Privacy Terms

1. Name and contact details of the controller and data protection officer

Data controller responsible for processing:

Name:        Fr. Jacob Söhne GmbH & Co. KG

Address:    Niedernfeldweg 14, 32457 Porta Westfalica, Germany

Telephone: +49 571 9558-0

Email:        post@jacob-rohre.de

Our data protection officer can be contacted at:

Name:        RIVACY GmbH

Address:     Mexikoring 33, 22297 Hamburg

Email:        info@rivacy.eu

 

2. Processing of personal data on the website or in the online shop

Below you will find information about our processing of personal data on our website and online shop. Based on the type of personal data, we explain the purpose of the processing and the legal basis on which the personal data is processed. We also set out how long the personal data will be stored.

 

2.1 Visiting our website or online shop purely for informational purposes

If you only visit our website or online shop for informational purposes, without actively providing us with data via registration or in any other way, we only process data about the internet connection that your browser transmits to our server.

Type of personal	Processing purposes and legal basis
Server log files Browser type and browser version, operating system used,Referrer URL, Host name of the accessing computer, Time of the server request, IP address (automatically abbreviated)	When you visit our website or online shop, your browser automatically processes information that your browser automatically transmits to us in “server log files”. This data is collected in order to optimise our online products in the future as well as to ensure data protection and data security. The data is processed in accordance with Article 6(1)(b) or (f) GDPR.

 

Log data collected automatically is deleted after the purpose of the processing has been fulfilled, usually 7 days after it has been collected, unless it is necessary, in individual cases, to store it for longer for reasons of data and system security or to identify and correct errors.

The personal data listed in this section 2.1 is collected automatically by our IT systems when you visit our website or online shop. The website or online shop may not be displayed optimally if the personal data is not processed.

 

2.2 Contacting us via the online contact form or by email

We process the personal data listed below in order to keep you informed about our products and services, and to answer other enquiries from you.

Type of personal

Processing purposes and legal basis

Online contact form/e mail Contact details (name, telephone number, address, reason for contact, etc.), email address

If you contact us via our website or online shop, or request informational material or a catalogue, we process your details from the online contact form or your e mail in order to deal with your enquiry and the associated technical administration and to respond to any follow-up questions. Before we conclude a contract with you, this data is processed in accordance with Article 6(1)(b) GDPR, otherwise it is based on the mutual interest in processing the data in accordance with Article 6(1)(f) GDPR.

We only store your personal data in accordance with this section 2.2 for as long as is necessary to provide you with the information you have requested from us and to establish any potential business relationship with you.

If the applicable law requires us to retain certain personal data for legally defined periods of time (for example in connection with business transactions), we will continue to store the relevant personal data for as long as necessary. In this case, the legal basis for the processing of the personal data is Article 6(1)(c) GDPR. Your personal data will be deleted immediately if it is no longer required for the purposes of complying with the statutory requirements.

We collect the personal data listed in this section 2.2 directly from you when you provide us with the personal data yourself. If we did not process this personal data (with the exception of any optional information), it would not be possible to provide the services described in this section 2.2.

 

2.3 Job applications

In the context of job applications, we process the following personal data.

Type of personal

Processing purposes and legal basis

Application details Personal details such as (i) Name, private contact details (email address, telephone number, postal address) and other professional information provided by you as part of the application, such as (ii) curriculum vitae, letters of recommendation, covering letter, work permit, previous employment, training history, languages spoken, skills relevant to the job and references as well as information provided during the application process (some of which is required by law), such as (iii) date and place of birth, marital status, number of children, driving licence information and disability status, if applicable

It is necessary to process the personal data specified above in connection with a job application, which may be made by email, via a company page (social media, see section 4), or by post, in order to select suitable employees, to give notice of the outcome of an application, to coordinate the application process (e.g. personal interview), and to establish an employment relationship. The data is processed in accordance with Section 26(1) sentence 1 BDSG (Bundesdatenschutzgesetz [German Federal Data Protection Act]).

 

We collect the personal data specified in this section 2.3 directly from you as a job applicant during the application process.

If your application to us is unsuccessful, we will retain this personal data for three months after notifying you of our decision. In this case, the legal basis for the processing the data, in addition to the above, is Article 6(1)(f) GDPR. Our legitimate interest is to use this personal data, if necessary, in relation to legal disputes with applicants, in particular in connection with the AGG (Allgemeine Gleichbehandlungsgesetz [General Equal Treatment Act]).

 

2.4 Use of the shop for detailed product views and in connection with orders

We also process the personal data listed below in order to inform you about our products or services and to process your orders.

Type of personal	Processing purposes and legal basis
Registration of a customer account Compulsory information for registration (VAT ID, company, company address, company telephone number or mobile phone number, country, company email address, title, name, department, account email address, password) Optional additional information (P.O. box/postal code, company fax number, company URL, personal fax number)	You have to create a customer account in order to use some functions on our website or in our online shop (more detailed product information/orders). As part of this registration, we process your personal data in order to be able to offer you these functions.   The processing of this data is carried out for all information required to fulfil the contract in accordance with Article 6(1)(b) GDPR, and for all further information due to mutual interest in accordance with Article 6(1)(f) GDPR.
Direct advertising Contact details (name, telephone number, address, reason for contact, etc.), email address Compulsory registration data, if applicable (see above)	If you are one of our customers and you have been inactive for no more than three years, we may contact you by email to inform you about our current products and services as part of our existing business relationship. The data is processed in accordance with Article 6(1)(f) GDPR.
Processing (online) orders: Registration data, order communication data, order data (product, quantity, etc.), payment data (all necessary invoice information)	In the case of an order or other contract-related processing, we use the personal data to process or handle the order and other contract-related enquiries. The processing may also be used to resolve disputes or enforce the contractual agreement. This data is processed in accordance with Article 6(1)(b) GDPR.
Credit check Payment data	Before delivery of the ordered goods, we may have a credit check carried out using the payment data. This is done to protect us against non-payment. This data is processed in accordance with Article 6(1)(b) and, if applicable, (f) GDPR.
Compliance check and other legal obligations e.g. information about legal disputes that may be relevant for antitrust purposes.	The purpose of the processing is to ensure compliance with legal obligations (such as accounting obligations, tax regulations), compliance audits or recording obligations (for example, under competition laws, export laws, trade sanctions and embargo laws or the prevention of white-collar crime or money laundering); in individual cases, this may involve us matching your contact information or other information you provide with applicable lists of sanctioned parties and contacting you to confirm your identity if such a match occurs, or recording any interaction with you that may be relevant for antitrust purposes. This data is processed in accordance with Article 6(1)(b) or (c) GDPR.

 

We only store your personal data in accordance with this section 2.4 for as long as is necessary in each case to provide the services, sell our products or provide the information you have requested from us and to manage the business relationship with you or to check compliance. If you wish to delete your customer account, we will do so on receipt of your request.

If the relevant applicable law obliges us to retain certain personal data for legally defined periods of time (such as in connection with business transactions), we will continue to store specific personal data for as long as we are legally obliged to do so. In this case, the legal basis for the processing of the personal data is Article 6(1)(c) GDPR. Your personal data will be deleted immediately if it is no longer necessary to comply with the statutory requirements.

We collect the personal data listed in this section 2.4 directly from you when you provide us with the personal data yourself. If we did not process this personal data (with the exception of the optional information), it would not be possible to provide the services listed in this section 2.4.

 

2.5 Cookies and analysis services

(a)    Cookies

aa)    General Information about cookies

We use “cookies” on our website and webshop for various purposes. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by the browser.

Whether cookies are used when you visit our website/webshop and which cookies they are depends on which areas and features of our website/webshop you use and whether you consent to the use of cookies that are not technically necessary in our consent management system.

Consent within the meaning of Article 6(1)(a) GDPR, if required, and the rejection or deletion of cookies are linked to the terminal device you are using and also to the web browser used in each case. If you use more than one end device or web browser, you can make different decisions or choose different settings for each one.

bb)    Special notice on individual cookies used

The following categories of cookies are used through our website/webshop:

• Required cookies: These cookies are necessary for the basic functions of our website/webshop.
• Analytical cookies: These cookies allow us to analyse how the website/webshop is used so that we can measure and improve its performance. In addition, they improve your user experience on our website/webshop.
• Social media cookies: These cookies let you connect to your social media channels, share content from this website/our webshop or read content from the relevant platforms on this website/in our webshop.
• Marketing cookies: We use these cookies to provide you with information and offer that match your interests on social media channels, on search engines or in display networks, where applicable, across devices.

If we are deemed to be joint controllers with a cookie provider and have concluded an agreement to that effect, we will provide you with a description of the essential provisions of agreements with joint controllers on request, if this is a legal requirement.

The details of the cookies we use in the respective categories and information required for informed consent (where necessary) and the obligation under Article 13 GDPR, can be found below:

 

(i)    Required cookies

Session cookies, which are used in particular to enable the customer account and the shopping basket functions to work, are currently used on our website and in our online shop. This is done by processing the login status of the user FE/BE and the cookie preference. Specifically, the following session cookies are used on this website:

• fe_typo_user;
• be_typo_user;
• be_lastLoginProvider;
• PHPSESSID; 
• cookieconsent_dismissed;
• Cookie _et_coid.

The data processing is carried out on the legal basis of Article 6(1)(f) GDPR. Our legitimate interest is the provision/optimisation of our online services and our web presence.

The data specified above will be processed for as long as it is necessary to achieve the purpose stated above. The storage period of the session cookies usually lasts until the end of your visit to our website or online shop. Depending on the type of browser you are using, there may be default settings activated that restore pages that you have previously visited and this allows session cookies to be stored for longer.

 

(ii)    Analytical cookies

Google Analytics

If you have given your consent, this website (as well as the webshop, which will not be referred to separately below) uses “Google Analytics”, a web analytics service of Google LLC. The responsible service provider in the European Union is Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, Ireland (“Google”).

Scope of the processing

Google Analytics uses cookies that enable your use of our website to be analysed. Information collected by the cookies about your use of this website is transmitted to a Google server and stored there.

We use the “anonymizeIP” function (known as IP masking): The activation of IP anonymisation on this website means that your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is a full IP address transmitted to a Google server in the USA and shortened there. Google will not link the IP address transferred by your browser as part of Google Analytics with any other data held by Google.

During your visit to the website, the following data are collected:

• the pages you visit, your “click path”
• achievement of “website goals” (conversions, e.g. newsletter registrations, downloads, purchases)
• your user behaviour (e.g. clicks, viewing time, bounce rates)
• your approximate location (region)
• your IP address (in shortened form)
• technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
• your internet provider
• the referrer URL (which website/advertising medium led you to this website)

Google Analytics is used in joint responsibility with Google. For this purpose, there is a data processing agreement in place with Google, but which currently gives both parties full responsibility for the processing assigned to them. Google combines your usage data with usage data collected elsewhere and uses the resulting profiles to display personalised advertising and to provide analysis.

Your data are only made available to us in aggregated and encrypted form.

Purposes of the processing

Google will use this information for us to evaluate your use of the website, compile reports about website activities, and provide us with further services related to the website and internet usage. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.

Recipient

The recipient of the data is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), and, where applicable, Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and Alphabet Inc (1600 Amphitheater Parkway, Mountain View, CA 94043 USA).

Transfer to third countries

The primary location for processing your personal data is the European Union.

However, it cannot be ruled out that data will be transferred by Google Analytics to so-called third countries. These third countries may not offer an adequate level of data protection under the GDPR. If the data are transferred to the USA, for example, there is a risk that your data may be processed by US authorities for control and monitoring purposes where you may not have the option of legal recourse. Below is a list of the countries to which the data will be transferred. This could be for different purposes, for example, for storage or processing.

• United States of America, Singapore, Chile, Taiwan

If necessary, standard contractual clauses for the services used are concluded for this form of transfer.

Storage period

Cookies related to Google Analytics are stored for up to two years. However, the data sent by us and linked to cookies is automatically deleted after 14 months. The deletion of data which have reached the end of the retention period takes place automatically once a month.

You can also prevent the (further) collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google and the processing of these data by Google by making use of the options listed in section 2.5 cc).

Legal basis and revocation option

The legal basis for this data processing is your consent, Article 6(1)(a) GDPR. You can revoke your consent at any time with future effect by going to the cookie settings (under section 2.5 cc)) and changing your selection there.

You can find more information on Google Analytics' terms of use and Google's privacy policy at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.

 

LinkedIn Analytics/Insight-Tag (Marketing Solutions)

If you have given your consent, this website uses “LinkedIn Insight-Tag”, a web analytics service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

The LinkedIn Insight tag is a small code snippet that we have added to our website.

Scope of the processing

The LinkedIn Insight tag uses cookies to enable us to statistically evaluate the use of our website and to continuously improve it. In this way, we find out which LinkedIn ad or interaction on LinkedIn brought you to our website. This allows us to better control how our advertising is displayed. The information collected by the cookies is transmitted to a LinkedIn server and stored there.

During your visit to the website, the following data are collected:

• data about visits to our website, including URL,
• referrer URL,
• IP address,
• device and browser properties,
• time stamps and page events.

The IP addresses are shortened or (if they are used to reach members across devices) hashed. Members' direct identifiers are removed within seven days to pseudonymise the data.

The LinkedIn Insight tag is used in joint responsibility with LinkedIn. For this purpose, there is a data processing agreement in place with LinkedIn, but which currently gives both parties full responsibility for the processing assigned to them. LinkedIn combines your usage data with usage data collected elsewhere and uses the resulting profiles to display personalised advertising and to provide analysis.

Your data are only made available to us in aggregated and encrypted form.

Purposes of the processing

LinkedIn will use this information for us to evaluate your use of the website, compile reports about website activities, and provide us with further services related to website and internet usage. The reports provided by LinkedIn are used to analyse the performance of our website and the success of our marketing campaigns.

Recipient

LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland) and LinkedIn Corporation (2029 Stierlin Court, Mountain View, CA 94043, USA).

Transfer to third countries

The primary location for processing your personal data is the European Union.

However, it cannot be ruled out that data will be transferred by LinkedIn to so-called third countries. These third countries may not offer an adequate level of data protection under the GDPR. If the data are transferred to the USA, for example, there is a risk that your data may be processed by US authorities for control and monitoring purposes where you may not have the option of legal recourse. Below is a list of the countries to which the data will be transferred. This could be for different purposes, for example, for storage or processing.

• United States of America

If necessary, standard contractual clauses for the services used are concluded for this form of transfer.

Storage period

The pseudonymised data will be deleted within 90 days if they are not processed or used in active campaigns.

You can also prevent the (further) collection of the data generated by the cookie and relating to your use of the website (including your IP address) by LinkedIn and the processing of these data by LinkedIn by making use of the options listed in section 2.5 cc).

Legal basis and revocation option

The legal basis for this data processing is your consent, Article 6(1)(a) GDPR. You can revoke your consent at any time with future effect by going to the cookie settings (under section 2.5 cc)) and changing your selection there.

You can find more information on the LinkedIn Insight tag and LinkedIn’s privacy policy at https://www.linkedin.com/legal/sas-terms#additional-terms-for-optional-conversion-tracking and at https://www.linkedin.com/legal/privacy-policy.

 

Google Tag Manager

If you have given your consent, this website will use “Google Tag Manager”, a tag management system from Google LLC. The responsible service provider in the European Union is Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, Ireland.

Scope of the processing

Google Tag Manager uses cookies to allow measurement codes and associated code fragments, collectively known as tags, to be updated on our website and to determine when the triggering of tags. The information collected by the cookies is transmitted to a Google server and stored there.

For the Google Tag Manager, we also use the “anonymizeIP” function (so-called IP masking), which is explained in more detail in the information on Google Analytics.

During your visit to the website, the following data are collected:

• Aggregated data on tag triggering

Google Tag Manager is used in joint responsibility with Google. For this purpose, there is a data processing agreement in place with Google, but which currently gives both parties full responsibility for the processing assigned to them.

Purposes of the processing

For us, Google will use this information to load our tags integrated using the Google Tag Manger (e.g. Google Ads Conversion Pixel).

Recipient

The recipient of the data is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), and, where applicable, Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and Alphabet Inc (1600 Amphitheater Parkway, Mountain View, CA 94043 USA).

Transfer to third countries

The primary location for processing your personal data is the European Union.

However, it cannot be ruled out that data will be transferred by the Google Tag Manager to so-called third countries. These third countries may not offer an adequate level of data protection under the GDPR. If the data are transferred to the USA, for example, there is a risk that your data may be processed by US authorities for control and monitoring purposes where you may not have the option of legal recourse. Below is a list of the countries to which the data will be transferred. This could be for different purposes, for example, for storage or processing.

• United States of America, Singapore, Chile, Taiwan

If necessary, standard contractual clauses for the services used are concluded for this form of transfer.

Storage period

The data sent by us and linked to cookies are automatically deleted 14 months after retrieval.

You can also prevent the (further) collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google and the processing of these data by Google by making use of the options listed in section 2.5 cc).

Legal basis and revocation option

The legal basis for this data processing is your consent, Article 6(1)(a) GDPR. You can revoke your consent at any time with future effect by going to the cookie settings (under section 2.5 cc)) and changing your selection there.

You can find more information on Google Tag Manager' terms of use and Google's privacy policy at https://support.google.com/tagmanager/answer/7157428 and at https://policies.google.com/?hl=de.

 

(iii)    Social media cookies

No social media cookies are currently used.

 

(iv)    Marketing Cookies

Google Ads Conversion Pixel

If you have given your consent, this website will use “Google Ads”, a service displaying advertisements from Google LLC. The responsible service provider in the European Union is Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, Ireland (“Google”).

Scope of the processing

Google Ads uses cookies to allow attention to be drawn to our offers in an optimal manner through various advertising media (so-called Google Ads) on external websites and to measure certain parameters for measuring success, such as display of the ads or clicks by users of our website. By integrating ads, Google receives the information that you have accessed the relevant part of our website or have clicked on our ad. The information collected by the cookies is transmitted to a Google server and stored there.

During your visit to the website, the following data are collected:

• browser language, browser type
• cookie ID, cookie information
• date and time of the visit
• IP address
• referrer URL
• usage data/ clicked ads (events/labels provided)
• web request

Google Ads are used in joint responsibility with Google. For this purpose, there is a data processing agreement in place with Google, but which currently gives both parties full responsibility for the processing assigned to them. Google combines your usage data with usage data collected elsewhere and uses the resulting profiles to display personalised advertising and to provide analysis.

We also use “Google Dynamic Remarketing” as a feature of Google Ads. This application allows you to be shown our advertisements in your subsequent internet usage after visiting our website. It does this by storing cookies in your browser, which are used by Google to record and analyse your user behaviour when visiting various websites. In this way, Google can determine your previous visit to our website.

Your data are only made available to us in aggregated and encrypted form.

Purposes of the processing

By using Google Ads, we can identify which advertising measures are particularly effective.

Recipient

The recipient of the data is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), and, where applicable, Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and Alphabet Inc (1600 Amphitheater Parkway, Mountain View, CA 94043 USA).

Transfer to third countries

The primary location for processing your personal data is the European Union.

However, it cannot be ruled out that data will be transferred by Google Ads to so-called third countries. These third countries may not offer an adequate level of data protection under the GDPR. If the data are transferred to the USA, for example, there is a risk that your data may be processed by US authorities for control and monitoring purposes where you may not have the option of legal recourse. Below is a list of the countries to which the data will be transferred. This could be for different purposes, for example, for storage or processing.

• United States of America, Singapore, Chile, Taiwan

If necessary, standard contractual clauses for the services used are concluded for this form of transfer.

Storage period

We have set a conversion tracking period of 90 days, so the relevant cookies are deleted after the 90 days have elapsed following a click.

You can also prevent the (further) collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google and the processing of these data by Google by making use of the options listed in section 2.5 cc).

Legal basis and revocation option

The legal basis for this data processing is your consent, Article 6(1)(a) GDPR. You can revoke your consent at any time with future effect by going to the cookie settings (under section 2.5 cc)) and changing your selection there.

You can find more information on Google Tag Manager' terms of use and Google's privacy policy at https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/ and at https://policies.google.com/?hl=de.

 

LinkedIn Ads (Marketing Solutions)

If you have given your consent, in connection with this website LinkedIn Ads will be used, a web analytics service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

Scope of the processing

For LinkedIn Ads, the data processed using the LinkedIn Insight tag are also used to show you ads on LinkedIn based on your interests.

For this purpose, the personal data mentioned above collected via our website is used to enable identity inference (= matching) with users of LinkedIn and thus to display targeted advertising. If you are not logged in to LinkedIn, the data will only be used pseudonymously.

Purposes of the processing

By using LinkedIn Ads, we can see which advertising activities are particularly effective and our advertising measures can be displayed in a more targeted way.

Recipient

Recipients are the same as set out in section 2.5 bb) (ii) on LinkedIn Analytics/Insight-Tag (Marketing Solutions).

Transfer to third countries

The statements under section 2.5 bb) (ii) on LinkedIn Analytics/Insight-Tag (Marketing Solutions) apply to the transfer to third countries.

Storage period

The statements under section 2.5 bb) (ii) on LinkedIn Analytics/Insight-Tag (Marketing Solutions) apply to the storage period.

Legal basis and revocation option

The statements under section 2.5 bb) (ii) on LinkedIn Analytics/Insight-Tag (Marketing Solutions) apply to the legal basis and revocation option.

 

Facebook Pixel

If you have given your consent, this website uses the Facebook Pixel, a service of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), to display personalised advertising.

Scope of the processing

The Facebook Pixel uses cookies to enable us to statistically evaluate the use of our website and to continuously optimise it, and to display targeted advertising. This tells us which Facebook ad or interaction on Facebook brought you to our website and how successful our advertising campaigns on Facebook were. This allows us to better control how our advertising is displayed. The information collected by the cookies is transmitted to a Facebook server and stored there.

During your visit to the website, the following data are collected:

• ads viewed, content viewed, elements clicked (including any purchases)
• device information
• geographical location
• HTTP header
• IP address
• marketing information
• non-confidential user-defined data
• websites visited
• Pixel ID
• referrer URL
• Facebook cookie information, Facebook user ID

If Facebook is deemed to be our contract processor in relation to the Facebook Pixel or we are jointly responsible with Facebook for processing, we have concluded the relevant agreements with Facebook where they are available. Facebook combines your data with usage data that may be collected elsewhere and uses the resulting profiles to display personalised advertising and to provide analysis.

Your data are only made available to us in aggregated and encrypted form.

Purposes of the processing

The purpose of the processing is tracking the use of our website in order to allow an analysis for improvements and to optimally implement the related retargeting and marketing.

Recipient

Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland) and Facebook Inc. (1 Hacker Way, Menlo Park, CA 94025, USA).

Transfer to third countries

The primary location for processing your personal data is the European Union.

However, it cannot be ruled out that data will be transferred by Facebook to so-called third countries. These third countries may not offer an adequate level of data protection under the GDPR. If the data are transferred to the USA, for example, there is a risk that your data may be processed by US authorities for control and monitoring purposes where you may not have the option of legal recourse. Below is a list of the countries to which the data will be transferred. This could be for different purposes, for example, for storage or processing.

• United States of America, United Kingdom, Singapore

If necessary, standard contractual clauses for the services used are concluded for this form of transfer.

Storage period

The cookies set using the Facebook Pixel are deleted after 90 days.

You can also prevent the (further) collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Facebook and the processing of these data by Facebook by making use of the options listed in section 2.5 cc).

Legal basis and revocation option

The legal basis for this data processing is your consent, Article 6(1)(a) GDPR. You can revoke your consent at any time with future effect by going to the cookie settings (under section 2.5 cc)) and changing your selection there.

You can find more information on Facebook Pixel terms of use and Facebook's privacy policy at https://de-de.facebook.com/legal/technology_terms and at https://de-de.facebook.com/privacy/explanation.

 

cc)    Revocation / deactivation of cookies

You can revoke the processing of your personal data by analytical cookies, social media cookies and marketing cookies at any time using the 

Cookie settings

You can prevent cookies from being stored on your computer by changing the settings of your Internet browser, for example by deactivating all automatic setting of cookies. If specific cookies are deactivated, the functionality of the website may be restricted.

 

3. Processing of personal data of customers/suppliers outside the website/online shop

We also process your personal data for the purposes stated in sections 2.2 and 2.4 of this privacy policy (to inform you about our products and services and to respond to other enquiries from you, to process your orders and, if applicable, to carry out a credit or compliance check), insofar as you contact us as a (potential) customer or (potential) supplier outside our website/online shop (e.g. by post, fax or via other communication channels).

The data processed, the legal basis and the storage period are organised in exactly the same way as described in the relevant information in sections 2.2 and 2.4 of this privacy policy.

 

4. Social Media

In addition to our website and online shop, we also maintain company pages (company profiles) on various social media providers (see the social media providers listed in section 4.2) in order to communicate with customers, interested parties and job applicants who are active there and to inform them about our products and services and our job vacancies.

4.1 Icons on our website or online shop

In this context, we only use simple links on our website or online shop for the integrated icons of the social media providers, and those icons do not establish a connection to the social media platform when loading the website or online shop. The social media links and icons used here differ in this respect from the commonly used “Like” buttons, which transmit data to social media providers when a website is loaded without even having to click on the button.

4.2  Processing of your data when visiting our company pages

(a) YouTube, Xing and Twitter

If you visit our company’s pages on YouTube, Xing or Twitter directly or by clicking on the media link and use the contact options provided there (including a comment function), your personal data will be processed by us there to the extent specified in sections 2.2 and 2.3.

In addition, your personal data collected via the social media provider's own website (our company page) will also be transmitted to the social media platform provider and processed by that provider. It is likely that the social media provider will also process additional information as well as store the data specifically entered by you on this social media platform. If you are logged into your personal user account of the specific network while visiting such a social media platform, the social media platform can assign the visit to your account. If you do not want them to make this assignment, you need to log out of your account before visiting our company website and possibly delete the cookies. For further information on the purpose and scope of data processing there and on the further processing and use of your data, please refer to the data protection terms of the relevant social media provider:

YouTube

YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Privacy policy: https://policies.google.com/privacy?hl=en&gl=de

Xing

Xing is operated by New Work SE, Dammtorstraße 29-32, 20354 Hamburg, Germany.

Privacy policy: https://privacy.xing.com/en/privacy-policy

Twitter

Twitter is operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland.

Privacy policy: https://twitter.com/en/privacy

 

Finally, YouTube and Twitter give us access to “statistical data” (in particular: YouTube: the number of visitors to our company page, the scope of interactions, the average duration of video playbacks, the number of daily active users, access sources, demographic data (information about which countries and cities our visitors come from and statistics on the gender ratio of our visitors); Twitter: the number of visitors to our company page, the scope of interactions, which are generated by the social media providers from the personal data they themselves collect and make available to us in anonymised form. It is not possible for us to draw conclusions about individual users or have access to individual users.

We do not receive any access to statistical data from Xing.

(b) Facebook, Instagram and LinkedIn

If you visit one of our company pages on Facebook, Instagram or LinkedIn by clicking on the media link or directly and use the contact options provided there (including a comment function), your personal data will also be processed by us to the extent specified in sections 2.2 and 2.3.

The processing by us is carried out on the basis of a balancing of interests in accordance with Article 6(1)(f) GDPR. By processing personal data, we are pursuing the interest of providing visitors and users with a contemporary range of information and interaction options on our company pages.

We are jointly responsible for these company pages with Facebook, Instagram and LinkedIn within the meaning of the GDPR. As the (jointly) responsible party for these company pages, we have entered into agreements with Facebook, Instagram and LinkedIn which regulate, among other things, the conditions for using the company page. When you visit our company pages on Facebook, Instagram or LinkedIn, the respective social media providers process personal data from you. Some of the personal data collected and processed when you use our company pages is made available to us in aggregated form via “insights” (user statistics). The user statistics created (in particular: Facebook: the number of visitors to our company page, the amount of interactions (“Like” data, page subscribers, reactions to posts), information about videos (number of views, popularity of videos), demographic data (information about age group, gender, education level, profession; relationship status); Instagram: Activity information (reactions: Like/Hearts, comments, how content is shared or saved, how many people have accessed a profile in response to a story, clicks on links in a profile), demographic data; LinkedIn: posts (number of times a post was viewed, number of times a post and the company were clicked, likes, comments, shares), followers (whether organic or not, demographic data), visitors (how many times the same visitor, demographic data) are transmitted to us in anonymised form only. We have no access to the underlying data. More detailed information on data processing, especially with regard to user statistics, can be found in the agreements on data protection responsibility:

For Facebook and Instagram:

https://www.facebook.com/legal/terms/page_controller_addendum

For LinkedIn:

https://legal.linkedin.com/pages-joint-controller-addendum

The extent to which the social media providers collect and process personal data is set out in the privacy statements in the links below. This means that we have no influence on whether Facebook, Instagram or LinkedIn transmit personal data to third parties. In particular, it is possible that personal data is processed outside the European Union by Facebook Inc, Instagram Inc or LinkedIn Inc based in the USA.

Facebook

Facebook is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Privacy policy: https://www.facebook.com/about/privacy/ 

Instagram

Instagram is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Privacy policy: https://help.instagram.com/519522125107875

LinkedIn

LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

Privacy policy: https://www.linkedin.com/legal/privacy-policy 

 

5. Other services integrated on the website

We include videos on our websites with information about the ordering process, our products, the configuration of our products and for similar purposes. These videos are stored on our own server and can be played directly from our website or online shop.

In order to make access to the videos technically possible and, if necessary, to be able to track security-related events, the relevant access data is automatically saved each time the videos are accessed.

Depending on the browser used, the following data is collected:

IP address of the requesting computer; date and time of the request; access method/function desired by the requesting computer; input values transmitted by the requesting computer (file name, etc.); access status of the web server (file transferred, file not found, command not executed); name of the requested file; URL from which the file was requested and/or the desired function was initiated.

The data processing is carried out on the legal basis of Article 6(1)(f) GDPR. Our legitimate interest is the presentation of our products and as a result the simplification of orders via our website or online shop

The above data will be processed and, in particular, stored for as long as is necessary to achieve the purpose specified above. The data is usually stored until the end of your visit to our website or online shop. Depending on the type of browser you are using, there may be default settings activated that restore pages that you have previously visited and this allows data to be stored for longer.

 

6. Recipients of personal data

We share your personal information with the following recipients:

6.1 We use contract processors for processing personal data for the purposes indicated. These process the personal data for us on our behalf. We retain control over the personal data in question and, as the controller, remain responsible for the data processing.

6.2 To process payments for orders, we transmit payment details to banks or payment service providers if required by the payment method.

6.3 If necessary, we transmit contact information to logistics companies in order to implement the transport of goods.

6.4 In individual cases, we may share the personal data required for the order with our international representatives (other companies within the corporate group) at your request. If the European Commission has not issued a decision on adequacy for the respective third country outside the European Economic Area, this is done on the basis of Article 49(1)(b) GDPR.

6.5 We transmit personal data in individual cases to courts, law enforcement agencies, supervisory authorities, other authorities, tax consultants and lawyers, provided this is legally permissible or required.

 

7. Automated decisions

We will not use your personal data to make automated decisions (including profiling) about you that will have a legal effect on you or a similar significant impairment for you.

 

8.    Your rights

8.1 According to the legal regulations you have the following rights:

• The right to information about your personal data: this enables you to obtain a copy of the personal data we process about you and to verify whether we process it lawfully;
• The right to rectify the personal data that we process from you: this allows you to have incomplete or inaccurate data corrected;
• The right to erase your personal data: this allows you to request that we delete or remove your personal data if we have no further reason to continue processing it;
• The right to object to the processing of your personal data if processing is based on our legitimate interests (or those of a third party) and if your particular situation gives you grounds to object to the processing on this basis. In particular, you have a right to object if we process your data for direct marketing purposes;
• The right to restrict the processing of your personal data: this allows you to request the suspension of processing your personal data, for example if you wish us to establish its accuracy or processing basis; and
• Under certain circumstances, the right to have your personal data transmitted to another controller.

8.2 If you have given us your consent for the processing of your personal data, you have the right to revoke your consent at any time, without this affecting the lawfulness of the processing carried out on the basis of the consent up to the time of revocation.

8.3 You have the right to complain to a competent supervisory authority at any time.