Datenschutzerklärung | PartInspector

Privacy Policy

We are delighted by your interest in our company. Data protection is a particularly high priority for the management of Mark3D GmbH. As a rule, you can use the Mark3D GmbH website without providing any personal data. However, if a data subject wishes to use special services offered by our company through our website, processing of personal data may be required. Where processing personal data is necessary and there is no legal basis for doing so, we generally obtain the data subject's consent.

Personal data such as a data subject’s name, address, email address, or telephone number is always processed in accordance with the General Data Protection Regulation and the country-specific data protection provisions applicable to Mark3D GmbH. Through this privacy policy, our company aims to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. This privacy policy also explains the rights to which data subjects are entitled.

As the data controller, Mark3D GmbH has implemented numerous technical and organizational measures to ensure the most complete protection possible of personal data processed through this website. However, internet-based data transfers may inherently have security vulnerabilities, meaning absolute protection cannot be guaranteed. For this reason, any data subject is free to send us personal data by other means, for example by telephone.

1. Definitions

The privacy policy of Mark3D GmbH is based on the terminology used by the European legislator when adopting the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand for the public, as well as for our customers and business partners. To ensure this, we would first like to explain the terminology used.

In this privacy policy, we use the following terms, among others:

a) personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter the “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.
b) data subject
Data subject means any identified or identifiable natural person whose personal data is processed by the controller.
c) Processing
Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collecting, recording, organizing, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transmission, disseminating or otherwise making available, aligning or combining, restricting, erasing or destroying.
d) Restriction of processing
Restriction of processing means marking stored personal data with the aim of limiting its future processing.
e) Profiling
Profiling means any form of automated processing of personal data consisting of the use of that data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s job performance, financial situation, health, personal preferences, interests, reliability, behavior, location or movements.
f) Pseudonymization
Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
g) Controller or data controller
A controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing personal data. Where the purposes and means of such processing are determined by Union law or the law of a Member State, the controller or the specific criteria for its designation may be provided for by Union law or the law of the Member State.
h) Processor
A processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
i) Recipients
A recipient is a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether or not it is a third party. However, public authorities that may receive personal data in the course of a specific inquiry under Union law or the law of a Member State are not considered recipients.
j) third party
A third party is a natural or legal person, public authority, agency or other body, other than the data subject, controller, processor, and persons authorized to process personal data under the direct authority of the controller or processor.
k) Consent
Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes, in the form of a statement or another clear affirmative action, by which the data subject signifies agreement to the processing of personal data relating to them.

2. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union, and other provisions relating to data protection is:

Mark3D GmbHRodenbacher Strasse 1535708 Haiger

GermanyTel.: 07361 63396 00E-Mail: info@mark3d.deWebsite: www.mark3d.de

3. Cookies

The Mark3D GmbH website uses cookies. Cookies are text files that are placed and stored on a computer system via an internet browser.

Numerous websites and servers use cookies. Many cookies contain what is known as a cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters that allows websites and servers to associate the cookie with the specific internet browser in which it is stored. This enables the websites and servers visited to distinguish the individual browser of the person concerned from other internet browsers that contain different cookies. A specific internet browser can be recognized and identified by its unique cookie ID.

By using cookies, Mark3D GmbH can provide users of this website with more user-friendly services that would not be possible without setting cookies.

Cookies can be used to optimize the information and offers on our website for the user. As mentioned above, cookies enable us to recognize visitors to our website. This recognition is intended to make our website easier to use. For example, users of a website that uses cookies do not have to enter their login details again each time they visit, because the website and the cookie stored on the user’s computer take care of this. Another example is the online shop shopping cart cookie. The online shop uses a cookie to remember the items a customer has added to their virtual shopping cart.

The data subject can prevent our website from placing cookies at any time by adjusting their web browser settings and can thereby permanently opt out of cookies. Cookies that have already been placed can also be deleted at any time using a web browser or other software. This is possible in all common web browsers. If the data subject disables cookies in their web browser, some features of our website may not be fully available.

4. Collection of general data and information

Each time a data subject or an automated system visits the Mark3D GmbH website, the site collects a range of general data and information. This general data and information is stored in the server’s log files. The following may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (known as the referrer), (4) the subpages accessed on our website through an accessing system, (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) other similar data and information used to protect our information technology systems in the event of an attack.

When using this general data and information, Mark3D GmbH does not draw any conclusions about the data subject. Instead, this information is needed to (1) deliver the content of our website correctly, (2) optimize our website content and advertising, (3) ensure the continued functionality of our information technology systems and website technology, and (4) provide law enforcement authorities with the information they need to prosecute cyberattacks. Mark3D GmbH therefore analyzes this anonymously collected data and information for statistical purposes and to improve data protection and security within our company, ultimately ensuring an optimal level of protection for the personal data we process. Anonymous server log file data is stored separately from all personal data provided by a data subject.

5. Registration on our website

The person concerned may register on the data controller’s website by providing personal data. The personal data transmitted to the data controller is determined by the relevant input form used for registration. The personal data entered by the person concerned is collected and stored solely for the data controller’s internal use and its own purposes. The data controller may arrange for the data to be disclosed to one or more processors, such as a parcel delivery service, which will also use the personal data solely for internal purposes attributable to the data controller.

When a person registers on the website of the controller, the IP address assigned to that person by their Internet service provider (ISP), as well as the date and time of registration, are also stored. This data is stored because it is the only way to prevent misuse of our services, and, where necessary, to help investigate crimes. Accordingly, storing this data is necessary to protect the controller. This data is not generally disclosed to third parties unless there is a legal obligation to do so or disclosure is required for law enforcement purposes.

The registration of the data subject, who voluntarily provides personal data, enables the controller to offer the data subject content or services that, due to their nature, can only be offered to registered users. Registered users may amend the personal data provided during registration at any time or request that it be deleted in full from the controller's records.

At any time, the controller will provide each data subject, upon request, with information about which personal data concerning them is stored. The controller will also correct or erase personal data at the data subject’s request or upon their notification, provided there are no statutory retention obligations to the contrary. All employees of the controller are available to the data subject as contacts in this regard.

6. Newsletter subscription

The Mark3D GmbH website allows users to subscribe to our company newsletter. The personal data transmitted to the controller when ordering the newsletter can be seen in the input form used for this purpose.

Mark3D GmbH regularly informs its customers and business partners about company offers by newsletter. In principle, the data subject can only receive our company's newsletter if (1) they have a valid email address and (2) they have registered to receive the newsletter. For legal reasons, a confirmation email is sent using the double opt-in procedure to the email address first provided by a data subject for newsletter delivery. This confirmation email verifies that the owner of the email address, as the data subject, has authorized receipt of the newsletter.

When signing up for the newsletter, we also store the IP address assigned by the Internet Service Provider (ISP) to the computer system used by the data subject at the time of registration, as well as the date and time of registration. This data is collected to help us trace any (possible) misuse of the data subject’s email address at a later date, and therefore serves to protect the controller’s legal interests.

The personal data collected when someone subscribes to the newsletter is used exclusively to send our newsletter. Newsletter subscribers may also be notified by email if this is necessary to operate the newsletter service or manage a subscription, for example in the event of changes to the newsletter service or technical changes. Personal data collected for the newsletter service is not disclosed to third parties. The person concerned may unsubscribe from our newsletter at any time. They may also withdraw their consent to the storage of personal data provided for the purpose of receiving the newsletter at any time. Each newsletter contains a link for withdrawing consent. The person concerned may also unsubscribe from the newsletter at any time directly on the data controller’s website or notify the data controller in another way.

7. Newsletter tracking

The Mark3D GmbH newsletters contain so-called tracking pixels. A tracking pixel is a tiny graphic embedded in emails sent in HTML format to enable log file recording and analysis. This makes it possible to statistically evaluate the success or failure of online marketing campaigns. Using the embedded tracking pixel, Mark3D GmbH can tell whether and when an email was opened by a data subject and which links in the email they clicked.

The personal data collected through tracking pixels in the newsletters is stored and evaluated by the controller to optimise newsletter delivery and better tailor the content of future newsletters to the data subject’s interests. This personal data is not shared with third parties. Data subjects may withdraw at any time the separate declaration of consent given via the double opt-in procedure. Following withdrawal, the controller will delete this personal data. Mark3D GmbH automatically treats unsubscribing from the newsletter as a withdrawal of consent.

8. Contact options on the website

Due to legal requirements, the Mark3D GmbH website provides information that enables users to contact our company quickly by electronic means and communicate with us directly. This also includes a general email address. If a person contacts the data controller by email or through a contact form, the personal data provided by that person is automatically stored. Personal data provided voluntarily to the data controller is stored for the purpose of processing the inquiry or contacting the person concerned. This personal data is not disclosed to third parties.

9. Comment feature on the website blog

On a blog hosted on the controller’s website, Mark3D GmbH gives users the opportunity to leave individual comments on blog posts. A blog is a website portal, generally accessible to the public, where one or more people, known as bloggers or web bloggers, post articles or share thoughts in so-called blog posts. Blog posts can generally be commented on by third parties.

If a data subject posts a comment on the blog published on this website, the comment, the time it was submitted and the username (pseudonym) chosen by the data subject are stored and published. The IP address assigned to the data subject by their internet service provider (ISP) is also recorded. The IP address is stored for security reasons and in case the data subject violates the rights of third parties or posts unlawful content in a comment. This personal data is therefore stored in the controller’s legitimate interests, so that it can, if necessary, defend itself in the event of a legal violation. This personal data is not shared with third parties unless disclosure is required by law or serves the controller’s legal defense.

10. Subscribing to blog comments on the website

In general, comments posted on the Mark3D GmbH blog can be subscribed to by third parties. In particular, commenters may subscribe to comments posted after their comment on a specific blog post.

If a data subject chooses to subscribe to comments, the controller will send an automatic confirmation email to verify, using the double opt-in procedure, that the owner of the specified email address has chosen this option. The comment subscription may be cancelled at any time.

11. Routine erasure and blocking of personal data

The controller processes and stores the data subject's personal data only for as long as necessary to achieve the purpose for which it was collected, or as required by the European legislator or another legislator in laws or regulations to which the controller is subject.

If the purpose for storing the data no longer applies, or if a retention period prescribed by the European directive and regulation maker or another competent legislator expires, the personal data shall be routinely blocked or deleted in accordance with statutory requirements.

12. Rights of the data subject

a) Right to confirmation
Every data subject has the right, granted by the European legislator, to obtain confirmation from the controller as to whether personal data concerning them is being processed. To exercise this right to confirmation, the data subject may contact an employee of the controller at any time.
b) Right of access
Any person affected by the processing of personal data has the right, granted by the European legislator, to obtain from the controller, free of charge and at any time, information about the personal data stored about them and a copy of that information. The European legislator has also granted the data subject the right to access the following information:
the purposes of processing
the categories of personal data being processed
the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organizations
if possible, the planned period for which the personal data will be stored or, if that is not possible, the criteria used to determine that period
the existence of the right to request the controller to rectify or erase personal data concerning them, or to restrict its processing, or the right to object to such processing
the right to lodge a complaint with a supervisory authority
where the personal data has not been obtained from the person concerned: all available information about the source of the data
the existence of automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and intended consequences of such processing for the data subject
The person concerned also has the right to know whether personal data has been transferred to a third country or an international organization. If so, they also have the right to be informed of the appropriate safeguards relating to the transfer.
If a person wishes to exercise this right of access, they may contact an employee of the data controller at any time.
c) Right to rectification
Every data subject affected by the processing of personal data has the right granted by the European directive and regulation maker to demand the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary statement.
A data subject wishing to exercise this right to rectification may contact an employee of the controller at any time.
d) Right to erasure (right to be forgotten)
Every data subject whose personal data is processed has the right granted by the European directives and regulations to request that the controller erase the personal data concerning them without undue delay, provided that one of the following grounds applies and the processing is not necessary:
The personal data was collected or otherwise processed for purposes for which it is no longer needed.
The data subject withdraws consent on which the processing is based pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, and there is no other legal basis for the processing.
The data subject objects to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21(2) GDPR.
The personal data has been processed unlawfully.
Erasure of the personal data is necessary to fulfill a legal obligation under Union or Member State law to which the controller is subject.
Personal data was collected in relation to information society services offered directly to a child, in accordance with Art. 8(1) GDPR.
If any of the above reasons apply and a data subject wishes to have personal data stored by Mark3D GmbH erased, they may contact an employee of the controller at any time. The employee of Mark3D GmbH will ensure that the erasure request is actioned without delay.
If the personal data has been made public by Mark3D GmbH and our company, as the controller, is required under Art. 17(1) GDPR to erase the personal data, Mark3D GmbH shall, taking into account available technology and the cost of implementation, take appropriate measures, including technical measures, to inform other controllers processing the published personal data that the data subject has requested that they erase all links to, or copies or reproductions of, that personal data, insofar as processing is not necessary. In each case, the employee of Mark3D GmbH will take the necessary steps.
e) Right to restriction of processing
Every data subject whose personal data is processed has the right, granted by the European legislature, to request that the controller restrict processing if one of the following conditions applies:
The data subject disputes the accuracy of the personal data, for a period that enables the controller to verify the accuracy of the personal data.
The processing is unlawful, the data subject objects to the erasure of the personal data and instead requests that its use be restricted.
The controller no longer needs the personal data for processing purposes, but the data subject needs it to establish, exercise or defend legal claims.
The data subject has objected to the processing pursuant to Art. 21(1) GDPR, and it has not yet been determined whether the controller's legitimate grounds outweigh those of the data subject.
If any of the conditions listed above apply and a data subject wishes to request restriction of personal data stored by Mark3D GmbH, they may contact an employee of the controller at any time. The employee of Mark3D GmbH will arrange for processing to be restricted.
f) Right to data portability
Every data subject whose personal data is processed has the right granted by the European directives and regulations to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format. They also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, or on a contract pursuant to Art. 6(1)(b) GDPR, and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, when exercising their right to data portability pursuant to Art. 20(1) GDPR, the data subject has the right to have personal data transmitted directly from one controller to another, where technically feasible and provided this does not adversely affect the rights and freedoms of others.
To exercise the right to data portability, the data subject may contact an employee of Mark3D GmbH at any time.
g) Right to object
Every person affected by the processing of personal data has the right, on grounds relating to their particular situation, to object at any time to the processing of their personal data carried out on the basis of Art. 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions.
If an objection is made, Mark3D GmbH will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing is necessary to establish, exercise or defend legal claims.
If Mark3D GmbH processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of their personal data for such marketing. This also applies to profiling insofar as it is related to such direct marketing. If the data subject objects to Mark3D GmbH processing their personal data for direct marketing purposes, Mark3D GmbH will no longer process their personal data for those purposes.
The person concerned also has the right, on grounds relating to their particular situation, to object to the processing of their personal data by Mark3D GmbH for scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
To exercise the right to object, the data subject may contact any employee of Mark3D GmbH or another employee directly. The data subject is also free to exercise their right to object through automated means using technical specifications in connection with the use of information society services, notwithstanding Directive 2002/58/EC.
h) Automated individual decision-making, including profiling
Every person affected by the processing of personal data has the right, as granted by the European legislator, not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning them or similarly significantly affects them, unless the decision (1) is necessary for entering into or performing a contract between the person concerned and the controller, or (2) is authorized by Union or Member State law to which the controller is subject, and that law lays down suitable measures to safeguard the person’s rights and freedoms and legitimate interests, or (3) is made with the explicit consent of the person concerned.
If the decision (1) is necessary for entering into or performing a contract between the data subject and the controller, or (2) is made with the data subject’s explicit consent, Mark3D GmbH shall take appropriate measures to safeguard the data subject’s rights and freedoms and legitimate interests. These measures must include, at a minimum, the right to obtain human intervention from the controller, to state their point of view and to contest the decision.
If the data subject wishes to exercise their rights regarding automated decisions, they may contact an employee of the controller at any time.
i) Right to withdraw consent under data protection law
Any person affected by the processing of personal data has the right, granted by the European legislator, to withdraw their consent to the processing of personal data at any time.
To exercise their right to withdraw consent, the data subject may contact an employee of the controller at any time.

13. Data protection for job applications and the application process

The data controller collects and processes applicants’ personal data for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case when an applicant submits application documents electronically, for example by email or using a web form on the website. If the data controller enters into an employment contract with an applicant, the data submitted will be stored for the purpose of managing the employment relationship in accordance with statutory requirements. If the data controller does not enter into an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection, unless other legitimate interests of the data controller preclude deletion. One such legitimate interest is, for example, the need to provide evidence in proceedings under the General Equal Treatment Act (AGG).

14. Data protection provisions on the use of Facebook

The data controller has integrated components from Facebook into this website. Facebook is a social network.

A social network is an online social meeting place, an online community that generally allows users to communicate and interact with one another in a virtual space. A social network can serve as a platform for exchanging opinions and experiences, or allow the online community to share personal or business-related information. Among other things, Facebook allows users of the social network to create private profiles, upload photos, and connect with others through friend requests.

Facebook is operated by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller responsible for processing personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Whenever someone visits one of the individual pages on this website, which is operated by the controller and has a Facebook component (Facebook plug-in) integrated into it, the Facebook component automatically prompts the browser on the data subject’s information technology system to download a display of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins is available at https://developers.facebook.com/docs/plugins/?locale=de_DE. During this technical process, Facebook learns which specific page of our website the data subject has visited.

If the data subject is logged into Facebook at the same time, Facebook can identify which specific page on our website the data subject visits each time they access our website and for the entire duration of their visit. This information is collected by the Facebook component and associated by Facebook with the data subject's Facebook account. If the data subject clicks one of the Facebook buttons embedded on our website, such as the “Like” button, or posts a comment, Facebook associates this information with the data subject's personal Facebook account and stores this personal data.

The Facebook component informs Facebook whenever the data subject visits our website while logged into Facebook. This happens regardless of whether the data subject clicks the Facebook component. If the data subject does not want this information to be sent to Facebook, they can prevent it by logging out of their Facebook account before visiting our website.

Facebook’s data policy, available at https://de-de.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It also explains the settings Facebook offers to protect the data subject’s privacy. In addition, various applications are available that can prevent data from being transferred to Facebook. Data subjects can use these applications to prevent data from being transferred to Facebook.

15. Data protection provisions for the use of Google Analytics (with anonymisation function)

The controller has integrated Google Analytics (with anonymization function) on this website. Google Analytics is a web analytics service. Web analytics involves collecting and evaluating data about the behavior of website visitors. Among other things, a web analytics service records which website referred a data subject to a website (known as a referrer), which pages they accessed, and how often and for how long they viewed a page. Web analytics is primarily used to optimize websites and analyze the cost-effectiveness of online advertising.

Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, operates the Google Analytics component.

For web analytics using Google Analytics, the data controller uses the “_gat._anonymizeIp” add-on. This add-on truncates and anonymizes the IP address of the data subject’s internet connection when Google accesses our website from a Member State of the European Union or another contracting state to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze traffic to our website. Google uses the data and information collected, among other things, to evaluate how our website is used, compile online reports for us showing activity on our websites, and provide other services related to the use of our website.

Google Analytics sets a cookie on the data subject’s IT system. Cookies have already been explained above. Setting the cookie enables Google to analyse how our website is used. Each time a page on this website operated by the controller is accessed, if it has a Google Analytics component integrated, that component automatically prompts the web browser on the data subject’s IT system to send data to Google for online analysis. As part of this technical process, Google receives personal data such as the data subject’s IP address, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently enable commission accounting.

The cookie stores personal information, such as the time of access, the location from which access originated, and how often the data subject visits our website. Each time our website is visited, this personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America. Google stores this personal data in the United States of America. Google may pass on this personal data collected through this technical process to third parties.

As described above, the data subject can prevent cookies from being set by our website at any time by changing the settings in their internet browser and can thereby permanently opt out of cookies. Such browser settings would also prevent Google from setting a cookie on the data subject’s information technology system. In addition, cookies already set by Google Analytics can be deleted at any time using an internet browser or other software programs.

The data subject may also object to the collection of data generated by Google Analytics relating to their use of this website, and to the processing of this data by Google, and prevent such collection and processing. To do so, the data subject must download and install a browser add-on from https://tools.google.com/dlpage/gaoptout. This browser add-on tells Google Analytics via JavaScript that no data or information about website visits may be sent to Google Analytics. Google considers installation of the browser add-on to be an objection. If the data subject’s IT system is later deleted, formatted or reinstalled, the data subject must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person under their authority, it may be reinstalled or reactivated.

Further information and Google’s applicable privacy policy are available at https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html. More information about Google Analytics is available at https://www.google.com/intl/de_de/analytics/.

16. Privacy Policy for the Use of Google Remarketing

The data controller has integrated Google Remarketing services into this website. Google Remarketing is a feature of Google AdWords that enables a company to display ads to internet users who have previously visited the company’s website. Integrating Google Remarketing therefore allows a company to create user-specific ads and display ads relevant to users’ interests.

Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, operates the Google Remarketing services.

Google Remarketing is used to display interest-based advertising. Google Remarketing enables us to display ads through the Google advertising network or on other websites, tailored to the individual needs and interests of internet users.

Google Remarketing sets a cookie on the data subject’s information technology system. Cookies have already been explained above. Setting this cookie allows Google to recognize visitors to our website when they subsequently visit other websites that are also part of the Google advertising network. Each time a website that has integrated the Google Remarketing service is accessed, the data subject’s browser automatically identifies itself to Google. As part of this technical process, Google receives personal data such as the IP address or the user’s browsing behavior, which Google uses, among other things, to display interest-based advertising.

The cookie stores personal information, such as the pages visited by the data subject. Accordingly, each time our website is visited, personal data—including the IP address of the internet connection used by the data subject—is transmitted to Google in the United States. Google stores this personal data in the United States. Google may disclose this personal data collected through this technical process to third parties.

The data subject may also opt out of interest-based advertising by Google. To do so, the data subject must visit www.google.de/settings/ads in each browser they use and adjust their preferences there.

For more information and to view Google’s current privacy policy, visit https://www.google.de/intl/de/policies/privacy/.

17. Privacy policy for the use of Google+

The controller has integrated a Google+ button on this website. Google+ is a so-called social network. A social network is a social meeting place on the internet, an online community that generally allows users to communicate with one another and interact in a virtual space. A social network can serve as a platform for exchanging opinions and experiences, or allow the online community to share personal or business-related information. Among other things, Google+ allows users of the social network to create private profiles, upload photos, and connect with friends through friend requests.

Google+ is operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Whenever a user accesses one of the individual pages of this website, which is operated by the controller and includes a Google+ button, the internet browser on the data subject's information technology system is automatically prompted by that Google+ button to download a display of the corresponding Google+ button from Google. As part of this technical process, Google learns which specific page of our website the data subject visits. More information about Google+ is available at https://developers.google.com/+/

If the data subject is also logged into Google+ at the same time, Google can identify which specific subpage of our website the data subject visits each time they access our website, and throughout their visit. This information is collected by the Google+ button and associated by Google with the data subject’s Google+ account.

If the data subject clicks one of the Google+ buttons integrated into our website and thereby submits a Google+1 recommendation, Google associates this information with the data subject’s personal Google+ user account and stores this personal data. Google stores the data subject’s Google+1 recommendation and makes it publicly available in accordance with the terms accepted by the data subject in this regard. A Google+1 recommendation submitted by the data subject on this website is subsequently stored and processed together with other personal data, such as the name of the Google+1 account used by the data subject and the photo stored in that account, in other Google services, for example in Google Search results, the data subject’s Google account, or elsewhere, such as on websites or in connection with advertisements. Google is also able to associate visits to this website with other personal data stored by Google. Google also records this personal information for the purpose of improving or optimizing its various services.

Google receives information via the Google+ button that the data subject has visited our website whenever the data subject is logged into Google+ at the time they access our website, regardless of whether they click the Google+ button.

If the data subject does not want their personal data transmitted to Google, they can prevent this by logging out of their Google+ account before visiting our website.

Further information and Google's applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/. Further information from Google about the Google+1 button can be found at https://developers.google.com/+/web/buttons-policy.

18. Privacy Policy on the Use of Google AdWords

The controller has integrated Google AdWords on this website. Google AdWords is an online advertising service that allows advertisers to place ads both in Google search results and across the Google advertising network. Google AdWords allows advertisers to specify keywords in advance, so that an ad is displayed in Google search results only when a user searches for a result relevant to those keywords. Within the Google advertising network, ads are distributed across thematically relevant websites using an automatic algorithm and the previously specified keywords.

Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, operates the Google AdWords services.

Google AdWords is used to promote our website by displaying interest-based ads on third-party websites and in Google search results, and by displaying third-party ads on our website.

If a data subject reaches our website through a Google ad, Google places a so-called conversion cookie on the data subject’s IT system. Cookies have already been explained above. A conversion cookie expires after thirty days and is not used to identify the data subject. While the cookie is still valid, it tracks whether certain subpages of our website have been visited—for example, the shopping cart of an online shop. The conversion cookie allows both us and Google to see whether a data subject who arrived at our website through an AdWords ad generated a sale, meaning they completed or abandoned a purchase.

Google uses the data and information collected through the use of the conversion cookie to compile visit statistics for our website. We in turn use these statistics to determine the total number of users referred to us through AdWords ads, and therefore to assess the success or failure of each AdWords ad and optimize our ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google that could identify the data subject.

The conversion cookie stores personal information, such as the pages visited by the data subject. Accordingly, each time our website is visited, personal data—including the IP address of the internet connection used by the data subject—is transmitted to Google in the United States. Google stores this personal data in the United States. Google may disclose this personal data collected through this technical process to third parties.

As explained above, the person concerned can prevent our website from setting cookies at any time by changing the relevant settings in their internet browser, thereby permanently objecting to the setting of cookies. The relevant browser settings would also prevent Google from placing a conversion cookie on the person’s information technology system. In addition, a cookie already set by Google AdWords can be deleted at any time using the internet browser or other software programs.

For more information and to view Google’s current privacy policy, visit https://www.google.de/intl/de/policies/privacy/.

19. Privacy Policy for the Use of Instagram

The controller has integrated Instagram components into this website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos, as well as redistribute such data on other social networks.

Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA, operates Instagram’s services.

Each time one of the individual pages of this website, operated by the controller and incorporating an Instagram component (Insta button), is accessed, the relevant Instagram component automatically prompts the web browser on the data subject’s device to download a display of the corresponding Instagram component. As part of this technical process, Instagram learns which specific page of our website the data subject has visited.

If the data subject is also logged in to Instagram, Instagram can identify which specific page of our website they visit each time they access our website, and throughout their visit. This information is collected by the Instagram component and associated by Instagram with the data subject’s Instagram account. If the data subject clicks one of the Instagram buttons integrated into our website, the transmitted data and information is associated with the data subject’s personal Instagram account and stored and processed by Instagram.

Instagram receives information through the Instagram component whenever the person concerned visits our website while logged into Instagram at the same time. This occurs regardless of whether the person concerned clicks the Instagram component or not. If the person concerned does not want this information to be transmitted to Instagram, they can prevent the transmission by logging out of their Instagram account before visiting our website.

Further information and Instagram’s applicable privacy policies are available at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

20. Privacy policy for the use of LinkedIn

The controller has integrated components of LinkedIn Corporation into this website. LinkedIn is an internet-based social network that enables users to connect with existing business contacts and establish new business connections. More than 400 million registered people use LinkedIn in over 200 countries. LinkedIn is currently the largest platform for business contacts and one of the most visited websites in the world.

LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. For privacy matters outside the USA, contact LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Whenever our website, which features a LinkedIn component (LinkedIn plug-in), is accessed, this component causes the browser used by the data subject to download the corresponding display of the LinkedIn component. More information about LinkedIn plug-ins is available at https://developer.linkedin.com/plugins. As part of this technical process, LinkedIn learns which specific page of our website the data subject visits.

If the data subject is logged into LinkedIn at the same time, LinkedIn can identify which specific page on our website the data subject visits each time they access our website and for the entire duration of their visit. This information is collected by the LinkedIn component and associated by LinkedIn with the data subject's LinkedIn account. If the data subject clicks a LinkedIn button embedded on our website, LinkedIn associates this information with the data subject's personal LinkedIn account and stores this personal data.

Whenever the data subject is logged into LinkedIn at the same time as visiting our website, LinkedIn receives information through the LinkedIn component that the data subject has visited our website. This happens regardless of whether the data subject clicks the LinkedIn component. If the data subject does not want this information to be transmitted to LinkedIn, they can prevent it by logging out of their LinkedIn account before visiting our website.

LinkedIn lets users opt out of email messages, SMS messages and targeted ads, and manage ad preferences, at https://www.linkedin.com/psettings/guest-controls. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame, which may set cookies. You can opt out of these cookies at https://www.linkedin.com/legal/cookie-policy. LinkedIn’s applicable privacy policy is available at https://www.linkedin.com/legal/privacy-policy. LinkedIn’s cookie policy is available at https://www.linkedin.com/legal/cookie-policy.

21. Data protection provisions on the use of Shariff

The controller has integrated the Shariff component into this website. The Shariff component provides social media buttons that comply with data protection requirements. Shariff was developed for the German computer magazine c’t and is published via GitHub, Inc.

The component is developed by GitHub, Inc. 88 Colin P. Kelly Junior Street, San Francisco, CA 94107, USA.

Social networks’ button solutions typically transmit personal data to the relevant social network as soon as a user visits a website that has a social media button integrated into it. The Shariff component only transmits personal data to social networks when a visitor actively clicks one of the social media buttons. Further information about the Shariff component is available from the computer magazine c’t at http://www.heise.de/newsticker/meldung/Datenschutz-und-Social-Media-Der-c-t-Shariff-ist-im-Einsatz-2470103.html. The Shariff component is used to protect visitors’ personal data while allowing us to integrate buttons for social networks on this website.

Further information and GitHub’s applicable privacy policy are available at https://help.github.com/articles/github-privacy-policy/.

22. Privacy Policy for the Use of Twitter

The controller has integrated Twitter components into this website. Twitter is a multilingual, publicly accessible microblogging service on which users can publish and share so-called Tweets: short messages limited to 280 characters. These messages are available to everyone, including people who are not registered with Twitter. Tweets are also displayed to the user’s so-called followers. Followers are other Twitter users who follow a user’s Tweets. Twitter also lets users reach a broad audience through hashtags, links and retweets.

Twitter is operated by Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

Each time a page on this website operated by the controller is accessed, if it has a Twitter component (Twitter button) integrated into it, the component automatically prompts the internet browser on the data subject’s information technology system to download a display of the corresponding Twitter component from Twitter. More information about Twitter buttons is available at https://about.twitter.com/de/resources/buttons. As part of this technical process, Twitter learns which specific page of our website the data subject visits. The purpose of integrating the Twitter component is to allow our users to share the content of this website, raise awareness of our website online and increase visitor numbers.

If the data subject is also logged in to Twitter, Twitter can identify which specific page of our website the data subject visits each time they access our website and throughout their visit. The Twitter component collects this information and associates it with the data subject’s Twitter account. If the data subject clicks one of the Twitter buttons integrated into our website, the information and data transmitted as a result will be associated with the data subject’s personal Twitter account and stored and processed by Twitter.

Whenever the data subject is logged into Twitter at the same time as visiting our website, Twitter receives information through the Twitter component that the data subject has visited our website. This happens whether or not the data subject clicks the Twitter component. If the data subject does not want this information to be transmitted to Twitter, they can prevent it by logging out of their Twitter account before visiting our website.

Twitter’s current data protection provisions are available at https://twitter.com/privacy?lang=de.

23. Privacy Policy for the Use of Xing

The controller has integrated Xing components on this website. Xing is an internet-based social network that enables users to connect with existing business contacts and make new business contacts. Individual users can create a personal profile on Xing. Companies can, for example, create company profiles or post job vacancies on Xing.

Xing is operated by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.

Each time one of the individual pages of this website, operated by the controller and incorporating a Xing component (Xing plug-in), is accessed, the relevant Xing component automatically prompts the web browser on the data subject’s device to download a display of the corresponding Xing component from Xing. Further information about Xing plug-ins is available at https://dev.xing.com/plugins. As part of this technical process, Xing learns which specific page of our website the data subject has visited.

If the data subject is also logged into Xing, each time they visit our website and throughout their stay, Xing can identify which specific page on our website they are viewing. This information is collected by the Xing component and associated by Xing with the data subject’s Xing account. If the data subject clicks one of the Xing buttons embedded on our website, such as the “Share” button, Xing associates this information with the data subject’s personal Xing user account and stores these personal data.

Xing is informed through the Xing component whenever the person concerned visits our website while logged in to Xing. This happens regardless of whether the person concerned clicks on the Xing component. If the person concerned does not wish this information to be transmitted to Xing, they can prevent it by logging out of their Xing account before visiting our website.

Xing’s published privacy policy, available at https://www.xing.com/privacy, explains how Xing collects, processes and uses personal data. Xing has also published privacy information for the XING Share Button at https://www.xing.com/app/share?op=data_protection.

24. Privacy policy on the use of YouTube

The controller has integrated YouTube components into this website. YouTube is an online video platform that allows video publishers to upload video clips free of charge and other users to watch, rate and comment on them, also free of charge. YouTube allows all kinds of videos to be published, including full-length films and TV shows, music videos, trailers and videos created by users themselves.

YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, operates YouTube. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Whenever a person visits one of the individual pages on this website, which is operated by the data controller and includes a YouTube component (YouTube video), the relevant YouTube component automatically causes the internet browser on the person’s information technology system to download a display of that YouTube component from YouTube. Further information about YouTube is available at https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google learn which specific subpage of our website the person concerned has visited.

If the data subject is also logged in to YouTube, YouTube can identify which specific page of our website the data subject visits when they access a page containing a YouTube video. This information is collected by YouTube and Google and assigned to the data subject’s YouTube account.

The YouTube component informs YouTube and Google that the data subject has visited our website whenever the data subject is logged into YouTube at the time they access our website. This happens regardless of whether the data subject clicks on a YouTube video. If the data subject does not want this information to be transmitted to YouTube and Google, they can prevent it by logging out of their YouTube account before visiting our website.

YouTube’s privacy policy, available at https://www.google.de/intl/de/policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.

25. Privacy Policy for the Use of LiveChat

The data controller has integrated the LiveChat component into this website. LiveChat is live support helpdesk software that enables direct, real-time communication (known as live chat) with visitors to a website.

The LiveChat component is developed by LiveChat Inc., Suite 1400, Bosten, MA 02110-2619 United States of America.

Each time a page on our website equipped with a LiveChat component is accessed, the component collects data to operate the live chat system and analyze its performance. For more information about LiveChat, visit https://www.livechatinc.com/abgerufen.

The LiveChat component places a cookie on the data subject’s device. Cookies have already been explained above. The LiveChat cookie can be used to create pseudonymized usage profiles. The controller may use these pseudonymized usage profiles to analyze visitor behavior and to analyze and maintain the proper operation of the live chat system. This analysis also helps us improve our services. Data collected through the LiveChat component will not be used to identify the data subject without first obtaining their separate, explicit consent. This data will not be combined with personal data or other data containing the same pseudonym.

As described above, the data subject may prevent our website from placing cookies at any time by changing the relevant settings in their internet browser, and may thereby permanently object to the placement of cookies. Changing these browser settings would also prevent the LiveChat component from placing a cookie on the data subject’s information technology system. In addition, cookies already placed by the LiveChat component can be deleted at any time using the internet browser or other software programs.

LiveChat GmbH’s current data protection provisions are available at https://www.livechatinc.com/privacy-policy/.

26. Privacy policy on the use of GetSiteControl

The controller has integrated GetSiteControl components into this website. Visual elements (“widgets”) from the user feedback service GetSiteControl are also used. GetSiteControl (GetWebCraft Limited Klimentos 41-43, Klimentos Tower, Flat/Office 25, 1061, Nicosia, Cyprus) is a tool that displays pop-ups and overlay windows on websites. The windows can be shown according to certain rules (e.g. the number of page visits). Cookies are stored for this purpose. These widgets allow users to start a chat and, if they wish, provide feedback. For more information about the data collected and used by GetSiteControl, as well as your rights and options for protecting your privacy, see the GetSiteControl Privacy Policy at https://getsitecontrol.com/privacy/.

27. Payment method: PayPal privacy policy

The controller has integrated PayPal components on this website. PayPal is an online payment service provider. Payments are processed through so-called PayPal accounts, which are virtual personal or business accounts. PayPal also allows users to make virtual payments by credit card if they do not have a PayPal account. A PayPal account is linked to an email address, so there is no traditional account number. PayPal enables users to make online payments to third parties and receive payments. PayPal also acts as an escrow agent and provides buyer protection services.

PayPal’s European operating company is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If the data subject selects “PayPal” as the payment method during checkout in our online shop, their data will be automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transfer of personal data required to process the payment.

The personal data transmitted to PayPal generally includes first name, last name, address, email address, IP address, telephone number, mobile phone number or other data needed to process the payment. Personal data associated with the relevant order is also required to process the purchase contract.

The data is transmitted to process payments and prevent fraud. The controller will transmit personal data to PayPal in particular where there is a legitimate interest in doing so. PayPal may pass the personal data exchanged between PayPal and the controller to credit reference agencies. This transfer is intended to verify identity and creditworthiness.

PayPal may disclose personal data to affiliated companies, service providers or subcontractors where necessary to fulfill contractual obligations or where the data is to be processed on their behalf.

The data subject may withdraw their consent to PayPal’s handling of their personal data at any time. Withdrawal does not affect personal data that must be processed, used or transmitted to complete payment in accordance with the contract.

PayPal’s current privacy policy can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

28. Legal basis for processing

Art. 6(1)(a) GDPR serves as the legal basis for our company’s processing activities for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the person concerned is a party, as is the case, for example, with processing activities required to deliver goods or provide another service or consideration, the processing is based on Art. 6(1)(b) GDPR. The same applies to processing activities necessary to carry out pre-contractual measures, such as inquiries about our products or services. If our company is subject to a legal obligation requiring the processing of personal data, for example to meet tax obligations, the processing is based on Art. 6(1)(c) GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the person concerned or another natural person. This would be the case, for example, if a visitor were injured at our premises and their name, age, health insurance details or other vital information had to be disclosed to a doctor, hospital or other third party. In that case, the processing would be based on Art. 6(1)(d) GDPR. Finally, processing activities may be based on Art. 6(1)(f) GDPR. This legal basis covers processing activities not covered by any of the above legal bases, where processing is necessary to safeguard the legitimate interests of our company or a third party, provided that the interests, fundamental rights and freedoms of the person concerned do not override them. We are permitted to carry out such processing activities in particular because they have been specifically mentioned by the European legislator. The legislator considers that a legitimate interest may exist where the person concerned is a customer of the controller (Recital 47, sentence 2 GDPR).

29. Legitimate interests pursued by the controller or a third party

If personal data is processed on the basis of Article 6(1)(f) GDPR, our legitimate interest is conducting our business for the benefit of the wellbeing of all our employees and shareholders.

30. Period for which personal data is stored

The applicable statutory retention period determines how long personal data is stored. Once that period has expired, the relevant data is routinely deleted, provided it is no longer required to perform or enter into a contract.

31. Legal or contractual requirements to provide personal data; necessity for entering into a contract; obligation of the data subject to provide personal data; possible consequences of failing to provide it

We would like to inform you that the provision of personal data is sometimes required by law (e.g. tax regulations) or may be necessary under contractual arrangements (e.g. details of a contractual partner). In some cases, it may be necessary for a data subject to provide us with personal data that we must then process in order to conclude a contract. For example, a data subject is required to provide us with personal data if our company enters into a contract with them. If the personal data is not provided, the contract cannot be concluded with the data subject. Before providing personal data, the data subject should contact one of our employees. Our employee will explain on a case-by-case basis whether the provision of personal data is required by law or contract, or is necessary to conclude the contract; whether there is an obligation to provide the personal data; and what the consequences of not providing it would be.

32. Automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

This privacy policy was created using the privacy policy generator of DGD Deutsche Gesellschaft für Datenschutz GmbH, which operates as an external data protection officer in Munich, in cooperation with lawyer specialising in data protection law Christian Solmecke.