Table of contents
I. NAME AND ADDRESS OF THE CONTROLLER
II. CONTACT DETAILS OF THE DATA PROTECTION OFFICER
III. GENERAL INFORMATION ON DATA PROCESSING
IV. YOUR RIGHTS
V. PROVISION OF THE WEBSITE AND CREATION OF LOG FILES
VI. USE OF COOKIES
VII. CONTACT VIA E-MAIL
VIII. CONTACT FORMS
IX. APPLICATION BY E-MAIL
X. CORPORATE PRESENCE IN SOCIAL AND PROFESSIONAL NETWORKS
XI. HOSTING
XII. YOUTUBE VIDEOS
XIII. GOOGLE TAG MANAGER
XIV. GOOGLE ADS, INCL. GOOGLE ADS REMARKETING
XV. GOOGLE ANALYTICS (GA4), INCL. GOOGLE ANALYTICS REMARKETING
XVI. CHANGES TO THIS PRIVACY POLICY
III. GENERAL INFORMATION ON DATA PROCESSING
1. Scope of data processing
How we collect and use your personal data depends on how you interact with us or which services you use. We only collect, use or share your personal data where we have a legitimate purpose and legal basis for doing so.
2. What do we mean by legal basis?
Consent (Art. 6(1)(a) GDPR) – You have given us your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. For more information on how to withdraw your consent, please refer to the subsections "Exercising your rights" in the following sections of this privacy policy.
Contract (Art. 6(1)(b) GDPR) – We need to use your data to fulfil a contract you have with us. Alternatively, it is necessary to use your data because we have asked you to, or you have taken yourself, specific steps before entering that contract.
Legal obligation (Art. 6(1)(c) GDPR) – We need to use your data to comply with the law.
Vital interests (Art. 6(1)(d) GDPR) – Processing of your data is necessary to protect your vital interests or those of another person. For example, to protect you from serious physical harm.
Public task (Art. 6(1)(e) GDPR) – Processing of your data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us, e.g. for a statutory function.
Legitimate interests (Art. 6(1)(f) GDPR) – Processing of your data is necessary to support a legitimate interest that we or another party has, only where this is not outweighed by your own interests.
Please note where your data is processed under the performance of a contract or for a legal obligation, if you do not provide the data requested, we may be unable to provide you with our website.
3. Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if required by European or national legislation under EU regulations, laws, or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned provisions expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
4. Transfer of your personal data
As explained in this privacy policy, we use various service providers to help us provide our services and ensure the security of your data. When we use these service providers, it is necessary for us to share your personal data with them. We have concluded agreements with all service providers with whom we share your data, obliging them to protect it.
If your personal data is transferred outside the EU, we only transfer it to countries that the EU Commission has determined provide an adequate level of data protection, or we implement measures to ensure that all recipients maintain an adequate level of data protection. To this end, we conclude, for example, the standard contractual clauses (SCCs) adopted by the European Commission and seek additional security measures. You can request a copy of the SCCs we have concluded with our service providers by sending an email to the address provided in this privacy policy.
For example, when we use US service providers, we rely on either the SCC or the EU-US Data Privacy Framework, depending on the provider.
IV. YOUR RIGHTS
When your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights:
1. Right of access (Art. 15 GDPR)
You may request the data controller to confirm whether your personal data is being processed by them. If this is the case, you can request the following information from the data controller:
Purposes of processing;
Categories of personal data being processed;
Recipients or categories of recipients to whom the personal data have been or will be disclosed;
Planned storage period or the criteria for determining this period;
The existence of the rights to rectification, erasure or restriction or objection;
The existence of the right to lodge a complaint with a supervisory authority;
If applicable, origin of the data (if collected from a third party);
If applicable, existence of automated decision-making including profiling with meaningful information about the logic involved, the scope and the effects to be expected;
If applicable, transfer of personal data to a third country or an international organization.
2. Right to rectification (Art. 16 GDPR)
You have a right to rectification and/or modification of the personal data, if your personal data is incorrect or incomplete. The data controller must correct the data without delay.
3. Right to restriction of processing (Art. 18 GDPR)
If one of the following conditions is met, you may request the restriction of the processing of your personal data:
If you challenge the accuracy of your personal data for a period that enables the data controller to verify the accuracy of your personal data.
The processing is unlawful, and you refuse the erasure of the personal data and instead request the restriction of the use of the personal data.
We no longer need the personal data for the purpose of processing, but you need it to assert, exercise or defend your legal claims; or
If you have objected to the processing pursuant to Art. 21(1) GDPR and it is not yet certain whether the legitimate interests of the data controller override your interests.
4. Right to erasure ("right to be forgotten") (Art. 17 GDPR)
If you request from the data controller to delete your personal data without undue delay, they are required to do so immediately if one of the following applies:
Your data is no longer necessary for the processing purposes for which it was originally collected.
You withdraw your consent and there is no other legal basis for the processing.
You object to the processing and there are no overriding legitimate grounds for the processing, or you object in accordance with Art. 21(2) GDPR.
Your personal data is being processed unlawfully.
The erasure is necessary to comply with a legal obligation under Union law or the law of the Member State to which we are subject.
The personal data was collected in relation to information society services offered in accordance with Article 8(1) GDPR.
Please note that the above reasons do not apply if processing is necessary:
to exercise the right of freedom of expression and information;
to comply with a legal obligation or to perform a task carried out in the public interest and to which we are subject;
for reasons of public interest in the area of public health;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes;
for the establishment, exercise or defence of legal claims.
5. Right to data portability (Art. 20 GDPR)
You have the right to receive your personal data in a structured, commonly used and machine-readable format or to request its transfer to another controller.
6. Right to object to certain data processing (Art. 21 GDPR)
For reasons that arise from your particular situation, you have, at any time, the right to object to the processing of your personal data pursuant to Art. 6(1) (e) or 6(1) (f) GDPR; this also applies to profiling based on these provisions.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.
7. Right to withdraw the consent (Art. 7(3) GDPR)
If you have consented to processing by the controller by means of a corresponding declaration, you have the right to withdraw your consent at any time for the future. The revocation of consent does not affect the legality of the processing carried out on the basis of consent until revocation.
8. Automated decision-making in individual cases, including profiling (Art. 22 GDPR)
You have the right not to be subject to a decision based solely on automated processing, including profiling that will have legal effect or affect you in a similar manner.
9. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, if you believe that the processing of personal data concerning you violates the GDPR. The supervisory authority to which the complaint has been submitted shall inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
The supervisory authority with local jurisdiction for us is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
or
Kavalleriestraße 2-4
40213 Düsseldorf
Telephone: 02 11/384 24-0
Email: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de
V. PROVISION OF THE WEBSITE AND CREATION OF LOG FILES
1. Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the calling device (so-called "log files").
The following data is collected:
- IP address of the user
- Directory protection username
- Date and time of access
- Pages accessed
- Logs
- Status code
- Amount of data transferred
- Referrer
- User agent
- Hostname accessed.
This data is stored in our system's log files. This data is not stored with the user’s other personal data.
2. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. The IP addresses are stored anonymously. To do this, the last one to three digits are removed, i.e. "127.0.0.1" becomes "127.0.0.0". IPv6 addresses are also anonymised.
The data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.
3. Legal basis for data processing
The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 2.
4. Recipients
Our website is hosted exclusively on servers located in Germany by our processor, Mittwald, Mittwald CM Service GmbH & Co.KG (hereinafter referred to as "Mittwald"), Königsberger Str. 4 - 6, 32339 Espelkamp, Germany. Mittwald processes your personal data only on the basis of our instructions and is accordingly bound by data protection agreements within the meaning of Article 28 GDPR.
5. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of collection. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The anonymised IP addresses are stored for 60 days. Information about the directory protection user used is anonymised after one day. Further information regarding the storage of your data can be found at: www.mittwald.de/faq/service-informationen/faq/datenschutz-alles-wichtige-zur-dsgvo
6. Possibility of objection
The collection of data for the provision of the website as well as the storage of data in log files are essential for the operation of the website. The user can object to this. Whether the objection is successful will be determined after evaluating interests. To do so, please send an informal email to info@carcoustics.com.
VI. USE OF COOKIES
1. Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. Cookies contain a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
We use a technically necessary cookie to prevent spam (known as a "captcha") when you interact with certain content on our website, e.g. when you use the contact form. The cookie is designed to check whether data entry is compliant and has not been made by a bot. To do this, the cookie authenticates the behaviour of a website visitor with regard to a wide range of characteristics. This allows personal data to be stored and evaluated, in particular the user's activity (especially mouse movements and which elements have been clicked on) and device and browser information (especially the time, IP address and operating system).
We use cookies on our website that are not technically necessary. Text files that do not solely serve the functionality of the website but also collect other data are considered technically unnecessary cookies. By setting technically unnecessary cookies, the following data is processed:
- Location of the internet user
- Date and time of the website visit
- Customisation of advertisements to the user
- Tracking of surfing behaviour
- Linking website visits to other social media platforms
2. Purpose of data processing
The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. The use of the captcha cookie serves to protect our online presence from misuse, for example from automated access (bots) or spam attacks via our contact forms.
The use of technically not necessary cookies is carried out for the purpose of improving the quality of our website and its content. By setting these cookies, we learn how the website is used and can thus constantly optimise our offer. These cookies serve us particularly for the following purposes:
- Analysis
3. Legal basis for data processing
The legal basis for the processing of personal data using non-technical cookies is Section 25(1) TDDDG in conjunction with Art. 6(1) (a) GDPR.
The legal basis for the processing of personal data using technically necessary cookies is Section 25(2) TDDDG in conjunction with Art. 6(1) (f) GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 2.
4. Duration of storage, right to object, and removal option
Cookies are stored on the user’s computer and transmitted from there to our website. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.
Depending on the browser settings, cookies may be automatically deleted after seven days. This also applies to opt-out cookies that are set to prevent tracking measures.
VII. CONTACT VIA E-MAIL
1. Description and scope of data processing
It is possible to contact us via the e-mail addresses provided on our website. In this case, the personal data transmitted with the e-mail will be stored. The data will be used exclusively for processing the conversation.
2. Purpose of data processing
Your personal data is processed for the purpose of handling the matter communicated in your correspondence and, if necessary, contacting you.
3. Legal basis for data processing
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6(1)(f) GDPR. Our legitimate interest lies in responding appropriately to contact requests. If the email contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of collection. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. A conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been fully resolved.
5. Exercising your rights
If you contact us by e-mail, you can object to the storage of your personal data at any time by sending an e-mail toinfo@carcoustics.com. In such a case, the conversation cannot be continued. In this case, all personal data stored in the course of establishing contact will be deleted.
VIII. CONTACT FORMS
1. Description and scope of data processing
Our website contains contact forms that can be used for electronic communication. If a user makes use of this option, the data entered in the input fields will be transmitted to us and stored.
At the time the message is sent, the following data are stored:
- Email address
- Last name
- First name
- Telephone/mobile number (optional)
- Text message
- Date and time of contact
Reference is made to this privacy policy for the processing of the data.
2. Purpose of data processing
The processing of personal data from the input fields serves solely to handle the contact request or to initiate a contractual relationship.
The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
3. Legal basis for data processing
The legal basis for processing the data transmitted via a contact form is Art. 6(1)(f) GDPR. Our legitimate interest lies in responding appropriately to contact requests. If the contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of collection. For personal data from the contact form input fields, this is the case when the respective conversation with the user has ended. A conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been fully resolved.
5. Exercising your rights
If you contact us via the contact form, you can object to the storage of your personal data at any time by sending an e-mail toinfo@carcoustics.com. In such a case, the conversation cannot be continued. In this case, all personal data stored in the course of establishing contact will be deleted.
VIII. Corporate presence and social media channels
We operate and use company presences in the following social networks:
YouTube, der YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States
On our company page, we provide information and offer YouTube users the opportunity to communicate. If you carry out an action on our YouTube corporate site (e.g. comments, posts, likes, etc.), you may make personal data (e.g. clear name or photo of your user profile) public. However, since we generally or to a large extent have no influence on the processing of your personal data by YouTube, which is jointly responsible for the Carcoustics Shared Services GmbH corporate presence, we cannot provide any binding information on the purpose and scope of the processing of your data.
Our corporate presence in social networks is used for communication and information exchange with (potential) customers. In particular, we use the corporate presence for:
The company website serves purely to provide information about the company and any vacancies within the company.
In this context, publications about the company's presence may include the following content:
- Information about products
- Information about services
- Advertising
Every user is entitled to publish personal data through activities. The legal basis for data processing in this regard is Art. 6 para.1 p.1 lit. a DS-GVO. The data generated by the company website is not stored in our own systems.
At any time, you can object to the processing of your personal data that we collect in the course of your use of our YouTube corporate presence and assert your data subject rights as stated under IV. of this data protection declaration. To do so, send us an informal e-mail to info@carcoustics.com. You can find more information about the processing of your personal data by YouTube and the corresponding objection options here:
IX. APPLICATION BY E-MAIL
1. Scope of processing of personal data
You have the option of applying via our job portal. The job portal can be accessed under the "Career" tab. For all data collected there and functions of the website, you will find a separate privacy policy at https://jobs.carcoustics.com/content/Datenschutz/?locale=de_DE.
You can use the e-mail address provided for specific enquiries or unsolicited applications. If you contact us by e-mail for these purposes, your e-mail address and the data you provide in the e-mail will be transmitted to us and stored.
2. Purpose of data processing
The processing of your personal data is carried out for the purpose of handling the matter communicated in your correspondence or your unsolicited application and, if necessary, contacting you.
3. Legal basis for data processing
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6(1)(f) GDPR. Our legitimate interest lies in responding appropriately to contact enquiries. The legal basis for processing your data from your unsolicited application is the initiation of a contract at the request of the data subject, Art. 6 (1)(b) GDPR and § 26(1)(1) BDSG.
4. Duration of storage
After completion of the application process, the data will be stored for up to six months. Your data will be deleted at the latest after this period has expired. In the event of a legal obligation, the data will be stored in accordance with the applicable provisions.
In other cases, personal data sent by e-mail will be deleted as soon as it is no longer required for the purpose for which it was collected. This is the case when the respective conversation with the user has ended. A conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been fully resolved.
5. Exercising your rights
If you contact us by e-mail or send us your unsolicited application by e-mail, you can object to the processing of your personal data at any time by sending an e-mail to info@carcoustics.com. In such a case, the conversation cannot be continued. In this case, all personal data stored in the course of establishing contact will be deleted.
X. CORPORATE PRESENCE ON SOCIAL AND PROFESSIONAL NETWORKS
We use a company presence on social and professional networks for communication and the exchange of information with (potential) customers. The publications via the company profile may contain the following content:
- Information about products
- Information about services
- Advertising
- Customer contact
- Information about the company
- Reference to job vacancies on the career portal
- Employer branding
We maintain a company presence on the following social and professional networks:
- LinkedIn: LinkedIn Ireland Unlimited Company, Dublin, Ireland (hereinafter referred to as "LinkedIn")
- YouTube: Google Ireland Limited, Dublin, Ireland (hereinafter referred to as "YouTube")
- XING: New Work SE, Hamburg, Germany (hereinafter referred to as "XING")
We provide information on our website and offer LinkedIn / YouTube / XING users the opportunity to communicate. If you perform an action on our LinkedIn / YouTube / XING company profile (e.g. comments, posts, likes, etc.), you may be making personal data (e.g. your real name or photo from your user profile) public. However, as we generally have little or no influence on the processing of your personal data by LinkedIn / YouTube / XING, we cannot make any binding statements about the purpose and scope of the processing of your data.
Every user is free to publish personal data through their activities.
Insofar as we process your personal data to evaluate your online behaviour, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6(1)(a), Art. 7 GDPR.
The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6(1)(f) GDPR. Our legitimate interest in this is to respond to your enquiry in the best possible way and to be able to provide you with the requested information.
If the purpose of the contact is to conclude a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.
You can object to the processing of your personal data that we collect in connection with your use of our company website at any time and assert your rights as a data subject as set out in the "Your rights" section of this privacy policy. To do so, please send us an informal email toinfo@carcoustics.com .
For further information on the processing of your personal data by providers of social/professional networks, please click here:
LinkedIn: https://de.linkedin.com/legal/privacy-policy
YouTube: https://policies.google.com/privacy
XI. HOSTING
The website is hosted on servers by a service provider commissioned by us, Mittwald CM Service GmbH & Co.KG, Königsberger Straße 4-6, 32339 Espelkamp.
The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is:
IP address
Directory protection username
Date
Time
Pages accessed
Logs
Status code
Data volume
Referrer
User agent
Hostname accessed
Further information regarding the processing of log files by the provider can be found here: www.mittwald.de/faq/service-informationen/faq/datenschutz-alles-wichtige-zur-dsgvo
This data is not merged with other data sources. This data is collected on the basis of Art. 6(1)(f) GDPR. Our legitimate interest in processing this data is to display our website without errors and to optimise its functions.
The website server is located in Germany.
XII. YOUTUBE VIDEOS
1. Scope of processing of personal data
We use YouTube videos from Google Ireland Limited, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as "Google"). We use YouTube to embed YouTube videos on our website. If you interact with the embedded YouTube videos and play them with your consent, your browser establishes a connection to the YouTube servers. This may result in personal data being stored and evaluated, including
the user's activity (in particular which pages have been visited and which elements have been clicked on) and
device and browser information (in particular the IP address and operating system).
We have no influence on the content of YouTube's processing activities. If you are logged into your YouTube account during your visit, Google can assign your website visit to this account. By interacting with YouTube, this information is transmitted directly to Google and stored there.
Google has joined the Trans-Atlantic Data Privacy Framework (TDPF; data protection agreement between the EU and the US), which ensures an adequate level of data protection for data processing and does not require the conclusion of standard contractual clauses.
Further information on data processing by Google can be found here: https://policies.google.com/privacy
2. Purpose of data processing
The use of videos on our website serves to improve user-friendliness and to present our online presence in an appealing manner.
3. Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is, in principle, the user's consent in accordance with Art. 6(1)(a) GDPR. Cookies are only set when you press "Play".
4. Duration of storage
Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.
5. Exercising your rights
You can revoke your consent at any time without giving any reason. Revoking your consent does not affect the lawfulness of the processing carried out on the basis of your consent up to the time of revocation.
You can prevent the collection as well as the processing of your personal data by Google by preventing the storage of third-party cookies on your computer, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com) in your browser.
You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de
You can find further information on objection and removal options for Google at: https://policies.google.com/privacy
XIII. GOOGLE TAG MANAGER
1. Description and scope of personal data processing
We use Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google). With Google Tag Manager, tags from Google and third-party services can be managed and bundled and embedded on an online presence. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behaviour, capture the impact of online advertising and social channels, use remarketing and targeting and test and optimise online presences. When a user visits the website, the current tag configuration is sent to the user's browser. It contains instructions on which tags should be triggered.
Further information on Google Tag Manager can be found at https://www.google.com/intl/de/tagmanager/ and in Google's privacy policy: https://policies.google.com/privacy
2. Purpose of data processing
The purpose of processing personal data is to ensure the consolidated and transparent administration as well as the efficient integration of third-party services.
3. Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is, in principle, the user's consent in accordance with Art. 6(1)(a) GDPR.
4. Duration of storage
Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law. According to Google, advertising data in server logs are anonymized by deleting parts of the IP address and cookie information after 9 and 18 months, respectively.
5. Exercising your rights
You can prevent the collection as well as the processing of your personal data by Google by preventing the storage of third-party cookies on your computer, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com) in your browser.
You can also prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout? hl=en
You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de
You can find further information on objection and removal options for Google at: https://policies.google.com/privacy
XIV. GOOGLE ADS, INCL. GOOGLE ADS REMARKETING
1. Scope of processing of personal data
We use Google Ads, an online advertising programme of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google Ads / Google). We use this service to place advertisements. Google Ads is used to retarget visitors to the website for advertising purposes via Google Ads. Google Ads can be used to create target groups ("similar target groups") that have, for example, accessed certain pages. This allows to identify the user on other websites and display targeted advertising, i.e. personalised advertising. Google places a cookie on the user's computer for this purpose. These cookies can be used for both personalised and non-personalised advertising. This means that personal data is stored and evaluated, in particular the user's activity (especially which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and operating system), data about the advertisements displayed (in particular which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (in particular pseudonymised user IDs).
Further information on the processing of data by Google, if you have consented to this via our Consent Manager, can be found here: policies.google.com/privacy
2. Purpose of data processing
We only receive information about the total number of users who responded to our advertisement. No information is passed on that could be used to identify you. The use of this information is not for tracking purposes.
3. Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is generally the user's consent in accordance with Art. 6(1)(a) GDPR.
4. Duration of storage
Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.
5. Exercising your rights
You can prevent the collection as well as the processing of your personal data by Google by preventing the storage of third-party cookies on your computer, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com) in your browser.
You can also prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout? hl=en
You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de
You can find further information on objection and removal options for Google at: https://policies.google.com/privacy
XV. GOOGLE ANALYTICS (GA4) INCLUDING GOOGLE ANALYTICS REMARKETING
1. Scope of personal data processing
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google Analytics / Google).
By using Google Analytics, we examine, among other things, the origin of visitors, how long they stay on individual pages and their use of search engines. This allows us to better monitor the success of advertising campaigns. It also enables us to evaluate the use of our online presence in order to compile reports on your activities and to use other Google services related to the use of our online presence and the Internet.
Google places cookies on your device. During your visit, user behaviour is recorded in the form of "events". This allows personal data to be stored and evaluated, including:
- First visit to the website
- Interaction with the website, usage path
- Clicks on external links
- Video usage
- File downloads
- Ad impressions and clicks
- Scroll behaviour (if scrolled to the bottom of the page)
- Searches on the website
- Language selection
- Page visits
- Location (region)
- Your IP address (in abbreviated form)
- Technical information about your browser and the devices you use (e.g. language settings, screen resolution)
- Your internet service provider
- Referrer URL
IP truncation is enabled by default in GA 4. This means that your IP address will be truncated by Google within the member states of the European Union or other signatory states to the Agreement on the European Economic Area. In exceptional cases, the full IP address is only transferred to a Google server in the USA and truncated there. Google states that the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
In addition, we use Google Analytics Remarketing, whereby the data collected and evaluated about you is used to display targeted advertising to you.
Further information on the processing of data by Google can be found here: https://policies.google.com/privacy
2. Purpose of data processing
We use GA 4, including Google Analytics Remarketing, to evaluate the use of our online presence and to generate reports on the activities on our website. The reports are used to analyse the performance of our website and to target advertising to people who have already expressed an initial interest by visiting our website.
3. Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is generally the user's consent in accordance with Art. 6(1)(a) GDPR.
4. Duration of storage
Your personal data will be deleted after a maximum of 14 months.
5. Exercising your rights
You can prevent the collection as well as the processing of your personal data by Google by preventing the storage of third-party cookies on your computer, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com) in your browser.
You can also prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout? hl=en
You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de
You can find further information on objection and removal options for Google at: https://policies.google.com/privacy
XVI. CHANGES TO THIS PRIVACY POLICY
We reserve the right to make changes to this privacy policy at any time. The privacy policy is updated regularly and all changes are automatically published on our website.
This privacy policy was created with the support of DataGuard.