Data Protection

General information

Compliance with data protection laws is not only a legal obligation for Software Factory GmbH, but also an important factor of trust. With the following data protection provisions, we would therefore like to inform you transparently about the type, scope and purpose of the personal data collected and processed by you within this website, as well as your rights.

Responsibility for data processing

Software Factory GmbH, Parkring 57-59, D-85748 Garching b. München (hereinafter: „We“) is the operator of the website www.sf.com, controller pursuant to Art. 4 No. 7 of the EU General Data Protection Regulation (GDPR). If you have any questions, please contact info@sf.com turn.

Data Protection Officer

Contact for data protection issues: dataprotectionofficer(at)sf.com

Rights of data subjects

Your rights as a data subject

As a data subject, you have the following rights with regard to your personal data. You have:

  • Right to information including the categories of data processed, the purposes of processing, the storage period and any recipients, in accordance with Art. 15 GDPR and Section 34 BDSG.
  • Right to rectification or erasure of incorrect or incomplete data, in accordance with Art. 16 and 17 GDPR and Section 35 BDSG.
  • Under the conditions of Art. 18 GDPR or Section 35 (1) sentence 2 BDSG, a Right to restriction of processing.
  • Right to object against the processing pursuant to Art. 21 (1) GDPR, insofar as the data processing was carried out on the basis of a legitimate interest.
  • Right of cancellation a given consent with effect for the future in accordance with Art. 7 para. 3 GDPR.
  • Right to data portability in a commonly used format in accordance with Art. 20 GDPR.
  • Pursuant to Art. 22 GDPR, you have a Right not to be subject to a decision based solely on automated processing, which produces legal effects concerning you or similarly significantly affects you. This also includes profiling within the meaning of Art. 4 No. 4 GDPR.
  • You also have the right, pursuant to Art. 77 GDPR, to lodge a complaint with a Data protection supervisory authority to lodge a complaint about the processing of your personal data by us, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

Procedure

If you assert your rights under the GDPR and the BDSG against us, we will process the data you provide to us in order to fulfil your claim.

We will then store the data you have transmitted to us and the data we have transmitted to you in return for the purpose of documentation until the expiry of the limitation period under regulatory offence law (3 years).

The legal basis for the processing and storage of the data is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our obligation to comply with your request and the need to be able to exonerate ourselves in possible fine proceedings by proving that we have duly complied with your request.

You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. To do so, please use the contact details provided in the legal notice. However, we would like to point out that the processing of your data to prove compliance with the rights of the data subject is mandatory within the meaning of Art. 21 para. 1 GDPR, as other means of proof do not exist or are not equally suitable.

Data protection measures

We use technical and organisational measures to protect our website and other systems - and therefore also your data - against loss, destruction, access, modification or dissemination by unauthorised persons. In particular, your personal data is transmitted in encrypted form via the Internet. We use the TLS (Transport Layer Security) coding system for this.

However, the transmission of information via the Internet is never completely secure, which is why we cannot 100% guarantee the security of the data transmitted from our website.

Modalities of data processing

Sources and categories of personal data

We process your personal data insofar as it is necessary for the establishment, content or amendment of a contractual relationship between us and you (inventory data). Inventory data can be in particular Name, title, contact details (postal address, telephone, e-mail address), date of birth, etc.

We also process your usage data. Usage data is data that is generated by your behaviour when using our website and our services, in particular your IP address, the start and end of your visit to our website and information about what content you have accessed on our website.

We collect the aforementioned data either directly from you (e.g. by visiting the website) or, to the extent permitted by data protection laws, from third parties or publicly accessible sources (e.g. commercial and association registers, press, media, Internet).

Data transfer to third countries outside the EU

All information that we receive from you or about you is generally processed on servers within the European Union. Your data will only be transferred to or processed in third countries without your express consent if this is provided for or permitted by law, if an adequate level of data protection is ensured in the third country or if contractual obligations exist through so-called standard data protection clauses of the EU.

With regard to data transfers to the USA, the European Commission has issued an adequacy decision called the EU-U.S. Data Privacy Framework, which ensures an adequate level of protection for the transfer of personal data by companies participating in the EU-U.S. Data Privacy Framework. If we use services that transfer personal data to the USA, the respective service will indicate whether the company is certified by the EU-U.S. Data Privacy Framework.

Forwarding of data, order processing

We never pass on your personal data to third parties without authorisation. However, we may disclose your data to third parties in particular if you have consented to the disclosure of data, if the disclosure is necessary to fulfil our legal obligations or if we are entitled or obliged to disclose data due to legal provisions or official or court orders. In particular, this may involve the disclosure of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.

We may also transfer your data to external service providers who process data on our behalf and in accordance with our instructions (processors) in order to simplify or relieve our own data processing. Each processor is bound by a contract in accordance with Art. 28 GDPR. This means in particular that the processor must provide sufficient guarantees that suitable technical and organisational measures are implemented by the processor in such a way that the processing is carried out in accordance with the requirements of the GDPR and the protection of your rights as a data subject is guaranteed. Despite commissioning processors, we remain the controller for the processing of your personal data within the meaning of the data protection laws.

Purpose of data processing

We only use the data for the purpose for which it was collected from you. We may further process the data for another purpose, unless this other purpose is incompatible with the original purpose (Art. 5 para. 1 lit. c) GDPR).

Storage duration

Unless otherwise specified in detail, we will only store the data collected from you for as long as is necessary for the respective purpose, unless statutory retention obligations prevent deletion, e.g. under commercial law or tax law.

Individual processing activities

In the following, we would like to show you as transparently as possible what data we process from you, on what occasion, on what basis and for what purpose.

Server log files

Each time a website is accessed and each time data is retrieved from a server, general information is automatically transmitted to the providing server. This data transfer takes place automatically and is a fundamental component of communication between devices on the Internet.

The data transmitted by default includes the following information: Your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which your access took place (so-called referer), date and time of the request (so-called timestamp). In addition, the http status and the amount of data transferred are recorded as part of this enquiry.

This information is logged by the server, stored in a table and saved there for a short time (so-called server log files). By analysing these log files, we can detect and subsequently eliminate errors on the website, determine the website's capacity utilisation at certain times and make adjustments or improvements based on this, as well as ensure the security of the server by being able to trace the IP address from which attacks on our server were carried out.

Your IP address is only stored for the duration of your use of the website and is then immediately deleted or made partially unrecognisable by shortening it. The remaining data is stored for a limited period of time (usually 7 days).

The legal basis for the use of server log files is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from the necessity for the operation and maintenance of our website, as we have explained above. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. To do so, please use the contact details provided in the legal notice. However, we would like to point out in advance that the processing of your data in server log files is mandatory within the meaning of Art. 21 para. 1 GDPR, as otherwise the website cannot be operated at all.

Cookies and web storage

We use so-called „cookies“ or the „web storage“ of your browser to improve the user-friendliness of our website.

Cookies

What cookies are

Put very simply, a cookie is a small text file that stores data about websites visited. Cookies can be used in many different ways. For example, they can store a kind of „user profile“, i.e. things like your preferred language and other page settings that are required by our website in order to offer you certain services. The cookie file is stored on your end device and can also help to recognise you when you return to our website.

We may also be able to use cookies to obtain information about your favourite activities on our website and thus tailor our website to your individual interests or even increase the speed of navigation on our website.

How you can avoid cookies

You can delete cookies manually at any time in the security settings of your browser.

However, you can also prevent the storage of cookies from the outset by selecting the appropriate settings in your browser. Please note, however, that you may then not be able to use all the functions of our website to their full extent or that errors may occur in the presentation and use of the website.

Cookies from third-party providers

It is possible that third-party providers, with the help of which we design and operate our website, in particular through so-called plugins (see below in the section „Third-party services“), may independently store their own cookies on your end device. If you only wish to accept our own cookies, but not cookies from these third parties, you can prevent the storage of these cookies by selecting the appropriate browser setting „Block third-party cookies”.

Which cookies are used

Specifically, our website uses the following cookies:

Name

Explanation

Origin (Domain)

Validity / Storage duration

Third party access

_gat_UA-

This cookie is required by the Google Analytics service used. It is used to throttle the request rate to the server and thus reduce the load on it. It does not contain any personal data. Information on how you can prevent the storage of this cookie can be found below under „Google Analytics“.

.sf.com

1 minute

Yes, Google

_ga_,

_ga

This cookie is required by the Google Analytics service used. It is used to recognise individual website visitors by using an identifier consisting of two randomly generated 32-bit numbers (e.g. 12345.67890). Information on how you can prevent the storage of this cookie can be found below under „Google Analytics“.

.sf.com

2 years

Yes, Google

_gid

This cookie is required by the Google Analytics service used. It is used to recognise individual website visitors by using an identifier consisting of two randomly generated 32-bit numbers (e.g. 12345.67890). Information on how you can prevent the storage of this cookie can be found below under „Google Analytics“.

.sf.com

1 day

Yes, Google

_icl_visitor_lang_js

Saves the language version of a website selected by the user

.www.sf.com

1 day

No

borlabs-cookie

This cookie is used to recognise whether you have already been shown the consent notice and whether you have fully accepted or rejected it, or which specific settings you have selected. It does not contain any personal data.

www.sf.com

1 year

No

wp-wpml_current_language

Saves the language version of a website selected by the user

www.sf.com

End of session

No

wpml_browser_redirect_
test

Tests whether cookies are enabled. This cookie is activated for all visitors to the website if you use the „Browser language redirection“ function

www.sf.com

End of session

No

CONSENT

This cookie is used by the YouTube video player and Google Maps. It is used to recognise whether you have accepted or rejected the playing of YouTube videos or the map image from Google Maps.

.youtube-nocookie.com,

.google.com

2 years

Yes, Google

Legal basis

The legal basis for the use of cookies that are absolutely necessary for the function of the website (e.g. shopping basket cookie, session cookie) is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing) and §25 para. 2 no. 2 TTDSG (absolute necessity for the provision of a telemedia service expressly requested by the user). The legitimate interest arises from our need to be able to offer you a functioning website. Cookies are necessary for this because they are an integral part of current Internet technology and many functions of current websites would not be available without cookies. We therefore need cookies in order to be able to provide you with the website at your request.

You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. To do so, please use the contact details provided in the legal notice.

However, we would like to point out that the processing of your data in certain cookies is mandatory within the meaning of Art. 21 para. 1 GDPR, as otherwise the website cannot be operated at all and we do not have the technical possibility to prevent the setting of cookies on certain individual end devices. However, you may be able to do this yourself in your browser. For more information, please refer to the instructions for your browser.

The legal basis for the use of cookies that are not absolutely necessary for the function of the website is Art. 6 para. 1 sentence 1 letter a) GDPR (consent of the data subject). When you access the website for the first time, we will ask you for your consent to the use of non-essential cookies by displaying a message. You can revoke your consent at any time with effect for the future by calling up the cookie banner again and changing the settings you have made.

Web Storage

What is Web Storage

Web storage is a technology for web applications that is used to store data in a web browser. In simple terms, web storage can be seen as a further development of cookies, but differs from them in a number of ways.

In contrast to cookies, which can be accessed by both server and client, web storage is controlled entirely by the client. This means that data is not transferred to the server each time the website is accessed. Access takes place exclusively locally via scripts on the website. In concrete terms, this means that third parties cannot access the stored information via the website. Only you and we can access the locally stored data.

Legal basis

The legal basis for the use of web storage, which is absolutely necessary for the functioning of the website, is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing) and §25 para. 2 no. 2 TTDSG (absolute necessity for the provision of a telemedia service expressly requested by the user). The legitimate interest arises from our need to be able to offer you a functioning website. Web storage is necessary for this because it is an integral part of current Internet technology and many functions of current websites would not be available without it. We therefore require web storage in order to be able to make the website available to you at your request.

You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. To do so, please use the contact details provided in the legal notice.

However, we would like to point out that the processing of your data in web storage may be mandatory within the meaning of Art. 21 para. 1 GDPR, as otherwise the website cannot be operated at all and we do not have the technical possibility to prevent its use on certain individual end devices. However, you may be able to do this yourself in your browser. For more information, please refer to the instructions for your browser.

The legal basis for the use of web storage, which is not absolutely necessary for the function of the website, is Art. 6 para. 1 sentence 1 letter a) GDPR (consent of the data subject). We ask you for your consent to the use of web storage when you access the website for the first time by displaying a notice. You can revoke your consent at any time with effect for the future by calling up the cookie banner again and changing the settings you have made.

Contact us

Our website offers opportunities to contact us directly.

We process the data you transmit to us exclusively until the respective purpose of your contact has been achieved, unless statutory retention periods prevent this. If the purpose of your contact is the assertion of data subject rights, the information in the section „Your rights as a data subject“ applies.

The following data is processed as part of the contact form:

E-mail address, salutation if applicable, title, name, company, address, telephone number, subject and the content of the message.

The legal basis for the use of the data you provide to us by contacting us in the context of contractual or pre-contractual relationships or for answering (pre)contractual enquiries is Art. 6 para. 1 sentence 1 letter b) GDPR (data processing for the fulfilment of a contract).

The legal basis for processing the data you transmit to us by contacting us in cases other than for contractual or pre-contractual purposes or enquiries is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). Our legitimate interest in processing arises from our interest in responding to enquiries and maintaining user relationships.

You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. To do so, please use the contact details provided in the legal notice.

Webinar recordings

Our website offers you the option of filling out a form to forward you to our webinar recordings.

We process the data you transmit to us via the form for statistical purposes in order to categorise interested parties and understand the requirements of users. This enables us to improve our offer. The data is not transmitted to third parties or processed by third parties and is only used for internal purposes. You can also watch the webinars directly on our YouTube channel at any time without completing the form.

The following data is processed as part of the contact form:

E-mail address, first name, surname, salutation if applicable, title, company, telephone number, webinar.

The legal basis for the use of your data provided in the form is Art. 6 para. 1 sentence 1 letter a) GDPR (consent of the data subject). We ask you for your consent to the use of the data via an information text displayed on the form. You can revoke your consent at any time with effect for the future. To do so, please contact us using the contact details provided in the legal notice.

Newsletter

We offer to keep you regularly up to date with our newsletter and inform you about special offers. To subscribe to the newsletter, you can enter your e-mail address in our mailing list. You must then confirm your registration again (double opt-in procedure). We only use the data you send us for the purpose of sending the newsletter and do not pass it on to third parties for any other purpose.

Further information on data processing when receiving our newsletter can be found below in the section „Third-party services - analysis services“.

The legal basis for the use of your email address is Art. 6 para. 1 sentence 1 letter a) GDPR (consent of the data subject). You can revoke your consent at any time with effect for the future. To do so, please use the link in every newsletter email or contact us using the contact details provided in the legal notice.

Hosting services

Our website is hosted on servers of external providers in order to ensure the efficient and secure provision of the website.

Each time you visit the website, general information is automatically transmitted from your browser to the server (so-called server log files). For more information on this, see „Server log files“ above.

The legal basis for the use of hosting services and the associated processing of your data is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing), unless otherwise stated for the respective service. The legitimate interest arises from our need for a technically flawless presentation of our website without requiring in-depth knowledge of website programming and IT system maintenance. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. To do so, please use the contact details provided in the legal notice.

Third-party services

To simplify our data processing and to expand the functionality of our website, we use services/resources from third parties, such as plugins, external content, software or other external service providers (services). Personal data may also be transmitted to the service provider. In order to protect your data, we have contractually obliged the service providers, if necessary in accordance with Art. 28 GDPR, to process your data only in accordance with our instructions.

We expressly point out that we are regularly only responsible for the data collection and transmission by the service within the meaning of the GDPR, but not for any subsequent processing by the respective service provider.

Specifically, we use the following services:

Google services

Our website uses the following services of Google Ireland Limited („Google EU“), Gordon House, Barrow Street, Dublin 4, Ireland. In the EU, this company represents Google LLC („Google US“), 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

By using the services, data is transmitted to Google EU and, under certain circumstances, from Google EU to Google US. The Google Group may process the transmitted data in order to create anonymised user profiles for statistical purposes. If you also have a Google account and are logged into it, Google can assign the transmitted data to your account - even across devices. In principle, we have no influence on this data processing. Google EU is therefore responsible for this data processing.

Google LLC fulfils the requirements of the „EU-U.S. Data Privacy Framework“. The Privacy Framework Agreement regulates the protection of personal data that is transferred from a member state of the European Union to the USA. It ensures that the data transferred there is also subject to a level of data protection comparable to that of the European Union. You can access the list of certified companies here: https://www.dataprivacyframework.gov/s/participant-search.

You can find more information on the handling of user data in Google's privacy policy: https://policies.google.com/privacy.

The details of the standard contractual clauses concluded (guaranteeing the level of data protection in third countries) can be found here: https://support.google.com/adspolicy/answer/10042247?hl=de

You can manage your Google advertising settings on the following website: https://adssettings.google.com/?hl=de (This setting is deleted when you delete your cookies)

We use:

Google Analytics

Our website uses the „Google Analytics“ service from Google. Google Analytics uses cookies (see above under „Cookies“) to enable us to analyse the use of the website by website visitors. The information generated by the cookie about the use of this website by users is usually transferred to a Google server in the USA and stored there. Among other things, the following may be transmitted Your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which your access took place (so-called referrer), the date and time of the enquiry and possibly your internet service provider.

IP anonymisation has been activated on our website so that your transmitted IP address is shortened before transmission outside the scope of the GDPR and thus made partially unrecognisable, i.e. anonymised. Only in exceptional cases is the full IP address first transmitted to a Google server in the USA and truncated there immediately.

On our behalf, Google will use the information transmitted to analyse your use of our website, compile reports on website activity and provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can find more information on terms of use and data protection at Google Analytics at http://www.google.com/analytics/terms/de.html or under https://policies.google.com/technologies/partner-sites?hl=de

You can prevent the data generated by the cookie and related to the use of the website (including IP address) from being transmitted to Google or processed by Google by downloading and installing the browser plug-in available at the following link. The current link is: http://tools.google.com/dlpage/gaoptout?hl=de.

You can also prevent the setting of cookies altogether (see above „How you can avoid cookies“).

The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 letter a) GDPR (consent of the data subject). We ask for your consent to the use of the service when you first access the website via an information text that is displayed. You can revoke your consent at any time with effect for the future by calling up the cookie banner again and changing the settings you have made.

Google DoubleClick

We use the advertising service „DoubleClick“ from Google. DoubleClick is used to offer digital advertising on the Internet. At the heart of DoubleClick are ad servers that marketers, advertisers and advertising networks can use to target users with targeted internet advertising. DoubleClick can be used to monetise websites, run online campaigns and establish advertising contacts.

DoubleClick generally uses cookies to display adverts that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same adverts more than once. Google uses a cookie ID to record which adverts are displayed in which browser and can thus prevent them from being displayed more than once. In addition, DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick advert and later visits the advertiser's website with the same browser and makes a purchase there. According to Google, DoubleClick cookies do not contain any personal information. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advert from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.

You can prevent participation in this tracking process in several ways:

  1. by setting your browser software accordingly not to accept cookies (see above „How you can avoid cookies“),
  2. by deactivating cookies for conversion tracking on the following website: https://www.google.de/settings/ads (This setting will be deleted when you delete your cookies) or
  3. by permanently deactivating it in your Firefox, Internet Explorer or Google Chrome browsers under the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of our website to their full extent.

The legal basis for the use of Google DoubleClick is Art. 6 para. 1 sentence 1 letter a) GDPR (consent of the data subject). We ask for your consent to the use of the service when you access the website for the first time by displaying a notice. You can revoke your consent at any time with effect for the future by calling up the cookie banner again and changing the settings you have made.

Google Maps

Our website uses the external map service „Google Maps“ from Google. Google Maps is used to provide an interactive map on our website that shows you how to find and reach us. This service enables us to present our website in an appealing way by loading map material from an external server. The required data is usually requested from a Google server in the USA. As a result of this request, the following information is transmitted to the Google server and stored there: Your IP address, product and version information about the browser used and the operating system (so-called user agent), the website from which your access took place (so-called referrer), the date and time of the request and possibly your Internet service provider.

The service stores and analyses cookies (see above under „Cookies“) on your end device.

This service uses the web storage of your browser. You can find more information on this in the „Web storage“ section above.

Google Maps uses the external font service „Google Fonts“ from Google. This service makes it possible to display our website in a uniform and appealing way, even with very differently configured user devices, by loading fonts from an external server instead of from the user's device. For this purpose, the required fonts are usually requested from a Google server in the USA.

The legal basis for the use of Google Maps is Art. 6 para. 1 sentence 1 letter a) GDPR (consent of the data subject). We ask for your consent to use the service when you first access the website by displaying a notice. You can revoke your consent at any time with effect for the future by calling up the cookie banner again and changing the settings you have made.

Google Tag Manager

Our website uses the „Google Tag Manager“ support service from Google. This service itself does not process any personal data. However, Google Tag Manager triggers scripts that are required by other services to collect data. It is not possible for Google Tag Manager to access this data.

The legal basis for the use of Google Tag Manager is Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need for a technically flawless and fast presentation of our website and the relief of our IT infrastructure. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. To do so, please use the contact details provided in the legal notice.

YouTube

Our website uses the video service „YouTube“ from Google. YouTube is used to integrate videos into our website in various places. When videos are played, the following information is generally transmitted to a Google server in the USA and stored there for several months: Your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which your access took place (so-called referrer), the date and time of the request and possibly your internet service provider. YouTube uses this data, among other things, to collect statistics and to improve the service.

The service stores and analyses cookies (see above under „Cookies“) on your end device.

This service uses the web storage of your browser. You can find more information on this in the „Web storage“ section above.

YouTube uses the external font service „Google Fonts“ from Google. This service makes it possible to display our website in a standardised and appealing way, even with very differently configured user devices, by loading fonts from an external server instead of from the user's device. For this purpose, the required fonts are usually requested from a Google server in the USA.

The legal basis for the use of YouTube is Art. 6 para. 1 sentence 1 letter a) GDPR (consent of the data subject). We ask for your consent to use the service when you first access the website by displaying a notice. You can revoke your consent at any time with effect for the future by calling up the cookie banner again and changing the settings you have made.

Analysis tools

We use certain services that record data from website visitors and make it available to us for analysis. We use this data to improve our website, services and offers in a user-orientated manner. In particular, the following information on visitor behaviour may be collected: Your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which your access took place (so-called referrer), date and time of the request and possibly your internet service provider, approximate origin (country and city), language, clicks on content and viewing time.

The legal basis for the use of analysis tools is Art. 6 para. 1 sentence 1 letter a) GDPR (consent of the data subject). We ask for your consent to the use of the service when you first access the website by displaying a notice. You can revoke your consent at any time with effect for the future by calling up the cookie banner again and changing the settings you have made.

We use:

Google Analytics

Our website uses the „Google Analytics“ service provided by Google. See the data protection information above.

Newsletter tracking

Our newsletter uses so-called web beacons or tracking pixels to analyse your reading behaviour. Tracking pixels are extremely small image files that are integrated into the newsletter e-mail and thus allow log file recording and log file analysis.

When you open the newsletter email, the tracking pixel is loaded from the server of the newsletter service and at the same time some information about you is transmitted, such as whether the email was opened, the time of the call and the corresponding IP address.

In addition, links in the e-mail can provide information about which products are more interesting - i.e. clicked on more frequently than others.

Both the respective web beacon/counter pixel and the links in the email can be clearly assigned to the email address used for sending and thus allow conclusions to be drawn about the respective newsletter recipient.

Social media fan pages

In addition to our website, we maintain online presences on social platforms in order to communicate with the customers, interested parties and users active there and to inform them about our services.

If you visit our presence on a social platform, your data will generally be processed by the respective platform provider for our market research and advertising purposes. The provider may also process the data for its own purposes. Usage profiles can be created from your usage behaviour and your resulting interests. These user profiles can in turn be used, for example, to place adverts within and outside the platforms that presumably correspond to your interests. For these purposes, cookies (see above) are usually stored on your end device, in which your usage behaviour and interests are stored. In particular, if you are a member of the respective platforms and are logged in to them, additional data may be stored independently in the user profiles. For a detailed description of the respective data processing and objection options, we refer you to the following linked information from the providers, as only they know the exact processes of their data processing.

We would like to point out that your data may also be processed outside the European Union. This may result in risks, e.g. because it could make it more difficult to enforce your rights.

The legal basis for the use of the online presences and the associated data processing is generally Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need to present ourselves to visitors and users of social networks and to introduce statements of all kinds to the media and opinion market. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. To do so, please use the contact details provided in the legal notice.

The use of statistical data of all visitors to our social media websites, which is collected, processed and made available to us by the respective site operators, is based on Art. 6 para. 1 sentence 1 letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need for an anonymous evaluation of the visit and usage behaviour on our websites in order to improve the design of our online offering and optimise our communication with interested parties. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. To do so, please use the contact details provided in the legal notice.

If you are asked by the respective providers for consent to data processing, the legal basis for the processing is Art. 6 para. 1 sentence 1 letter a) GDPR (consent of the data subject). You can revoke this consent at any time with effect for the future. To do so, please contact the provider who asked you for your consent.

In the event that you wish to assert your above-mentioned rights, we would like to point out that these can be asserted most effectively with the providers, despite possible joint responsibility. As a rule, only the providers have direct access to your data and can take appropriate measures and provide information directly. Should you nevertheless require assistance, you can contact us and we will support you at any time within the scope of our possibilities.

We are represented at:

Facebook

Facebook is a social network of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Meta Platforms Ireland Limited is the European subsidiary of Meta Platforms, Inc, 1601 Willow Road, Menlo Park, California 94025, USA.

Further information on data protection at Facebook can be found at: https://www.facebook.com/about/privacy/. We inform you about our own data processing in this declaration.

We have concluded a supplementary agreement with Facebook as part of our user contract, which regulates the responsibility for data processing with regard to the Page Insights function in accordance with Art. 26 GDPR. The details of the agreement can be found here: https://www.facebook.com/legal/terms/page_controller_addendum.Among other things, Facebook has undertaken to inform you about data processing in the context of the Page Insights function. You can find this information here: https://www.facebook.com/legal/terms/information_about_page_insights_data.

YouTube

YouTube is a social video platform of YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, represented by Google Ireland Ltd („Google EU“), Gordon House, Barrow Street, Dublin 4, Ireland. In the EU, this company represents Google LLC („Google US“), 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Further information on data protection at YouTube can be found at: https://policies.google.com/privacy.

Instagram

Instagram is a social network of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Meta Platforms Ireland Limited is the European subsidiary of Meta Platforms, Inc, 1601 Willow Road, Menlo Park, California 94025, USA.

Further information on data protection at Instagram can be found at https://privacycenter.instagram.com/policy.

Further information on data protection at Facebook can be found at: https://www.facebook.com/about/privacy/.

Twitter

Twitter is a social network of Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. Twitter International Company is the European subsidiary of Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

You can find further information on data protection on Twitter at: https://twitter.com/de/privacy.

You can configure Twitter's data collection on the following page: https://twitter.com/personalization

LinkedIn

LinkedIn is a professional network of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. In the EU, this company represents LinkedIn Corporation, 1000 W. Maude Ave, Sunnyvale, California 94085, USA.

Further information on data protection at LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy.

You can configure LinkedIn's data collection on the following page: https://www.linkedin.com/psettings/guest-controls/

Star

Xing is a professional network of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. Further information on data protection at Xing can be found at: https://privacy.xing.com/de/datenschutzerklaerung.

Status of the privacy policy: 17/08/2023

Source: Süddeutsche Datenschutzgesellschaft mbH