1 Designation of the responsible party
The responsible party for data processing on this website is:
Breite Str. 7
DE-91207 Lauf an der Pegnitz
The responsible party decides alone or jointly with others on the purposes and means of processing personal data (e.g. names, contact details, etc.).
2 Types of data processed
- Inventory data (e.g., personal data, names or addresses)
- Contact data (e.g., e-mail, telephone numbers)
- Content data (e.g., text entries, photographs, videos)
- Usage data (e.g., websites visited, interest in content, access times)
- Meta/communication data (e.g., device information, IP addresses)
3 Categories of data subjects
Visitors and users of the online offer (hereinafter referred to collectively as “users”).
4 Purpose of processing
- Provision of the online offer, its functions and contents
- Answering contact requests and communicating with users
- Safety precautions
- Reach measurement/Marketing
5 Revocation of your consent to data processing
Some data processing operations are only possible with your expressed consent. A revocation of your already given consent is possible at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
6 Right of complaint to the responsible supervisory authority
In the event of a breach of data protection law, you as the party concerned have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority with regard to data protection issues is the data protection officer of the federal state in which our company has its registered office. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
7 Right to data transferability
You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to third parties. The information is provided in a machine-readable format. If you request the direct transfer of the data to another responsible person, this will only be done as far as it is technically feasible.
8 Right to information, correction, blocking, deletion
You have the right to recieve free information about your stored personal data, the origin of the data, its recipients and the purpose of the data processing and, if applicable, the right to correction, blocking or deletion of this data at any time within the framework of the applicable statutory provisions. In this regard and also for further questions on the subject of personal data, you can contact us at any time via the contact options listed in the imprint.
9 SSL or TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the “https://” address line of your browser and by the lock symbol in the browser line.
10 Server log files
In server log files, the provider of the website automatically collects and stores information that your browser automatically transmits to us. These are:
- Visited page on our domain
- Date and time of the server request
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- IP address
These data are not merged with other data sources. The data processing is based on Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
11 Google Cloud Services
We use the cloud and cloud software services offered by Google (the Software as a Service, for example, Google Suite) for the following purposes: storing and managing documents, managing calendars, sending email, spreadsheets and presentations, exchanging documents, content and information with specific recipients or publishing web pages, forms or other content and information, and chatting and participating in audio and video conferences.
Here the personal data of the users are processed, as far as these become part of the documents and contents processed within the described services or are part of communication procedures. This may include, for example, user master data and contact data, data on processes, contracts, other processes and their contents. Google also processes usage data and metadata used by Google for security purposes and service optimization.
When using publicly accessible documents, websites or other content, Google may store cookies on the user’s computer for the purpose of web analysis or to remember user preferences.
We use the Google Cloud services on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO in efficient and secure administrative and cooperation processes. Furthermore, the processing takes place on the basis of an order processing contract with Google (https://cloud.google.com/terms/data-processing-terms).
The Google Cloud Services are offered by Google Ireland Limited. As far as a transmission to the USA takes place, we refer to the certification of Google USA under the Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000000001L5AAI&status=Active) and standard protection clauses (https://cloud.google.com/terms/data-processing-terms).
12 Contact Form
Data transmitted via the contact form will be stored including your contact data in order to be able to process your request or to be available for follow-up questions. These data will not be passed on without your consent.
The data entered in the contact form will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). A revocation of your already given consent is possible at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
Data transmitted via the contact form will remain with us until you request deletion, revoke your consent to storage or until data storage is no longer necessary. Mandatory legal provisions – in particular retention periods – remain unaffected.
With the following information we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedures and your rights of objection. By subscribing to our newsletter, you declare your agreement with the receipt and the described procedures.
Content of the newsletter: We send newsletters, e-mails and other electronic notifications containing advertising information (hereinafter referred to as “newsletter”) only with the consent of the recipient or legal permission. If the contents of the newsletter are specifically described within the scope of registration, they are decisive for the consent of the user. In addition, our newsletters contain information about our services and us.
Double-Opt-In and logging: The registration to our newsletter takes place in a so-called Double-Opt-In procedure. I.e. after registration you will receive an e-mail in which you will be asked to confirm your registration. This confirmation is necessary so that nobody can register with a foreign e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Likewise the changes of your data stored with the dispatch service provider are logged.
Registration data: To subscribe to the newsletter, it is sufficient to enter your e-mail address. Optionally, we ask you to enter a name in the newsletter for the purpose of addressing you personally.
The dispatch of the newsletter and the performance measurement associated with it are based on the consent of the recipients in accordance with Art. 6 Para. 1 lit. a, Art. 7 DSGVO in conjunction with § 7 Para. 2 No. 3 UWG or, if consent is not required, on our legitimate interests in direct marketing in accordance with Art. 6 Para. 1 lt. f. DSGVO in connection with § 7 Abs. 3 UWG.
The registration procedure is recorded on the basis of our legitimate interests pursuant to Art. 6 Para. 1 lit. f DSGVO. Our interest is directed towards the use of a user-friendly and secure newsletter system that serves our business interests as well as the expectations of the users and furthermore allows us to provide evidence of consent.
Cancellation/revocation – You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. We may store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before deleting them in order to be able to provide evidence of a previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of a consent is confirmed at the same time.
Some cookies are “session cookies”. Such cookies are deleted automatically at the end of your browser session. On the other hand, other cookies remain on your terminal until you delete them yourself. Such cookies help us to keep you on your computer when you return on our website.
may result in limited functionality of our website.
The setting of cookies, which are necessary for the exercise of electronic communication processes or the provision of certain functions desired by you (e.g. shopping cart), takes place on the basis of Art. 6 Para. 1 lit. f DSGVO. As the operator of this website, we have a legitimate interest in the storage of cookies for the technically error-free and smooth provision of our services.
More Information about the cookies we use, you can find here.
15 Google Analytics
Our website uses functions of the web analysis service Google Analytics. Provider of the web analytics service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses “cookies”. These are small text files that your web browser stores on your device and allow analysis of website usage. Information generated by cookies about your use of our website are transmitted to a Google server and stored there. The server location is usually the USA.
Google Analytics cookies are set on the basis of Art. 6 Para. 1 lit. f DSGVO. As the operator of this website, we have a legitimate interest in analysing user behaviour in order to optimise our website and, where appropriate, advertising.
The cookie settings used on our website you can change here.
15.1 IP anonymization
We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google can identify your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area (EEA), before transmission to the United States. There may be exceptions where Google transfers the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to monitor your use of the website to evaluate, in order to provide reports over Website activities and around further with the Website use and the Internet use connected services opposite us to furnish. The IP address transmitted by Google Analytics is not merged with other Google data.
15.2 Browser Plugin
The setting of cookies by your web browser can be prevented. However, some functions of our website may be restricted as a result. You may also opt out of the collection of data about your website usage, including your IP address and subsequent processing by Google. This is possible by downloading and installing the browser plugin accessible via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
15.3 Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set to prevent your information from being collected on future visits to our website: Disable Google Analytics.
15.4 Order processing
We have entered into an order processing agreement with Google in order to fully comply with legal data protection requirements.
15.5 Demographic characteristics of Google Analytics
Our website uses the function “demographic features” of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of the site visitors. This data originates from interest-related advertising from Google and third party visitor data. It is not possible to assign the data to a specific person. You can deactivate this function at any time. This is possible via the ad settings in your Google Account, or by generally prohibiting the collection of your data by Google Analytics, as explained under “Objection to data collection”.
16 Google Web Fonts
Our website uses web fonts from Google. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
By using these web fonts it will be possible for us to present you with the desired display of our website, regardless of which fonts are available to you locally. This is done by retrieving the Google Web Fonts from a Google server in the USA and the associated transfer of your data to Google. This is your IP address and which page you have visited on our website. The use of Google Web Fonts is based on Art. 6 para. 1 lit. f DSGVO. As the operator of this website, we have a legitimate interest in the optimal presentation and transmission of our website.
The company Google is certified for the US-European data protection agreement “Privacy Shield”. This data protection agreement is intended to ensure compliance with the data protection level applicable in the EU.
On this website we use HubSpot for our online marketing activities. HubSpot is a software company from the USA with an office in Ireland. Contact us: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.
This is an integrated software solution that covers various aspects of our online marketing. These include, but are not limited to:
E-mail marketing (newsletters as well as automated mailings, e.g. to provide downloads), social media publishing & reporting, reporting (e.g. traffic sources, access, etc. …), contact management (e.g. user segmentation & CRM), landing pages and contact forms.
HubSpot is certified under the terms of the “EU – U.S. Privacy Shield Framework” and is subject to the TRUSTe ‘s Privacy Seal and the “U.S. – Swiss Safe Harbor” Framework.
More information from HubSpot regarding the EU data protection regulations
More information about the cookies used by HubSpot can be found here & here.
If you generally do not wish HubSpot to record your data, you can prevent the storage of cookies at any time by changing your browser settings.
The cookie settings used on our website you can change here.
18 Application procedure
The application process requires applicants to provide us with the data necessary for their assessment and selection. The information required can be found in the job description or, in the case of online forms, in the information provided there.
In principle, the information required includes personal information such as name, address, contact details and proof of the qualifications required for a job. Upon request, we will also be happy to provide you with additional information.
If made available, applicants can send us their applications using an online form. The data will be transmitted to us encrypted according to the state of the art. Applicants can also send us their applications by e-mail. Please note, however, that e-mails on the Internet are generally not sent in encrypted form. As a rule, e-mails are encrypted during transport, but not on the servers from which they are sent and received. Therefore, we cannot assume any responsibility for the transmission path of the application between the sender and the reception on our server. Applicants are welcome to contact us about how to submit their application or send it to us by post.
In the event of a successful application, the data provided by the applicants can be further processed by us for the purposes of the employment relationship. Otherwise, if the application for a job offer is not successful, the applicant’s data will be deleted. Applicant data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. Subject to justified revocation by the applicants, the data will be deleted at the latest after a period of six months so that we can answer any follow-up questions regarding the application and comply with our duty to provide evidence under the regulations on equal treatment of applicants. Invoices for any reimbursement of travel expenses will be archived in accordance with the provisions of tax law.
The applicant’s data are processed on the basis of Art. 6 Para. 1 S. 1 lit. b DSGVO (application procedure as a pre-contractual or contractual relationship). If special categories of personal data within the meaning of Art. 9 para. 1 DSGVO (e.g. health data, such as severely handicapped status or ethnic origin) are requested from applicants within the scope of the application procedure, so that the responsible person or the person concerned can exercise his/her rights arising from labour law and social security and social protection law and fulfil his/her duties in this regard, their processing shall be carried out in accordance with Art. 9 para. 2 lit. b. DSGVO, in the case of the protection of vital interests of applicants or other persons pursuant to Art. 9 para. 2 lit. c. DSGVO or for the purposes of health care or occupational medicine, for the assessment of the employee’s ability to work, for medical diagnostics, care or treatment in the health or social sector or for the administration of systems and services in the health or social sector in accordance with Art. 9 Para. 2 lit. h. DSGVO. In the case of a communication of special categories of data based on voluntary consent, their processing is carried out on the basis of Art. 9 para. 2 lit. a. DSGVO.
In the case of the processing of applicant data in Germany, §§ 22, 26 BDSG.) also apply.
19 Jetpack (WordPress Stats)
We use the plugin Jetpack (here the sub-function “WordPress Stats”), which includes a tool for statistical evaluation of visitor access and from Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Jetpack uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site.
If we ask the users for their consent (e.g. in the context of a cookie consent), the legal basis for this processing is Art. 6 Para. 1 lit. a. DSGVO. Otherwise, the personal data of the user will be processed on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online service as defined in Art. 6 Para. 1 lit. f. of the German Data Protection Act). DSGVO).
20 Google ReCaptcha