Privacy Policy

I. Controller in terms of Art. 4 no. 7 GDPR

We
border concepts GmbH,
represented by the managing directors Sjaik Djorai, Karel Otte,
Bahnhofstraße 40
48599 Gronau
Germany
Tel.: 0049 (0) 2562-99380
Fax: 0049 (0) 2562-993810
Email: mail@bo-co.eu

as controller in terms of the GDPR are responsible for the lawfulness of the processing of your personal data on this website.

II. Data protection officer of border concepts GmbH

If you have any questions regarding the processing of your personal data or this Privacy Policy, please do not hesitate to contact our data protection officer:

Philipp Diemon, Email: datenschutz@bo-co.eu

III. Processing of personal data on this website

We are going to inform you hereinafter how we process your personal data when you use our website. Personal data includes all data which refers to you personally, e.g. your name, address, email addresses, user behaviour.

We process your personal data in the context of the following functions and features of our website:

1. Data processing when you use the website for information purposes

When you use the website for mere information purposes, i.e. when you do not register or otherwise transmit information to us, we will only collect those personal data which your browser transfers to our server. If you want to view our website, we will collect the following data which is necessary for us in technical respect to display our website to you and ensure stability and security (the legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR):

• IP address
• Date and time of the request
• Time zone difference compared to Greenwich Meantime (GMT)
• Content of the request (specific page)
• State of access / http status code
• Transferred data volume
• Website from which the request is made
• Browser
• Operating system and its surface
• Language and version of the browser software

In addition to the aforesaid data, cookies will be stored on your computer when you use our website. Cookies are small text files which are allocated to the browser you use and stored on your hard drive and which cause certain information to be transferred to the body that sets the cookie (in this case this body is us). Cookies are unable to execute programs or infect your computer with viruses. They serve to render Internet presentations as a whole more user-friendly and more efficient. The legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR. Some cookies store current settings and thus help render the purchase process easier (e.g. watch and maintain the content in our virtual shopping cart and a virtual watch list for any subsequent visit to our website). The legal basis for this is Art. 6 subs. 1 sentence 1 b) GDPR.

This website uses transient cookies and persistent cookies.

Transient cookies are deleted automatically when you close the browser. They include in particular session cookies. Session cookies store a so-called session ID by which different requests from your browser can be allocated to a specific session. This enables us to recognize your computer when you come back to our website. The session cookies are deleted when you log out or close the browser.

Persistent cookies are deleted automatically after expiry of a pre-defined period of time which may vary, depending on the type of cookie used. You can delete the cookies in the security settings of your browser at any time.

You can set your browser as you think appropriate and, for instance, refuse acceptance of all cookies or of third-party cookies. Please be aware that, in this case, you might be prevented from using all functions and features of this website.

We use cookies to identify you in any subsequent visit to our website, provided you have an account with us. Otherwise, you must log in again every time you visit our website.

2. Publication of photos and videos from the fair

Please be aware that we shoot photos and videos at the fair. In this context, to present the character of the event, we also show persons which means that we might also shoot videos or photos of you as a visitor or exhibitor.

We use these photos and videos exclusively for the purpose of presenting and advertising the next fairs; for this purpose, we use the following media: social media, websites, printed matter.

The legal basis for the data processing is Art. 6 subs. 1 sentence 1 f) GDPR. Our legitimate economic interest consists in using the videos and photos we have taken of you for advertising purposes. You are entitled under Art. 21 GDPR to object to the processing at any time (see below in this Privacy Policy).

For photos and videos where you are in the foreground or where you are shown prominently or as a central figure, we will obtain your consent before we shoot the video or photo of you; in any case we will point out to you the aforementioned purpose and your right to withdraw your consent at any time (see below in this Privacy Policy (Art. 6 subs. 1 sentence 1 a) GDPR)). In this context, we might ask for your age. If you are younger than 16 years, we will not shoot videos or photos of you or use such photos and videos without the consent of your parents or legal custodian.

If you do not want us to shoot videos or photos of you or use the photos and videos for the aforesaid advertising purposes, please contact any of our employees at the fair or send an email to: datenschutz@bo-co.eu. You are not obliged – neither by law nor by contract – to allow us to shoot videos or photos of you and/or to publish these videos or photos.

3. Contact form

When you contact us via our contact form, the data which you disclose to us will be stored to process and answer your request.

To enable us to answer your request, you have to provide us with those of your personal data which we require to respond to your request. This required data is specifically marked. Any additional disclosures are voluntary.

We process your personal data which we have collected from the contact form exclusively for the purpose of answering your request. The legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR. We have a legitimate economic interest in potential customers contacting us and in the use of the contact form. Our contact form is a service which we provide to you as a (potential) customer or applicant to enable quick and easy contact with us. We thereby want to offer you good customer service. The contact requests often help to initiate contractual relationships.

You are not obliged – neither by law nor by contract – to provide us with your data. We will however only be able to answer your request if you disclose to us the above-mentioned data marked as required fields.

4. Form for appointment planning at EAIE

When you contact us via the form to plan an appointment at the EAIE conference, the data which you disclose to us will be stored to process and answer your request.

To enable us to answer your appointment request, you have to provide us with those of your personal data which we require to respond to your request. This required data is pecifically marked. Any additional disclosures are voluntary.

We process your personal data which we have collected from the form exclusively for the purpose of scheduling and executing the appointments. The legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR. We have a legitimate economic interest in scheduling appointments via the form. The form is a service which we provide to you as a (potential) customer to easily schedule appointments with us. We thereby want to offer you good customer service. The appointments often help to initiate contractual relationships. For this case Art. 6 subs. 1 sentence 1 f) GDPR is the legal basis.

You are not obliged – neither by law nor by contract – to provide us with your data. We will however only be able to answer your appointment request if you disclose to us the above-mentioned data marked as required fields.

5. Newsletter

You can give your consent and subscribe to our newsletter by which we inform you about our current interesting services. The advertised services are specified in the declaration of consent.

We use the so-called double opt-in procedure for your subscription to our newsletter. This means that, after you have subscribed to the newsletter, we will send you an email to the email address you have indicated by which we will ask you to confirm that you want us to send you our newsletter. If you do not confirm your subscription within 24 hours, the information you have provided will be blocked and deleted automatically after one month. In addition, we store the IP addresses you have used from time to time as well as the time of your subscription and the time of your confirmation. The purpose of this procedure is to enable us to evidence your subscription and, where required, investigate and solve any potential misuse of your personal data.

The only field which is required for the transmission of our newsletter is your email address. Disclosure of any additional data is voluntary and such additional data will be used to address you personally. After you have confirmed your subscription, we will store your email address for the purpose of sending you the newsletter. The legal basis for this is Art. 6 subs. 1 sentence 1 a) GDPR.

You are not obliged – neither by law nor by contract – to provide us with your data. However, we will only be able to send you our newsletter if you enter the information in the required fields.

You may at any time withdraw your consent to the newsletter transmission and unsubscribe. You may withdraw your consent by clicking the link which is made available in every newsletter email or by sending an email to datenschutz@bo-co.eu or by sending a message to the contact data stated above in this Privacy Policy and in the legal information.

Please be aware that, when we send you our newsletter, we will analyse your user behaviour. For such purpose, the emails we send to you contain so-called web beacons or tracking pixels which are one-pixel image files which are stored on our website. For the purpose of analysing your user behaviour, we will combine the data mentioned under “Collection of personal data when you use the website for information purposes” and the web beacons with your email address and a unique ID. The data is collected exclusively in pseudonymized form which means that the IDs are not combined with your other personal data such that the data cannot be directly allocated to you personally. The legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR. Our legitimate economic interest is our interest in providing customer-friendly and optimized design of our newsletter, tailored to our customers’ demands.

6. Application form

If you are interested in any of our vacancies and want to apply for it, you may use our application form.

We can only accept your application, if you disclose to us those of your personal data which is necessary for applicant selection. Such required data is specifically marked. Any additional disclosures are voluntary.

We process the personal data which we have collected from the application form exclusively for the purpose of applicant selection. The legal basis for this is Art. 26 subs. 1 BDSG (Bundesdatenschutzgesetz - German Federal Data Protection Act). The processing of your personal data is necessary for the decision on the establishment of an employment relationship.

You are not obliged – neither by law nor by contract – to provide us with your data. However, we will only be able to accept your application, if you provide us with the data to be entered in the required fields.

7. Web analytics

a) Google Analytics

This website uses Google Analytics which is a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies” which are text files which are stored on your computer and enable us to analyse how you use the website. The information generated by the cookie about how you use this website is, as a rule, transferred to a Google server in the USA and stored there. However, if the IP anonymization feature is activated on this website, your IP address will be shortened by Google within the member states of the European Union or other countries party to the Agreement on the European Economic Area before it is transferred to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website to analyse how you use the website, to compile reports on the website activities and to render further services relating to the use of the website and the use of the Internet to the website operator.

You can set your browser software to prevent the storage of cookies; please be aware that, in this case, you might be prevented from using all features and functions of this website without restrictions. You may also prevent the collection of the data generated by the cookie about how you use the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in which is available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

This website uses Google Analytics with the supplementary feature „_anonymizeIp()“. This makes sure that only shortened IP addresses are processed further which prevents IP addresses from being allocated to specific persons. Where the data collected from you refers to you personally, allocation of this data to you personally is prevented right from the beginning and the personal data is thus deleted immediately.

We use Google Analytics to analyse and continuously improve our website. The statistics we obtain help us to improve the services we offer and present them to you as the user in a more interesting design. As to the exceptional cases where personal data is transferred to the USA, Google has agreed to respect and comply with the EU-US Privacy Shield. The legal basis for the use of Google Analytics is Art. 6 subs. 1 sentence 1 f) GDPR.

Information provided by the third-party provider: Google Dublin, Google Ireland Ltd. (hereinafter referred to as “Google”), Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001. The applicable terms of use and the privacy policy are available at the Google website (www.google.de).

This website uses Google Analytics also for the purpose of cross-device analysis of visitor streams (in which case the website is accessed from different terminals) which is implemented by means of a user ID. You can deactivate this analysis of your user behaviour in your customer account under “My data”, “personal data”.]

b) Fullstory

This website uses Fullstory. Fullstory records the behaviour of users on our website. The recording of visitor sessions enables us to analyse the sessions and subsequently improve the website experience for our visitors. Fullstory uses cookies to store and collect data in anonymized form. You can at any time deactivate the tracking (i.e. the collection of the data about the use of the website which is generated by the cookie). For such purpose, please follow the instructions under https://www.fullstory.com/optout.

We use Fullstory to analyse how our website is used and continuously improve it. The statistics we obtain help us to improve the services we offer and present them to you as the user in a more interesting design. The legal basis for the data processing in the context of Fullstory is Art. 6 subs. 1 sentence 1 f) GDPR.

Information provided by the third-party provider: Fullstory Inc. (referred to hereinafter as “Fullstory“), 818 Marietta Street, Atlanta, GA 30318, USA. Information on data protection is available on the Fullstory website (www.fullstory.com). Fullstory has agreed to respect and comply with the EU-US Privacy Shield. Further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).

c) Hotjar

This website uses the website analysis service Hotjar. Hotjar records the behaviour of users on our website. The recording of visitor sessions enables us to analyse the sessions and subsequently improve the website experience for our visitors. Hotjar uses cookies to store and collect data in anonymized form. You can at any time deactivate the tracking (i.e. the collection of the data about the use of the website which is generated by the cookie). For such purpose, please follow the instructions under https://www.hotjar.com/opt-out.

We use Hotjar to analyse how our website is used and continuously improve it. The statistics we obtain help us to improve the services we offer and present them to you as the user in a more interesting design. The legal basis for the data processing in the context of Hotjar is Art. 6 subs. 1 sentence 1 f) GDPR.

Information provided by the third-party provider: Hotjar Ltd. (referred to hereinafter as “Hotjar“), Level 2 St Julians Business Centre 3, Elia Zammit Street, St Julians STJ 1000 Malta; information on data protection is available on the Hotjar website (www.hotjar.com).

d) LeadLab

Our website uses counting pixel technology provided by WiredMinds GmbH (www.wiredminds.de) to analyze visitor behavior. In connection with this, the IP address of the visitor is processed. The processing occurs only for the purpose of collecting company based information such as company name, for example. IP addresses of natural persons are excluded from any further processing by means of a whitelist. An IP address is not stored in LeadLab under any circumstances.

While processing data, it is our outmost interest to protect the rights of natural persons. Our interest in processing data is based on Article 6(1)(f) GDPR. At no time is it possible to draw conclusions from the collected data on an identifiable person.

WiredMinds GmbH uses this information to create anonymized usage profiles of the visit behavior on our website. Data obtained during this process is not used to personally identify visitors of our website.

Exclude from tracking (To ensure WiredMinds LeadLab permanently excludes you from tracking, a functionally necessarey cookie will be set)

8. Online advertising

a) Google Adwords Conversion

We use the Google Adwords services to draw the users’ attention to the attractive services we offer, using for such purpose advertising means (so-called Google Adwords) which are placed on external websites. We can measure the success of individual advertising measures by relation to the advertising campaign data. We thereby want to show you advertisements which are interesting for you, offer you a more interesting website and ensure fair calculation of advertising costs.

These advertising means are delivered by Google via so-called “Ad Servers”. For such purpose, we use Ad Server cookies which enable the measurement of certain parameters which help us measure the success, such as display of advertisements or user clicks. If you are referred to our website via a Google advertisement, Google Adwords stores a cookie on your PC. These cookies usually expire after 30 days and are not meant to identify you personally. Along with this cookie, usually the following analysis values are stored: unique cookie ID, number of ad impressions per placement (frequency), last impression (which is important for post-view conversions) as well as opt-out information (mark which means that the user does no longer want to be addressed).

The cookies enable Google to recognize your Internet browser. When a user visits certain pages of the website of an Adwords customer and the cookie which was stored on the customer’s computer has not expired yet, Google and the customer can see that the user clicked the advertisement and was referred to this page. Each Adwords customer is assigned a separate cookie. Thus, it is impossible to track cookies via the websites of Adwords customers. We ourselves do not collect and process any personal data in the context of the said advertising measures. Google only provides us with statistical analyses. We can see by these analyses which advertising measures are particularly efficient. We do not receive any other data which might emerge from the use of the advertising means, in particular we cannot identify the users by the information we receive.

The marketing tools we use cause your browser to automatically establish a direct connection to the Google server. We cannot influence the scope and further processing of the data which Google collects by means of this tool and we therefore inform you within the limits of our current state of knowledge: Google Adwords Conversion is embedded such that Google is informed that you have accessed the relevant part of our Internet presentation or clicked one of our advertisements. If you are registered with any of the services offered by Google, Google can allocate your visit to your account. Even if you are not registered with Google or are not logged in to Google, the provider might find out about your IP address and might store it.

There are several different options for you to prevent participation in this tracking procedure:

a) by appropriate setting of your browser software, in particular: the rejection of third-party cookies prevents the receipt of advertisements from third-party providers;

b) by deactivation of the cookies for conversion tracking: for such purpose, you have to set your browser to block cookies coming from the domain “www.googleadservices.com“, https://www.google.de/settings/ads, this setting is however cancelled when you delete your cookies.

c) by deactivation of interest-based advertisements of the providers which are part of the self-regulation campaign “About Ads”; for such purpose you have to use the link http://www.aboutads.info/choices, this setting is however cancelled when you delete your cookies.

d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin. Please be aware that, in this case, you might be prevented from using all features and functions of our website without restrictions.

The legal basis for the processing of your data is Art. 6 subs. 1 sentence 1 f) GDPR. Further information on data protection is available on the Google website (www.google.de). Alternatively, you can go to the website of the Network Advertising Initiative (NAI) at www.networkadvertising.org. Google has agreed to respect and comply with the EU-US Privacy Shield; further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).

b) Remarketing

We use the Google Remarketing application which is a method to readdress you. This application allows our advertisements to be shown to you after you have left our website but are still using the Internet. This is done by means of cookies which are stored in your browser and which enable Google to collect information about and analyse your user behaviour during your visits to different websites. This enables Google to determine that you have visited our website before. Pursuant to the statements of Google, Google does not combine the data which is collected in the context of the remarketing with your personal data which Google might have stored. In particular, pursuant to Google, the data is pseudonymized in the context of these remarketing measures.

If you want to prevent participation in the remarketing, you can use the opt-out options offered by Google or change your Google settings (www.google.com/ads/preferences).

The legal basis for the processing of your data is Art. 6 subs. 1 sentence 1 f) GDPR. Our legitimate economic interest consists in drawing your attention to the services we offer to inform you about our portfolio and make it easier for you to retrieve our services during your next session. We thereby want to offer you good customer service. This often helps to initiate contractual relationships.

Further information on data protection is available on the Google website (www.google.de). Google has agreed to respect and comply with the EU-US Privacy Shield. Further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).

c) DoubleClick by Google

This website also uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to place advertisements which are interesting for the users, improve the reports on campaign efficiency or prevent advertisements from being shown to the same user several times. Google can determine by means of a cookie ID which advertisements are shown in which browser and can thus prevent them from being displayed several times. In addition, DoubleClick uses cookie IDs to identify so-called conversions which are related to requests made in response to an advertisement. This is for instance the case when a user sees a DoubleClick advertisement and subsequently accesses the advertiser’s website via the same browser and places a purchase order there. Pursuant to Google, DoubleClick cookies do not contain personal information.

The marketing tools we use cause your browser to automatically establish a direct connection to the Google server. We cannot influence the scope and further processing of the data which Google collects by means of this tool and we therefore inform you within the limits of our current state of knowledge: DoubleClick is embedded such that Google is informed that you have accessed the relevant part of our Internet presentation or clicked one of our advertisements. If you are registered with any of the services offered by Google, Google can allocate your visit to your account. Even if you are not registered with Google or are not logged in to Google, the provider might find out about your IP address and might store it.

There are several different options for you to prevent participation in this tracking procedure:

a) by appropriate setting of your browser software, in particular: the rejection of third-party cookies prevents the receipt of advertisements from third-party providers;

b) by deactivation of the cookies for conversion tracking: for such purpose, you have to set your browser to block cookies coming from the domain “www.googleadservices.com“, https://www.google.de/settings/ads, this setting is however cancelled when you delete your cookies.

c) by deactivation of interest-based advertisements of the providers which are part of the self-regulation campaign “About Ads”; for such purpose you have to use the link http://www.aboutads.info/choices, this setting is however cancelled when you delete your cookies;

d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin. Please be aware that, in this case, you might be prevented from using all features and functions of our website without restrictions.

The legal basis for the processing of your data is Art. 6 subs. 1 sentence 1 f) GDPR. Our legitimate economic interest consists in drawing your attention to the services we offer to inform you about our portfolio and make it easier for you to retrieve our services during your next session. We thereby want to offer you good customer service. This often helps to initiate contractual relationships.

Further information on DoubleClick by Google and data protection by Google is available on the Google website (www.google.de). Alternatively, you can go to the website of the Network Advertising Initiative (NAI) at www.networkadvertising.org. Google has agreed to respect and comply with the EU-US Privacy Shield; further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).

d) Facebook Pixel

For the purposes of analysing, optimizing and efficiently operate our website, we use the so-called “Facebook pixel” of Facebook lnc., 1 Hacker Way, Menlo Park, CA 94025, USA. The Facebook pixel enables Facebook to identify you as visitor to our website as the target group for the presentation of advertisements – the so-called “Facebook Ads”. We only use the Facebook pixel to provide you with the Facebook Ads which we have placed. However, this will only be the case if you have not objected to the use of the Facebook pixel. If you want to prevent the use of the Facebook pixel, you can use the opt-out options which are made available on the website or prevent the use of the Facebook pixel in your advertising preferences with Facebook under: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

The legal basis for the processing of your data is Art. 6 subs. 1 sentence 1 f) GDPR. Our legitimate economic interest consists in drawing your attention to the services we offer to inform you about our portfolio and make it easier for you to retrieve our services during your next session. We thereby want to offer you good customer service. This often helps to initiate contractual relationships.

e) Google Tag Manager

We use the Google Tag Manager. This service enables us to administer website tags via a web surface. The “Tag Manager” tool identifies interactions which take place on our websites and refers them to the embedded tools (e.g. Google Analytics and Google Adwords). The Tag Manager itself does not collect personal data but only triggers the embedded tools (such as Google Analytics and Google Adwords) which on their part may collect data. The Google Tag Manager does not access this data. Where a deactivation was initiated on the domain level or cookie level, it will continue in effect for all tracking tags if and to the extent they are implemented with the Google Tag Manager.

9. Social media

a) Social media plug-ins

We currently use the following social media plug-ins:

• Facebook
• Twitter
• YouTube
• Google+
• Instagram

In this context, we use the double-click solution. This means that, when you visit our website, as a rule, no personal data is transferred to the plug-in provider at first. You can recognize the plug-in provider by the mark in the box above the provider’s initial letter or by its logo. We offer you the possibility to communicate directly with the plug-in provider via the button. Only when you click the marked field and thus activate it, the plug-in provider is informed that you have accessed the relevant website of our online presentation. In addition, the data mentioned in this Privacy Policy under “Collection of personal data when you use the website for information purposes” is transferred, too. In the case of Facebook, pursuant to the information provided by the relevant providers in Germany, the IP address is anonymized immediately after collection. This means that, when you activate the plug-in, your personal data is transferred to the relevant plug-in provider and stored there (in the case of US-Americ an providers in the USA). Since the plug-in provider collects data especially by cookies, we recommend that you delete all cookies in the security settings of your browser before you click the greyed-out box.

We have no influence on the collected data or data processing activities nor are we aware of the scope of data collection, the purposes of the processing and the duration of data storage. We do not know about the deletion of the collected data by the plug-in provider either.

The plug-in provider stores the data collected from you in the form of user profiles and uses them for advertising and market research purposes and/or to tailor its website to the users’ demands. The analysis in particular serves to display customized advertisements (also for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object to, and thus prevent, the preparation of user profiles; if you want to exercise this right, you have to address the relevant plug-in provider. We offer you the possibility, via the plug-ins, to interact with the social networks and other users which enables us to improve our presentation and services and offer you as the user a more interesting design. The legal basis for the use of the plug-ins is Art. 6 subs. 1 sentence 1 f) GDPR.

The data is transferred regardless of whether or not you have an account with the plug-in provider and whether or not you are logged in there. When you are logged in to the plug-in provider, the data we have collected from you is immediately allocated to your account with the plug-in provider. When you click the activated button and, for instance, set a link on the page, the plug-in provider will also store this information in your user account and publicly communicate it to your contacts. We recommend that you always log out when you have visited a social network, especially before you activate the button, to so prevent any allocation to your profile with the plug-in provider.

Further information on the purpose and scope of data collection and data processing by the plug-in provider is available in the privacy policies of these providers set out below. These also contain further information on the rights to which you are entitled in this context and the possible settings to protect your privacy.

Addresses of the relevant plug-in providers:

• Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; information on data protection by Facebook is available on the Facebook website (www.facebook.com). Facebook has agreed to respect and comply with the EU-US Privacy-Shield. Further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).
• Twitter Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; information on data protection by Twitter is available on the Twitter website (www.twitter.com). Twitter has agreed to respect and comply with the EU-US Privacy-Shield. Further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).
• Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; information on data protection by Google is available on the Google website (www.google.com). Google has agreed to respect and comply with the EU-US Privacy-Shield. Further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).
• Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA; information on data protection by Instagram is available under (www.instagram.com).

b) Links to our social media sites

We maintain social media sites to enable communication with potential customers and other users and inform you about our services. If you use these sites, the privacy policy of the relevant social media provider applies:

• Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; information on data protection by Facebook is available on the Facebook website (www.facebook.com). Facebook has agreed to respect and comply with the EU-US Privacy-Shield. Further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).
• Twitter Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; information on data protection by Twitter is available on the Twitter website (www.twitter.com). Twitter has agreed to respect and comply with the EU-US Privacy-Shield. Further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).
• Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; information on data protection by Google is available on the Google website (www.google.com). Google has agreed to respect and comply with the EU-US Privacy-Shield. Further information is available on the website of the EU-US Privacy Shield (www.privacyshield.gov).
• Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA; information on data protection by Instagram is available under (www.instagram.com).
• XING SE, Dammtorstraße 30, 20354 Hamburg, Germany; information on data protection by Xing is available under (www.xing.com).
• LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Information on data protection by LinkedIn is available under (www.linkedin.com).
• Snap Group Limited, 7-11 Lexington Street, London W1F 9AF, Great Britain; information on data protection by the Snap Group is available under (www.snap.com).

Our website contains links to our social media sites. When you visit our website and click a link, you are referred directly to the relevant social media site.

Please be aware that, when you use our social media sites, personal data might be processed outside the EU and the EEA. In this case, it might be more difficult to enforce the rights to which you are entitled under the GDPR. Unless stated otherwise in this Privacy Policy, we will only process your data when you communicate with us in the context of the relevant social media site, e.g. if you comment a post on Facebook or send us a message. We will process this personal data exclusively in the context and for the purposes of this communication, e.g. to answer your request. The legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR. We have a legitimate economic interest in communicating with (potential) customers and other interested persons. Details regarding the processing of your personal data are available in the privacy policies of the social media providers.

In many cases, the most efficient way to exercise your right to access/ information (Art. 15 GDPR) as well as the other rights of data subjects described below is to address the relevant social media provider directly because, in many cases, only the social media provider itself has direct access to the processed data and can thus provide appropriate information or take appropriate measures (such as deletion of data). Of course, you may also address your request directly to us. Our contact data is stated above in this Privacy Policy.

10. YouTube videos

We have embedded YouTube videos in our online presentation which are stored on www.youtube.com and can be started and played back directly from our website. All videos are embedded in an “enhanced data protection mode” which means that no data concerning you as the user is transferred to YouTube if you do not play back the videos. Only when you play back the videos, the data mentioned in the following paragraph will be transferred to YouTube. We cannot influence this data transfer.

When you visit our website, YouTube is informed that you have accessed the relevant page of our website. In addition, the data mentioned in this Privacy Policy under “Information on the collection of personal data” is transferred, too. This happens regardless of whether YouTube provides a user account via which you are logged in or a user account does not exist. When you are logged in to Google, your data is directly allocated to your account. If you do not want your data to be allocated to your YouTube profile, you have to log out before you activate the button. YouTube stores your data as user profiles and uses them for advertising and market research purposes and/or to tailor its website to the users’ demands. The analysis in particular serves to display customized advertisements (also for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object to, and thus prevent, the preparation of user profiles; if you want to exercise this right, you have to address your objection to YouTube.

We embed YouTube videos to make our website more interesting and inform you about the services we offer. The legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR.

Further information on the purpose and scope of data collection and data processing by YouTube is available in the privacy policy which you can read on the website of Google (www.google.de). The latter also contains further information on the rights to which you are entitled in this context and the possible settings to protect your privacy: Google processes your personal data also in the USA and Google has agreed to respect and comply with the EU-US Privacy Shield (www.privacyshield.gov).

11. Google Maps

We use the services of Google Maps on our website. This enables us to show you interactive maps directly on our website and thus enables you to comfortably use the maps feature.

When you access the website, Google is informed that you have accessed the relevant page of our website. In addition, the data mentioned in this Privacy Policy under “Collection of personal data when you use the website for information purposes” is transferred, too. This happens regardless of whether Google provides a user account via which you are logged in or a user account does not exist. When you are logged in to Google, your data is directly allocated to your account. If you do not want your data to be allocated to your Google profile, you have to log out before you activate the button. Google stores your data as user profiles and uses them for advertising and market research purposes and/or to tailor its website to the users’ demands. The analysis in particular serves to provide customized advertisements (also for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object, and thus prevent, the preparation of these user profiles; if you want to exercise your right to object, you have to address your objection to Google.

Further information on the purpose and scope of data collection and data processing by the plug-in provider is available in the privacy policies of Google which also contain further information on your rights and the possible settings to protect your privacy. The appropriate privacy policy is available on the website of Google (www.google.de). Google processes your personal data also in the USA and Google has agreed to respect and comply with the EU-US Privacy Shield (www.privacyshield.gov).

13. Google reCAPTCHA

In the contact form we use Google reCAPTCHA. This prevents bots from filling out the forms.

When you accept the use of Google reCAPTCHA, Google is informed that you have accessed the relevant page of our website. In addition, the data mentioned in this Privacy Policy under “Collection of personal data when you use the website for information purposes” is transferred, too. This happens regardless of whether Google provides a user account via which you are logged in or a user account does not exist. When you are logged in to Google, your data is directly allocated to your account. If you do not want your data to be allocated to your Google profile, you have to log out before you activate the button. Google stores your data as user profiles and uses them for advertising and market research purposes and/or to tailor its website to the users’ demands. The analysis in particular serves to provide customized advertisements (also for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object, and thus prevent, the preparation of these user profiles; if you want to exercise your right to object, you have to address your objection to Google.

It is not necessary to accept Google reCAPTCHA, you can contact directly at any time.

IV. Transfer of personal data to third parties

We will only transfer your personal data to third parties if this is permitted by law or the transfer is permissible under an appropriate contract for data processing on behalf according to Art. 28 subs. 3 GDPR.

V. Transfer of personal data to third countries

We will only transfer your personal data to third countries if this is permitted by law. Moreover, we will only transfer your data to third countries if the special conditions under Art. 44 et seqq. GDPR are fulfilled.

VI. Duration of storage

We will delete the data we have stored in connection with our website when the storage is no longer necessary and you have not consented or do no longer consent to the data processing, or we will restrict the processing in the case that we are obliged by law (e.g. under commercial law or tax law) to retain the data.

VII. SSL / TLS encryption

Our website is encrypted by SSL/TLS technology for reasons of security and to protect your personal data. You can see by “https://” and the lock symbol in your browser line that the website is encrypted.

VIII. Rights of data subjects

You are entitled to assert against us the following rights regarding your personal data:

• Right to access/ information, Art. 15 GDPR
• Right to rectification, Art. 16 GDPR
• Right to erasure / right “to be forgotten“, Art. 17 GDPR
• Right to restriction of processing, Art. 18 DGDPR
• Right to data portability, Art. 20 GDPR
• Right to lodge a complaint with a supervisory authority, Art. 77 GDPR

For more detailed information on your rights, please go to the articles of the GDPR mentioned above. You may also contact our data protection officer. The contact data of our data protection officer is stated above in this Privacy Policy.

RIGHT TO OBJECT TO THE PROCESSING ACCORDING TO ART. 21 GDPR

IF WE PROCESS YOUR DATA RELYING FOR SUCH PURPOSE ON OUR LEGITIMATE INTERESTS UNDER ART. 6 SUBS. 1 SENTENCE 1 F) GDPR, YOU MAY AT ANY TIME OBJECT TO THE PROCESSING WITH EFFECT FOR THE FUTURE. YOU CAN OBJECT TO THE PROCESSING BY CONTACTING US UNDER THE CONTACT DATA STATED ABOVE.

IN CASE YOU EXERCISE YOUR RIGHT TO OBJECT, WE KINDLY ASK YOU TO EXPLAIN TO US THE REASONS WHY YOU DO NOT WANT US TO PROCESS THE DATA IN THE WAY WE USUALLY DO. IF YOUR OBJECTION IS JUSTIFIED, WE WILL CHECK THE FACTS AND EITHER STOP OR ADJUST THE DATA PROCESSING OR EXPLAIN TO YOU ANY COMPELLING LEGITIMATE REASONS WHY WE HAVE TO CONTINUE THE PROCESSING.

WHERE WE PROCESS YOUR DATA FOR DIRECT MARKETING PURPOSES, YOU MAY AT ANY TIME OBJECT TO THE PROCESSING FOR SUCH PURPOSES WITH EFFECT FOR THE FUTURE. IF YOU OBJECT TO THE DATA PROCESSING FOR DIRECT MARKETING PURPOSES, WE WILL STOP THE PROCESSING OF YOUR PERSONAL DATA.

INFORMATION ON YOUR RIGHT TO OBJECT TO DATA PROCESSING FOR MARKETING PURPOSES IS AVAILABLE UNDER THE CONTACT DATA STATED ABOVE.

RIGHT TO WITHDRAW YOUR CONSENT TO THE PROCESSING OF YOUR DATA AT ANY TIME ACCORDING TO ART. 7 SUBS. 3 GDPR

IF YOU HAVE CONSENTED TO THE PROCESSING OF YOUR DATA, YOU MAY WITHDRAW YOUR CONSENT AT ANY TIME WITH EFFECT FOR THE FUTURE. YOU CAN ADDRESS YOUR WITHDRAWAL TO THE CONTACT DATA STATED ABOVE. THE WITHDRAWAL OF CONSENT WILL NOT AFFECT THE LAWFULNESS OF PROCESSING BASED ON CONSENT BEFORE ITS WITHDRAWAL.

INFORMATION ON YOUR RIGHT TO WITHDRAW YOUR CONSENT IS AVAILABLE UNDER THE CONTACT DATA STATED ABOVE.