Data privacy statement
1. Data privacy at a glance
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you can be personally identified. Detailed information on the topic of data privacy can be found in our data privacy statement listed below this text.
Data collection on our website
Who is responsible for data collection on this website?
Data processing on this website is performed by the website operator, whose contact data can be found in the legal notice of this website.
How do we collect your data?
Your data are collected, on the one hand, when you share them with us. This may include, for example, data which you enter into a contact form.
Other data are automatically collected by our IT systems when the website is visited. These are, in particular, technical data (for example, Internet browser, operating system, or time at which a page was viewed). These data are collected automatically as soon as you visit our website.
What do we use your data for?
Some of the data are collected to ensure proper provision of the website. Other data may be used to analyze your user behavior.
What rights do you have with regard to your data?
You have the right at all times to obtain free information about the origin, recipient, and purpose of your stored personal data. You additionally have the right to request that these data be corrected, blocked or deleted. For this purpose as well as for any additional questions regarding data privacy, you may contact us at any time at the address indicated in the legal notice. Moreover, you have a right of appeal before the competent supervisory authority.
You additionally have the right to request limitation of the processing of your personal data under certain circumstances. Details on this can be found in the data privacy statement under “Right to limitation of processing.”
Analysis tools and tools from third-party providers
During your visit to our website, your surfing behavior may be statistically evaluated. This is done in particular using cookies with so-called analysis programs. The analysis of your surfing behavior is generally performed anonymously; the surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information about this can be found in the following data privacy statement.
You can object to this analysis. We will inform you of options for an appeal in this data privacy statement.
2. General information and compulsory information
The operators of these pages take the privacy of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data privacy regulations as well as this data privacy statement.
When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This data privacy statement explains which data we collect and what we use these data for. It also explains how and for what purpose this is done.
We wish to point out that online data transmission (for example, during email communication) may involve gaps in security. It is not possible to completely protect data from access by third parties.
Information on the responsible body
The responsible body for the data processing on this website is:
Telephone: +49 (0) 721 25514-0
The responsible body is the natural person or legal entity who makes decisions, alone or together with others, regarding the purposes and means of processing personal data (such as name, email addresses, and the like).
Revoking your consent for data processing
Many data processing operations are possible only with your express consent. You may at any time revoke consent already granted. To do this, you may notify us informally via email. The legality of the data processing performed until the revocation remains unaffected by the revocation.
Right to object to data collection in special cases as well as to direct advertising (Art. 21 General Data Protection Regulation (GDPR))
If data processing is performed on the basis of Art. 6, para. 1 (e) or (f) GDPR, you have the right at all times to file an objection against the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data privacy statement. If you file an objection, we will no longer process your personal data concerned unless we can prove compelling, legitimate reasons for the processing which outweigh your interests, rights and freedoms, or if the processing is used to assert, exercise or defend legal claims (objection according to Art. 21, para. 1 GDPR).
If your personal data are processed to conduct direct advertising, you have the right to file an objection at any time against the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling, provided it is connected with such direct advertising. If you object, your personal data will then no longer be used for purposes of direct advertising (objection according to Art. 21, para. 2 GDPR).
Right of appeal before the competent supervisory authority
In the event of infringements of the GDPR, the affected party has the right to appeal before a supervisory authority, in particular in the member state of the party’s habitual residence, workplace, or site of the alleged infringement. The right to appeal is without prejudice to other administrative or judicial remedies.
Right to data transferability
You have the right to have data which we process automatically on the basis of your consent or to fulfill a contract given to you or to a third party in a conventional, machine-readable format. If you request the direct transfer of data to another responsible party, this will be done only if it is technically feasible.
SSL and TLS encryption
This website uses SSL and TLS encryption for security reasons and to safeguard the transfer of confidential content, such as orders or inquiries, which you send us as the website operator. You can identify an encoded connection when the address line of the browser switches from “http://” to “https://” and by the padlock symbol in your browser line.
When the SSL or TLS encryption is activated, data which you transmit to us cannot be read by third parties.
Encrypted payments on this website
If, after concluding a contract involving fees, there is an obligation to transmit your payment data (such as account number in the case of a direct debit authorization) to us, these data are needed to process the payment.
Payment transactions using common methods of payment (Visa/MasterCard, direct debiting) are conducted exclusively via an encoded SSL or TLS connection. You can identify an encoded connection when the address line of the browser switches from “http://” to “https://” and by the padlock symbol in your browser line.
In the case of encoded communication, your payment data which you send us cannot be read by third parties.
Information, blocking, deletion and correction
Within the framework of the applicable legal regulations, you have the right at all times to obtain information free of charge about your stored personal data, their origin and recipients, the purpose of the data processing and, if applicable, a right to correction, blocking or deletion of these data. For this purpose as well as for any additional questions regarding personal data, you may contact us at any time at the address indicated in the legal notice.
Right to limitation of processing
You have the right to request limitation of the processing of your personal data. To do this, you may contact us at any time at the address indicated in the legal notice. The right to limit processing exists in the following cases:
- If you dispute the accuracy of your personal data stored by us, we generally need time to review this. For the duration of the review, you have the right to request limitation of the processing of your personal data.
- If the processing of your personal data was or is performed unlawfully, you may request limitation of the data processing instead of deletion.
- If we no longer need your personal data, however if you need them for exercising, defending or asserting legal claims, you have the right to request the limitation of processing of your personal data instead of deletion.
- If you have filed an objection according to Art. 21, para. 1 GDPR, an assessment weighing your interests and our interests against each other must be performed. For as long as it is unclear whose interests prevail, you have the right to request limitation of the processing of your personal data.
If you have limited the processing of your personal data, these data – apart from their retention – may be processed only with your consent or to assert, exercise or defend legal claims, or to protect the rights of another natural person or legal entity, or for reasons of an important public interest of the European Union or one of the member states.
Objection to advertising emails
We expressly object to the use of contact data published within the framework of legal notice requirements to send advertisements and informational material which was not expressly requested. The operators of the web pages expressly reserve the right to take legal steps in the event that unsolicited advertising material is sent, such as via spam emails.
3. Data privacy officer
Statutory data privacy officer
We have appointed a data privacy offer for our company.
Rashedi Consulting GmbH
Telephone: +49 (0) 7243 9380881
4. Data collection on our website
The websites use so-called cookies in some cases. Cookies do not do any harm to your computer and do not contain any viruses. Cookies are used to make our website more user-friendly, effective, and secure. Cookies are small text files which are stored on your computer and which your browser saves.
Most of the cookies we use are known as “session cookies.” They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal until you delete them. These cookies allow us to recognize your browser at your next visit.
Cookies which are needed to conduct the electronic communication process or to provide certain functions you would like (such as a shopping cart function) are saved on the basis of Art. 6, para 1 (f) GDPR. The website operator has a legitimate interest in saving cookies for the technically error-free and optimized provision of its services. Other cookies (for example, cookies for the analysis of your surfing behavior) which may be saved are addressed separately in this data privacy statement.
Server log files
The provider of the web pages automatically collects and saves information in so-called server log files which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server query
- IP address
These data are not merged with other data sources.
These data are collected based on Art. 6 Abs. 1 (f) GDPR. The website operator has a legitimate interest in the technically error-free display and optimization of its website and the server log files must be collected for this purpose.
When you send us inquiries via the contact form, we store your data from the inquiry form, including the contact data you indicated there, for the purposes of processing the request and in the event of follow-up questions. We do not forward these data without your consent.
The data entered in the contact form are thus processed exclusively on the basis of your consent (Art. 6 para. 1 (a) GDPR). You may revoke this consent at any time. To do this, you may notify us informally via email. The legality of the data processing operations performed until the revocation remains unaffected by the revocation.
We retain the data you entered in the contact form until you request deletion, revoke your consent to storage, or the purpose of the data storage no longer applies (for example, after your inquiry has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.
Registration with Facebook Connect
Instead of directly registering on our website, you can register with Facebook Connect. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
If you choose to register with Facebook Connect and click on the “Login with Facebook”- / “Connect with Facebook” button, you will be automatically redirected to the Facebook platform. There you can log in with your usage data. As a result, your Facebook profile will be linked to our website and our services. Through this link, we obtain access to your data stored on Facebook. These are, in particular:
- Facebook name
- Facebook profile and cover photo
- Facebook cover photo
- Email addresses stored on Facebook
- Facebook ID
- Facebook friend lists
- Facebook “likes”
- Date of birth
These data are used to set up, provide and personalize your account.
Registration with Facebook Connect and the associated data processing operations are performed on the basis of your consent (Art. 6, para. 1 (a) GDPR). You may revoke this consent at any time with effect for the future.
Processing data (customer and contract data)
We collect, process and use personal data only if they are needed for the establishment, content-related design, or change in a legal relationship (inventory data). This is performed on the basis of Art. 6 para. 1 (b) GDPR which permits the processing of data for the fulfillment of a contract or precontractual measures. We collect, process and use personal data on the use of our web pages (usage data) only if this is required to enable the user to use or be invoiced for our service.
The customer data collected are deleted after completion of the order or end of the business relationship. Statutory retention periods remain unaffected.
5. Social media
Facebook plugins (Like & Share button)
Plugins of the Facebook social network (provider: Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA) are integrated on our web pages. The Facebook plugins can be identified by the Facebook logo or the “Like” button on our website. An overview of the Facebook plugins is available at: https://developers.facebook.com/docs/plugins/.
When you visit our web pages, a direct connection between your browser and the Facebook server is established via the plugin. As a result, Facebook receives information that you have visited our website with your IP address. If you click the Facebook “Like” button while you are logged into your Facebook account, you can link the contents of our pages to your Facebook profile. As a result, Facebook can allocate the visit to our web pages to your user account. We wish to point out that we, as provider of the web pages, do not obtain any knowledge of the content of the data transmitted or of their use by Facebook. More information about this can be found in the data privacy statement of Facebook at: https://www.facebook.com/privacy/explanation.
If you do not want Facebook to allocate the visit to our web pages to your Facebook user account, please log out of your Facebook user account.
The Facebook plugin is used based on Art. 6 Abs. 1 (f) GDPR. The website operator has a legitimate interest in the broadest possible visibility on social media.
The functions of the Twitter service are integrated on our web pages. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “Re-Tweet” function, the websites you visited are linked to your Twitter account and disclosed to other users. In doing so, data are also transmitted to Twitter. We wish to point out that we, as provider of the web pages, do not obtain any knowledge of the content of the data transmitted or of their use by Twitter. More information about this can be found in the data privacy statement of Twitter at: https://twitter.com/privacy.
The Twitter plugin is used based on Art. 6 Abs. 1 (f) GDPR. The website operator has a legitimate interest in the broadest possible visibility on social media.
You can change your Twitter data privacy settings in the account settings at https://twitter.com/account/settings.
Our website uses functions of the LinkedIn network. The provider is the LinkedIn corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Each time one of our pages which contains LinkedIn functions is visited, a connection to LinkedIn servers is established. LinkedIn is informed that you visited our web pages with your IP address. If you click the LinkedIn “Recommend” button and are logged into your account at LinkedIn, it is possible for LinkedIn to allocate your visit to our website to you and your user account. We wish to point out that we, as provider of the web pages, do not have any knowledge of the content of the data transmitted or of their use by LinkedIn.
The LinkedIn plugin is used based on Art. 6 Abs. 1 (f) GDPR. The website operator has a legitimate interest in the broadest possible visibility on social media.
More information about this can be found in the data privacy statement of LinkedIn at: https://www.linkedin.com/legal/privacy-policy.
6. Analysis tools and advertising
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies.” These are text files which are saved on your computer and which enable your use of the website to be analyzed. Information generated by the cookie regarding your use of this website is generally transferred to a server of Google in the USA and stored there.
The Google Analytics cookie is stored and this analysis tool is used on the basis of Art. 6 para. 1 (f) GDPR. The website operator has a legitimate interest in the analysis of usage behavior in order to improve its website as well as its advertising.
We activated the IP anonymization function on this website. As a result, your IP address is truncated by Google within member states of the European Union or in other contracting states of the agreement on the European Economic Area prior to transfer to the USA. Only in exceptional cases is the full IP address transmitted to a server of Google in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide additional services related to the website use and Internet use for the website operator. The IP address transmitted from your browser within the framework of Google Analytics is not merged with other data from Google.
You can prevent cookies from being stored by setting your browser software accordingly; however we wish to point out that, in this case, you may not be able to make full use of all of the functions of this website. You can also prevent the collection of the data which are generated by the cookie and which relate to your use of the website (including your IP address) by Google as well as the processing of these data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
This website uses Hotjar, an analysis software of Hotjar Ltd. (“Hotjar”) (https://www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe). With Hotjar it is possible to measure and evaluate the usage behaviour (clicks, mouse movements, scroll heights, etc.) on our website. The information generated by the “tracking code” and “cookies” about your visit to our website is transmitted to and stored on the Hotjar servers in Ireland. The tracking code collects the following information: Device dependent data
- The IP address of your device (collected and stored in an anonymous format)
- Your e-mail address including your first and last name, if you have provided it to us via our website.
- Screen size of your device
- Device type and browser information
- Geographical position (country only)
- The preferred language to display our website
- Related domain
- Visited pages
- Geographical position (country only)
- The preferred language to display our website
- Date and time when the website was accessed
Hotjar will use this information for the purpose of evaluating your use of our website, compiling reports on such use, and providing other services relating to the website’s use and Internet evaluation of the website. Hotjar also uses third-party services such as Google Analytics and Optimizely to provide services. These third party companies may store information that your browser sends when you visit the website, such as cookies or IP requests. For more information on how Google Analytics and Optimizely store and use data, please refer to their respective privacy statements.
If you continue to use this website, you consent to the processing of your personal data as described above.
data by Hotjar and its third party vendors within the scope of their privacy policies.
The cookies that Hotjar uses have a different “lifetime”; some last up to 365 days, some only last during the current visit.
You can prevent Hotjar from collecting this information by clicking on the following link and following its instructions: https://www.hotjar.com/legal/compliance/opt-out.
Objection to data collection
You can prevent your data from being collected by Google Analytics by clicking on the following link. An opt-out cookie which prevents the collection of your data during future visits to this website is implemented: Deactivate Google Analytics.
We have concluded a contract with Google for order processing and fully implement the strict requirements of German data protection authorities in the use of Google Analytics.
7. Plugins and tools
YouTube with expanded data privacy
Our website uses plugins of the website YouTube. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
We use YouTube in expanded data privacy mode. According to YouTube, this mode ensures that YouTube does not save any information about visitors to this website before they view the video. By contrast, the forwarding of data to YouTube partners is not necessarily excluded by the expanded data privacy mode. In this way, YouTube – whether or not you view a video – establishes a connection to the Google DoubleClick network.
As soon as you start a YouTube video on our website, a connection to the servers of YouTube is established. As a result, which of our pages you visited is communicated to the YouTube server. If you are logged into your YouTube account, you enable YouTube to directly allocate your surfing behavior to your personal profile. You can prevent this by logging out of your YouTube account.
In addition, after the start of a video, YouTube can store various cookies on your terminal. YouTube can obtain information about visitors to our website with the aid of these cookies. This information is used, among other things, to collect video statistics, to improve user-friendliness, and to prevent attempted fraud. The cookies remain on your terminal until you delete them.
In some cases, additional data processing operations on which we have no influence may be triggered after the start of a YouTube video.
YouTube is used in the interest of making our website appealing. This represents a legitimate interest as defined by Art. 6 para. 1 (f) GDPR.
Additional information on data privacy at YouTube is available in their data privacy statement at: https://www.youtube.com/t/privacy_at_youtube.
This website uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to save your IP address. This information is generally transmitted to a server of Google in the USA and saved there. The provider of this webpage has no influence on this data transfer.
Google Maps is used in the interest of making our website appealing and to make locations we indicate on the website easy to find. This represents a legitimate interest as defined by Art. 6 para. 1 (f) GDPR.
More information on the handling of user data can be found in Google’s data privacy statement. https://www.google.de/intl/en/policies/privacy/.