Below, you will find information on which personal data we process for which purpose, on which basis and for how long:

Overview / Table of Contents

You will find the following information in our Privacy Notice:

A. Our contact details and general information about our data processing

B. Scope of processing of personal data via our website

C. Your rights as a data subject

A. Our contact details and general information about data processing by us

Name and contact details of the controller

The controller responsible for the collection and use of personal data, within the meaning of data protection law, is

CiK Solutions GmbH
Wilhelm-Schickard-Strasse 9
76131 Karlsruhe

Represented by its Managing Director, Mr Joachim Haag

Phone: 0721 / 6269085-0
Fax: 0721 / 6269085-99 
E-mail: info@cik-solutions.com

Website: www.cik-solutions.com 

Contact details of the controller’s data protection officer

You may contact our data protection officer as follows:


Dipl. Betriebswirt Andreas Schaupp 
Deltamed Süd GmbH & Co. KG
Untere Gasse 9
71642 Ludwigsburg

Represented by

Email address: datenschutz@deltamedsued.de

Legal bases for processing personal data

The following generally applies to the processing of personal data by us:

Data erasure and retention period

We generally delete or block personal data as soon as the purpose of retention ceases to apply. Furthermore, data may be retained if this has been provided for by European or national lawmakers in EU regulations, laws, or other provisions to which we, as the controller, are subject. Data will also be blocked or erased if a retention period prescribed by the laws referred to above has lapsed, unless there is a need for further retention of the data for the conclusion or performance of a contract.

In concrete terms, this means:

If we process personal data on the basis of consent to data processing (Art. 6(1)(a) General Data Protection Regulation - GDPR) processing ends with the withdrawal of your consent, unless there is another legal reason for processing the data, which is the case if we are still entitled to process your data at the time of withdrawal for the purpose of contract fulfilment or if data processing is necessary to protect our legitimate interests (cf. in each case below).

If we process data in exceptional cases on the basis of our legitimate interest (Art. 6 (1)(f) GDPR) within the scope of a previously conducted weighing of interests, we will retain such data until the legitimate interest no longer applies, the weighing of interests leads to a different outcome, or you have submitted an effective objection in accordance with Article 21 GDPR (see the highlighted “Information on the special right to object” under C.).

If we process data for the performance of a contract, we will retain such data until the contract has been fully performed and settled and no more claims may be asserted under the contract, i.e. until the end of the limitations period. The general limitation period according to section 195 German Civil Code (BGB) is three (3) years. However, certain claims – such as claims for damages – become time-barred after 30 years (cf. section 197 BGB). We will store personal data for longer than this period if there is a legitimate reason to assume that it may be relevant in individual cases. The aforementioned limitation periods commence at the end of the year (i.e. 31 December) in which the claim arose and the claimant became aware of the circumstances giving rise to the claim, and the identity of the liable party, or should become aware of absent gross negligence.

Please note that we are also subject to statutory retention obligations for tax and accounting reasons. These oblige us to retain certain data, which might include personal data, for a period of six (6) to ten (10) years to provide supporting documents for our accounting. These retention periods take precedence over the above-mentioned deletion obligations. These other retention periods also commence at the end of the respective year, i.e. on 31 December.

Source of personal data

We process the following categories of personal data:

Only in very exceptional cases can the personal data processed by us be provided by third parties, for example if a person acts on behalf of a third party.

General categories, purposes, and legal bases for processing personal data

Wir verarbeiten folgende Kategorien personenbezogener Daten: 

Depending on the category of data involved, we process personal data for the following purposes and on the basis of the respective legal basis of the General Data Protection Regulation (GDPR):

User data: We collect and process data from users of our website on an anonymous basis. It is not possible for us to associate this data with a specific person. IP addresses are only processed on an anonymised basis. If, in exceptional cases, personal data is affected, we process such data in pursuit of our legitimate interests on the basis of Art. 6(1)(f) GDPR. In this context, our legitimate interests are our interest in the security and integrity of our website and the data on our web server (in particular to detect faults and errors as well as the tracking of unauthorised access), as well as marketing interests and interests in statistical surveys (to improve our website and our services and offers). After a careful assessment, we have come to the conclusion that data processing is necessary to safeguard the aforementioned legitimate interests and that your interests or fundamental rights and freedoms that would require the protection of personal data do not outweigh such interests.

Data from prospective customers/Data from members of the press: If we process data from prospective customers or data of members of the press, such processing is only performed if you enter such data in an input field or provide the data by e-mail as you submit your request to us. These entries are not mandatory. Accordingly, we process this data exclusively to address your request. Processing of data provided to us voluntarily for the purpose of providing information about our services is carried out as a pre-contractual transaction pursuant to Article 6(1)(b) GDPR and/or on the basis of the consent you have given by transmission pursuant to Article 6(1)(a) GDPR.
 
Customer data: We process the data of our customers to perform a contract pursuant to Article 6(1)(b) GDPR and/or on the basis of consent in accordance with Article 6(1)(a) GDPR. This also applies to processing operations that are necessary in connection with pre-contractual activities (e.g. preparing and negotiating offers).

Supplier data/Business partner data: We process data from our suppliers and business partners for contract performance pursuant to Article 6(1)(b) GDPR and/or on the basis of consent in accordance with Article 6(1)(a) GDPR. This also applies to processing operations that are necessary in connection with pre-contractual activities (e.g. preparing and negotiating offers).

Recipients or categories of recipients of personal data

Your personal data will only be passed on or otherwise transferred to third parties if this is necessary for the purpose of contract processing (e.g. to process an order) or for billing purposes (e.g. to process a payment transaction for the purchase of goods or services), if there is a legitimate interest in the transfer and your interests or fundamental rights and freedoms do not outweigh this interest, or if you have given your prior, valid consent.

Categories of recipients may include:

Contact options via email, fax, and telephone

You can contact us via various channels if desired. You will also find our e-mail address, telephone number and fax number on the website. Even in cases where you write us an email, call us or send us a fax, we process personal data from you as a matter of necessity. At the very least, personal data transmitted by e-mail, fax, or telephone is stored by us or our systems.

Data collected in this manner is not shared with third parties. This data will be used exclusively to process your inquiry.

Purposes of data processing: Personal data you transmit to us by email, fax, or telephone is processed in connection with handling your contact request and your concerns. Your email address, fax number or telephone number are essential in order to be able to respond. This also represents a legitimate interest in processing this data.

Legal basis for data processing: The legal basis for processing this data is Article 6(1)(a) GDPR in the case of consent, which can be inferred from seeking to contact us, and otherwise based on our legitimate interest in data processing pursuant to Article 6(1)(f) GDPR.
If the intent of contacting us / submitting an enquiry is to enter into a contract with us, this creates an additional legal basis for its processing in accordance with Article 6(1)(b) GDPR.

Retention period: The data will be erased as soon as it is no longer necessary to achieve the purpose for which it was collected.

For personal data sent by email, this is the case when the conversation with you has ended and after expiry of a waiting period of 3 months during which we assess if we need to access your request or the details of the communication again. The conversation has ended when it can be inferred from the circumstances that the matter at hand has been conclusively resolved.

 
Fax data is stored separately from print data in the machine memory of the fax machine. After the fax has been printed, the memory space is released again so that the next fax can be received and stored there. Parts of the fax may remain temporarily in the machine's memory after printing until they are overwritten by the next fax received. As a rule, this leads to automatic deletion of the data after approx. 1-2 weeks. In the case of a computer fax, we receive your fax as an e-mail and information on email processing apply accordingly.

 
In the case of an incoming or outgoing telephone call, your telephone number or your name/company name stored with your telephone provider, as well as the date and time of the call, are stored in our telephone system in a so-called ring buffer, which overwrites the oldest data with new data. As a rule, this leads to automatic deletion of the data in the telephone system after approx. 3–4 months.

 
The communication can be subject to a retention obligation if necessary from commercial or tax-based perspective, which then takes priority (see the explanations above regarding "data erasure and retention period").



Objection and erasure options: You have the ability to withdraw your consent to the processing of personal data or to object to further data processing based on a legitimate interest at any time (cf. the reference to the special right of objection under C. of this Privacy Notice). In such cases, it will not be possible to continue the respective conversation.
Withdrawal of consent or an objection to further data processing can be expressed informally (e.g. by email).
All personal data stored in the course of contacting us will be deleted as a result.

B.   Scope of processing of personal data via our website

We collect and use personal data of users of our website only to the extent necessary to provide a functional website as well as our contents and services. As a rule, the personal data of our users is collected and used only with the consent of the user. An exception applies in those cases where prior consent cannot be obtained for legal or circumstantial reasons and/or if the processing of the data is permitted by law.

Provision of the website and creation of log files

For technical reasons, our system automatically collects data and information each time you visit our website. They are stored in our server’s log files. These include:

This data is processed separately from other data. This data is not processed together with other personal data of the user. We cannot associate or connect this data to any specific person.


Purposes of data processing: Temporary processing of this data by the system is necessary to enable delivery of our website contents to the user's computer. To this end, the user's IP address must be stored for the duration of the session.
Data is stored in log files to ensure the website's functionality. The data is additionally used to optimise our offerings and the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is undertaken in this context.

 
Legal basis for data processing: The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR. Our compelling legitimate interest in such data processing lies in the aforementioned purposes.


Retention period: The data will be erased as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected to enable provision of the website, this will be undertaken once the respective session has ended. Any data stored in log files will be erased within seven days at the latest. Retention for longer period is not possible. In this case, the user's IP addresses will be erased or modified, so that it is not possible to associate the IP address with the requesting client.


Objection and erasure options: The collection of data for the provision of the website and storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object. However, the user may terminate use of the website at any time and thus prevent the further collection of the aforementioned data.

Contact form and email contact

Our website includes a contact form that can be used to contact us electronically. If you make use of this option, data entered in the input field will be transmitted to us and stored. As a rule, the data processing performed thereafter is limited to the respective topic chosen by you when contacting us via the contact form.

Data from the input fields will be transmitted to use when using the contact form. This includes:

You also have the ability to order our newsletter directly from there (for data processing in this regard you will find all information above under the heading "Data processing for distribution of the newsletter") and to have a copy of your message sent to us at your email address ("copy yourself").

The following data is also stored at the time a message is sent:


The data defined as mandatory fields are those that we absolutely need to answer your enquiry or process your contact.


During the sending process, your consent is obtained for processing data and an additional reference is made to this privacy policy.


Alternatively, you may contact us via the email address provided for this purpose. In this case, the user’s personal data transmitted along with the email will be stored.


This data will not be shared with any third parties in this context. Your data will be used exclusively to process and resolve your enquiry.

 
Purposes of data processing: Processing personal data from the input field aids us in handling your contact request and resolving your enquiry. In the event of contact, this also constitutes the necessary legitimate interest in processing the data.
Other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.


Legal basis for data processing: The legal basis for data processing in this context comprises our legitimate interest in accordance with Article 6(1)(f) GDPR. Our legitimate interest lies in the fact that we must process your data in order to be able to process your enquiry and/or contact request in the first place and to respond as necessary.
If the intent of contacting us / submitting an enquiry is to enter into a contract with us, this creates an additional legal basis for its processing in accordance with Article 6(1)(b) GDPR.
The legal basis for processing other personal data processed during the sending process is our legitimate interest in data processing pursuant to Article 6(1)(f) GDPR, which consists here in preventing misuse of the contact form and ensuring the security of our information technology systems.


Retention period: The data will be erased as soon as it is no longer necessary to achieve the purpose for which it was collected.
For the personal data from the contact form input field and data sent by email, this is the case when the respective conversation with you has been completed. The conversation has ended when it can be inferred from the circumstances that the matter at hand has been conclusively resolved.
The communication can be subject to a retention obligation if necessary from commercial or tax-based perspective, which then takes priority (see the explanations above regarding "data erasure and retention period").
Additional personal data collected during the sending process will be erased after a period of seven days at the latest.


Objection and erasure options: You have the ability to withdraw your consent to the processing of personal data or to object to further data processing based on a legitimate interest at any time (cf. the reference to the special right of objection under C. in this Privacy Notice). In such cases, it will not be possible to continue the respective conversation.
The withdrawal of consent or the objection to further data processing can be expressed informally (e.g. by e-mail).
All personal data stored in the course of contacting us will be deleted as a result.

Use of Cookies by us and third parties

We use so-called cookies when accessing individual pages. These are small text files that are stored on your device (PC, smartphone, tablet, etc.). If you access a website, a cookie may be stored by your browser. This cookie contains a distinctive character string that enables unique identification of the browser when the website is accessed again.

In addition, cookies from third parties may be used. These cookies may also permit the analysis of the user's behaviour. If this is the case, we will inform you separately in this Privacy Notice in the sections on the respective third-party tools (for example analysis tools, plugins, etc.).

When accessing our website, you are informed of the use of cookies for analytical purposes and your consent to the processing of personal data used in this context is obtained.

We use cookies to make our website usable or more user-friendly. Some elements of our website require that the requesting browser can be identified even after changing pages.

Our content management system also uses technically necessary cookies to enable functions such as logging into the administrator area or writing and posting comments for registered visitors (if enabled by us). Setting cookies is necessary to recognise logged in visitors.


Purpose of data processing: The purpose of using technically necessary cookies is to simplify use of websites for users. Some features of our website will not be available without the use of cookies. These features require the browser to be recognised even after changing the page. User data collected by technically necessary cookies is not used to create user profiles.

Analysis cookies are used to improve the quality of our website and its content. Using analysis cookies, we learn how the site is used and can constantly optimise our service.


Legal basis for data processing: The legal basis for processing personal data using cookies is Article 6(1)(f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.
The legal basis for processing personal data using cookies for analysis purposes is Article 6(1)(a) GDPR provided the user has given their consent; otherwise it is also a legitimate interest on our part due to the aforementioned purposes pursuant to Article 6(1)(f) GDPR.


Retention period: Some of the cookies we use are erased after the browser session, that is, after you close your browser (“session cookies”). Other cookies remain on your computer and allow us, or our service providers (third-party service providers), to identify your browser when you next visit (“persistent cookies”).

Otherwise, we retain data collected on the basis of a legitimate interest until the legitimate interest no longer applies, the weighing of interests leads to a different outcome, or you have submitted an effective objection in accordance with Article 21 GDPR (see the highlighted “Information on the special right to object” under C.). The continued existence of the legitimate interest is reviewed regularly and on an annual basis at least. Our interest no longer applies, in particular, if the data is no longer of sufficient relevance to us in terms of evaluation and statistics of website use due to the passage of time, which can be assumed after three years at the latest.


Objection and erasure options Cookies are stored on your computer and transmitted from there to our site. Accordingly, you have full control of the use of cookies. You can disable or restrict the transmission of cookies by changing the settings of your web browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. This "do-not-track" setting on your browser informs us of your objection to the further collection and use of your personal data. Note: If cookies are disabled for our websites, you may no longer be able to use all functions of our website to their full extent.

Use of the Google Analytics analysis tool

This website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, US ("Google"). Google Analytics uses so-called "cookies", which are text files stored in your computer which enable the analysis of the way in which users use the website.

Please note that on this website Google Analytics has been supplemented by the code “anonymizeIp” in order to guarantee the anonymous collection of IP addresses (so-called IP masking). In the event IP anonymisation is activated on this website, Google shortens the IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the complete IP address be transferred to a Google server in the United States and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities for website operators, and to provide additional services related to the use of the website and the Internet. The IP address transferred by your browser in connection with Google Analytics will not be associated with other data held by Google.

You can find more detailed information on Google's Terms of Use and Privacy Policy at http://www.google.com/analytics/terms/de.html  and at https://www.google.de/intl/de/policies/ 

 
Purpose of data processing: The analysis tool, and the analysis cookies, are used to improve the quality of our website and its content. This enables us to find out how the website is used and to continually optimise our website. As a rule, the information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.


Legal basis for data processing: The legal basis for data processing in this context is Art. 6(1)(f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes. Google Inc. has joined the "EU-US-Privacy Shield", so that data transmission to the US is lawful.


Retention period: Cookies are stored on the user's computer and transmitted to our site from there. Thus, as a user, you have full control of the use of cookies. You can disable or restrict the transmission of cookies by changing the settings of your web browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our websites, you may no longer be able to use all functions of our website to their full extent.

Otherwise, we retain data collected on the basis of a legitimate interest until the legitimate interest no longer applies, the weighing of interests leads to a different outcome, or you have submitted an effective objection in accordance with Article 21 GDPR (see the highlighted “Information on the special right to object” under C.). The continued existence of the legitimate interest is reviewed regularly and on an annual basis at least. Our interest no longer applies, in particular, if the data is no longer of sufficient relevance to us in terms of evaluation and statistics of website use due to the passage of time, which can be assumed after three years at the latest.


Objection and erasure options: You can prevent the use of cookies by selecting the corresponding settings on your browser; however, please note that if you do this, you may not be able to fully utilise all functions provided on this website. Furthermore, you can prevent the collection of data generated by the cookie and related to the usage of the website (incl. your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

You can prevent the collection of your data by Google Analytics by clicking on the following link. This sets an opt-out cookie which prevents the future collection of your data when visiting this website:
Google Analytics deaktivieren

Use of Google Maps

This website uses Google Maps, a map service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, US ("Google"), to display an interactive map. By using Google Maps, information about your use of the website (including the IP address) may be transmitted to a Google server in the United States and stored there.

Google may transfer the information obtained from Maps to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Under no circumstances will Google associate your IP address with any other data held by Google. However, it would be technically possible for Google to identify at least some users based on the data collected. It is possible that personal data and personal profiles of Google users may be processed for other purposes over which we have no control.


Purpose of data processing: Google Maps is used to improve the quality of our website and its contents and to provide you with a simple, useful, and well-known map service for orientation, to display our company headquarters, to plan your journey, etc.

 
Legal basis for data processing: The legal basis for processing personal data using Google Maps is Article 6(1)(f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes. Google Inc. has joined the "EU-US-Privacy Shield", so that data transmission to the US is lawful.


Retention period: As a user, you can decide on the execution of the JavaScript code required for the tool via your browser settings. By changing the settings in your web browser, you can disable or restrict the execution of JavaScript code. Note: If execution of JavaScript is disabled, it may not be possible to use all functions of the website to their full extent.

Otherwise, we retain data collected on the basis of a legitimate interest until the legitimate interest no longer applies, the weighing of interests leads to a different outcome, or you have submitted an effective objection in accordance with Article 21 GDPR (see the highlighted “Information on the special right to object” under C.). The continued existence of the legitimate interest is reviewed regularly and on an annual basis at least. Our interest no longer applies, in particular, if the data is no longer of sufficient relevance to us in terms of evaluation and statistics of website use due to the passage of time, which can be assumed after three years at the latest.


Objection and erasure options: You have the ability to disable the Google Maps service in a simple way and thus may prevent the transfer of data to Google: To do this, disable JavaScript in your browser.
To prevent the execution of JavaScript code in general, you can also install a JavaScript blocker, such as the browser plugin NoScript (e.g www.noscript.net or www.ghostery.com).
Note: If execution of JavaScript is disabled, it may not be possible to use all functions of the website to their full extent.

The privacy policy and terms of use for Google products and specifically for Google Maps can be found at
 https://policies.google.com/technologies/product-privacy?hl=de  

Use of YouTube videos on the website
JavaScript code from YouTube, LLC 901 Cherry Ave. 94066 San Bruno, CA, USA (hereinafter Youtube) is loaded on our site. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA. YouTube is an Internet video portal that allows users to post video clips and other users to view, rate, and comment on them free of charge. We use YouTube to embed videos on our website. If you have JavaScript enabled on your browser and have not installed a JavaScript blocker, your browser may transmit personal data to YouTube.
Each time you access a page on which a YouTube video is integrated, the user’s web browser automatically downloads the respective YouTube video and is played.
During this process, YouTube and Google are informed about which specific sub-page of our website is visited by users. If the user is logged in to YouTube at the same time, YouTube recognises which specific sub-page of our website the user visits by calling up a sub-page that contains a YouTube video. This information is collected by YouTube and Google and associated with the respective YouTube account of the user.
YouTube and Google will always receive information that the user has visited our website when the user is logged into YouTube at the same time as accessing our website, regardless of whether the person clicks on a YouTube video or not. If you do not want this information to be transmitted to YouTube and Google, you can prevent the transmission by logging out of your YouTube account before accessing our website.
YouTube's privacy policies provide information about the collection, processing and use of personal data by YouTube and Google and may be accessed here: http://www.google.de/intl/de/policies/privacy


Purpose of data processing: YouTube videos are embedded for the purpose of presenting multimedia content to the user through the website, thereby enhancing and improving the user experience on the website. This makes our website more attractive, which means that the use of YouTube also serves our marketing and advertising purposes.


Legal basis for data processing: The legal basis for data processing in this context is Art. 6(1)(f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest comprises the above-mentioned purposes.


Retention period: As a user, you can decide on the execution of the JavaScript code required for the tool via your browser settings. By changing the settings in your web browser, you can disable or restrict the execution of JavaScript code. Note: If execution of JavaScript is disabled, it may not be possible to use all functions of the website to their full extent.


Objection and erasure options: You can prevent the execution of the JavaScript code required for the tool by setting your browser software accordingly; please note that in this case you may not be able to use all the functions of this website to the full extent.
To prevent the execution of JavaScript code in general, you can also install a JavaScript blocker, such as the browser plugin NoScript (e.g www.noscript.net  or www.ghostery.com ).
Note: If execution of JavaScript is disabled, it may not be possible to use all functions of the website to their full extent.


Use of Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program from Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").
We use so-called conversion tracking within the scope of Google AdWords. When you click an ad delivered by Google, a cookie for Conversion Tracking is stored on your computer. Cookies are small text files that your web browser stores on your computer. These cookies are not used to personally identify the user. If you visit certain pages on this site and the cookie has not expired yet, Google and we may recognize that the user clicked on the ad and was directed to that page.

Each Google AdWords customer receives a different cookie. These cookies cannot be tracked via the websites of AdWords customers.

For more information about Google AdWords and Google Conversion Tracking, see the Google Privacy Policy: https://www.google.de/policies/privacy/ .



Purpose of data processing
The information collected with the help of cookies is used by Google to generate conversion statistics for us. However, we only see the total number of users who clicked on our AdWords ad and were redirected to our web page. We do not obtain any information that can be used to identify users personally. This serves the purpose of analysing and optimising our advertising and marketing activities.



Legal basis for data processing
“Conversion cookies" are stored on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in analysing user behaviour in order to optimise our website and our advertising.

 

Retention period
Cookies saved by Google lose their validity after 30 days.
Otherwise, we retain data collected on the basis of a legitimate interest until the legitimate interest no longer applies, the weighing of interests leads to a different outcome, or you have submitted an effective objection in accordance with Article 21 GDPR (see the highlighted “Information on the special right to object” under C.). The continued existence of the legitimate interest is reviewed regularly and on an annual basis at least. Our interest no longer applies, in particular, if the data is no longer of sufficient relevance to us in terms of evaluation and statistics of website use due to the passage of time, which can be assumed after three years at the latest.

 
Options for objection and erasure / Opt-out
You can disable or restrict the transmission of cookies by changing the settings of your web browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our websites, you may no longer be able to use all functions of our website to their full extent.
If you do not wish to participate in tracking, you can refuse by simply deactivating the Google conversion tracking cookie via your web browser settings. If you do so, you will not be included in the conversion tracking statistics.

You can also prevent further tracking by Google by clicking an opt-out tool we have provided HERE.

Website encryption

The website and data transmissions via the website are encrypted according to the SSL standard (https protocol / SHA-256 with RSA encryption).

Transfer of personal data to a third country (non-EU state)

We intend to transfer personal data to the United States of America (USA). The EU Commission has adopted an adequacy decision stating that personal data may be transferred to the US if the recipient has joined the "EU-US Privacy Shield". Personal data will therefore only be transmitted to recipients in the US who can prove that they have joined the EU-US Privacy Shield.

This intent refers specifically to the transmission of data to the following companies:

These companies have joined the EU-US Privacy Shield and are subject to a level of data protection comparable to that of the EU. The transmission of data to these companies is therefore generally lawful. Furthermore, in the case of contract data processing, appropriate contracts have been concluded with the companies concerned to ensure data security and our rights of instruction.

C. Rights of data subjects

If your personal data is processed, you are a “data subject” and you have the following rights with respect to us as the controller:

The right of access

You have the right to request confirmation from us, free of charge, as to whether we are processing personal data concerning you. If this is the case, then you have a right to information about such personal data and to further information as specified in Article 15 GDPR. You can contact us by post or email in this regard.

Right to rectification

You have the right to request us to correct any inaccurate personal data concerning you without undue delay. You also have the right – taking into account the above-mentioned processing purposes – to request the completion of incomplete personal data – also by means of a supplementary declaration. You can contact us by post or email in this regard.

Right of erasure

You have the right to request the immediate erasure of your personal data if one of the conditions of Article 17 GDPR applies. You can contact us by post or email in this regard..

Right to restrict processing

You have the right to demand from us the restriction of processing if one of the conditions of Article 18 GDPR applies. You can contact us by post or email in this regard.

Right to notification

If you have exercised your right to rectification, erasure or restriction of processing vis-à-vis the controller, they are obliged to inform all recipients to whom the personal data that concerns you has been disclosed of the rectification or erasure of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.
It is your right to have the controller inform you regarding such recipients.

Right of data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and the right to transmit this data to another controller without our hindrance, provided that the conditions specified in Article 20 GDPR are met. You can contact us by post or email in this regard.

Whe right to object to processing on the grounds of legitimate interest

If, in exceptional cases, we process personal data on the basis of Article 6(1)(f) GDPR (i.e. because of legitimate interests), you have the right to object to the processing of your personal data by us at any time based on grounds arising from your particular situation. We will cease to process your data if we cannot demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if we process the respective data from you for the purpose of direct advertising, (cf. Art. 21 GDPR). You can contact us by post or email in this regard.

A technical procedure that you use, e.g. a clear technical statement that your web browser transmits to us ("do-not-track" message), also constitutes an objection for such purposes.

Right to withdraw consent

You have the right to withdraw your consent to the collection and use of personal data at any time with effect for the future. You can contact us by post or email in this regard. This is without prejudice to the lawfulness of processing performed prior to the withdrawal of your consent.

Automated decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary to enter into or perform a contract between you and us, if it is permitted by EU or member state law to which we are subject and if these regulations contain appropriate measures to protect your rights and freedoms and your legitimate interests, or if this processing is made with your express consent.

We do not use any such automated decision-making processes.

Voluntary provision of data
If the provision of personal data is required by law or contract, we will always inform you of this when collecting the data concerned. In some cases, the data we collect is necessary to conclude a contract, i.e. if we are otherwise unable or insufficiently able to fulfil our contractual obligations towards you. There is no obligation for you to provide such personal data. However, failure to do so might render it impossible for us to perform a service, action, measure, etc. as requested by you or may render it impossible to conclude a contract with you.

The right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

In our case, the competent supervisory authority is:

The State Commissioner for Data Protection and Freedom of Information (Landesbeauftragte für den Datenschutz und die Informationsfreiheit) Baden-Württemberg, Königstrasse 10A, 70173 Stuttgart

Website: www.baden-wuerttemberg.datenschutz.de

Our Privacy Notice is valid from: 25 May 2018