Privacy policy according to TDDDG

For what purposes do we process your data?

‍Whenyou browse our website, pages are requested from your device based on the HTTP/S internet protocol and transmitted to you by our web server. Form data that you enter may also be transmitted.

In principle, you do not have to register or identify yourself for this function. However, requests and responses from our server are assigned on the basis of your IP address, which may be used to establish a link between this data and your person.

This connection data and any form data are processed to enable you to surf our website and to realize the purpose you are pursuing in each case (e.g. contacting us, etc.).

In addition, the respective server calls are recorded in a log file. We use this log file data for technical troubleshooting and to prevent and investigate illegal attacks on our systems and, if necessary, to hold responsible persons accountable. In addition, we create evaluations from the log files stored anyway, which we use to optimize our websites. The evaluation as such takes place in anonymous form, i.e. by summarizing call data, so that the results no longer have any personal reference.

Do you have an obligation to provide your data or what are the consequences if you do not?

‍Ofcourse, there is no obligation to surf our website. Unfortunately, it is not possible to use our website without processing the above-mentioned data.

On what legal basis do we process your data? What legitimate interests do we pursue?

The legal basis for any processing of your data depends on the specific purpose of your visit:

• If you visit our website to view our products and possibly conclude a contract with us, the legal basis for the processing of your connection data and any form data in accordance with Art. 6 para. 1 lit. b of the EU General Data Protection Regulation (GDPR) is the necessity to initiate or execute a contract.
• Otherwise, processing is generally carried out on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to operate a website for advertising purposes and for general information and communication purposes with regard to our corporate purposes.

As a rule, log file data is processed on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to protect our facilities and systems from attacks and, if necessary, to take legal action against attackers and to further develop our websites for commercial purposes.

Who is involved in the processing of my data?

In principle, your data is processed fully automatically on the web server provided by our web host Webflow, Inc, 398 11th Street, 2nd Floor, San Francisco, CA 94103 on the basis of order processing in accordance with Art. 28 GDPR. Log files are only used by our IT department in exceptional cases (e.g. for troubleshooting or investigating attacks) and may be passed on to public authorities such as law enforcement agencies and courts for the purpose of investigating or prosecuting illegal attacks on our systems.

Depending on the function, any form data such as connection data is only processed by our web server (e.g. for a search function) or forwarded to internal or external recipients for the purposes of the respective function.

How long will my data be stored?

The log file data is stored for 3 months. Connection data is deleted immediately after the HTTP/S call is executed. Form data is stored for as long as necessary to carry out the respective action.