Site notice

Copyright ©2022 GEALAN Fenster-Systeme GmbH. All rights reserved. The information contained on this site is the property of GEALAN Fenster-Systeme GmbH or the named sources.

The contents may not be copied, altered, stored and/or published in whole or in part for any purpose without express written permission.

The trademarks used are copyrights of the respective companies.

All rights reserved. Errors and misprints excepted. The logos and company and product names used in this website are registered trademarks of the respective manufacturers.

Hofer Straße 80
95145 Oberkotzau
Germany

Tel.: +49 - 92 86 / 77-0
Fax: +49 - 92 86 / 77-22 22
E-mail: info@gealan.de
Website: www.gealan.de
Commercial register: AG Hof, HRB 702
Managing Directors: Ivica Maurović, Tino Albert

GEALAN S.A.R.L.: FR 07 483 279 089
QI Sistemi S.R.L.: IT06914560963
UAB GEALAN BALTIC S.A.: LT 107 648 716
GEALAN Polska Sp. z o.o.: PL 833 122 3577
S.C. GEALAN Romania SRL: RO 914 10 46
GEALAN D.O.O.: HR 029 283 765 09
GEALAN RS D.O.O.: RS103862018

External links from www.gealan.de to third-party websites lead to content owned or managed by the respective provider and are not the responsibility of www.gealan.de. These links are either discernible as such from the context or are separately indicated. We have no influence over the content provided on these websites and make no effort to claim ownership of said content. In particular we accept no responsibility for the statements contained therein. Responsibility can only be established if we had knowledge of breaches of law and were technically able and could be reasonably expected to prevent use of such websites (Section 5 Paragraph 2 of the German Teleservices Act (TDG)/German Legal Framework for Electronic Media (MDStV)). We have checked the external content to a reasonable extent for possible breaches of the law. Breaches of copyright, trademark rights and personal rights and infringements against competition law on third-party websites were not apparent, nor were we aware of any criminal offences.

GEALAN Fenster-Systeme GmbH, as the operator of this site, takes the protection of your personal data very seriously. We treat your personal data confidentially and in compliance with the EU General Data Protection Regulation (GDPR), the local legislation applicable in your country, the Federal Data Protection Act (BDSG), and the Telemedia Act (TMG).

This Data Privacy Statement clarifies the type, scope and purpose of the collection and use of data belonging to visitors and users of the GEALAN Fenster-Systeme GmbH website. If you have questions regarding data protection, please contact our data protection officers via email under datenschutz@gealan.de or the address entered below.

GEALAN Fenster-Systeme GmbH
Hofer Str. 80
D-95145 Oberkotzau, Germany
Phone: +49(0)9286 77-0
Fax: +49(0)9286 77-2222
Website: www.gealan.de
Email: info@gealan.de

Our data protection officer
Data protection officer
GEALAN Fenster-Systeme GmbH
Hofer Str.80
D-95145 Oberkotzau, Germany
Email: datenschutz@gealan.de

Collection and storage of personal data, type, purpose and use 
We would like to point out that we will collect, store, process and use the personal data collected by us with our suppliers, customers, other business partners, and interested parties, in particular the name, address, phone number, email address, contact data of contact persons, customer number as well as order and delivery data, for the purpose of reminders, the establishment and handling of contractual and supply agreements, including delivery, payment and possible warranty or product liability.

Your personal data is necessary for the conclusion and handling of a contract. You are not obliged to provide this data. However, without this data, we are unable to conclude a contract with you. In this respect, your data will be processed based on article 6, para. 1, lit. b, GDPR.

Your data may also be processed based on your agreement according to article 6, para. 1, lit. a, GDPR (e.g. use of login areas).

Additionally, we collect, store, process and use such data for the purpose of maintaining the customer and/or business relationships, marketing and advertisement for our own products and services. In this respect, your data will be processed based on article 6, para. 1, lit. f, GDPR. Our justified interest in the processing of your data here results from our pursuit to promote and sell our own products and services, to improve our logistic processes and to optimise our services.

Additionally, we process data which received from credit agencies (e.g. Schufa) in the framework of the statutory requirements for the purpose of credit assessments of our suppliers, customers and other business partners. In this respect, your data will be processed based on article 6, para. 1, lit. f, GDPR. Our justified interest in the processing of such data results from our pursuit to receive the contractually owed compensation for our services (e.g. the remuneration). Furthermore, we do not make any automated decisions.

 
Disclosure of data to third parties 
We do not forward any personal data to third parties, with the exception of

 

• the transfer to third parties which we commission for the fulfilment of contractual and supply relationships, for instance to banks or payment service providers handling payments as well as to forwarding agents/shipping companies handling the deliveries;
   
• the transfer to third parties which we commission for the marketing and advertising of our own products and services, e.g. marketing service providers and printing companies;
   
• the transfer to specialised service providers (contract processors), e.g. IT service providers who render services for us upon our instructions and under our responsibility in the framework of the above-mentioned purposes

• the forwarding within the group of companies in the framework of the small-scale intra-group exemption (justified interest according to article 6, para. 1, lit. f. GDPR)
   
• the transfer to third parties which falls under our statutory obligations, e.g. to the financial authorities or other statutory authorities;
   
• the transfer to third parties for the fulfilment of our obligations under commercial and fiscal law, e.g. to our tax consultant.
   

A transfer of data into a third country outside of the European Union which is not a member state of the Agreement on the European Economic Area shall only take place if such transfer of data is necessary for the fulfilment of a contract concluded between you and us (e.g. delivery into a third country).

Your data will be processed for the duration of the initiation and execution of a contractual or supply agreement and for the duration of the survival of obligations resulting from a contractual or supply agreement, e.g. any warranty or product liability obligations, as well as for the duration of statutory retention periods based on article 6, para. 1, lit. c, GDPR.

To the extent that personal data is processed for the purposes of direct marketing, you have the right to object to the processing of your personal data for the purposes of such marketing at any time. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for such purposes.


Your rights as a data subject

• Right to withdraw consent: You are entitled to withdraw your consent granted to us at any time. In such case, the data processing which is based on the withdrawn consent may not be continued.
• Right to information: You have the right to request information about your personal data processed by us. In particular, this applies to the purposes of data processing, the categories of personal data, if applicable to the categories of recipients, the duration of storage, if applicable to the  origin of the data as well as to the existence of automated decision-making including profiling and, if applicable, meaningful information on their details.
• Right to rectification: You are entitled to demand the rectification of incorrect data or the completion of your personal data retained with us.
• Right to deletion: You are entitled to demand the deletion of your personal data stored with us, unless its processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
• Right to restriction of processing: You are entitled to demand the restriction of processing of your personal data if you dispute the correctness of the data or if such processing is unlawful but you oppose the erasure of said data. You are furthermore entitled to this right if we no longer need the data but require them for the establishment, exercise or defence of legal claims. You are furthermore entitled to this right if you have opposed the processing of your personal data.
• Right to data portability: You are entitled to demand that we transfer your personal data which you have provided to us in a structured, compatible and machine-readable format to you. Alternatively, you may demand the direct transmission of your personal data provided to another responsible person, if this is possible.
• Right to lodge a complaint: You are entitled to lodge a complaint with a data protection supervisory authority if you believe that we process your personal data in an unlawful manner.

 
The data protection supervisory authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
D-91522 Ansbach, Germany
Telephone: +49 (0) 981 180093-0
Email: poststelle@lda.bayern.de

Our offer is expressly not directed at minors.
All data received and processed within this online offer will be treated confidentially in accordance with the EU-DSGVO and will not be passed on to third parties.

Surfing our website without providing personal data
Outside of the password-protected GEALAN partner area, it is possible to use our website without providing personal data.
We then only learn
- your IP address
- the name of the website or file accessed and the time of access or retrieval,
- the domains via which you have accessed our website
- the amount of data transferred and
- whether the access or retrieval was successful. 
The data is used exclusively for administration, optimisation of the website and to process your enquiries.
The IP address can be a personal data, because under certain conditions it is possible to find out the identity of the owner of the used internet access by information of the respective internet provider.  
We only evaluate the IP address in the event of attacks on our Internet infrastructure. In this case, we have a legitimate interest within the meaning of Art. 6 (1) f) DSGVO in processing the IP address. This legitimate interest results from the need to ward off the attack on the internet infrastructure, to determine the origin of the attack in order to be able to take criminal and civil action against the person responsible, as well as to effectively prevent further attacks.
The IP address is deleted when we can exclude that no attack on our internet infrastructure has occurred from it. This happens regularly after seven days. 
Furthermore, we record the domains from which our web visitors come. We also analyse this data to identify trends and compile statistics, but we delete the data afterwards.
In addition, this website contains links to other websites. The owner of this site is not responsible for the privacy practices or the content of such websites. If you have any questions or comments about our privacy practices, please contact us at datenschutz@gealan.de.
This site also uses "cookies". You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Surfing on our website with the provision of personal data
If you provide us with personal data (such as name, address or email address) voluntarily or in the context of registering for the GEALAN partner area, this data will not be passed on to third parties without your express consent or legal permission. If you register for the GEALAN partner area, a contract is concluded between us for the storage and availability of the respective profile.
In this case we process your data on the basis of Article 6 b) of the EU-DSGVO for the fulfilment of an existing contract between us or according to Article 6 a) EU-DSGVO on the basis of the consent given by you. The processing is carried out for the fulfilment of contractual services, the processing of payments, the delivery of contractually ordered products and services, the transmission of your address data to logistics companies for the delivery of goods, as well as for sending interesting information about products and promotions. Your data will be passed on within our company to the persons involved in the processing of the contract or the decision-making process. Any further disclosure to third parties that is not covered by legal requirements will only take place with your express consent. There is no automated decision-making.
We process your data only as long as it is necessary for the fulfilment of our contract or applicable legal provisions or due to the reason for your data transfer. As a rule, we do not independently delete the personal data you have entered in the GEALAN partner area. However, you have the option of changing individual data in your profile at any time. A complete deletion of the personal data stored in your profile will take place upon request by email (stating your user name) to datenschutz@gealan.de, as long as the further storage of this data is not permitted due to another permissible circumstance. Business documents will be stored in accordance with the statutory retention periods and subsequently deleted in accordance with data protection regulations.

Use of external service providers
We work with service providers who process certain data on our behalf. This is done exclusively in accordance with the applicable data protection law. In particular, we have concluded data processing on behalf agreements with our service providers that meet the requirements of Article 28 of the EU Data Protection Regulation.

Your rights:
In accordance with the GDPR, you have the following rights:
+ Right to information about the processing of your data.
You have the right to request information from us about whether and, if so, which of your personal data is being processed at GEALAN Fenster-Systeme GmbH. You have the right to the following information:

the purposes of processing
the categories of your personal data that are processed
the recipients or categories of recipients to whom the personal data have been or will be disclosed
if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining this duration;
if your personal data have not been collected from you, any available information about the source of the data
the existence of automated decision-making, including profiling, pursuant to Article 22 of the EU GDPR and, at least in such cases, meaningful information about the logic involved and the scope and intended effects of such processing for you.
We will provide you with a copy of the personal data that is the subject of the processing. If we have reasonable doubts about the identity of the person requesting information, we will request additional information to confirm the identity of the data subject.
+ Right to rectification
You have the right to request that we correct any inaccurate personal data relating to you without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary declaration.
+ Right to erasure
Your personal data will be deleted if you assert a right to deletion in writing and this does not conflict with statutory retention rights or obligations. In addition, we always delete your personal data if the data is no longer required to fulfil the purpose for which it was stored or if its storage is inadmissible for other legal reasons, and the deletion does not conflict with the legal retention periods.
+ Right to restriction of processing
You have the right to request a restriction in the processing of your personal data if the accuracy of the personal data is not given, for the period of time that allows GEALAN Fenster-Systeme GmbH to verify the accuracy of the personal data. If the processing is unlawful and you refuse the erasure of the personal data and instead request the restriction of the use of the personal data from us, we will follow your request. Data will also not be deleted if we need it for the assertion, exercise or defence of our own legal claims, or if you have objected to the processing in accordance with Article 21(1) EU DSGVO, as long as it has not yet been determined whether the legitimate grounds of GEALAN Fenster-Systeme GmbH outweigh your reasons.
+ Right to object to processing
You have the right to object at any time to the processing of your personal data that is carried out on the basis of Article 6 of the EU Data Protection Regulation. The GEALAN Fenster-Systeme GmbH shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defence of legal claims.
+ Right to data portability
You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format and to transfer this data to another controller without hindrance from us. The prerequisite is that the processing is based on consent pursuant to Art. 6 or Art. 9 of the EU GDPR or on a contract and the processing is carried out with the help of automated processes. You also have the right to have the personal data transferred directly from GEALAN Fenster-Systeme GmbH to another responsible party, insofar as this is technically feasible.
+ Right to revoke your consent with effect for the future
You may revoke your consent at any time with effect for the future. There are no costs for a revocation, an objection or information. Please send your revocation by e-mail to info@gealan.de.
+ Right to complain to the data protection supervisory authority
If you are of the opinion that the processing of your personal data violates applicable data protection regulations, you have the right to complain to the supervisory authority responsible for your federal state at any time in accordance with Article 77 EU-DSGVO.

Consent with Cookiebot

Our website uses the consent technology provided by Cookiebot in order to collect your consent to the storage of specific cookies on your device or to the use of specific technologies and to document this consent in compliance with data protection law. The provider of this technology is Cybot A/S, Havnegade 39, 1058, Copenhagen, Denmark (hereinafter “Cookiebot”).

When you visit our website, a connection is established with the Cookiebot servers in order to collect your consent and other declarations regarding the use of cookies. Cookiebot then stores a cookie in your browser in order to allow it to assign the consent that has been provided and/or any withdrawal thereof to you. We will store the data that is collected in this manner until you ask us for its erasure, until you delete the Cookiebot cookie or until the purpose of the data storage no longer applies. Mandatory statutory retention obligations remain unaffected.

Cookiebot is used to collect the consent which is required by law for the use of cookies. The legal basis for this is Article 6 (1) lit. c GDPR.

Processing

We have concluded a data processing agreement (DPA) with the abovementioned provider. This is an agreement which is required under data protection law and which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Google Maps

This website uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

It is necessary to store your IP address in order to use the functions of Google Maps. This information is generally transmitted to a Google server in the USA and stored there. The provider of this website has no influence on this data transmission. When Google Maps is activated, Google can use Google Web Fonts for the purpose of the uniform display of fonts. When you access Google Maps, your browser will load the required Web Fonts in your browser cache in order to correctly display text and fonts.

The use of Google Maps takes place in the interest of ensuring the appealing presentation of our online services and of making it easy to find the locations which are mentioned on our website. This constitutes a legitimate interest within the meaning of Article 6 (1) lit. f GDPR. Insofar as the corresponding consent has been requested, the processing takes place exclusively on the basis of Article 6 (1) lit. a GDPR and Section 25 (1) Teleservices Data Protection Act (TDDSG) insofar as the consent covers the storage of cookies or access to the information on the user’s device (e.g.  device fingerprinting) within the meaning of the TDDSG. The consent may be withdrawn at any time.

Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

You can find more information relating to user data in the Google Privacy Policy: https://policies.google.com/privacy?hl=de.

Data Privacy Statement for the Google Analytics web analytics service
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies, text files which are placed on your computer for the purpose of analysing your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. We have activated IP anonymisation. On this website, your IP address will therefore be truncated by Google within an EU member state or other EEA state before being transmitted to the US. Only in exceptional situations will your full IP address be transmitted to Google servers in the United States and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing them with other services relating to website activity and internet usage. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting information (including your IP address) relating to your use of the website which is generated by the cookie, and from processing this information, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout. An opt-out cookie is set to prevent your data being recorded when you visit this website in future
Further information on the terms of service and data protection can be found at https://www.google.com/analytics/terms/gb.html or https://policies.google.com/.
Please note that on this website, Google Analytics has been extended with the “anonymizeIp” code in order to guarantee that IP addresses are recorded anonymously (IP masking).

Google Tag Manager
Google Tag Manager is a Google Inc. (“Google”) service which is used to add, update and manage tags.
Tags are small code elements on our website which help measure traffic and visitor behaviour and monitor the impact of online advertising and social media.
When you visit our website, the current tag configuration is sent to the user’s browser. This contains instructions on which tags should be enabled. The tool itself does not record personal data. The tool does however ensure that other tags which may record data are enabled.
More information on how Google Tag Manager works can be found here: https://support.google.com/tagmanager/ and in the use policies: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

Data Privacy Statement for “Google Remarketing” and “Similar Audiences” function of Google Inc.
This website uses the Remarketing or “Similar Audiences” function of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). You can therefore be targeted by advertising so that personalised and interest-based advertisements are displayed when you visit other websites in the “Google Display Network”. “Google Remarketing” and “Similar Audiences” use cookies, text files which are stored on your computer and which allow your use of the website to be analysed. These text files document your visit and collect anonymised data regarding your use of the website. Personal data is therefore not retained. If you visit another website in the “Google Display Network” you will see pop-up ads which should reflect product and information areas previously accessed on our website. You can block the “Google Remarketing” or “Similar Audiences” function by refusing the use of cookies by setting your browser software accordingly. Please note however that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the information generated by the cookie relating to your use of the website and from processing this information by downloading the browser plugin available at the following link and installing it: https://www.google.com/settings/ads/plugin?hl=de. You can also deactivate the use of cookies by third-party suppliers, by opening the Network Advertising Initiative site at http://www.networkadvertising.org/choices/ and implementing the detailed instructions given there concerning opt-outs. The Google Data Privacy Statement regarding remarketing with further information can be found here: www.google.com/privacy/ads/.

Data privacy statement for Google Inc. “Google AdWords Conversion Tracking”
This website uses the “Google AdWords Conversion Tracking” function of Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). Google AdWords Conversion Tracking uses cookies, text files which are stored on your computer and which allow an analysis of your use of the website when you click on a Google ad. Cookies are valid for a maximum of 90 days. Personal data is therefore not retained. As long as the cookie is valid, we as the website operator, and Google, can see that you have clicked on an ad and have accessed a certain landing page (e.g. order confirmation page, newsletter subscription). These cookies cannot be tracked across multiple websites by different AdWords participants. Conversion statistics are compiled by the cookie in “Google AdWords”. These statistics record the number of users who have clicked on one of our ads. In addition, the number of users who have accessed a landing page which contains a “conversion tag” is counted. The statistics do not however include any data which can used to identify you. You can refuse the use of cookies on your hard drive by selecting “Do not accept cookies” in your browser settings (in MS Internet Explorer under “Tools > Internet Options > Privacy > Settings; in Firefox under “Options > Privacy & Security > Cookies”); please note however that if you do this, you may not be able to use the full functionality of this website. By using this website, you agree to the processing of the data on you collected by Google in the manner described above, and for the aforementioned purpose. More information on how Google Conversion Data is used, and the Google Data Privacy Statement can be found at: https://support.google.com/adwords/answer/93148?ctx=tltp,http://www.google.de/policies/privacy/.

YouTube
Our website uses plug-ins provided by YouTube, a site operated by Google, in order to display YouTube videos on our website. The site operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you access one of our pages equipped with the YouTube plug-in, a link to the YouTube servers will be created. In this process, information as to which of our pages you have visited will be communicated to the YouTube server. In addition, YouTube may save various cookies on your device. These cookies enable YouTube to receive information about visitors to our website. This information is used for purposes including recording video statistics, increasing ease of use, and preventing attempted fraud. The cookies remain on your device until you delete them. If you are logged into your YouTube account, YouTube is able to directly assign your current activity to your personal profile. You can prevent this from happening by logging out of your YouTube account. YouTube is used to make our website presentation appealing. This represents a legitimate interest as defined by point (f) Article 6(1) GDPR. Additional information on how user data is handled is available in the YouTube privacy policy at https://policies.google.com/privacy.

Information about the newsletter and consent

The following information explains the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedures and your rights of objection. By subscribing to our newsletter, you agree to receive it and to the procedures described.

Newsletter content:
We send newsletters and emails with promotional information (hereinafter "newsletter") only with the consent of the recipients or a legal permission. The contents circumscribed in the context of a registration for the newsletter are decisive for the consent of the users.

Double-Opt-In and Logging:
Registration for our newsletter is carried out in a so-called double opt-in process, i.e. after registration you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Changes to your data stored at sendinblue are also logged.

Use of the shipping service provider "Sendinblue.com":
This website uses Sendinblue to send newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Sendinblue is a service that can be used, among other things, to organize and analyze the sending of newsletters. Sendinblue is a German, certified provider, which was selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act. You can find more information here: de.sendinblue.com/information-newsletter-receiver. The data you enter for the purpose of receiving the newsletter will be stored on Sendinblue's servers in Germany.

If you do not want Sendinblue to analyze your data, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter message.

You can view Sendinblue's privacy policy here: https://de.sendinblue.com/legal/privacypolicy/

Registration data:
To sign up for the newsletter, it is sufficient to provide your email address. In addition, we use other data such as name and surname, country and customer group. This information is only used for personalization and segmentation of the newsletter.

Statistical collection and analyses:
The newsletters contain a so-called "web-beacon", i.e. a pixel-sized file that is retrieved from Sendinblue's server when the newsletter is opened. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of the retrieval are initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or the access times.

The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our nor Sendinblue's intention to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

Online Calling and Data Management:
There are cases where we direct newsletter recipients to Sendinblue's websites. For example, our newsletters contain a link that newsletter recipients can use to access the newsletters online (e.g., in case of display problems in the email program). Furthermore, newsletter recipients can only view Sendinblue's privacy policy on their site.
In this context, we would like to point out that cookies are used on Sendinblue's websites and that personal data is thus processed by Sendinblue, its partners and service providers used (e.g. Google Analytics). We have no influence on this data collection. For more information, please refer to Sendinblue's privacy policy. We additionally draw your attention to the options for objecting to the collection of data for advertising purposes on the websites http://www.aboutads.info/choices/ and http://www.youronlinechoices.com/ (for the European region).

Cancellation/revocation:
You can cancel the receipt of our newsletter at any time, i.e. revoke your consents. At the same time, your consent to the sending of the newsletter via Sendinblue and the statistical analyses will expire. A separate cancellation of the sending via Sendinblue or the statistical analysis is unfortunately not possible.

You will find a link to cancel the newsletter at the end of each newsletter.

Storage period

The data you provide us with for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of Sendinblue after you unsubscribe from the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for the member area) remains unaffected by this.

After you have unsubscribed from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements for sending newsletters (legitimate interest within the meaning of § 6 para. 1 lit. g KDG). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

For more details, please refer to the data protection provisions of Sendinblue at: https://de.sendinblue.com/datenschutz-uebersicht.

Conclusion of a contract for commissioned data processing

We have concluded a contract with Sendinblue in which we oblige Sendinblue to protect our customers' data and not to pass it on to third parties. This contract can be viewed at the following link: https://de.sendinblue.com/wp-content/uploads/sites/3/2021/04/AV_Muster_DE_18.02.2021.pdf

Legal basis Data Protection Regulation:
In accordance with the requirements of the Basic Data Protection Regulation (DSGVO) applicable as of May 25, 2018, we inform you that the consent to send newsletters to the registered email addresses is based on Art. 6 para. 1 lit. a, 7 DSGVO and § 7 para. 2 No. 3, or para. 3 UWG. The use of the dispatch service provider Sendinblue, performance of statistical surveys and analyses as well as logging of the registration process, are carried out on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO. 
We would also like to point out that you can object to the future processing of your personal data in accordance with the legal requirements pursuant to Art. 21 DSGVO at any time. The objection can be made in particular against the processing for purposes of direct advertising.

Our social media presence

Data processing by social networks
We have a number of public profiles on social networks. You can find details of the social networks we use further below. Social networks such as Facebook can generally analyse your user behaviour in detail when you visit their website, or a website with integrated social media content (e.g. “Like” buttons or banner advertisements). Visiting our social media webpages triggers numerous processing operations that are relevant in terms of data protection. In detail: If you are logged into your social media account and visit our social media webpage, the operator of the social media portal may associate this visit with your user account. Under certain circumstances, however, your personal data may also be recorded if you are not logged in or if you have no account with the social media portal in question. In such cases, this data is collected using cookies stored on your end device or by storing your IP address, for example. Social media portal operators can use the data they collect in this manner to create user profiles in which your preferences and interests are recorded. This enables them to show you interest-based advertising, both on and off the respective social media webpage. If you have an account with the respective social network, this interest-based advertising can be displayed on all devices on which you are logged in or have previously been logged in. Please note also that we are unable to track all processing operations on social media portals. As such, depending on the provider, it is possible that further processing operations may be performed by the operators of the social media portals. Please see the terms of use and data protection provisions of the respective social media portals for further details.

Legal basis
Our social media webpages are intended to give us as extensive an internet presence as possible. This constitutes a legitimate interest as described in Article 6(1) point f GDPR. Analytical processes initiated by the social networks may be founded on different legal bases which the social network operators must disclose (e.g. consent as described in Article 6(1) point a GDPR).

Controller and exercising of rights
When you visit one of our social media webpages (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered by this visit. However, our responsibility and related ability to provide information are limited exclusively to the content we have created. In principle, you can exercise your rights (information, rectification, erasure, restriction of processing, data portability and complaints) both against us (with regard to content) and against the operator of the respective social media portal (e.g. Facebook). Please note that, despite our shared responsibility with the social media portal operators, we do not have complete control over the data processing operations of the social media portals. Our capabilities are limited by the company policy of the respective provider.

Storage period
We cannot influence the period for which personal data pertaining to you is stored by the social network operators for their own purposes. Information can be obtained directly from the social network operators (e.g. in their data protection information, see below).

Individual social networks

Facebook
We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook’s statement the collected data will also be transferred to the USA and to other third-party countries.
We have signed an agreement with Facebook on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Facebook are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can customize your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381. Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/.

Instagram
We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.
For details on how they handle your personal information, see the Instagram Privacy Policy: https://help.instagram.com/519522125107875.

Pinterest
We have a profile at Pinterest. The operator is Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. Details on how they handle your personal data can be found in the privacy policy of Pinterest: https://policy.pinterest.com/de/privacy-policy.

XING
We have a profile on XING. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. Details on their handling of your personal data can be found in the XING Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.

LinkedIn
We have a LinkedIn profile. The provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa und https://www.linkedin.com/legal/l/eu-sccs.
For details on how they handle your personal information, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

YouTube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. For details on how they handle your personal information, please refer to Youtube's privacy policy: https://policies.google.com/privacy?hl=de.


Updating this data privacy statement
From time to time this data privacy statement may have to be updated, for example by new legal provisions or official requirements, and new offers on our website. We will notify you of this. In general, we recommend that you open this data privacy statement regularly to check whether there are changes. Changes can be identified e.g. by an updated issue status at the bottom of the document.

Printing and saving this data privacy statement
This data privacy statement can be printed and saved directly, for example using the Print or Save function in your browser.