users. Rather, the evaluations serve us to recognize the reading habits of our users and to adapt our content to them or to send different content that reflects the interests of our user groups.

The evaluation of the newsletter and the measurement of its success are carried out, subject to the express consent of the users, on the basis of our legitimate interests for the purpose of using a user-friendly and secure newsletter system that serves our business interests and meets the expectations of the users.

A separate revocation of the performance measurement is unfortunately not possible. If you wish to object to the performance measurement, you must cancel your newsletter subscription. I.e. if you have consented, you must revoke your consent. Upon receipt based on our previously declared legitimate interest, you must object to receiving the newsletter.

The legal basis for sending our newsletter is either your voluntarily given consent or our legitimate interest

Possibility of objection (Opt-Out)

You can cancel the receipt of our newsletter at any time, i.e. revoke your consent or object to further receipt. You will find a link to cancel the newsletter either at the end of each newsletter or you can otherwise use one of the contact options given above, preferably by e-mail, for this purpose.

We may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them to prove consent was previously given. The processing of this data is limited to the purpose of a possible defense against claims . In the case of obligations to permanently observe objections, we reserve the right to store the e-mail address in a blacklist for this purpose alone.

Recipients / categories of recipients

The recipient of the collected data is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. CleverReach has been engaged by us as a processor in accordance with Article 28 DSGVO.

Commercial and business services

We process data of our contractual and business partners, e.g. suppliers, customers and interested parties (hereinafter referred to as Business partners) within the scope of contractual or comparable legal relationships as well as related measures and within the scope of communication with our business partners.

We process this data to fulfill our contractual obligations, to secure our rights and for the purposes of related administrative tasks and our corporate organization. Within the framework of applicable law, we only disclose the data of our business partners to third parties to the extent that this is necessary for the aforementioned purposes or to fulfill legal obligations, or with the consent of the data subjects (e.g. to participating telecommunications, transport and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). The contractual partners will be informed about further forms of processing, e.g. for marketing purposes, within the scope of this data protection notice.

We inform our business partners which data is required for these purposes before or during the data collection process or in person.

Customer satisfaction surveys

To ensure our quality, we conduct customer satisfaction surveys at regular intervals. On a biennial basis, customers are invited to participate via email. In addition, an order-related survey is carried out, which is sent to the customer by e-mail after the invoice has been sent.

Deletion of data and storage period

As soon as the purpose for processing ceases to apply, we delete or block your personal data. However, we may store data beyond this period if this is required by legal regulations to which we are subject. This applies above all to data that must be retained for legal archiving reasons (e.g. for commercial law reasons usually for 6 years or for tax law reasons usually for 10 years).

Processed data:

Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. e-mail, telephone numbers), contract data (e.g. subject matter of contract, term,).

Purposes of processing:

Providing contractual services and customer service, contact requests and communications, internal organizational procedures, managing and responding to requests.

Legal basis:

Contract performance/pre-contractual requests, Legal obligation Legitimate interests.

Applications

In the context of an application with us, the data you provide - such as your contact details and qualifications - will be used exclusively for the purpose of processing the application procedure.

We use an online application portal to organize the applications. Within the scope of using this online portal, the following personal data are processed (title, first name, last name, street and house number, postal code and city, e-mail address, telephone/mobile number, free field for application letters, attachment upload for application letters and documents). The transmission of the data is encrypted.

Your data will be passed on internally to the responsible department heads. We process your personal data for the purpose of your application for an employment relationship, insofar as this is necessary for the decision on the establishment of an employment relationship with us.

Furthermore, we may process personal data about you insofar as this is necessary to defend asserted legal claims against us arising from the application process.

Your data will be deleted 6 months after completion of the application process, unless otherwise agreed with the applicant (see e.g. inclusion in the applicant pool). If your application is followed by the conclusion of an employee contract, the data will be included in the personnel file....

How long will your data be stored?

We store your personal data for as long as is necessary to make a decision about your application. Insofar as an employment relationship between you and us does not come about, we may also continue to store data insofar as this is necessary for the defense against possible legal claims. In this context, the application documents will be deleted 6 months after notification of the rejection decision, unless longer storage is required due to legal disputes.

Inclusion in the applicant pool

We will be happy to include your application in an applicant pool. Your consent is required for this. You can give this consent by activating the corresponding option before sending your application.

If your application documents in the applicant pool are not used by us within one year, your application documents will be automatically deleted.

No automated decision making

No automated decision is made in individual cases, i.e. the decision on your application is not based exclusively on automated processing.

Your data subject rights

As a data subject, you are entitled to various rights, which we would like to inform you about in the following. Depending on the reason and type of processing of your personal data, you may have the rights described in the following sections.

Your right to information

As a data subject, you have the right to know from us whether we process personal data about you and - if so - which personal data we process about you.

You also have the right to request from us a copy of your personal data that is the subject of processing.

Your right to rectification

You have the right to request that we correct any personal data that you believe is inaccurate without undue delay.

You also have the right to request us to complete such personal data that you consider incomplete.

Your right to deletion

If the legal requirements are met, you can request the deletion of your personal data.

This is the case, for example, if we process your data based on your consent and you revoke it.

However, we may not delete data, for example, if we have to store it due to legal retention periods. We also cannot comply with your deletion request if it is necessary for us to process your personal data in order to assert, exercise or defend legal claims.

Your right to restrict processing

Under certain conditions, you as the data subject have the right to demand that we restrict the processing of your personal data.

One of these conditions is, for example, that you dispute the accuracy of your personal data. Or also the case in which we no longer need your personal data, but you need this data to assert, exercise or defend legal claims.

Your right of objection

If we process your personal data, on the basis of a legitimate interest, you have the right to object to this processing if this arises due to your particular personal situation. This right of objection does not exist, however, insofar as there is a compelling public interest in the processing which outweighs your interest, a legal provision obliges us to process or the processing serves the assertion, exercise or defense of legal claims.

If we use your personal data for direct advertising, then you have the right to object to the processing for the purpose of such advertising at any time. If you object to processing for this purpose, your personal data will no longer be processed for this purpose.

If we process your data based on your consent, you have the right to revoke your consent at any time with effect for the future. Your revocation does not affect the lawfulness of the processing that took place until the revocation.

Your right to data portability

You only have this right with regard to personal data that you have provided to us yourself. You have the right to request that we transfer this personal data directly to another controller.

Alternatively, you have the right to request that we provide you with your data in a machine-readable format. However, this only applies if we process your personal data on the basis of your consent or on the basis of a contract and the processing is carried out with the help of automated processes.

Complaint to supervisory authority

You also have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of personal data concerning you violates data protection law.

Changes

This privacy notice will be adjusted from time to time. These adjustments are made, for example, when technical progress, legal requirements or other influences result in changes.

Social media privacy notice

Change cookie settings

Privacy notice

Legal basis

Microsoft Dynamics

Processed data:

Purposes of processing:

Legal basis:

Your right to information

Your right to rectification

Your right to deletion

Your right to restrict processing

Your right of objection

Your right to data portability

Changes

Information about special cookies: