Privacy Policy

1. An overview of data protection

General information

The fol­lo­wing infor­ma­tion will pro­vide you with an easy to navi­gate over­view of what will hap­pen with your per­so­nal data when you visit this web­site. The term “per­so­nal data” com­pri­ses all data that can be used to per­so­nally iden­tify you. For detailed infor­ma­tion about the sub­ject mat­ter of data pro­tec­tion, please con­sult our Data Pro­tec­tion Decla­ra­tion, which we have included beneath this copy.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e., the “controller”)?

The data on this web­site is pro­ces­sed by the ope­ra­tor of the web­site, whose cont­act infor­ma­tion is available under sec­tion “Infor­ma­tion about the respon­si­ble party (refer­red to as the “con­trol­ler” in the GDPR)” in this Pri­vacy Policy.

How do we record your data?

We coll­ect your data as a result of your sha­ring of your data with us. This may, for ins­tance be infor­ma­tion you enter into our cont­act form.

Other data shall be recor­ded by our IT sys­tems auto­ma­ti­cally or after you con­sent to its recor­ding during your web­site visit. This data com­pri­ses pri­ma­rily tech­ni­cal infor­ma­tion (e.g., web brow­ser, ope­ra­ting sys­tem, or time the site was acces­sed). This infor­ma­tion is recor­ded auto­ma­ti­cally when you access this website.

What are the purposes we use your data for?

A por­tion of the infor­ma­tion is gene­ra­ted to gua­ran­tee the error free pro­vi­sion of the web­site. Other data may be used to ana­lyze your user patterns.

What rights do you have as far as your information is concerned?

You have the right to receive infor­ma­tion about the source, reci­pi­ents, and pur­po­ses of your archi­ved per­so­nal data at any time wit­hout having to pay a fee for such dis­clo­sures. You also have the right to demand that your data are rec­ti­fied or era­di­ca­ted. If you have con­sen­ted to data pro­ces­sing, you have the option to revoke this con­sent at any time, which shall affect all future data pro­ces­sing. Moreo­ver, you have the right to demand that the pro­ces­sing of your data be rest­ric­ted under cer­tain cir­cum­s­tances. Fur­ther­more, you have the right to log a com­plaint with the com­pe­tent super­vi­sing agency.

Please do not hesi­tate to cont­act us at any time if you have ques­ti­ons about this or any other data pro­tec­tion rela­ted issues.

Analysis tools and tools provided by third parties

There is a pos­si­bi­lity that your brow­sing pat­terns will be sta­tis­ti­cally ana­ly­zed when your visit this web­site. Such ana­ly­ses are per­for­med pri­ma­rily with what we refer to as ana­ly­sis programs.

For detailed infor­ma­tion about these ana­ly­sis pro­grams please con­sult our Data Pro­tec­tion Decla­ra­tion below.

2. Hosting

We are hos­ting the con­tent of our web­site at the fol­lo­wing provider:

External Hosting

This web­site is hos­ted extern­ally. Per­so­nal data coll­ec­ted on this web­site are stored on the ser­vers of the host. These may include, but are not limi­ted to, IP addres­ses, cont­act requests, meta­data and com­mu­ni­ca­ti­ons, con­tract infor­ma­tion, cont­act infor­ma­tion, names, web page access, and other data gene­ra­ted through a web site.

The exter­nal hos­ting ser­ves the pur­pose of ful­fil­ling the con­tract with our poten­tial and exis­ting cus­to­mers (Art. 6(1)(b) GDPR) and in the inte­rest of secure, fast, and effi­ci­ent pro­vi­sion of our online ser­vices by a pro­fes­sio­nal pro­vi­der (Art. 6(1)(f) GDPR). If appro­priate con­sent has been obtai­ned, the pro­ces­sing is car­ried out exclu­si­vely on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the sto­rage of coo­kies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­prin­ting) within the mea­ning of the TDDDG. This con­sent can be revo­ked at any time.

Our host(s) will only pro­cess your data to the ext­ent neces­sary to ful­fil its per­for­mance obli­ga­ti­ons and to fol­low our ins­truc­tions with respect to such data.

We are using the fol­lo­wing host(s):

wind­CORES
Vatt­mann­straße 6
33100 Paderborn

3. General information and mandatory information

Data protection

The ope­ra­tors of this web­site and its pages take the pro­tec­tion of your per­so­nal data very seriously. Hence, we handle your per­so­nal data as con­fi­den­tial infor­ma­tion and in com­pli­ance with the sta­tu­tory data pro­tec­tion regu­la­ti­ons and this Data Pro­tec­tion Declaration.

When­ever you use this web­site, a variety of per­so­nal infor­ma­tion will be coll­ec­ted. Per­so­nal data com­pri­ses data that can be used to per­so­nally iden­tify you. This Data Pro­tec­tion Decla­ra­tion explains which data we coll­ect as well as the pur­po­ses we use this data for. It also explains how, and for which pur­pose the infor­ma­tion is collected.

We here­with advise you that the trans­mis­sion of data via the Inter­net (i.e., through e‑mail com­mu­ni­ca­ti­ons) may be prone to secu­rity gaps. It is not pos­si­ble to com­ple­tely pro­tect data against third-party access.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data pro­ces­sing con­trol­ler on this web­site is:

West­fa­len­WIND IT GmbH & Co. KG
Vatt­mann­str. 6
33100 Paderborn

Phone: +49 5251 6825750
E‑mail: info@windcores.de

The con­trol­ler is the natu­ral per­son or legal entity that sin­gle-han­dedly or jointly with others makes decis­i­ons as to the pur­po­ses of and resour­ces for the pro­ces­sing of per­so­nal data (e.g., names, e‑mail addres­ses, etc.).

Storage duration

Unless a more spe­ci­fic sto­rage period has been spe­ci­fied in this pri­vacy policy, your per­so­nal data will remain with us until the pur­pose for which it was coll­ec­ted no lon­ger applies. If you assert a jus­ti­fied request for dele­tion or revoke your con­sent to data pro­ces­sing, your data will be dele­ted, unless we have other legally per­mis­si­ble reasons for sto­ring your per­so­nal data (e.g., tax or com­mer­cial law reten­tion peri­ods); in the lat­ter case, the dele­tion will take place after these reasons cease to apply.

General information on the legal basis for the data processing on this website

If you have con­sen­ted to data pro­ces­sing, we pro­cess your per­so­nal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if spe­cial cate­go­ries of data are pro­ces­sed accor­ding to Art. 9 (1) DSGVO. In the case of expli­cit con­sent to the trans­fer of per­so­nal data to third count­ries, the data pro­ces­sing is also based on Art. 49 (1)(a) GDPR. If you have con­sen­ted to the sto­rage of coo­kies or to the access to infor­ma­tion in your end device (e.g., via device fin­ger­prin­ting), the data pro­ces­sing is addi­tio­nally based on § 25 (1) TDDDG. The con­sent can be revo­ked at any time. If your data is requi­red for the ful­fill­ment of a con­tract or for the imple­men­ta­tion of pre-con­trac­tual mea­su­res, we pro­cess your data on the basis of Art. 6(1)(b) GDPR. Fur­ther­more, if your data is requi­red for the ful­fill­ment of a legal obli­ga­tion, we pro­cess it on the basis of Art. 6(1)© GDPR. Fur­ther­more, the data pro­ces­sing may be car­ried out on the basis of our legi­ti­mate inte­rest accor­ding to Art. 6(1)(f) GDPR. Infor­ma­tion on the rele­vant legal basis in each indi­vi­dual case is pro­vi­ded in the fol­lo­wing para­graphs of this pri­vacy policy.

Designation of a data protection officer

We have appoin­ted a data pro­tec­tion officer.

BIT­sic GmbH
Herr Mario Rosenkranz
Ves­per­ther Trift 7
33181 Bad Wünnenberg

Phone: 02953 39699 20
E‑mail: datenschutz@bitsic.de

Information on the data transfer to third-party countries that are not secure under data protection law and the transfer to US companies that are not DPF-certified

We use, among other tech­no­lo­gies, tools from com­pa­nies loca­ted in third-party count­ries that are not safe under data pro­tec­tion law, as well as US tools whose pro­vi­ders are not cer­ti­fied under the EU-US Data Pri­vacy Frame­work (DPF). If these tools are enab­led, your per­so­nal data may be trans­fer­red to and pro­ces­sed in these count­ries. We would like you to note that no level of data pro­tec­tion com­pa­ra­ble to that in the EU can be gua­ran­teed in third count­ries that are inse­cure in terms of data pro­tec­tion law.

We would like to point out that the US, as a secure third-party coun­try, gene­rally has a level of data pro­tec­tion com­pa­ra­ble to that of the EU. Data trans­fer to the US is the­r­e­fore per­mit­ted if the reci­pi­ent is cer­ti­fied under the “EU-US Data Pri­vacy Frame­work” (DPF) or has appro­priate addi­tio­nal assu­ran­ces. Infor­ma­tion on trans­fers to third-party count­ries, inclu­ding the data reci­pi­ents, can be found in this Pri­vacy Policy.

Recipients of personal data

In the scope of our busi­ness acti­vi­ties, we coope­rate with various exter­nal par­ties. In some cases, this also requi­res the trans­fer of per­so­nal data to these exter­nal par­ties. We only dis­c­lose per­so­nal data to exter­nal par­ties if this is requi­red as part of the ful­fill­ment of a con­tract, if we are legally obli­ga­ted to do so (e.g., dis­clo­sure of data to tax aut­ho­ri­ties), if we have a legi­ti­mate inte­rest in the dis­clo­sure pur­su­ant to Art. 6 (1)(f) GDPR, or if ano­ther legal basis per­mits the dis­clo­sure of this data. When using pro­ces­sors, we only dis­c­lose per­so­nal data of our cus­to­mers on the basis of a valid con­tract on data pro­ces­sing. In the case of joint pro­ces­sing, a joint pro­ces­sing agree­ment is concluded.

Revocation of your consent to the processing of data

A wide range of data pro­ces­sing tran­sac­tions are pos­si­ble only sub­ject to your express con­sent. You can also revoke at any time any con­sent you have alre­ady given us. This shall be wit­hout pre­ju­dice to the lawful­ness of any data coll­ec­tion that occur­red prior to your revocation.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a complaint with the competent supervisory agency

In the event of vio­la­ti­ons of the GDPR, data sub­jects are entit­led to log a com­plaint with a super­vi­sory agency, in par­ti­cu­lar in the mem­ber state where they usually main­tain their domic­ile, place of work or at the place where the alle­ged vio­la­tion occur­red. The right to log a com­plaint is in effect regard­less of any other admi­nis­tra­tive or court pro­cee­dings available as legal recourses.

Right to data portability

You have the right to have data that we pro­cess auto­ma­ti­cally on the basis of your con­sent or in ful­fill­ment of a con­tract han­ded over to you or to a third party in a com­mon, machine-rea­da­ble for­mat. If you should demand the direct trans­fer of the data to ano­ther con­trol­ler, this will be done only if it is tech­ni­cally feasible.

Information about, rectification and eradication of data

Within the scope of the appli­ca­ble sta­tu­tory pro­vi­si­ons, you have the right to demand infor­ma­tion about your archi­ved per­so­nal data, their source and reci­pi­ents as well as the pur­pose of the pro­ces­sing of your data at any time. You may also have a right to have your data rec­ti­fied or era­di­ca­ted. If you have ques­ti­ons about this sub­ject mat­ter or any other ques­ti­ons about per­so­nal data, please do not hesi­tate to cont­act us at any time.

Right to demand processing restrictions

You have the right to demand the impo­si­tion of rest­ric­tions as far as the pro­ces­sing of your per­so­nal data is con­cer­ned. To do so, you may cont­act us at any time. The right to demand rest­ric­tion of pro­ces­sing applies in the fol­lo­wing cases:

• In the event that you should dis­pute the cor­rect­ness of your data archi­ved by us, we will usually need some time to verify this claim. During the time that this inves­ti­ga­tion is ongo­ing, you have the right to demand that we rest­rict the pro­ces­sing of your per­so­nal data.
• If the pro­ces­sing of your per­so­nal data was/​is con­duc­ted in an unlawful man­ner, you have the option to demand the rest­ric­tion of the pro­ces­sing of your data ins­tead of deman­ding the era­di­ca­tion of this data.
• If we do not need your per­so­nal data any lon­ger and you need it to exer­cise, defend or claim legal entit­le­ments, you have the right to demand the rest­ric­tion of the pro­ces­sing of your per­so­nal data ins­tead of its eradication.
• If you have rai­sed an objec­tion pur­su­ant to Art. 21(1) GDPR, your rights and our rights will have to be weig­hed against each other. As long as it has not been deter­mi­ned whose inte­rests pre­vail, you have the right to demand a rest­ric­tion of the pro­ces­sing of your per­so­nal data.

If you have rest­ric­ted the pro­ces­sing of your per­so­nal data, these data – with the excep­tion of their archi­ving – may be pro­ces­sed only sub­ject to your con­sent or to claim, exer­cise or defend legal entit­le­ments or to pro­tect the rights of other natu­ral per­sons or legal enti­ties or for important public inte­rest reasons cited by the Euro­pean Union or a mem­ber state of the EU.

SSL and/​or TLS encryption

For secu­rity reasons and to pro­tect the trans­mis­sion of con­fi­den­tial con­tent, such as purchase orders or inqui­ries you sub­mit to us as the web­site ope­ra­tor, this web­site uses eit­her an SSL or a TLS encryp­tion pro­gram. You can reco­gnize an encrypted con­nec­tion by che­cking whe­ther the address line of the brow­ser swit­ches from “http://” to “https://” and also by the appearance of the lock icon in the brow­ser line.

If the SSL or TLS encryp­tion is acti­va­ted, data you trans­mit to us can­not be read by third parties.

Rejection of unsolicited e‑mails

We here­with object to the use of cont­act infor­ma­tion published in con­junc­tion with the man­da­tory infor­ma­tion to be pro­vi­ded in our Site Notice to send us pro­mo­tio­nal and infor­ma­tion mate­rial that we have not expressly reques­ted. The ope­ra­tors of this web­site and its pages reserve the express right to take legal action in the event of the unso­li­ci­ted sen­ding of pro­mo­tio­nal infor­ma­tion, for ins­tance via SPAM messages.

4. Recording of data on this website

Cookies

Our web­sites and pages use what the indus­try refers to as “coo­kies.” Coo­kies are small data packa­ges that do not cause any damage to your device. They are eit­her stored tem­po­r­a­rily for the dura­tion of a ses­sion (ses­sion coo­kies) or they are per­ma­nently archi­ved on your device (per­ma­nent coo­kies). Ses­sion coo­kies are auto­ma­ti­cally dele­ted once you ter­mi­nate your visit. Per­ma­nent coo­kies remain archi­ved on your device until you actively delete them, or they are auto­ma­ti­cally era­di­ca­ted by your web browser.

Coo­kies can be issued by us (first-party coo­kies) or by third-party com­pa­nies (so-cal­led third-party coo­kies). Third-party coo­kies enable the inte­gra­tion of cer­tain ser­vices of third-party com­pa­nies into web­sites (e.g., coo­kies for hand­ling pay­ment services).

Coo­kies have a variety of func­tions. Many coo­kies are tech­ni­cally essen­tial since cer­tain web­site func­tions would not work in the absence of these coo­kies (e.g., the shop­ping cart func­tion or the dis­play of videos). Other coo­kies may be used to ana­lyze user beha­vior or for pro­mo­tio­nal purposes.

Coo­kies, which are requi­red for the per­for­mance of elec­tro­nic com­mu­ni­ca­tion tran­sac­tions, for the pro­vi­sion of cer­tain func­tions you want to use (e.g., for the shop­ping cart func­tion) or those that are neces­sary for the opti­miza­tion (requi­red coo­kies) of the web­site (e.g., coo­kies that pro­vide mea­sura­ble insights into the web audi­ence), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a dif­fe­rent legal basis is cited. The ope­ra­tor of the web­site has a legi­ti­mate inte­rest in the sto­rage of requi­red coo­kies to ensure the tech­ni­cally error-free and opti­mi­zed pro­vi­sion of the operator’s ser­vices. If your con­sent to the sto­rage of the coo­kies and simi­lar reco­gni­tion tech­no­lo­gies has been reques­ted, the pro­ces­sing occurs exclu­si­vely on the basis of the con­sent obtai­ned (Art. 6(1)(a) GDPR and § 25 (1) TDDDG); this con­sent may be revo­ked at any time.

You have the option to set up your brow­ser in such a man­ner that you will be noti­fied any time coo­kies are pla­ced and to per­mit the accep­tance of coo­kies only in spe­ci­fic cases. You may also exclude the accep­tance of coo­kies in cer­tain cases or in gene­ral or acti­vate the delete-func­tion for the auto­ma­tic era­di­ca­tion of coo­kies when the brow­ser clo­ses. If coo­kies are deac­ti­va­ted, the func­tions of this web­site may be limited.

Which coo­kies and ser­vices are used on this web­site can be found in this pri­vacy policy.

Consent with Borlabs Cookie

Our web­site uses the Borlabs con­sent tech­no­logy to obtain your con­sent to the sto­rage of cer­tain coo­kies in your brow­ser or for the use of cer­tain tech­no­lo­gies and for their data pri­vacy pro­tec­tion com­pli­ant docu­men­ta­tion. The pro­vi­der of this tech­no­logy is Borlabs GmbH, Rüben­kamp 32, 22305 Ham­burg, Ger­many (her­ein­af­ter refer­red to as Borlabs).

When­ever you visit our web­site, a Borlabs coo­kie will be stored in your brow­ser, which archi­ves any decla­ra­ti­ons or revo­ca­ti­ons of con­sent you have ente­red. These data are not shared with the pro­vi­der of the Borlabs technology.

The recor­ded data shall remain archi­ved until you ask us to era­di­cate them, delete the Borlabs coo­kie on your own or the pur­pose of sto­ring the data no lon­ger exists. This shall be wit­hout pre­ju­dice to any reten­tion obli­ga­ti­ons man­da­ted by law. To review the details of Borlabs’ data pro­ces­sing poli­cies, please visit https://​de​.borlabs​.io/​k​b​/​w​e​l​c​h​e​-​d​a​t​e​n​-​s​p​e​i​c​h​e​r​t​-​b​o​r​l​a​b​s​-​c​o​o​k​ie/

We use the Borlabs coo­kie con­sent tech­no­logy to obtain the decla­ra­ti­ons of con­sent man­da­ted by law for the use of coo­kies. The legal basis for the use of such coo­kies is Art. 6(1)© GDPR.

Server log files

The pro­vi­der of this web­site and its pages auto­ma­ti­cally coll­ects and stores infor­ma­tion in so-cal­led ser­ver log files, which your brow­ser com­mu­ni­ca­tes to us auto­ma­ti­cally. The infor­ma­tion comprises:

• The type and ver­sion of brow­ser used
• The used ope­ra­ting system
• Refer­rer URL
• The host­name of the acces­sing computer
• The time of the ser­ver inquiry
• The IP address

This data is not mer­ged with other data sources.

This data is recor­ded on the basis of Art. 6(1)(f) GDPR. The ope­ra­tor of the web­site has a legi­ti­mate inte­rest in the tech­ni­cally error free depic­tion and the opti­miza­tion of the operator’s web­site. In order to achieve this, ser­ver log files must be recorded.

Contact form

If you sub­mit inqui­ries to us via our cont­act form, the infor­ma­tion pro­vi­ded in the cont­act form as well as any cont­act infor­ma­tion pro­vi­ded the­r­ein will be stored by us in order to handle your inquiry and in the event that we have fur­ther ques­ti­ons. We will not share this infor­ma­tion wit­hout your consent.

The pro­ces­sing of these data is based on Art. 6(1)(b) GDPR, if your request is rela­ted to the exe­cu­tion of a con­tract or if it is neces­sary to carry out pre-con­trac­tual mea­su­res. In all other cases the pro­ces­sing is based on our legi­ti­mate inte­rest in the effec­tive pro­ces­sing of the requests addres­sed to us (Art. 6(1)(f) GDPR) or on your agree­ment (Art. 6(1)(a) GDPR) if this has been reques­ted; the con­sent can be revo­ked at any time.

The infor­ma­tion you have ente­red into the cont­act form shall remain with us until you ask us to era­di­cate the data, revoke your con­sent to the archi­ving of data or if the pur­pose for which the infor­ma­tion is being archi­ved no lon­ger exists (e.g., after we have con­cluded our response to your inquiry). This shall be wit­hout pre­ju­dice to any man­da­tory legal pro­vi­si­ons, in par­ti­cu­lar reten­tion periods.

Request by e‑mail, telephone, or fax

If you cont­act us by e‑mail, tele­phone or fax, your request, inclu­ding all resul­ting per­so­nal data (name, request) will be stored and pro­ces­sed by us for the pur­pose of pro­ces­sing your request. We do not pass these data on wit­hout your consent.

These data are pro­ces­sed on the basis of Art. 6(1)(b) GDPR if your inquiry is rela­ted to the ful­fill­ment of a con­tract or is requi­red for the per­for­mance of pre-con­trac­tual mea­su­res. In all other cases, the data are pro­ces­sed on the basis of our legi­ti­mate inte­rest in the effec­tive hand­ling of inqui­ries sub­mit­ted to us (Art. 6(1)(f) GDPR) or on the basis of your con­sent (Art. 6(1)(a) GDPR) if it has been obtai­ned; the con­sent can be revo­ked at any time.

The data sent by you to us via cont­act requests remain with us until you request us to delete, revoke your con­sent to the sto­rage or the pur­pose for the data sto­rage lap­ses (e.g. after com­ple­tion of your request). Man­da­tory sta­tu­tory pro­vi­si­ons — in par­ti­cu­lar sta­tu­tory reten­tion peri­ods — remain unaffected.

Zoho CRM

We use Zoho CRM on this web­site. Pro­vi­der is Zoho Cor­po­ra­tion GmbH., Estancia IT Park, Plot No. 140 151, GST Road, Vallan­cherry Vil­lage, Chen­gal­pattu Taluk, Kan­chip­uram Dis­trict 603 202, India (her­ein­af­ter “Zoho CRM”).

Zoho CRM enables us, in par­ti­cu­lar, to manage exis­ting and poten­tial cus­to­mers and cus­to­mer cont­acts and to orga­nize sales and com­mu­ni­ca­tion pro­ces­ses. Using the CRM sys­tem also enables us to ana­lyze and opti­mize our cus­to­mer-rela­ted pro­ces­ses. The cus­to­mer data is stored on Zoho CRM’s ser­vers. Details of Zoho CRM’s func­tions can be found here: https://​www​.zoho​.com/​d​e​/​c​r​m​/​h​e​l​p​/​g​e​t​t​i​n​g​-​s​t​a​r​t​e​d​/​k​e​y​-​f​u​n​c​t​i​o​n​s​.​h​tml.

The use of Zoho CRM is based on Art. 6(1)(f) GDPR. The web­site ope­ra­tor has a legi­ti­mate inte­rest the most effi­ci­ent cus­to­mer manage­ment and cus­to­mer com­mu­ni­ca­tion. If appro­priate con­sent has been obtai­ned, the pro­ces­sing is car­ried out exclu­si­vely on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the sto­rage of coo­kies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­prin­ting) within the mea­ning of the TDDDG. This con­sent can be revo­ked at any time.

The data trans­fer to third count­ries out­side the Euro­pean Union is based on the stan­dard con­trac­tual clau­ses of the EU Commission.

Details can be found in the Zoho CRM pri­vacy policy: https://​www​.zoho​.com/​p​r​i​v​a​c​y​.​h​tml and https://​www​.zoho​.com/​g​d​p​r​.​h​tml.

Data processing

We have con­cluded a data pro­ces­sing agree­ment (DPA) for the use of the above-men­tio­ned ser­vice. This is a con­tract man­da­ted by data pri­vacy laws that gua­ran­tees that they pro­cess per­so­nal data of our web­site visi­tors only based on our ins­truc­tions and in com­pli­ance with the GDPR.

5. Analysis tools and advertising

Google Tag Manager

We use the Google Tag Mana­ger. The pro­vi­der is Google Ire­land Limi­ted, Gor­don House, Bar­row Street, Dub­lin 4, Ireland

The Google Tag Mana­ger is a tool that allows us to inte­grate track­ing or sta­tis­ti­cal tools and other tech­no­lo­gies on our web­site. The Google Tag Mana­ger its­elf does not create any user pro­files, does not store coo­kies, and does not carry out any inde­pen­dent ana­ly­ses. It only mana­ges and runs the tools inte­gra­ted via it. Howe­ver, the Google Tag Mana­ger does coll­ect your IP address, which may also be trans­fer­red to Google’s parent com­pany in the United States.

The Google Tag Mana­ger is used on the basis of Art. 6(1)(f) GDPR. The web­site ope­ra­tor has a legi­ti­mate inte­rest in the quick and uncom­pli­ca­ted inte­gra­tion and admi­nis­tra­tion of various tools on his web­site. If appro­priate con­sent has been obtai­ned, the pro­ces­sing is car­ried out exclu­si­vely on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the sto­rage of coo­kies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­prin­ting) within the mea­ning of the TDDDG. This con­sent can be revo­ked at any time.

The com­pany is cer­ti­fied in accordance with the “EU-US Data Pri­vacy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Union and the US, which is inten­ded to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the US. Every com­pany cer­ti­fied under the DPF is obli­ged to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please cont­act the pro­vi­der under the fol­lo­wing link: https://​www​.data​pri​va​cy​frame​work​.gov/​p​a​r​t​i​c​i​p​a​n​t​/​5​780.

Google Analytics

This web­site uses func­tions of the web ana­ly­sis ser­vice Google Ana­ly­tics. The pro­vi­der of this ser­vice is Google Ire­land Limi­ted (“Google”), Gor­don House, Bar­row Street, Dub­lin 4, Ireland.

Google Ana­ly­tics enables the web­site ope­ra­tor to ana­lyze the beha­vior pat­terns of web­site visi­tors. To that end, the web­site ope­ra­tor recei­ves a variety of user data, such as pages acces­sed, time spent on the page, the uti­li­zed ope­ra­ting sys­tem and the user’s ori­gin. This data is assi­gned to the respec­tive end device of the user. An assign­ment to a user-ID does not take place.

Fur­ther­more, Google Ana­ly­tics allows us to record your mouse and scroll move­ments and clicks, among other things. Google Ana­ly­tics uses various mode­ling approa­ches to aug­ment the coll­ec­ted data sets and uses machine lear­ning tech­no­lo­gies in data analysis.

Google Ana­ly­tics uses tech­no­lo­gies that make the reco­gni­tion of the user for the pur­pose of ana­ly­zing the user beha­vior pat­terns (e.g., coo­kies or device fin­ger­prin­ting). The web­site use infor­ma­tion recor­ded by Google is, as a rule trans­fer­red to a Google ser­ver in the United Sta­tes, where it is stored.

The use of these ser­vices occurs on the basis of your con­sent pur­su­ant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your con­sent at any time.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tual Clau­ses (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://​pri​vacy​.google​.com/​b​u​s​i​n​e​s​s​e​s​/​c​o​n​t​r​o​l​l​e​r​t​e​r​m​s​/​m​c​cs/.

The com­pany is cer­ti­fied in accordance with the “EU-US Data Pri­vacy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Union and the US, which is inten­ded to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the US. Every com­pany cer­ti­fied under the DPF is obli­ged to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please cont­act the pro­vi­der under the fol­lo­wing link: https://​www​.data​pri​va​cy​frame​work​.gov/​p​a​r​t​i​c​i​p​a​n​t​/​5​780.

IP anonymization

Google Ana­ly­tics IP anony­miza­tion is active. As a result, your IP address will be abbre­via­ted by Google within the mem­ber sta­tes of the Euro­pean Union or in other sta­tes that have rati­fied the Con­ven­tion on the Euro­pean Eco­no­mic Area prior to its trans­mis­sion to the United Sta­tes. The full IP address will be trans­mit­ted to one of Google’s ser­vers in the United Sta­tes and abbre­via­ted there only in excep­tio­nal cases. On behalf of the ope­ra­tor of this web­site, Google shall use this infor­ma­tion to ana­lyze your use of this web­site to gene­rate reports on web­site acti­vi­ties and to ren­der other ser­vices to the ope­ra­tor of this web­site that are rela­ted to the use of the web­site and the Inter­net. The IP address trans­mit­ted in con­junc­tion with Google Ana­ly­tics from your brow­ser shall not be mer­ged with other data in Google’s possession.

Browser plug-in

You can pre­vent the recor­ding and pro­ces­sing of your data by Google by down­loa­ding and instal­ling the brow­ser plugin available under the fol­lo­wing link: https://​tools​.google​.com/​d​l​p​a​g​e​/​g​a​o​p​t​o​u​t​?​h​l​=en.

For more infor­ma­tion about the hand­ling of user data by Google Ana­ly­tics, please con­sult Google’s Data Pri­vacy Decla­ra­tion at: https://​sup​port​.google​.com/​a​n​a​l​y​t​i​c​s​/​a​n​s​w​e​r​/​6​0​0​4​2​4​5​?​h​l​=en.

Contract data processing

We have exe­cu­ted a con­tract data pro­ces­sing agree­ment with Google and are imple­men­ting the strin­gent pro­vi­si­ons of the Ger­man data pro­tec­tion agen­cies to the ful­lest when using Google Analytics.

Our social media appearances

This privacy policy applies to the following social media presence

• https://​www​.lin​ke​din​.com/​c​o​m​p​a​n​y​/​w​e​s​t​f​a​l​e​n​w​i​n​d​-​i​t​-​g​m​bh/

Data processing through social networks

We main­tain publicly available pro­files in social net­works. The indi­vi­dual social net­works we use can be found below.

Social net­works such as Face­book, X etc. can gene­rally ana­lyze your user beha­vior com­pre­hen­si­vely if you visit their web­site or a web­site with inte­gra­ted social media con­tent (e.g., like but­tons or ban­ner ads). When you visit our social media pages, num­e­rous data pro­tec­tion-rele­vant pro­ces­sing ope­ra­ti­ons are trig­ge­red. In detail:

If you are log­ged in to your social media account and visit our social media page, the ope­ra­tor of the social media por­tal can assign this visit to your user account. Under cer­tain cir­cum­s­tances, your per­so­nal data may also be recor­ded if you are not log­ged in or do not have an account with the respec­tive social media por­tal. In this case, this data is coll­ec­ted, for exam­ple, via coo­kies stored on your device or by recor­ding your IP address.

Using the data coll­ec­ted in this way, the ope­ra­tors of the social media por­tals can create user pro­files in which their pre­fe­ren­ces and inte­rests are stored. This way you can see inte­rest-based adver­ti­sing inside and out­side of your social media pre­sence. If you have an account with the social net­work, inte­rest-based adver­ti­sing can be dis­played on any device you are log­ged in to or have log­ged in to.

Please also note that we can­not retrace all pro­ces­sing ope­ra­ti­ons on the social media por­tals. Depen­ding on the pro­vi­der, addi­tio­nal pro­ces­sing ope­ra­ti­ons may the­r­e­fore be car­ried out by the ope­ra­tors of the social media por­tals. Details can be found in the terms of use and pri­vacy policy of the respec­tive social media portals.

Legal basis

Our social media appearan­ces should ensure the widest pos­si­ble pre­sence on the Inter­net. This is a legi­ti­mate inte­rest within the mea­ning of Art. 6 (1) lit. f GDPR. The ana­ly­sis pro­ces­ses initia­ted by the social net­works may be based on diver­gent legal bases to be spe­ci­fied by the ope­ra­tors of the social net­works (e.g., con­sent within the mea­ning of Art. 6 (1) (a) GDPR).

Responsibility and assertion of rights

If you visit one of our social media sites (e.g., Face­book), we, tog­e­ther with the ope­ra­tor of the social media plat­form, are respon­si­ble for the data pro­ces­sing ope­ra­ti­ons trig­ge­red during this visit. You can in prin­ci­ple pro­tect your rights (infor­ma­tion, cor­rec­tion, dele­tion, limi­ta­tion of pro­ces­sing, data por­ta­bi­lity and com­plaint) vis-à-vis us as well as vis-à-vis the ope­ra­tor of the respec­tive social media por­tal (e.g., Facebook).

Please note that despite the shared respon­si­bi­lity with the social media por­tal ope­ra­tors, we do not have full influence on the data pro­ces­sing ope­ra­ti­ons of the social media por­tals. Our opti­ons are deter­mi­ned by the com­pany policy of the respec­tive provider.

Storage time

The data coll­ec­ted directly from us via the social media pre­sence will be dele­ted from our sys­tems as soon as you ask us to delete it, you revoke your con­sent to the sto­rage or the pur­pose for the data sto­rage lap­ses. Stored coo­kies remain on your device until you delete them. Man­da­tory sta­tu­tory pro­vi­si­ons — in par­ti­cu­lar, reten­tion peri­ods — remain unaffected.

We have no con­trol over the sto­rage dura­tion of your data that are stored by the social net­work ope­ra­tors for their own pur­po­ses. For details, please cont­act the social net­work ope­ra­tors directly (e.g., in their pri­vacy policy, see below).

Your rights

You have the right to receive infor­ma­tion about the ori­gin, reci­pi­ent and pur­pose of your stored per­so­nal data at any time and free of charge. You also have the right to object, the right to data por­ta­bi­lity and the right to file a com­plaint with the respon­si­ble regu­la­tory agency. Fur­ther­more, you can request the cor­rec­tion, blo­cking, dele­tion and, under cer­tain cir­cum­s­tances, the rest­ric­tion of the pro­ces­sing of your per­so­nal data.

Individual social networks

LinkedIn

We have a Lin­ke­dIn pro­file. The pro­vi­der is the Lin­ke­dIn Ire­land Unli­mi­ted Com­pany, Wil­ton Plaza, Wil­ton Place, Dub­lin 2, Ire­land. Lin­ke­dIn uses adver­ti­sing cookies.

If you want to disable Lin­ke­dIn adver­ti­sing coo­kies, please use the fol­lo­wing link: https://​www​.lin​ke​din​.com/​p​s​e​t​t​i​n​g​s​/​g​u​e​s​t​-​c​o​n​t​r​o​l​s​/​r​e​t​a​r​g​e​t​i​n​g​-​o​p​t​-​out.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tual Clau­ses (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://​www​.lin​ke​din​.com/​l​e​g​a​l​/​l​/​dpa and https://​www​.lin​ke​din​.com/​l​e​g​a​l​/​l​/​e​u​-​s​ccs.

For details on how they handle your per­so­nal infor­ma­tion, please refer to LinkedIn’s pri­vacy policy: https://​www​.lin​ke​din​.com/​l​e​g​a​l​/​p​r​i​v​a​c​y​-​p​o​l​icy.