Privacy Policy

1. DATA PRIVACY OVERVIEW

General information
The following is a brief overview of what happens to your personal data when you visit this website. Personal data includes all data that can be used to identify you personally. Detailed information on data protection can be found in our Data Privacy Policy listed below this section.

Data collection on this website
Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the “Information on the controller” section of this Data Privacy Policy.

How do we collect your data?
Your data is collected in two ways. First, it is collected when you provide it to us. This may include data that you enter into a contact form, for example. Second, our IT systems collect data automatically or with your consent when you visit the website. This is primarily technical data (e.g., Internet browser, operating system or time of page view). This data is collected automatically as soon as you visit this website.

How do we use your data?
Some of the data is collected to ensure a seamless user experience on this website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right at any time to obtain, free of charge, information about the origin, recipient and purpose of your stored personal data. Additionally, you have the right to request the correction or erasure of this data. If you have given consent to the processing of your data, you may withdraw this consent at any time with future effect. You also have the right, under certain conditions, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time if you have further questions on this or on the subject of your personal data.

Analytics and third-party analysis tools
When you visit this website, it is possible to statistically analyze your browsing behavior. Analytics software programs are the primary tools used for this purpose.

2. HOSTING

Our website is hosted by Mittwald Service GmbH & Co. KG, located at Königsberger Straße 4-6, 32339 Espelkamp (hereinafter referred to as MITTWALD). When you visit our website, MITTWALD collects various log files, including your IP addresses. For details, please refer to MITTWALD’s privacy policy: https://www.mittwald.de/datenschutz

The use of MITTWALD is based on Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring our website is presented as reliably as possible. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) of the German Telecommunications-Telemedia Data Protection Act (TTDSG), insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be withdrawn at any time.

3. AGENERAL NOTES AND MANDATORY INFORMATION

Data Privacy Policy
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with data protection laws and regulations as well as this Data Privacy Policy.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This Data Privacy
Policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note: Internet-based data transmission (e.g., email communication) may not be secure, which makes it impossible to always guarantee seamless
protection of your data against access by third parties.

Notice regarding the data controller
The data controller for this website is

MARTIN WALTER Ultraschalltechnik AG
Hardtstraße 13
D-75334 Straubenhardt, Germany

Phone +49 7082 7915-0
E-Mail: info@walter-ultraschalltechnik.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage period
Unless a more specific storage period has been specified in this Data Privacy Policy, your personal data will remain with us until the purpose for data processing no longer exists. If you assert a justified request for erasure or withdraw consent to data processing, your data will be erased unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the data will be erased once these reasons no longer apply.

General information on the legal basis for data processing on this website
If you have consented to data processing, we process your personal data based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, provided special categories of data are processed according to Art. 9(1) GDPR. In the case of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your end device (e.g., via device fingerprinting), data processing is additionally based on § 25(1) TTDSG. This consent can be withdrawn at any time. If your data is required for the performance of a contract or for carrying out pre-contractual measures, we process your data based on Art. 6(1)(b) GDPR. Furthermore, we process your data if it is necessary to fulfill a legal obligation based on Art. 6(1)(c) GDPR. Data processing may also occur for the purpose of pursuing our legitimate interest according to Art.

Data Protection Officer
We have appointed a Data Protection Officer for our company.

Questions for our Data Protection Officer:
If you have any questions related to data privacy, please send us an email or contact our organization’s Data Protection Officer directly:

Note on data transfer to the USA and other third countries
Among others, we use tools from companies based in the USA or other third countries that are not considered secure under data protection law. When these tools are active, your personal data may be transferred to and processed in these third countries. We also point out that these countries do not guarantee a level of data protection comparable to that of the EU. For example, US companies are obliged to release personal data to security authorities without offering you as the data subject any option to take legal action to prevent this. As such, it cannot be ruled out that US authorities, such as intelligence agencies, may process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.

Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)
IF THE DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE SPECIFIC LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS CONNECTED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to them infringes the GDPR.

Right to data portability
You have the right to receive your personal data, which we process on the basis of your consent or in fulfillment of a contract, in a structured, commonly used and machine-readable format. Furthermore, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

SSL and TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the change in the address line of the browser from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Access, erasure and rectification
Within the scope of applicable statutory provisions you have the right to obtain free of charge and at any time information about the personal data we store, its source and recipient, the purpose of data processing and, in some cases, the right to the rectification, blocking or erasure of this data. You can contact us at any time if you have further questions on the subject of your personal data.

Right to restriction of processing
You have the right to request the restriction of processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing applies in the following cases:

a) If you contest the accuracy of your personal data stored by us, we usually need time to verify this. During the time it takes to verify accuracy, you have the right to request the restriction of processing of your personal data.

b) If the processing of your personal data has been/is unlawful, you can request the restriction of data processing instead of erasure.

c) If we no longer need your personal data, but you require it in order to exercise, defend or assert legal claims, you have the right to request the restriction of processing of your personal data instead of erasure.

d) If you have objected to processing pursuant to Art. 21(1) GDPR, it must be determined whether our legitimate interests override yours. As long as it has not been determined whose interests prevail, you have the right to request the restriction of processing of your personal data.

If you have restricted the processing of your personal data, this data may – with the exception of data storage – only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State

Objection to promotional emails
The operator of this website hereby objects to any use of the contact information published under the obligation to provide a legal notice (Impressum) for the purpose of sending unsolicited advertising or any other informational materials. Furthermore, the operator of this website expressly reserves the right to take legal action in the event of the unsolicited sending of advertising information, such as spam emails.

4. DATA COLLECTION ON THIS WEBSITE

Cookies
Our website uses “cookies”. Cookies are small text files that do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.

In some cases, cookies from third-party companies may also be stored on your device when you visit our site (third-party cookies). These enable us or you to use certain services offered by the third-party company (e.g., cookies for processing payment services).

Cookies serve various functions. Many cookies are technically necessary, as certain website features would not function without them (e.g., the shopping cart function or video displays). Other cookies are used to analyze user behavior or display advertising.

Cookies required for the electronic communication process, for providing certain functions you have requested (e.g., for the shopping cart function), or for optimizing the website (e.g., cookies for measuring the web audience) (necessary cookies), are stored on the basis of Art. 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the seamless, optimized provision of its services. If consent has been requested for the storage of cookies and similar recognition technologies, the processing is carried out exclusively on the basis of this consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG); this consent can be withdrawn at any time.

You can adjust your browser settings to inform you in advance whenever cookies are set and allow cookies on a case-by-case basis only, block your browser from accepting cookies in certain cases or block all cookies in general and automatically delete cookies when you close your browser. Disabling cookies may limit the functionality of this website.

If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately in this Data Privacy Policy and, if necessary, request your consent.

Consent with Usercentrics
This website uses consent technology provided by Usercentrics to obtain your consent for storing certain cookies on your device or for using specific technologies and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, website: https://usercentrics.com/ (hereinafter “Usercentrics”)..

When you visit our website, the following personal data is transmitted to Usercentrics:

Your consent(s) or the withdrawal of your consent(s)

Your IP address

Information about your browser

• Information about your device

Time of your visit to the website

Furthermore, Usercentrics stores a cookie in your browser to assign any instances in which you have given or withdrawn your consent. Data collected in this way is stored until you ask us to erase it, until you remove the Usercentrics cookie yourself or until the purpose for data storage no longer applies. Mandatory legal retention obligations remain unaffected.

Usercentrics is employed to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6(1)(c) GDPR.

Order processing
We have entered into a Data Processing Agreement (DPA) with the aforementioned provider. This is a contract prescribed by data protection law, which ensures that the provider only processes the personal data of our website users in accordance with our instructions and in compliance with the GDPR.

Server log files
The website provider automatically collects and stores information in server log files that your browser automatically transmits to us. This includes:

The browser type and browser version

The operating system used

The referrer URL

The host name of the accessing computer

The time of the server request

The IP address

This data is not combined with data from other sources.

Data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the seamless presentation and optimization of its website, and the server log files must be collected for this purpose

Contact form
When you send us a request via our contact form, we save the data you enter into the request form including the contact information in order to process your inquiry and in the event follow-up questions arise. We will not disclose this data to third parties without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of steps prior to entering into a contract. In all other cases, the processing is for the purpose of pursuing our legitimate interest in effectively processing the inquiries addressed to us (Art. 6(1)(f) GDPR) or based on your consent (Art. 6(1)(a) GDPR) if it has been requested; consent can be withdrawn at any time.

The data you enter into the contact form will remain with us until you request erasure, withdraw your consent for storage or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Inquiry by email, telephone or fax
If you contact us by email, telephone or fax, your inquiry, including all resulting personal data (such as name, inquiry), will be stored and processed by us for the purpose of handling your request. We will not disclose this data to third parties without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of steps prior to entering into a contract. In all other cases, the processing is for the purpose of pursuing our legitimate interest in effectively processing the inquiries addressed to us (Art. 6(1)(f) GDPR) or based on your consent (Art. 6(1)(a) GDPR) if it has been requested; consent can be withdrawn at any time.

The data you transfer to us in contact requests will remain with us until you request its erasure, withdraw your consent for storage or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions – in particular legal retention periods – remain unaffected.

5. SOCIAL MEDIA

eRecht24 Safe Sharing Tool
The content on this website can be shared on social networks such as Facebook, Twitter „X“, etc. in compliance with data protection regulations. This site uses the eRecht24 Safe Sharing Tool for this purpose. This tool only establishes direct contact between the networks and users when the user actively clicks on one of these buttons. Clicking the button constitutes consent within the meaning of Art. 6(1)(a) GDPR and § 25(1) TTDSG. This consent can be withdrawn at any time with future effect.

This tool does not automatically transmit user data to the operators of these platforms. If the user is logged into one of the social networks, using the social buttons for Facebook, Twitter „X“, etc. will display an information window where the user can confirm the text before sending it..

Our users can share the content of this page on social networks in compliance with data protection regulations without the operators of the networks creating complete browsing profiles.

5.1 Use and integration of Instagram
The controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos, as well as redistribute such data on other social networks.

The operating company of the Instagram services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.

Each time a data subject accesses one of the individual pages of this website operated by the data controller and containing an Instagram component (Insta-Button), the Internet browser on the data subject’s information technology system is automatically prompted by the respective Instagram component to download a representation of the corresponding Instagram component. As part of this technical process, Instagram becomes aware of which specific subpage of our website is visited by the data subject.

If the data subject is simultaneously logged into Instagram, Instagram recognizes with each visit to our website by the data subject and throughout the duration of the respective stay on our website, which specific subpage the data subject is visiting. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the data subject. If the data subject clicks on one of the Instagram buttons integrated on our website, the data and information transmitted with it are assigned to the personal Instagram user account of the data subject and stored and processed by Instagram.

Instagram always receives information via the Instagram component whenever the data subject visits our website, provided that the data subject is logged into Instagram at the time of accessing our website. This occurs regardless of whether the data subject clicks on the Instagram component or not. If the data subject does not want such information to be transmitted to Instagram, they can prevent this by logging out of their Instagram account before accessing our website.

For further information, please refer to Instagram’s help page here: help.instagram.com/155833707900388 and Instagram’s privacy policy here: www.instagram.com/about/legal/privacy/.

5.2 Use and integration of Facebook
The controller has integrated components of the company Facebook on this website. Facebook is a social network.

A social network is an Internet platform that serves as a social meeting point or an online community that typically allows users to communicate and interact with each other in a virtual space. It can serve as a platform for exchanging opinions and experiences or enable individuals or businesses to share personal or company-related information. Facebook, for example, allows users of the social network to create personal profiles, upload photos and connect with others through friend requests, among other features.

The operating company of Facebook is Facebook, Inc., located at 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject resides outside the USA or Canada, the data controller is Facebook Ireland Ltd., located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Each time a data subject accesses one of the individual pages of this website operated by the data controller and containing a Facebook component (Facebook plug-in), the Internet browser on the data subject’s information technology system is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component. An overview of all Facebook plug-ins can be accessed at developers.facebook.com/docs/plugins/. As part of this technical process, Facebook becomes aware of which specific subpage of our website is visited by the data subject.

If the data subject is simultaneously logged into Facebook, Facebook recognizes with each visit to our website by the data subject and throughout the duration of the respective stay on our website, which specific subpage of our website the data subject is visiting. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated on our website, such as the “Like” button, or if the data subject posts a comment, Facebook assigns the data and information transmitted with it to the personal Facebook user account of the data subject and stores this personal data.

Facebook always receives information via the Facebook component whenever the data subject visits our website, provided that the data subject is logged into Facebook at the time of accessing our website. This occurs regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not want such information to be transmitted to Facebook, they can prevent this by logging out of their Facebook account before accessing our website.

The data policy published by Facebook, accessible at https://www.facebook.com/privacy/policy, provides information about the collection, processing and use of personal data by Facebook. Additionally, it explains the privacy protection settings that Facebook offers to data subjects. Furthermore, various applications are available that allow data transmission to Facebook to be suppressed. Such applications can be used by the data subject to prevent data transmission to Facebook.

5.3 Use and integration of YouTube
The use of videos from the video portal “YouTube” provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”) on our website is based on Art. 6(1)(f) GDPR, whereby our interest lies in the seamless integration of the videos and the visually appealing design of our website.

We use Google’s “enhanced privacy mode” option for this purpose.

When you visit a page that contains an embedded video, a connection is established to Google’s servers, and the content is displayed on the website by notifying your browser.

According to Google, in “extended privacy mode”, your data – including which of our web pages you have visited and device-specific information, including your IP address – will only be transmitted to the YouTube server in the USA when you watch the video. By clicking on the video, you consent to this transmission.

If you are logged into Google at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website.

In some cases, information is transmitted to the parent company Google Inc. based in the USA, to other Google companies and to external Google partners, any of which may be located outside the European Union. Google uses standard contractual clauses approved by the European Commission for this purpose and relies on the adequacy decisions issued by the European Commission regarding certain countries.

YouTube videos are not loaded without your consent, a “2-click solution” is implemented.
Data may only be transmitted to Google after you have clicked on the link to activate YouTube.

For further information on data protection related to YouTube, please refer to Google’s privacy policy.

5.4. Communication via WhatsApp

For communication with our customers and other third parties, we use the instant messaging service WhatsApp. The provider is WhatsApp Ireland Limited, located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Communication takes place using end-to-end encryption (peer-to-peer), which prevents WhatsApp or any third parties from gaining access to the contents of the communication. However, WhatsApp does have access to metadata generated during the communication process (e.g., sender, recipient and timestamp). We would also like to point out that WhatsApp states that it shares the personal data of its users with its parent company Meta, which is based in the USA. For further information on data processing, please refer to WhatsApp’s privacy policy athttps://www.whatsapp.com/legal/#privacy-policy.

The use of WhatsApp is for the purpose of pursuing our legitimate interest in communicating as quickly and effectively as possible with customers, prospects and other business and contractual partners, and the legal basis is Art. 6(1)(f) GDPR. If consent has been obtained, data processing is carried out solely on the basis of this consent; it can be withdrawn at any time with future effect.

The contents of communication exchanged between and on WhatsApp will remain with us until you request erasure, withdraw your consent for storage or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

We use the “WhatsApp Business” version of WhatsApp.

Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found herehttps://www.whatsapp.com/legal/business-data-transfer-addendum.

We have configured our WhatsApp accounts to prevent automatic synchronization with the address book on the smartphones in use.

We have concluded a data processing agreement (DPA) with the aforementioned provider.

6. ANALYIC TOOLS AND ADVERTISING

Use of Matomo
We use the open-source analytics tool Matomo (formerly Piwik) to better understand the interests of visitors to our website and whether they can navigate them easily. This tool does not use cookies to distinguish individual users. The legal basis for the use of Matomo is Art. 6 GDPR.

Matomo is hosted on our server, and data is not shared with third parties. In our configuration, IP addresses are anonymized by six digits, making it impossible to draw any conclusions about the visitor’s actual IP address. Recurring visitors cannot be identified.

If you prefer not to have your visits recorded on our websites, you can activate the “Do not track” option in your browser, and Matomo will not collect any data from you. Clicking this allows you to disable statistics concerning your visit. This action places an opt-out cookie in your browser that disables tracking. If you wish to avoid tracking in general, enable the “Do not track” function in your browser.

In addition, you can exclude yourself from being tracked on a particular page by using the Matomo opt-out option.

Data processing agreement
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities in our use of Google Analytics.

Google Ads
We use Google Ads. Google Ads is an online advertising program by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display advertisements on the Google search engine or on third-party websites when the user enters specific search terms into Google (keyword targeting). In addition, targeted advertisements can be displayed based on user data available to Google (e.g., location data and interests) (audience targeting). As the website operator, we can quantitatively evaluate this data by analyzing, for example, which search terms led to the display of our advertisements and how many ads resulted in corresponding clicks.

The use of Google Ads is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in marketing its services and products as effectively as possible.

Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: https://policies.google.com/privacy/frameworks and here: https://privacy.google.com/businesses/controllerterms/mccs/.

Google Conversion-Tracking
This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Conversion Tracking enables Google and us to ascertain whether the user has performed certain actions. For instance, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased most frequently. This information is used to compile conversion statistics. We learn the total number of users who have clicked on our advertisements and the actions they have performed. We do not receive any information that allows us to personally identify the user. Google itself uses cookies or similar recognition technologies for identification purposes.

The use of Google Conversion Tracking is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising. If consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be withdrawn at any time.

For further information on Google Conversion Tracking, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=de.

7. PLUGINS AND TOOLS

YouTube with enhanced privacy
This website embeds videos from YouTube. The operator of these pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in enhanced privacy mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch a video. However, enhanced privacy mode does not necessarily prevent the sharing of data with YouTube partners. Thus, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.

As soon as you start a YouTube video on this website, a connection to YouTube’s servers is established. This informs the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after starting a video, YouTube can store various cookies on your device or employ comparable recognition technologies (e.g., device fingerprinting). This allows YouTube to obtain information about visitors to this website. This information is used, among other things, to compile video statistics, improve user-friendliness and prevent fraud attempts.

It is possible that starting a YouTube video may trigger further data processing operations over which we have no control.

YouTube is used for the purpose of pursuing our interest in ensuring the content we offer online is appealing to users. This constitutes a legitimate interest within the meaning of Art. 6 (1)(f) GDPR. If corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be withdrawn at any time

For further information on data protection at YouTube, please refer to their privacy policy at: https://policies.google.com/privacy?hl=de.

Google Web Fonts (local Hosting)
This site uses “Web Fonts” provided by Google for the uniform display of fonts. Google Fonts are installed locally. Consequently, no connection is made to Google’s servers.

For further information on Google Web Fonts, please refer to https://developers.google.com/fonts/faq and Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Google Maps
This site utilizes the mapping service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Your IP address must be saved in order to use the Google Maps functions. This information is typically transferred to a Google server in the USA and stored there. The provider of this site has no control over this data transfer. When Google Maps is enabled, Google may use Google Web Fonts for the purpose of uniform font display. Upon accessing Google Maps, your browser loads the required Web Fonts into your browser cache to display texts and fonts correctly.

Google Maps is used for the purpose of pursuing our interest in ensuring the content we offer online is presented in an appealing way and that the locations specified on our website can be easily found. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be withdrawn at any time.

Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and here: https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For further information on how user data is handled, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=de.

8. ECOMMERCE AND PAYMENT PROVIDERS

(Customer and contract data) processing
We collect, process and use personal data only to the extent necessary for establishing, designing the content of or modifying the legal relationship (inventory data). This is based on Art. 6(1)(b) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process and use personal data about the use of this website (usage data) only to the extent necessary to enable the user to utilize the service or to pay for it.

Customer data collected will be erased upon completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

9. OWN SERVICES

Handling of applicant data
We offer you the opportunity to apply for employment with us (e.g., via email, post or online application form). In the following, we inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that your data will be collected, processed and used in accordance with applicable data protection regulations and all other legal provisions, ensuring strict confidentiality of your data.

Scope and purpose of data collection
When you submit an application to us, we process your associated personal data (e.g., contact and communication data, application documents, notes taken during job interviews, etc.) where necessary for hiring decisions. The legal basis for this is § 26 of the German Federal Data Protection Act (BDSG) (“Data processing for employment-related purposes”), Art. 6(1)(b) GDPR (“Processing necessary for the performance of a contract”) and – if you have granted consent – Art. 6(1)(a) GDPR. Consent can be withdrawn at any time.

Your personal data is shared within our company solely with individuals involved in processing your application.

If your application is successful, the data you have submitted will be stored in our data processing systems for the purpose of carrying out the employment contract, based on § 26 BDSG and Art. 6(1)(b) GDPR.

Data retention period
If we are unable to offer you a position, you refuse a job offer or you withdraw your application, we reserve the right, based on our legitimate interests (Art. 6(1)(f) GDPR), to retain the data you have provided for up to six months following the conclusion of the application process (refusal or withdrawal of the application). Afterwards, the data will be erased and the physical application documents destroyed. This retention is particularly for the purpose of providing evidence in case of a legal dispute. If it becomes apparent that the data will be needed after the expiration of the six-month period (e.g., due to an impending or ongoing legal dispute), erasure will only occur once the need for further retention no longer exists.

Data may also be stored for longer if you have granted your consent (Art. 6(1)(a) GDPR) or if statutory retention obligations prevent erasure.

USE OF Matomo

(1) This website uses the web analysis service Matomo to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offering and make it more interesting for you as a user. The legal basis for the use of Matomo is Art. 6 Para. 1 S. 1 lit. f GDPR..

(2) This website uses Matomo with the 'AnonymizeIP' extension. This means that IP addresses are processed in a truncated form, thereby excluding direct identification of individuals. The IP address transmitted by your browser via Matomo is not merged with any other data collected by us.

(3) The Matomo program is an open-source project. For third-party privacy information, please refer to matomo.org/privacy-policy/.