Privacy policy KELLER Druckmesstechnik AG

 

A. Introduction

1. Responsible Person

This is the privacy policy of Keller Druckmesstechnik AG. With this declaration we inform our customers, suppliers, applicants and employees as well as the users of our online offer about our data processing. Our contact details can be found in the imprint of the online offer, the contact persons for questions regarding the processing of personal data are named directly in this data protection declaration.

We also provide information here about data processing by KELLER Services und Immobilien AG in connection with its suppliers, applicants and employees.

We take the protection of your privacy and your data very seriously. We collect, store and use your personal data only in accordance with the content of this privacy policy and the applicable data protection regulations, in particular the Swiss Data Protection Act ("DPA") and - where applicable - the European General Data Protection Regulation ("GDPR") and other national data protection regulations.

2. Contact Details of the Controller

Keller Druckmesstechnik AG is the controller responsible for the processing described in this privacy policy. Insofar as suppliers, applicants and employees of KELLER Services & Immobilien AG are affected, the latter is the controller.

You can contact both controllers at the following address

St. Gallerstrasse 119
8404 Winterthur
datenschutz@keller-druck.com

3. Personal Data

Personal data (hereinafter referred to as "personal data") is information relating to an identified or identifiable natural person. This includes all information about your identity, such as your name, your e-mail address or your postal address. However, information that cannot be linked to your identity (such as statistical data, e.g. the number of users of our online offering) is not considered personal data.

Automated individual decision-making or automated decision-making based on your personal data does not take place.

4. Processing of Personal Data

Your data is stored by us on specially protected servers within Switzerland or the European Union. These are protected by technical and organisational measures against loss, destruction, access, modification or dissemination of your data by unauthorised persons. Access to your data is only possible for a few authorised persons. These persons are responsible for the technical, commercial or editorial management of the servers. Despite regular checks, however, complete protection against all risks is not possible.

Your personal data is transmitted over the Internet in encrypted form. We use TLS encryption (Transport Layer Security) for data transmission.

5. Disclosure of Personal Data to Third Parties

As part of our business activities and for the purposes stated in this data protection declaration, we also disclose personal data to third parties where permitted and where we deem it appropriate, either because they process it for us or because they wish to use it for their own purposes. In addition to the parties already mentioned elsewhere in this privacy policy, this includes the following third parties in particular

• Service providers (e.g. banks, insurance companies, travel service providers, credit rating agencies), including order processors (e.g. IT providers)

• Customers, dealers, suppliers, subcontractors, debt collection companies, manufacturers, freight forwarders and other business partners,

• certain data is also published (e.g. on our website, on our social media pages, in newspapers or sometimes in offers) and is therefore accessible to everyone,

• We also provide reference information if the employee concerned has authorised this in writing,

• authorities or other third parties if we are legally obliged to do so or if it is necessary to protect our interests, e.g. to combat abuse or safeguard rights, as well as other parties in potential or actual legal proceedings.

• We may also share personal data with other companies belonging to our group of companies where this is necessary or appropriate to achieve the purposes described here.

Your personal data will only be passed on if you yourself have consented to the data being passed on or if we are authorised or obliged to do so on the basis of statutory provisions and/or official or court orders. In particular, this may involve the provision of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.

If we transfer your personal data ourselves or through service providers to countries outside Switzerland or the European Union, we comply with the legal requirements for this and also oblige our service providers to comply with these regulations. We will therefore only transfer your data to countries outside Switzerland or the European Union subject to the level of protection guaranteed by the applicable data protection laws. This level of protection is ensured in particular by suitable guarantees in accordance with applicable data protection laws, where it has not already been established by a corresponding decision of the Swiss Federal Council or - where the GDPR is applicable - an adequacy decision of the EU Commission.

6. Legal Basis for Data Processing

In principle, we do not require a legal basis for most of our processing due to the statutory provisions. However, if we nevertheless require a legal basis for our data processing due to the applicable data protection laws, we rely on one of the following bases:

• Consent
• Fulfilment of a contract with you or implementation of pre-contractual measures
• Fulfilment of a legal obligation on our part
• Vital interests of the data subject or third parties
• Performance of a task carried out in the public interest
• our legitimate interests or those of third parties, insofar as this is necessary and your interests, fundamental rights and freedoms do not require the protection of personal data

As part of this privacy policy, we indicate the legal basis on which we base the processing of your personal data where this is required by law.

7. Data Erasure and Storage Duration

We always delete or block your personal data when the purpose of storage no longer applies. However, data may be stored beyond this point if this is provided for by legal requirements to which we are subject, for example with regard to statutory retention and documentation obligations. In such a case, we will delete or block your personal data after the end of the corresponding requirements.

8. Changes to This Privacy Policy

We reserve the right to amend this privacy policy at any time with effect for the future. Changes will be made in particular in the event of adjustments to our processing procedures, technical adjustments to the online offering or changes to data protection regulations. The current version of the privacy policy can always be accessed directly via the online offering and becomes effective upon publication there. We recommend that you regularly inform yourself about changes to this privacy policy.

A.  Your Rights

We attach great importance to explaining the processing of your personal data as transparently as possible and to informing you of the rights to which you are entitled. If you would like more information or wish to exercise your rights, you can contact us at any time so that we can take care of your request.

1. Rights of Data Subjects

Depending on the applicable data protection laws, you have extensive rights with regard to the processing of your personal data. Firstly, you have a comprehensive right to information and may request the correction and/or deletion or, if necessary, blocking of your personal data. Under certain circumstances, you can also request a restriction of processing or object to our processing. You also have the right to data portability with regard to the personal data you have provided to us.

If you wish to assert one of your rights and/or receive further information about this, please contact us at the address given at the beginning of this privacy policy.

2. Revocation of Consent and Objection

Once you have given your consent, it can be freely revoked at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. To withdraw your consent, please contact the contact address stated at the beginning of this privacy policy.

If the processing of your personal data is not based on consent, but on another legal basis, you can object to this data processing under certain circumstances. Your objection will lead to a review and, if necessary, termination of the data processing. You will be informed of the result of the review and - if the data processing is nevertheless to be continued - you will receive more detailed information from us as to why the data processing is permissible.

3. Complaint

If you are of the opinion that the processing of your personal data by us does not comply with this privacy policy or the applicable data protection laws, you have the right to lodge a complaint with the supervisory authority. You can also lodge a complaint directly with us. We will then investigate the matter and inform you of the outcome of the investigation.

The relevant supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch/edoeb).

C.  Data Processing in Detail

1. Customers and Suppliers

If you or your employer are a customer or supplier of ours, we process the data received from you or your employer (name, contact details, contact person, function, all data according to the customer base in the ERP (in particular bank details or billing addresses)) as well as data arising in connection with the customer relationship (offers, enquiries, contracts, correspondence, orders, reminders, other contractual correspondence, etc.) in order to process your enquiry or offer, process your order or our order, provide or receive support services, etc.

The legal basis for data processing is the initiation or fulfilment of a contract with you. In addition, data processing is carried out on the basis of our legitimate interest in smooth and proper cooperation with our customers and suppliers.

2. Applicant Data

You can apply for a job with us and submit all the necessary information and documents.

Upon receipt of an application, your documents will be forwarded to the responsible employees at our company. If you have applied for an advertised position, the documents will be automatically deleted four months after completion of the recruitment process, provided that no other legitimate interests prevent deletion. Such legitimate interests in this sense are, for example, obligations to provide evidence in legal proceedings. In the case of an application without reference to an advertised position (unsolicited application), the application will be kept for as long as there is a possibility that the application may be of interest. You have the option of requesting the deletion of your application at any time, even before the expiry of the specified retention periods. In the event of a successful application, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the legal requirements. In all other cases, the legal basis for the storage of your applicant data is your consent.

3. Employee Data

At the start of employment, we request master data (name, address, contact details) and job-related data (school and professional qualifications, further training, driving licence, etc.); we must also request data relevant to accounting (such as tax data). If you provide further personal data on a voluntary basis as part of the upstream application process, during the recruitment process or during the employment relationship, this data will also be stored in the personnel file.

If not all information is mandatory when collecting personal data, we will point out which information is voluntary. You are free to complete the voluntary information. Failure to provide this information will at most mean that certain aspects cannot be taken into account in your favour. Failure to provide voluntary information will not have a negative impact on the employment relationship or its existence.

The information you provide will be processed to fulfil the employment relationship. The legal basis for the processing is the fulfilment of the contract or the processing for the performance of an employment relationship in accordance with national data protection regulations. If you voluntarily provide additional personal data over and above the information required to fulfil the employment relationship, the legal basis for this is your consent.

Data arising in the course of the employment relationship, such as communication data, business expense or travel data, health data (e.g. in the context of sick notes) or other data arising are processed for the purpose of implementing the employment relationship. For the purpose of internal accessibility and communication, the business contact details of employees may be published internally within the Group, for example in the form of telephone lists or on the intranet. Disclosure within the company is in our legitimate interest, which lies primarily in the effective organisation of professional processes. Further information may be added or collected on a voluntary basis, for example the date of birth for birthday lists. It is also possible that business contact details may also be provided to our business partners. Publication of business contact details to the general public, for example by publication on the homepage, only takes place with regard to employees whose intended task is to support business partners or if the respective employee has given their voluntary consent.

The data will be stored by us for the duration of the employment relationship and beyond within the scope of the statutory retention obligations. Longer storage is possible if this is required or permitted by law, for example to prove fulfilment of all social security requirements.

Recipients of your personal data are our contract processors, insofar as we have outsourced corresponding activities - such as payroll accounting - to fulfil the employment relationship. We also pass on personal data to public authorities in order to fulfil their tasks, insofar as we are legally obliged or authorised to do so, for example to tax authorities or social insurance companies. The legal basis for this disclosure is the fulfilment of legal obligations. We also provide reference information upon prior written authorisation by e-mail.

4. Contact Form

If you wish to use the contact form on our website, we collect the personal data you enter in the contact form, in particular your name and email address. We also store the IP address and the date and time of the enquiry. We process the data transmitted via the contact form in order to be able to respond to your enquiry or request.

You can decide for yourself what information you send us via the contact form. The legal basis for processing your data is your consent.

After the matter has been processed by us, the data will initially be stored in case of any queries. Deletion of the data can be requested at any time, otherwise we will delete the data once the matter has been fully dealt with; statutory retention obligations remain unaffected in each case.

5. Newsletter

When you register for our newsletter, your e-mail address will be used by us or our group companies for their own advertising purposes until you unsubscribe. You will receive regular information by e-mail on current topics as well as e-mails on special occasions, such as special promotions. The emails may be personalised and individualised based on our information about you.

Unless you have given us your consent in writing, we use the so-called double opt-in procedure to subscribe to our newsletter, i.e. we will only send you a newsletter by e-mail if you have expressly confirmed to us beforehand that we should activate the newsletter dispatch. We will then send you a notification e-mail and ask you to confirm that you wish to receive our newsletter by clicking on a link contained in this e-mail.

The legal basis for the processing of your data is your consent if you have registered for the newsletter. Within the framework of the legal requirements, it is also possible that you may receive our newsletter from us without express consent because you have ordered goods or services from us, we have received your e-mail address in this context and you have not objected to receiving information by e-mail. In this case, the legal basis is our legitimate interest in sending direct advertising.

If you no longer wish to receive newsletters from us, you can revoke your consent at any time with effect for the future or object to further receipt of the newsletter. Simply use the unsubscribe link contained in every newsletter.

We use MailChimp to send our newsletter. MailChimp is a service provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318 (hereinafter: "Mailchimp"). The email addresses of our newsletter recipients as well as the other data processed in the context of sending the newsletter are stored on MailChimp's servers in the USA, so that it cannot be ruled out that US authorities may also have access to them. MailChimp also offers various options for analysing the extent to which the newsletters sent are opened and used, e.g. to how many users an email was sent, whether emails were rejected and whether users unsubscribed from the list after receiving an email. The analyses are carried out on a group basis and are not used by us for individual evaluation. Further information on data protection in connection with MailChimp can be found at: https://www.intuit.com/privacy/statement/.

MailChimp uses the information provided and collected to send and analyse the newsletter on our behalf. We have concluded a "Data Processing Agreement" with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties.

The legal basis for the cooperation with MailChimp is your express consent.

6. Social Media

In addition to our online offering, we also use various social media channels for the transmission of information and communication, some of which you will find links to in our online offering or in which you will find links to our online offering. We currently also use the following social networks in particular: Facebook, the career networks Xing and LinkedIn, and YouTube. You can recognise the links by the respective provider's logo.

Clicking on the links opens the corresponding social media pages, for which the respective providers' own provisions and data protection notices apply. We have summarised an overview of the providers' respective notices for you below.

Facebook: https://www.facebook.com/privacy/policy

Xing: https://www.xing.com/privacy

YouTube: https://policies.google.com/privacy

LinkedIn: https://de.linkedin.com/legal/privacy-policy

No personal data is transmitted to the respective providers before the corresponding links are called up. Your accessing the linked page is also the basis for data processing by the respective provider.

The following information on the associated processing of your personal data also applies to our use of social media channels.

a. KELLER Facebook Page

In addition to our own online offering, we also operate a company page on the social network Facebook. We use the company page to provide information about our activities and offer a channel for communication. The operator of the Facebook social network is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: "Meta"). In this respect, we use the technical platform and services of Meta.

Delimitation of Responsibility

We would like to point out that you use the company page and its functions on your own responsibility, especially with regard to interactive functions such as commenting, sharing or rating. Alternatively, you can also access the information offered via the company page on our homepage.

We endeavour to ensure the protection of your privacy and your private data within the scope of the possibilities offered by Facebook. Insofar as your personal data is processed by us in connection with your visit to the company page, the explanations in this privacy policy apply without restriction. Due to the integration of the company page into the Facebook service, it should also be noted that personal data is processed by Meta at the same time. When you visit the company page, Meta collects, among other things, your IP address and other information that may be stored in the form of cookies on the device you are using or in the respective browser. We have no influence on data processing by Meta; in particular, Facebook does not act as a processor for us under our responsibility. Facebook's data processing - at least according to Meta - is governed by Facebook's guidelines, which are available at https://www.facebook.com/privacy/policy. We would like to point out that the data collected by Meta about you in this context may also be transferred outside Switzerland or the European Union.

In terms of data protection law, it can be assumed that Meta and we are jointly responsible for the operation of the company website and the analysis of user data when visiting the company website. In accordance with the data protection regulations, we have reached an internal agreement with Meta on the delimitation of responsibility.

Facebook Insights

Meta offers the operators of company pages the opportunity to obtain an overview of the use of the company page and its users via the Page Insights functions. Page Insights can be used primarily to access and analyse statistical data. We use the data from Page Insights to make the company website as attractive and efficient as possible. For this purpose, Meta provides us with data that Meta has generated itself. Facebook provides further information on how the Page Insights function works and who is responsible for it at https://www.facebook.com/legal/terms/page_controller_addendum.

Messenger

Users who are registered with Facebook also have the option of communicating directly via Facebook Messenger. If you contact us via Messenger, the data transmitted will be stored and used by us to respond to your enquiry. The legal basis for processing your data is your consent and our legitimate interest in recording and processing customer enquiries, analysing customer enquiries and monitoring misuse.

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. You have the option of withdrawing your consent to the processing of personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.

Further Information on Facebook

If you have any questions about the use of personal data by us in connection with the use of the company page on Facebook, you are welcome to contact us at any time. The contact details are at the beginning of this privacy policy. If you have any questions about data protection on Facebook, please contact Meta directly.

b. YouTube Channel

We also operate a channel on the YouTube video platform. We use the channel to provide information about our activities and offer a channel for communication. The YouTube video platform is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").

We would like to point out that you use the video platform and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. discussion, comments).

Processing of Personal Data

The data collected about you when you use the service is processed by Google and may be transferred to countries outside Switzerland or the European Union. The processed data includes the data you voluntarily provide, such as your name, user name, email address and telephone number, the content you create, upload or receive, such as photos and videos, documents and tables as well as comments, your IP address, details of the device you are using, information on websites and content accessed, your location and your mobile phone provider. We have no influence on the type and scope of the data processed by Google, the type of processing and use or the transfer of this data to third parties. Information about which data is processed by Google and for what purposes can be found in Google's privacy policy at https://policies.google.com.

We process the data you enter on YouTube, in particular your user name and the content published under your account, to the extent that we may link to your posts or reply to them or write posts from us that refer to your account. The data you freely publish and disseminate on YouTube will be included by us in this way in our offering and made accessible to our followers.

You have the option of restricting the processing of your data in the general settings of your Google account. In addition, you can restrict Google's access to contact and calendar data, photos, location data, etc. in the settings options for mobile devices. However, this depends on the operating system you are using. In addition to these tools, Google also offers specific data protection settings for YouTube. You can find out more about this at: https://policies.google.com/privacy#infochoices.

YouTube Analytics

Google offers the operators of YouTube channels the opportunity to obtain an overview of the use of the account and its users via the "YouTube Analytics" function. YouTube Analytics can be used primarily to access and analyse statistical data. We use the data from YouTube Analytics to make the YouTube channel as attractive and efficient as possible. For this purpose, Google provides us with data that Google itself has generated under its own responsibility. The data we receive from Google is mostly anonymised data and statistics. Insofar as we receive personal data in this context, we are responsible for our further processing of this data to analyse the use of our YouTube channel. Google provides further information on YouTube Analytics at https://support.google.com/youtube/answer/9002587.

Further Information About YouTube

If you have any questions about the use of personal data by us in connection with the use of the YouTube channel, you are welcome to contact us at any time. The contact details are at the beginning of this privacy policy. If you have any questions about data protection at Google, please contact Google directly.

c. Xing

In addition to our own online offering, we also operate an account on the Xing career network. We use the account to provide information about our company and our activities and offer a channel for communication. The Xing career network is operated by New Work SE, Am Strandkai 1, 20457 Hamburg ("New Work").

We would like to point out that you use the career network and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. liking, sharing, commenting).

Processing of Personal Data

The data collected about you when you use the service will be processed by New Work. It cannot be ruled out that data may also be transferred to countries outside Switzerland or the EU. The processed data includes data you provide voluntarily, such as your name, user name, email address, telephone number, information about your professional background, profile data, content you create, upload or receive and comments, your IP address, information about the device you are using, information about websites and content accessed and your location. We have no influence on the type and scope of the data processed by New Work, the type of processing and use or the disclosure of this data to third parties. Information about which data is processed by New Work and for what purposes can be found in New Work's privacy policy at https://privacy.xing.com/en/privacy-policy.

We process the data you enter on Xing to the extent that we may like, comment on or share your posts or contact you and interact with you.  The data you freely publish and disseminate on Xing will be included by us in our offer in this way.

You have the option of restricting the processing of your data in the general settings of your Xing account. In addition, you can restrict New Work's access to contact and calendar data, photos, location data, etc. in the settings options for mobile devices. However, this depends on the operating system you are using. You can find out more about the data protection settings at Xing at: https://privacy.xing.com/en/your-privacy.

Analytics

New Work offers the operators of Xing accounts the opportunity to obtain an overview of the use of the account and its users. Statistical data in particular can be accessed and analysed using the analysis functions. We use the data to make our account as attractive and efficient as possible. For this purpose, New Work provides us with data that New Work has generated itself under its own responsibility. The data we receive from New Work is mostly anonymised data and statistics. Insofar as we receive personal data in this context, we are responsible for our further processing of this data to analyse the use of our Xing account. Further information can be found in Xing's privacy policy at https://privacy.xing.com/en/privacy-policy.

Communication

Xing gives you the opportunity to communicate directly with us. If you contact us via Xing, the data transmitted will be stored and used by us to respond to your enquiry. The legal basis for processing your data is your consent and our legitimate interest. Our legitimate interest lies in the recording and processing of enquiries, the evaluation of enquiries and the monitoring of misuse.

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. You have the option of withdrawing your consent to the processing of personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.

Further Information About Xing

If you have any questions about the use of personal data by us in connection with the use of the Xing account, you are welcome to contact us at any time. The contact details are at the beginning of this privacy policy. If you have any questions about data protection at Xing, please contact New Work directly.

d. LinkedIn Account

In addition to our own online offering, we also operate an account on the career network LinkedIn. We use the account to provide information about our company and our activities and offer a channel for communication. The LinkedIn career network is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn").

We would like to point out that you use the career network and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. liking, sharing, commenting).

Processing of Personal Data

The data collected about you when you use the service is processed by LinkedIn. It cannot be ruled out that data may also be transferred to countries outside Switzerland or the European Union. The processed data includes data you provide voluntarily, such as your name, user name, email address, telephone number, information about your professional career, profile data, content you create, upload or receive and comments, your IP address, information about the device you are using, information about websites and content accessed and your location. We have no influence on the type and scope of the data processed by LinkedIn, the type of processing and use or the transfer of this data to third parties. Information about which data is processed by LinkedIn and for what purposes can be found in LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy.

We process the data you enter on LinkedIn to the extent that we may like, comment on or share your posts or contact you and interact with you.  The data you freely publish and disseminate on LinkedIn will be included by us in our offer in this way.

You have the option of restricting the processing of your data in the general settings of your LinkedIn account. You can also restrict LinkedIn's access to contact and calendar data, photos, location data, etc. in the settings options for mobile devices. However, this depends on the operating system you are using. You can find out more about LinkedIn's data protection settings at: https://www.linkedin.com/legal/privacy-policy.

Analysis

LinkedIn offers the operators of LinkedIn accounts the opportunity to obtain an overview of the use of the account and its users. Statistical data in particular can be accessed and analysed using the analysis functions. We use the data to make our account as attractive and efficient as possible. For this purpose, LinkedIn provides us with data that LinkedIn itself has generated under its own responsibility. The data we receive from LinkedIn is mostly anonymised data and statistics. Insofar as we receive personal data in this context, we are responsible for our further processing of this data to analyse the use of our LinkedIn account. Further information can be found in LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy.

Communication

LinkedIn gives you the opportunity to communicate directly with us. If you contact us via LinkedIn, the data transmitted will be stored and used by us to respond to your enquiry. The legal basis for processing your data is your consent and our legitimate interest. Our legitimate interest lies in the recording and processing of enquiries, the evaluation of enquiries and the monitoring of misuse.

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. You have the option of withdrawing your consent to the processing of personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.
Further information about LinkedIn

If you have any questions about the use of personal data by us in connection with the use of the LinkedIn account, you are welcome to contact us at any time. The contact details can be found at the beginning of the privacy policy. If you have any questions about data protection at LinkedIn, please contact LinkedIn directly.

7. Use of Our Online Services

You can use our online services without disclosing your identity and without providing any personal data. We will then only collect general information about your visit to our website. However, personal data is collected from you for some of the services offered. This data is then only processed by us for the purposes of using this online service, in particular to provide the requested information. When collecting personal data, only the data that is absolutely necessary must be provided. In addition, further information may be possible, in which case it is voluntary. We will indicate in each case whether the fields are mandatory or voluntary. We will then provide information on the specific details in the corresponding section of this privacy policy.

a. Information About Your Computer

Each time you access our online offering, we collect the following information about your computer, irrespective of your registration: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred as part of this enquiry are recorded. We also collect product and version information about the browser used and the computer's operating system. We also record the website from which the online offer was accessed. The IP address of your computer is only stored for the duration of your use of the online service and is then deleted or anonymised by shortening it. The other data is stored for a limited period of time.

We use this data for the operation of the online service, in particular to detect and eliminate errors, to determine the utilisation of the online service and to make adjustments or improvements. These purposes also constitute our legitimate interest in data processing.

b. Use of Cookies

As on many websites, cookies are used for our online services. Cookies are small text files that are stored on your computer and save certain settings and data for exchange with our online offer via your browser. A cookie usually contains the name of the domain from which the cookie file was sent as well as information about the age of the cookie and an alphanumeric identifier.

Cookies enable us to recognise your computer and make any pre-settings and preferences immediately available. The cookies we use are - as far as possible - so-called session cookies, which are automatically deleted at the end of the browser session. In some cases, cookies with a longer storage period may also be used so that your pre-settings and preferences can also be taken into account the next time you visit our website.

Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent. It is also possible to delete cookies that have already been saved manually via the browser settings. Please note that you may only be able to use our online services to a limited extent or not at all if you reject the storage of cookies or delete necessary cookies.

If cookies are not required for our online offering, we will ask you to consent to the use of cookies when you access the online offering for the first time. With regard to the non-essential cookies from third-party providers, you will find a more detailed description of the services we use from these third-party providers below. The legal basis for the associated data processing, including any data transfer, is your consent in each case. Once consent has been given, it can be revoked at any time with effect for the future, in particular by changing the selected settings.

The legal basis for the use of necessary cookies is our legitimate interest in the proper provision of our online offer and - insofar as contracts are concluded or fulfilled via our online offer - the fulfilment of the contract.

Once a selection has been made with regard to the use of cookies, it can be changed again at any time.

c. Integration of Services From Third-Party Providers

We use third-party services for some of the functions on our website. The corresponding services are mainly optional functions that must be explicitly selected or used by you. We have concluded contractual agreements with the respective providers for the provision or integration of their services and are committed to ensuring, as far as possible, that the third-party providers also provide transparent information about the scope of the processing of personal data and comply with data protection regulations.

Google Tag Manager

We use the Google Tag Manager of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for our online offering. Google Tag Manager is a tag management system (TMS) that can be used to manage tags, i.e. tracking codes and associated code fragments, on our website. Google Tag Manager can be used to integrate Google services into a website.

When using the Google Tag Manager, a connection to the Google servers is established. As a result, the IP address of the browser of the end device used by the visitor to this website is stored by Google. It cannot be ruled out that data may be transmitted to Google in the USA in this context and that US security authorities may gain access to the data. However, cookies are not set in connection with the use of Google Tag Manager.

You can find more information about the Google Tag Manager and data processing by Google here:

https://support.google.com/tagmanager/answer/6102821

https://www.google.com/policies/privacy

Our legal basis for the use of Google Tag Manager is our legitimate interest. Our legitimate interest is the management of the tracking codes in our online offering, which enable us to analyse the use of our online offering and to improve and personalise our services.

Google Analytics

We use Google Analytics for statistical analyses. Google Analytics is a web analysis service from Google.

As part of Google Analytics, Google uses cookies, among other things, for the analyses. The type and scope of the use and analysis of cookies are specified by Google. The information generated by the cookies about your use of the online offer is transmitted to a Google server and stored there. It cannot be ruled out that data will be transmitted to the USA and that government agencies may be able to access this data as a result. However, due to the standardised IP anonymisation, your IP address will be shortened by Google on servers in the European Union beforehand.

Google uses this information on our behalf to analyse your use of the website, to compile reports on website activity and to provide us, as the operator of the website, with other services relating to website activity and internet usage. Google may also use the data for its own purposes. As part of these purposes, Google may, for example, create a profile of user behaviour or link the data with other data, for example with an existing Google account. We have no influence whatsoever on these data processing operations. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other data that Google collects or already has. For more information, please refer to Google's data protection information, which is linked below.

We also use the "demographic characteristics" function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the following paragraph. You can find more information on the "demographic features" function at Google at https://support.google.com/analytics/answer/2799357.

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link https://tools.google.com/dlpage/gaoptout. Further information on this can be found at https://tools.google.com/dlpage/gaoptout or https://marketingplatform.google.com/intl/en/about/analytics (general information on Google Analytics and data protection). Please note that the code "anonymizeIp();" has been added to Google Analytics on our website in order to anonymise IP addresses, whereby the last octet is deleted.

The legal basis for data processing is your consent.

Google reCAPTCHA

We use the reCAPTCHA service provided by Google for our online offering to secure our forms, including against misuse for sending spam. The service analyses the extent to which manual input is actually made by a user and is intended to filter out automated access, for example by scripts or so-called bots. In order to use the service, the IP address and other data required by Google for the reCAPTCHA service (device information, user behaviour and cookie content) must be transmitted to Google. The legal basis for the transmission of the data is our legitimate interest, whereby our legitimate interest relates to the protection of our online offering against misuse and the security of the online offering as a whole.

Further information on data protection at Google, including in relation to the reCAPTCHA service, can be found at https://policies.google.com/privacy.

Microsoft Clarity

We use the Microsoft Clarity service of the provider Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter: "Microsoft") for statistical analysis on our online offer.

Microsoft also uses cookies, among other things, to analyse user behaviour. The information generated in this way about your use of our online services is transmitted to Microsoft servers and stored there. It cannot be ruled out that data will be transmitted to the USA and that government agencies may be able to access this data as a result.

User behaviour is evaluated on the basis of a pseudonymised user ID.

In addition, further pseudonymised data such as usage data (e.g. access times, content visited), meta and communication data (e.g. IP address, devices used), location data (e.g. information on the geographical location of the device) and movement data (e.g. mouse movements and scrolling movements) are used.

The data is processed in order to analyse the use of our online offering. According to Microsoft, the information stored on its servers may also be used for advertising purposes. We have no influence on further data processing by Microsoft. You can find more information on data processing at Microsoft at: https://clarity.microsoft.com and https://privacy.microsoft.com/privacystatement.

The legal basis for data processing is your consent.

Retargeting and Remarketing

Retargeting or remarketing refers to technologies in which users who have previously visited a certain website are shown suitable advertising even after they have left this website. For this purpose, it is necessary to recognize Internet users beyond their own website, for which cookies from the relevant service providers are used; in addition, previous usage behavior is taken into account. For example, if a user views certain products, these or similar products can later be displayed as advertising on other websites. This is personalized advertising that is adapted to the needs of the individual user. For this personalized advertising, it is not necessary for the user to be identified beyond recognition. We therefore do not merge the data used for retargeting or remarketing with other data.

We use such technologies to place ads on the Internet. We use third-party providers to place the ads. Among other things, we use offers from Google that enable the automatic display of products of interest to the Internet user. This function is implemented using cookies. It cannot be ruled out that data will be transferred to Google in the USA in the course of this process and that US security authorities will gain access to the corresponding data.

Further information on this technology can be found in Google's privacy policy at https://policies.google.com/privacy. The installation of cookies for Google Remarketing and Google AdWords Conversion Tracking can be prevented from the outset by setting the respective browser software by accessing the website https://policies.google.com/technologies/ads and changing the corresponding setting altogether. Irrespective of the above options for preventing data processing by means of cookies in connection with Google AdWords Conversion Tracking, the use of corresponding cookies or these services by us is subject to your express consent.

The legal basis is your consent.

Google Maps

We use the map service Google Maps for our online offering. Google Maps is a service provided by Google.

In order to comply with data protection regulations, the terms of use for the map service contain data protection regulations that serve to protect you. Google's terms of use for the map service can be found at https://www.google.com/help/terms_maps, general explanations from Google on data protection can be found at https://policies.google.com/privacy.

The legal basis for the integration of the map service is our legitimate interest. This lies in the provision of map material for your orientation. Our legal basis for setting cookies in connection with the use of Google Maps is your consent.

Use of YouTube

YouTube videos are integrated into our online offer, for the playback of which we use a plugin of the YouTube service operated by Google (hereinafter: "YouTube"). The service is operated by Google.

When you access a website of our online offering on which a YouTube video is integrated, Google initially only receives the information necessary for integration and no cookies are set to analyze usage. Only when you play the embedded video does Google receive further information; Google may also set cookies to analyze your user behavior. When you play the video, Google's YouTube servers are informed, for example, which page of our website you are using to play the video.

If you are logged into your Google account, you enable Google or YouTube to assign your surfing behavior directly to your personal Google profile. We therefore recommend that you only play embedded YouTube videos if you agree to the associated data processing by Google. You can prevent the assignment of data to your Google profile by logging out of your YouTube account. You can find further information on the handling of user data in Google's privacy policy at https://policies.google.com/privacy, which also applies to YouTube.

We use YouTube to show you videos so that we can better inform you about us and our services. The legal basis for the integration of the videos is our legitimate interest; however, the videos are only played and the associated further data processing takes place on the basis of your consent.