Privacy notice

Personal data on this website are processed only to the extent necessary for fulfilling the purpose you have requested. The purpose of the website is to provide you with information about our company, products and services. It also enables inquiries to be made and contracts to be initiated or finalized. Security considerations and legitimate marketing activities are additional grounds for processing personal data. As a result of your visit and your usage of our online offering, we will process the following types of data:

• Inventory data (e.g. names and addresses)
• Contact details (e.g. e-mail and telephone numbers)
• Content data (e.g. text input, photographs and videos)
• Usage data (e.g. visited websites, interest in content, access times)
• Meta/communication data (e.g. device information and IP addresses)

1.1     Cookies
 "Cookies" are small files that are stored on users' computers. Different data can be stored in cookies. The primary purpose of a cookie is to save user information (e.g. device type, the storage medium) during or even after visiting an website. Temporary cookies (e.g. "session cookies" or "transient cookies") are cookies that are deleted after you have searched our website. They are deleted after you close the browser (for example, for shopping basket content). There are also "permanent" or "persistent" cookies. These remain stored even after you close the browser (e.g. for login status). These are suitable for saving the interests of users, range measurements or marketing purposes. "Third-party cookies" are those from providers other than the party responsible for the website (otherwise, these are "first-party cookies"). We will clarify the use of temporary and permanent cookies in the context of the processing specifics of the data privacy statement.

If you do not want cookies stored on your computer, you must activate the appropriate options in your browser and enable the deletion of cookies. The exclusion of cookies can cause our website to have limited functionality.

Various services provide general help against online marketing cookies, especially in the area of ​​tracking (e.g. http://www.aboutads.info/choices/ [US] or http://www.youronlinechoices.com/ [EU]). This may also result in restrictions to the features of this website

1.2     Google Analytics
As part of our legitimate interests (Article 6 paragraph 1 of the General Data Protection Regulation ("GDPR") associated with an attractive and user-oriented online service, we use Google Analytics, a web analytics service provided by Google LLC ("Google"). Google uses the cookies described above. Information generated in this way about the use of our website is usually transmitted to a Google server in the USA and stored there.

Google is certified under the Privacy Shield Agreement (and obligated to comply with European privacy standards). Google will use the information on our behalf (processing existing orders pursuant to article 28 of the GDPR) to evaluate the use of our website, to generate reports on the activities within this website, and to provide additional services related to the use of this website. Anonymous usage profiles may be created.

The anonymization is guaranteed by Google (IP anonymization achieved by Google by shortening the IP address within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area, otherwise shortening after transfer to Google servers in the USA). Google states that this data will not be merged with other data.

You can configure your browser to restrict this Google Analytics functionality. Google also offers a tool that disables Google Analytics ( http://tools.google.com/dlpage/gaoptout?hl=de). For more information about Google's data usage, configuration and opt-out options, please visit:  https://www.google.com/intl/de/policies/privacy/partners ,http://www.google.com/policies/technologies/ads and http://www.google.de/settings/ads.

1.3     Kyto

As part of our legitimate interests (Article 6 paragraph 1 of the GDPR) to promote an attractive and user-oriented online presence, we use the analysis program Kyto (Kyto GmbH, Linienstrasse 123, 10115 Berlin, Germany, www.kyto.de ).  For analytic purposes, Kyto uses the cookies and Google Analytics, which makes it possible to evaluate information about usage behaviour at our website. The information is generally transmitted to Kyto in Berlin and stored there. Google Analytics uses the procedure described above.

The anonymization of user data is also ensured by Kyto. To restrict the Kyto analysis, you can use the cookie configuration options in the browser and the tools for restricting Google Analytics.

1.4     Collecting access data and log files
Based on our legitimate interests (Article 6 (1) of the GDPR), we collect data on every access to the server on which our websites are located. The accessed data includes:

• Visited website
• Time of access
• Amount of data sent in bytes
• Previously visited website
• Browser being used
• Operating system being used
• IP address being used
• For security reasons, such log files are stored for no more than 5 days and then deleted. Data whose further retention is required for evidential purposes shall be exempted from this deletion until final clarification of the relevant incident.

1.5     Newsletter
Below you will find the key information about our newsletter (regarding content, registration, termination, transmission, and evaluation). Through your newsletter subscription, you agree with the explained procedures.

Contents
The term newsletter includes all electronic messages (primarily e-mail) that we send for advertising purposes (covering information about us and our services). The newsletter is only sent if it is justified by an underlying consent of the recipient or a legal permission (Article 6 (1) (a), article 6 of GDPR in conjunction with article 7 (2) no. 3 and article 7 no. 3 of the German Law Against Unfair Competition).

Registration
Registration for our newsletter is done in a double opt-in procedure (after your registration, you will receive an e-mail which you must confirm). This prevents other e-mail addresses from being included in our distribution list. Registrations for the newsletter are logged for verification purposes (IP address and registration/confirmation times). Any changes made to your stored data are also logged. In order to register, you only need to enter your e-mail address and select the newsletter language (DE or EN). You may, optionally, also specify your first and last name so that you can be addressed personally. We log your registration based on our legitimate interest in a user-friendly and secure mail distributor, which takes into account our documentation requirements (Article 6 paragraph 1 of the GDPR).

Termination
You can withdraw your consent to the newsletter at any time and cancel. You can find the cancellation link on our registration website and at the end of each newsletter. Due to our obligation to provide evidence, cancelled e-mail addresses are stored for up to three years (legitimate interest in accordance with article 6 paragraph 1 of the GDPR). You may make a request for final deletion, which would also confirm the former existence of your consent.  

1.5.1    E-MAIL SERVICE PROVIDER
We e-mail the newsletters using the "MailChimp" software from Rocket Science Group, LLC, 675 Ponce De Leon Ave NE # 5000, Atlanta, GA 30308, USA (refer to their data privacy statement at https://mailchimp.com/legal/privacy/ ). This service provider is certified under the Privacy Shield Agreement, so that compliance with European data protection standards is ensured. In addition, there is a contract for processing orders in accordance with article 28 paragraph 3 of the GDPR. Our selection of this service provider was based on our legitimate interest in a user-friendly and secure mail distributor (Article 6 paragraph 1 of the GDPR). The service provider is allowed to use the receiver data in anonymous form (without any user assignments) to improve their own service (e.g. for technology and presentation) or to use them for statistical purposes. Any other own use, especially for their own communications or for forwarding to third parties, is prohibited.

1.5.2    EVALUATION
By using a "web-beacon" (pixel-sized file), we are able to monitor the opening of the newsletter. As part of the process, technical data (browser, operating system, IP address, time of retrieval, retrieval location) are logged. We can also determine which links have been clicked on in the newsletter. We use this information to optimize our newsletter service. Although the information can technically be assigned to individual newsletter recipients, we do not monitor individual users. Evaluations only take place at the group or category level, whereby many recipients are grouped together. In this way, we are attempting to understand the reading behaviour of the recipients and optimize our content so that it meets the interests of the recipients.

1.6     Integrating services and content of third parties
Our website contains services and content from third parties. Their selection and usage is done to develop and improve our website content (videos) and services (establishing contacts); it is a legitimate interest (Article 6 paragraph 1 of the GDPR. The integration is based on the cookie technology, so the information in sections 1.1 and 1.2 are also relevant here. The following services and content of third parties are currently part of our website:

1.6.1    YOUTUBE
We include videos from our own channel on the YouTube platform (owned by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA). Data privacy statement: https://www.google.com/policies/privacy/, Opt-out: https://adssettings.google.com/authenticated.

1.6.2    USING FACEBOOK SOCIAL PLUG-INS
As part of our legitimate interest in an attractive and user-oriented website (Article 6 paragraph 1 of the GDPR), we use social plug-ins from the Facebook.com social network (Facebook, 4 Grand Canal Square, Grand Canal Harbor, Dublin 2) (hereinafter referred to as Facebook). The social plug-ins are designed as interactive elements or content (videos, graphics or text contributions); they are identified by their Facebook logos (refer to https://allfacebook.de/features/update-social-plugins ). Facebook is certified under the Privacy Shield Agreement and ensures compliance with European data protection laws.

When using these social plug-ins, a direct connection with the servers of Facebook is established; this means that the contents are transferred from Facebook directly to the device of the user. Since we have no influence over this connection, we cannot give precise information on the type and extent of data processing carried out by Facebook. We merely point out that user profiles can be created by Facebook and the following information can be processed by Facebook through the social plug-ins:

• Information that a user has accessed the corresponding page with a social plug-in
• Assignment to a corresponding Facebook account, when the user is logged in to Facebook
• By interacting (pressing a button) with a social plug-in, information is directly transmitted and stored on Facebook servers
• Even without a Facebook account, it is possible that Facebook may store your (anonymized) IP address.
• Further details on the Facebook privacy policy are at  https://www.facebook.com/about/privacy/ . To avoid this type of data processing, Facebook members can change the profile settings of their account. In addition, the cookie restrictions in the user's browser and special services to avoid tracking are available (refer to sections 1.2 and 1.3).

1.7     Establishing contact
In the event that you contact us (e.g. via e-mail, telephone, product inquiry or social media), we will process your information for this purpose in accordance with article 6 paragraph 1 of the GDPR. Your details may be stored in a Customer Relationship Management system ("CRM System") or a comparable database. We will delete such requests when they are no longer required. We check the necessity every two years, taking into account the statutory requirements for documentation. With regard to applications, your personal data will only be processed by us out of your and our interest in filling vacant positions (pursuant to Art. 6 para. 1 lit. b, f DSGVO). Your data will be deleted upon completion of the application process or at the latest 6 months after receipt of your application. If there is an additional hiring perspective, we will store your data for a maximum of 2 further years in our applicant pool, if you give your consent.

In accordance with the statutory provisions (Articles 17 and 18 of the GDPR), processed personal data will be deleted or restricted after cessation of the purpose for data processing. For some processing methods, there are also explicit deletion dates specified in the data privacy statements (as mentioned above). The restriction applies to cases where data is not deleted because it is necessary for other legitimate purposes and will continue to be used only in relation to these permissible processing methods. In addition, statutory retention requirements usually prevent immediate deletion after the purpose of data processing has ceased. In particular, the German commercial law (§ 257 Section 1 HGB) and tax law (§ 147 Section 1 AO) with their specific documentation obligations apply here: deletion after 6 years (commercial books, inventories, opening balances, annual accounts, trade letters, accounting documents, etc.) or 10 years (books, records, management reports, accounting records, trade and business letters, records relevant to taxation, etc.).

Insofar as data are transmitted to other persons and companies by our processing procedures, or when such third parties receive access to your data in other ways, this is done only when then the relevant permissions are achieved (as described in article 6 paragraph 1 of the GDPR), such as your consent or our legitimate interest. An order-processing contract (refer to article 28 of the GDPR) is established when necessary.

The transfer of data to third countries (outside the EU or the EEA) shall only take place on the based on the relevant permissions (especially article 6 paragraph 1 of the GDPR), such as your consent or our legitimate interest. We also observe the special requirements of article 44 of the GDPR (refer to the above Privacy Shield for transfers to the USA).

Article 12 of the GDPR grants to you, as the person whose data is being processed, several rights in your relationship to us. We summarize these below. To enforce these rights, please contact us at Datenschutzbeautragter(at)conta-clip.de .  

5.1     Right to information
You have the right to ask for confirmation as to whether the data in question is being processed and for the status of this data, as well as for further information and a copy of the data in accordance with article 15 of the GDPR.

5.2     Right of rectification
According to article 16 of the GDPR, you have the right to demand the completion of the data concerning you or the correction of any incorrect data concerning you.

5.3     Right to complain
According to article 77 of the GDPR, you have the right to file a complaint with the competent supervisory authority ( poststelle@ldi.nrw.de ).

5.4     Transmitting data
You have the right to demand that the data relating to you, which you have provided to us, be sent to you in accordance with article 20 of the GDPR. You also have the right to request that this data be transmitted to other persons responsible.

5.5     Right to delete data
In accordance with article 17 of the GDPR, you have the right to demand that the relevant data be deleted immediately or, alternatively, to require a restriction of the processing of data in accordance with article 18 of the GDPR.

5.6     Withdrawal
You have the right to withdraw any consent that you have given for the future, in accordance with article 7 paragraph 3 of the GDPR.

5.7     Right to object
You can, at any time, object to the future processing of your data in accordance with article 21 of the GDPR. Such objection may be made against usage for direct marketing purposes.

Using state of the art technology, we take the necessary technical and organizational measures to ensure the confidentiality, integrity and availability of your data (Article 32 of the GDPR).

With regard to changing legalities or adjusting processing procedures (insofar as the rights of data subjects remain unaffected), we reserve the right to change this privacy statement with regard to the explanatory notes. Therefore, we ask you to read through the content from time to time.

Matthias Heinemann
Phone: +49 5257 9833 0
E-Mail: datenschutzbeauftragter@conta-clip.de