Data Protection

1. An overview of data protection

General information

The fol­low­ing infor­ma­tion will pro­vide you with an easy to nav­i­gate overview of what will hap­pen with your per­son­al data when you vis­it this web­site. The term “per­son­al data” com­pris­es all data that can be used to per­son­al­ly iden­ti­fy you. For detailed infor­ma­tion about the sub­ject mat­ter of data pro­tec­tion, please con­sult our Data Pro­tec­tion Dec­la­ra­tion, which we have includ­ed beneath this copy.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e., the “controller”)?

The data on this web­site is processed by the oper­a­tor of the web­site, whose con­tact infor­ma­tion is avail­able under sec­tion “Infor­ma­tion about the respon­si­ble par­ty (referred to as the “con­troller” in the GDPR)” in this Pri­va­cy Pol­i­cy.

How do we record your data?

We col­lect your data as a result of your shar­ing of your data with us. This may, for instance be infor­ma­tion you enter into our con­tact form.

Oth­er data shall be record­ed by our IT sys­tems auto­mat­i­cal­ly or after you con­sent to its record­ing dur­ing your web­site vis­it. This data com­pris­es pri­mar­i­ly tech­ni­cal infor­ma­tion (e.g., web brows­er, oper­at­ing sys­tem, or time the site was accessed). This infor­ma­tion is record­ed auto­mat­i­cal­ly when you access this web­site.

What are the purposes we use your data for?

A por­tion of the infor­ma­tion is gen­er­at­ed to guar­an­tee the error free pro­vi­sion of the web­site. Oth­er data may be used to ana­lyze your user pat­terns. If con­tracts can be con­clud­ed or ini­ti­at­ed via the web­site, the trans­mit­ted data will also be processed for con­tract offers, orders or oth­er order enquiries.

What rights do you have as far as your information is concerned?

You have the right to receive infor­ma­tion about the source, recip­i­ents, and pur­pos­es of your archived per­son­al data at any time with­out hav­ing to pay a fee for such dis­clo­sures. You also have the right to demand that your data are rec­ti­fied or erad­i­cat­ed. If you have con­sent­ed to data pro­cess­ing, you have the option to revoke this con­sent at any time, which shall affect all future data pro­cess­ing. More­over, you have the right to demand that the pro­cess­ing of your data be restrict­ed under cer­tain cir­cum­stances. Fur­ther­more, you have the right to log a com­plaint with the com­pe­tent super­vis­ing agency.

Please do not hes­i­tate to con­tact us at any time if you have ques­tions about this or any oth­er data pro­tec­tion relat­ed issues.

Analysis tools and tools provided by third parties

There is a pos­si­bil­i­ty that your brows­ing pat­terns will be sta­tis­ti­cal­ly ana­lyzed when your vis­it this web­site. Such analy­ses are per­formed pri­mar­i­ly with what we refer to as analy­sis pro­grams.

For detailed infor­ma­tion about these analy­sis pro­grams please con­sult our Data Pro­tec­tion Dec­la­ra­tion below.

2. Hosting

We are host­ing the con­tent of our web­site at the fol­low­ing provider:

External Hosting

This web­site is host­ed exter­nal­ly. Per­son­al data col­lect­ed on this web­site are stored on the servers of the host. These may include, but are not lim­it­ed to, IP address­es, con­tact requests, meta­da­ta and com­mu­ni­ca­tions, con­tract infor­ma­tion, con­tact infor­ma­tion, names, web page access, and oth­er data gen­er­at­ed through a web site.

The exter­nal host­ing serves the pur­pose of ful­fill­ing the con­tract with our poten­tial and exist­ing cus­tomers (Art. 6(1)(b) GDPR) and in the inter­est of secure, fast, and effi­cient pro­vi­sion of our online ser­vices by a pro­fes­sion­al provider (Art. 6(1)(f) GDPR). If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. This con­sent can be revoked at any time.

Our host(s) will only process your data to the extent nec­es­sary to ful­fil its per­for­mance oblig­a­tions and to fol­low our instruc­tions with respect to such data.

We are using the fol­low­ing host(s):

Microsoft Cor­po­ra­tion (Azure)
One Microsoft Way
Red­mond, WA 98052–6399
USA

Data processing

We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dat­ed by data pri­va­cy laws that guar­an­tees that they process per­son­al data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

3. General information and mandatory information

Data protection

The oper­a­tors of this web­site and its pages take the pro­tec­tion of your per­son­al data very seri­ous­ly. Hence, we han­dle your per­son­al data as con­fi­den­tial infor­ma­tion and in com­pli­ance with the statu­to­ry data pro­tec­tion reg­u­la­tions and this Data Pro­tec­tion Dec­la­ra­tion.

When­ev­er you use this web­site, a vari­ety of per­son­al infor­ma­tion will be col­lect­ed. Per­son­al data com­pris­es data that can be used to per­son­al­ly iden­ti­fy you. This Data Pro­tec­tion Dec­la­ra­tion explains which data we col­lect as well as the pur­pos­es we use this data for. It also explains how, and for which pur­pose the infor­ma­tion is col­lect­ed.

We here­with advise you that the trans­mis­sion of data via the Inter­net (i.e., through e‑mail com­mu­ni­ca­tions) may be prone to secu­ri­ty gaps. It is not pos­si­ble to com­plete­ly pro­tect data against third-par­ty access.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data pro­cess­ing con­troller on this web­site is:

ifm stat­math gmbh
An der Alche 15
57072 Siegen

Phone: +49 (0)271 – 319 28 00 1
E‑mail: statmath@ifm.com

The con­troller is the nat­ur­al per­son or legal enti­ty that sin­gle-hand­ed­ly or joint­ly with oth­ers makes deci­sions as to the pur­pos­es of and resources for the pro­cess­ing of per­son­al data (e.g., names, e‑mail address­es, etc.).

Storage duration

Unless a more spe­cif­ic stor­age peri­od has been spec­i­fied in this pri­va­cy pol­i­cy, your per­son­al data will remain with us until the pur­pose for which it was col­lect­ed no longer applies. If you assert a jus­ti­fied request for dele­tion or revoke your con­sent to data pro­cess­ing, your data will be delet­ed, unless we have oth­er legal­ly per­mis­si­ble rea­sons for stor­ing your per­son­al data (e.g., tax or com­mer­cial law reten­tion peri­ods); in the lat­ter case, the dele­tion will take place after these rea­sons cease to apply.

General information on the legal basis for the data processing on this website

If you have con­sent­ed to data pro­cess­ing, we process your per­son­al data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if spe­cial cat­e­gories of data are processed accord­ing to Art. 9 (1) DSGVO. In the case of explic­it con­sent to the trans­fer of per­son­al data to third coun­tries, the data pro­cess­ing is also based on Art. 49 (1)(a) GDPR. If you have con­sent­ed to the stor­age of cook­ies or to the access to infor­ma­tion in your end device (e.g., via device fin­ger­print­ing), the data pro­cess­ing is addi­tion­al­ly based on § 25 (1) TDDDG. The con­sent can be revoked at any time. If your data is required for the ful­fill­ment of a con­tract or for the imple­men­ta­tion of pre-con­trac­tu­al mea­sures, we process your data on the basis of Art. 6(1)(b) GDPR. Fur­ther­more, if your data is required for the ful­fill­ment of a legal oblig­a­tion, we process it on the basis of Art. 6(1)© GDPR. Fur­ther­more, the data pro­cess­ing may be car­ried out on the basis of our legit­i­mate inter­est accord­ing to Art. 6(1)(f) GDPR. Infor­ma­tion on the rel­e­vant legal basis in each indi­vid­ual case is pro­vid­ed in the fol­low­ing para­graphs of this pri­va­cy pol­i­cy.

Designation of a data protection officer

We have appoint­ed a data pro­tec­tion offi­cer.

ifm elec­tron­ic gmbh
Daten­schutzbeauf­tragter
Friedrich­straße 1
45128 Essen

Phone: +49 (0) 201 / 24 22–0
E‑mail: gdpr@ifm.com

Information on the data transfer to third-party countries that are not secure under data protection law and the transfer to US companies that are not DPF-certified

We use, among oth­er tech­nolo­gies, tools from com­pa­nies locat­ed in third-par­ty coun­tries that are not safe under data pro­tec­tion law, as well as US tools whose providers are not cer­ti­fied under the EU-US Data Pri­va­cy Frame­work (DPF). If these tools are enabled, your per­son­al data may be trans­ferred to and processed in these coun­tries. We would like you to note that no lev­el of data pro­tec­tion com­pa­ra­ble to that in the EU can be guar­an­teed in third coun­tries that are inse­cure in terms of data pro­tec­tion law.

We would like to point out that the US, as a secure third-par­ty coun­try, gen­er­al­ly has a lev­el of data pro­tec­tion com­pa­ra­ble to that of the EU. Data trans­fer to the US is there­fore per­mit­ted if the recip­i­ent is cer­ti­fied under the “EU-US Data Pri­va­cy Frame­work” (DPF) or has appro­pri­ate addi­tion­al assur­ances. Infor­ma­tion on trans­fers to third-par­ty coun­tries, includ­ing the data recip­i­ents, can be found in this Pri­va­cy Pol­i­cy.

Recipients of personal data

In the scope of our busi­ness activ­i­ties, we coop­er­ate with var­i­ous exter­nal par­ties. In some cas­es, this also requires the trans­fer of per­son­al data to these exter­nal par­ties. We only dis­close per­son­al data to exter­nal par­ties if this is required as part of the ful­fill­ment of a con­tract, if we are legal­ly oblig­at­ed to do so (e.g., dis­clo­sure of data to tax author­i­ties), if we have a legit­i­mate inter­est in the dis­clo­sure pur­suant to Art. 6 (1)(f) GDPR, or if anoth­er legal basis per­mits the dis­clo­sure of this data. When using proces­sors, we only dis­close per­son­al data of our cus­tomers on the basis of a valid con­tract on data pro­cess­ing. In the case of joint pro­cess­ing, a joint pro­cess­ing agree­ment is con­clud­ed.

Revocation of your consent to the processing of data

A wide range of data pro­cess­ing trans­ac­tions are pos­si­ble only sub­ject to your express con­sent. You can also revoke at any time any con­sent you have already giv­en us. This shall be with­out prej­u­dice to the law­ful­ness of any data col­lec­tion that occurred pri­or to your revo­ca­tion.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a complaint with the competent supervisory agency

In the event of vio­la­tions of the GDPR, data sub­jects are enti­tled to log a com­plaint with a super­vi­so­ry agency, in par­tic­u­lar in the mem­ber state where they usu­al­ly main­tain their domi­cile, place of work or at the place where the alleged vio­la­tion occurred. The right to log a com­plaint is in effect regard­less of any oth­er admin­is­tra­tive or court pro­ceed­ings avail­able as legal recours­es.

Right to data portability

You have the right to have data that we process auto­mat­i­cal­ly on the basis of your con­sent or in ful­fill­ment of a con­tract hand­ed over to you or to a third par­ty in a com­mon, machine-read­able for­mat. If you should demand the direct trans­fer of the data to anoth­er con­troller, this will be done only if it is tech­ni­cal­ly fea­si­ble.

Information about, rectification and eradication of data

With­in the scope of the applic­a­ble statu­to­ry pro­vi­sions, you have the right to demand infor­ma­tion about your archived per­son­al data, their source and recip­i­ents as well as the pur­pose of the pro­cess­ing of your data at any time. You may also have a right to have your data rec­ti­fied or erad­i­cat­ed. If you have ques­tions about this sub­ject mat­ter or any oth­er ques­tions about per­son­al data, please do not hes­i­tate to con­tact us at any time.

Right to demand processing restrictions

You have the right to demand the impo­si­tion of restric­tions as far as the pro­cess­ing of your per­son­al data is con­cerned. To do so, you may con­tact us at any time. The right to demand restric­tion of pro­cess­ing applies in the fol­low­ing cas­es:

• In the event that you should dis­pute the cor­rect­ness of your data archived by us, we will usu­al­ly need some time to ver­i­fy this claim. Dur­ing the time that this inves­ti­ga­tion is ongo­ing, you have the right to demand that we restrict the pro­cess­ing of your per­son­al data.
• If the pro­cess­ing of your per­son­al data was/is con­duct­ed in an unlaw­ful man­ner, you have the option to demand the restric­tion of the pro­cess­ing of your data instead of demand­ing the erad­i­ca­tion of this data.
• If we do not need your per­son­al data any longer and you need it to exer­cise, defend or claim legal enti­tle­ments, you have the right to demand the restric­tion of the pro­cess­ing of your per­son­al data instead of its erad­i­ca­tion.
• If you have raised an objec­tion pur­suant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each oth­er. As long as it has not been deter­mined whose inter­ests pre­vail, you have the right to demand a restric­tion of the pro­cess­ing of your per­son­al data.

If you have restrict­ed the pro­cess­ing of your per­son­al data, these data – with the excep­tion of their archiv­ing – may be processed only sub­ject to your con­sent or to claim, exer­cise or defend legal enti­tle­ments or to pro­tect the rights of oth­er nat­ur­al per­sons or legal enti­ties or for impor­tant pub­lic inter­est rea­sons cit­ed by the Euro­pean Union or a mem­ber state of the EU.

SSL and/or TLS encryption

For secu­ri­ty rea­sons and to pro­tect the trans­mis­sion of con­fi­den­tial con­tent, such as pur­chase orders or inquiries you sub­mit to us as the web­site oper­a­tor, this web­site uses either an SSL or a TLS encryp­tion pro­gram. You can rec­og­nize an encrypt­ed con­nec­tion by check­ing whether the address line of the brows­er switch­es from “http://” to “https://” and also by the appear­ance of the lock icon in the brows­er line.

If the SSL or TLS encryp­tion is acti­vat­ed, data you trans­mit to us can­not be read by third par­ties.

Rejection of unsolicited e‑mails

We here­with object to the use of con­tact infor­ma­tion pub­lished in con­junc­tion with the manda­to­ry infor­ma­tion to be pro­vid­ed in our Site Notice to send us pro­mo­tion­al and infor­ma­tion mate­r­i­al that we have not express­ly request­ed. The oper­a­tors of this web­site and its pages reserve the express right to take legal action in the event of the unso­licit­ed send­ing of pro­mo­tion­al infor­ma­tion, for instance via SPAM mes­sages.

4. Recording of data on this website

Cookies

Our web­sites and pages use what the indus­try refers to as “cook­ies.” Cook­ies are small data pack­ages that do not cause any dam­age to your device. They are either stored tem­porar­i­ly for the dura­tion of a ses­sion (ses­sion cook­ies) or they are per­ma­nent­ly archived on your device (per­ma­nent cook­ies). Ses­sion cook­ies are auto­mat­i­cal­ly delet­ed once you ter­mi­nate your vis­it. Per­ma­nent cook­ies remain archived on your device until you active­ly delete them, or they are auto­mat­i­cal­ly erad­i­cat­ed by your web brows­er.

Cook­ies can be issued by us (first-par­ty cook­ies) or by third-par­ty com­pa­nies (so-called third-par­ty cook­ies). Third-par­ty cook­ies enable the inte­gra­tion of cer­tain ser­vices of third-par­ty com­pa­nies into web­sites (e.g., cook­ies for han­dling pay­ment ser­vices).

Cook­ies have a vari­ety of func­tions. Many cook­ies are tech­ni­cal­ly essen­tial since cer­tain web­site func­tions would not work in the absence of these cook­ies (e.g., the shop­ping cart func­tion or the dis­play of videos). Oth­er cook­ies may be used to ana­lyze user behav­ior or for pro­mo­tion­al pur­pos­es.

Cook­ies, which are required for the per­for­mance of elec­tron­ic com­mu­ni­ca­tion trans­ac­tions, for the pro­vi­sion of cer­tain func­tions you want to use (e.g., for the shop­ping cart func­tion) or those that are nec­es­sary for the opti­miza­tion (required cook­ies) of the web­site (e.g., cook­ies that pro­vide mea­sur­able insights into the web audi­ence), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a dif­fer­ent legal basis is cit­ed. The oper­a­tor of the web­site has a legit­i­mate inter­est in the stor­age of required cook­ies to ensure the tech­ni­cal­ly error-free and opti­mized pro­vi­sion of the operator’s ser­vices. If your con­sent to the stor­age of the cook­ies and sim­i­lar recog­ni­tion tech­nolo­gies has been request­ed, the pro­cess­ing occurs exclu­sive­ly on the basis of the con­sent obtained (Art. 6(1)(a) GDPR and § 25 (1) TDDDG); this con­sent may be revoked at any time.

You have the option to set up your brows­er in such a man­ner that you will be noti­fied any time cook­ies are placed and to per­mit the accep­tance of cook­ies only in spe­cif­ic cas­es. You may also exclude the accep­tance of cook­ies in cer­tain cas­es or in gen­er­al or acti­vate the delete-func­tion for the auto­mat­ic erad­i­ca­tion of cook­ies when the brows­er clos­es. If cook­ies are deac­ti­vat­ed, the func­tions of this web­site may be lim­it­ed.

Which cook­ies and ser­vices are used on this web­site can be found in this pri­va­cy pol­i­cy.

Server log files

The provider of this web­site and its pages auto­mat­i­cal­ly col­lects and stores infor­ma­tion in so-called serv­er log files, which your brows­er com­mu­ni­cates to us auto­mat­i­cal­ly. The infor­ma­tion com­pris­es:

• The type and ver­sion of brows­er used
• The used oper­at­ing sys­tem
• Refer­rer URL
• The host­name of the access­ing com­put­er
• The time of the serv­er inquiry
• The IP address

This data is not merged with oth­er data sources.

This data is record­ed on the basis of Art. 6(1)(f) GDPR. The oper­a­tor of the web­site has a legit­i­mate inter­est in the tech­ni­cal­ly error free depic­tion and the opti­miza­tion of the operator’s web­site. In order to achieve this, serv­er log files must be record­ed.

Contact form

If you sub­mit inquiries to us via our con­tact form, the infor­ma­tion pro­vid­ed in the con­tact form as well as any con­tact infor­ma­tion pro­vid­ed there­in will be stored by us in order to han­dle your inquiry and in the event that we have fur­ther ques­tions. We will not share this infor­ma­tion with­out your con­sent.

The pro­cess­ing of these data is based on Art. 6(1)(b) GDPR, if your request is relat­ed to the exe­cu­tion of a con­tract or if it is nec­es­sary to car­ry out pre-con­trac­tu­al mea­sures. In all oth­er cas­es the pro­cess­ing is based on our legit­i­mate inter­est in the effec­tive pro­cess­ing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agree­ment (Art. 6(1)(a) GDPR) if this has been request­ed; the con­sent can be revoked at any time.

The infor­ma­tion you have entered into the con­tact form shall remain with us until you ask us to erad­i­cate the data, revoke your con­sent to the archiv­ing of data or if the pur­pose for which the infor­ma­tion is being archived no longer exists (e.g., after we have con­clud­ed our response to your inquiry). This shall be with­out prej­u­dice to any manda­to­ry legal pro­vi­sions, in par­tic­u­lar reten­tion peri­ods.

Request by e‑mail, telephone, or fax

If you con­tact us by e‑mail, tele­phone or fax, your request, includ­ing all result­ing per­son­al data (name, request) will be stored and processed by us for the pur­pose of pro­cess­ing your request. We do not pass these data on with­out your con­sent.

These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is relat­ed to the ful­fill­ment of a con­tract or is required for the per­for­mance of pre-con­trac­tu­al mea­sures. In all oth­er cas­es, the data are processed on the basis of our legit­i­mate inter­est in the effec­tive han­dling of inquiries sub­mit­ted to us (Art. 6(1)(f) GDPR) or on the basis of your con­sent (Art. 6(1)(a) GDPR) if it has been obtained; the con­sent can be revoked at any time.

The data sent by you to us via con­tact requests remain with us until you request us to delete, revoke your con­sent to the stor­age or the pur­pose for the data stor­age laps­es (e.g. after com­ple­tion of your request). Manda­to­ry statu­to­ry pro­vi­sions — in par­tic­u­lar statu­to­ry reten­tion peri­ods — remain unaf­fect­ed.

5. Analysis tools and advertising

Google Tag Manager

We use the Google Tag Man­ag­er. The provider is Google Ire­land Lim­it­ed, Gor­don House, Bar­row Street, Dublin 4, Ire­land

The Google Tag Man­ag­er is a tool that allows us to inte­grate track­ing or sta­tis­ti­cal tools and oth­er tech­nolo­gies on our web­site. The Google Tag Man­ag­er itself does not cre­ate any user pro­files, does not store cook­ies, and does not car­ry out any inde­pen­dent analy­ses. It only man­ages and runs the tools inte­grat­ed via it. How­ev­er, the Google Tag Man­ag­er does col­lect your IP address, which may also be trans­ferred to Google’s par­ent com­pa­ny in the Unit­ed States.

The Google Tag Man­ag­er is used on the basis of Art. 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in the quick and uncom­pli­cat­ed inte­gra­tion and admin­is­tra­tion of var­i­ous tools on his web­site. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. This con­sent can be revoked at any time.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

Google Analytics

This web­site uses func­tions of the web analy­sis ser­vice Google Ana­lyt­ics. The provider of this ser­vice is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

Google Ana­lyt­ics enables the web­site oper­a­tor to ana­lyze the behav­ior pat­terns of web­site vis­i­tors. To that end, the web­site oper­a­tor receives a vari­ety of user data, such as pages accessed, time spent on the page, the uti­lized oper­at­ing sys­tem and the user’s ori­gin. This data is sum­ma­rized in a user-ID and assigned to the respec­tive end device of the web­site vis­i­tor.

Fur­ther­more, Google Ana­lyt­ics allows us to record your mouse and scroll move­ments and clicks, among oth­er things. Google Ana­lyt­ics uses var­i­ous mod­el­ing approach­es to aug­ment the col­lect­ed data sets and uses machine learn­ing tech­nolo­gies in data analy­sis.

Google Ana­lyt­ics uses tech­nolo­gies that make the recog­ni­tion of the user for the pur­pose of ana­lyz­ing the user behav­ior pat­terns (e.g., cook­ies or device fin­ger­print­ing). The web­site use infor­ma­tion record­ed by Google is, as a rule trans­ferred to a Google serv­er in the Unit­ed States, where it is stored.

The use of these ser­vices occurs on the basis of your con­sent pur­suant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your con­sent at any time.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

IP anonymization

Google Ana­lyt­ics IP anonymiza­tion is active. As a result, your IP address will be abbre­vi­at­ed by Google with­in the mem­ber states of the Euro­pean Union or in oth­er states that have rat­i­fied the Con­ven­tion on the Euro­pean Eco­nom­ic Area pri­or to its trans­mis­sion to the Unit­ed States. The full IP address will be trans­mit­ted to one of Google’s servers in the Unit­ed States and abbre­vi­at­ed there only in excep­tion­al cas­es. On behalf of the oper­a­tor of this web­site, Google shall use this infor­ma­tion to ana­lyze your use of this web­site to gen­er­ate reports on web­site activ­i­ties and to ren­der oth­er ser­vices to the oper­a­tor of this web­site that are relat­ed to the use of the web­site and the Inter­net. The IP address trans­mit­ted in con­junc­tion with Google Ana­lyt­ics from your brows­er shall not be merged with oth­er data in Google’s pos­ses­sion.

Browser plug-in

You can pre­vent the record­ing and pro­cess­ing of your data by Google by down­load­ing and installing the brows­er plu­g­in avail­able under the fol­low­ing link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more infor­ma­tion about the han­dling of user data by Google Ana­lyt­ics, please con­sult Google’s Data Pri­va­cy Dec­la­ra­tion at: https://support.google.com/analytics/answer/6004245?hl=en.

Google Signals

We use Google Sig­nals. When­ev­er you vis­it our web­site, Google Ana­lyt­ics records, among oth­er things, your loca­tion, the pro­gres­sion of your search and YouTube pro­gres­sion as well as demo­graph­ic data (site vis­i­tor data). This data may be used for cus­tomized adver­tis­ing with the assis­tance of Google Sig­nal. If you have a Google account, your site vis­i­tor infor­ma­tion will be linked to your Google account by Google Sig­nal and used to send you cus­tomized pro­mo­tion­al mes­sages. The data is also used to com­pile anonymized sta­tis­tics of our users’ online pat­terns.

Contract data processing

We have exe­cut­ed a con­tract data pro­cess­ing agree­ment with Google and are imple­ment­ing the strin­gent pro­vi­sions of the Ger­man data pro­tec­tion agen­cies to the fullest when using Google Ana­lyt­ics.

Google Conversion-Tracking

This web­site uses Google Con­ver­sion Track­ing. The provider of this ser­vice is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

With the assis­tance of Google Con­ver­sion Track­ing, we are in a posi­tion to rec­og­nize whether the user has com­plet­ed cer­tain actions. For instance, we can ana­lyze the how fre­quent­ly which but­tons on our web­site have been clicked and which prod­ucts are reviewed or pur­chased with par­tic­u­lar fre­quen­cy. The pur­pose of this infor­ma­tion is to com­pile con­ver­sion sta­tis­tics. We learn how many users have clicked on our ads and which actions they have com­plet­ed. We do not receive any infor­ma­tion that would allow us to per­son­al­ly iden­ti­fy the users. Google as such uses cook­ies or com­pa­ra­ble recog­ni­tion tech­nolo­gies for iden­ti­fi­ca­tion pur­pos­es.

The use of these ser­vices occurs on the basis of your con­sent pur­suant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your con­sent at any time.

For more infor­ma­tion about Google Con­ver­sion Track­ing, please review Google’s data pro­tec­tion pol­i­cy at: https://policies.google.com/privacy?hl=en

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

6. Plug-ins and Tools

YouTube with expanded data protection integration

This web­site inte­grates videos from the YouTube web­site. The oper­a­tor of the web­site is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

When you vis­it one of these web­sites on which YouTube is inte­grat­ed, a con­nec­tion to the YouTube servers is estab­lished. This tells the YouTube serv­er which of our pages you have vis­it­ed. If you are logged into your YouTube account, you enable YouTube to assign your surf­ing behav­ior direct­ly to your per­son­al pro­file. You can pre­vent this by log­ging out of your YouTube account.

We use YouTube in extend­ed data pro­tec­tion mode. Accord­ing to YouTube, videos that are played in extend­ed data pro­tec­tion mode are not used to per­son­al­ize brows­ing on YouTube. Ads that are played in extend­ed data pro­tec­tion mode are also not per­son­al­ized. No cook­ies are set in extend­ed data pro­tec­tion mode. Instead, so-called local stor­age ele­ments are stored in the user’s brows­er, which con­tain per­son­al data sim­i­lar to cook­ies and can be used for recog­ni­tion. Details on the extend­ed data pro­tec­tion mode can be found here: https://support.google.com/youtube/answer/171780.

After acti­vat­ing a YouTube video, fur­ther data pro­cess­ing oper­a­tions may be trig­gered over which we have no influ­ence.

The use of YouTube is based on our inter­est in pre­sent­ing our online con­tent in an appeal­ing man­ner. Pur­suant to Art. 6(1)(f) GDPR, this is a legit­i­mate inter­est. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. This con­sent can be revoked at any time.

For more infor­ma­tion on how YouTube han­dles user data, please con­sult the YouTube Data Pri­va­cy Pol­i­cy under: https://policies.google.com/privacy?hl=en.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

Wordfence

We have includ­ed Word­fence on this web­site. The provider is Defi­ant Inc, Defi­ant, Inc, 800 5th Ave Ste 4100, Seat­tle, WA 98104, USA (here­inafter “Word­fence”).

Word­fence is designed to pro­tect our web­site from unwant­ed access or mali­cious cyber­at­tacks. To accom­plish this, our web­site estab­lish­es a per­ma­nent con­nec­tion with Wordfence’s servers, which check and block their data­bas­es against access to our web­site.

The use of Word­fence is based on Art. 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in the most effec­tive pro­tec­tion of his web­site against cyber­at­tacks. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. This con­sent can be revoked at any time.

Data trans­mis­sion to the USA is based on the stan­dard con­trac­tu­al claus­es of the EU Com­mis­sion. Details can be found here: https://www.wordfence.com/help/general-data-protection-regulation/.

Data processing

We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dat­ed by data pri­va­cy laws that guar­an­tees that they process per­son­al data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

CleanTalk

This web­site uses the anti-spam plu­g­ins of CleanTalk. The provider is CleanTalk Inc, 711 S Car­son Street, Suite 4, Car­son City, NV, 89701, USA (here­inafter referred to as “CleanTalk”).

The pur­pose of using CleanTalk is to pro­tect our web­site against spam activ­i­ties (such as unso­licit­ed ads, mes­sages, or com­ments). To achieve this, CleanTalk records a vari­ety of per­son­al data, such as the IP address, email address, nick­name of the senders of mes­sages, infor­ma­tion about the tech­nol­o­gy of JavaScript in the sender’s brows­er and any text copy entered.

This infor­ma­tion will be trans­ferred to a CleanTalk serv­er in the EU and will be archived there.

For secu­ri­ty rea­sons and to fend off spam, your data will be processed by the CleanTalk Cloud Ser­vice and will be archived for a max­i­mum of 31 days in log files. Once this peri­od ends, the data will be delet­ed entire­ly.

Our com­pa­ny uses CleanTalk on the basis of Art. 6 (1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in pro­tect­ing the operator’s web­site from spam activ­i­ties as effec­tive­ly as pos­si­ble. If per­ti­nent con­sent has been request­ed from you, pro­cess­ing will occur exclu­sive­ly on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG if the con­sent includes the archiv­ing of cook­ies or access to infor­ma­tion the user’s device as defined in the TDDDG. Such con­sent may be revoked at any time.

The data trans­fer to the Unit­ed States is based on the stan­dard con­tract claus­es of the EU Com­mis­sions. For details, please vis­it: https://cleantalk.org/publicoffer#privacy.

Data processing

We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dat­ed by data pri­va­cy laws that guar­an­tees that they process per­son­al data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

7. Online-based Audio and Video Conferences (Conference tools)

Data processing

We use online con­fer­ence tools, among oth­er things, for com­mu­ni­ca­tion with our cus­tomers. The tools we use are list­ed in detail below. If you com­mu­ni­cate with us by video or audio con­fer­ence using the Inter­net, your per­son­al data will be col­lect­ed and processed by the provider of the respec­tive con­fer­ence tool and by us. The con­fer­enc­ing tools col­lect all infor­ma­tion that you provide/access to use the tools (email address and/or your phone num­ber). Fur­ther­more, the con­fer­ence tools process the dura­tion of the con­fer­ence, start and end (time) of par­tic­i­pa­tion in the con­fer­ence, num­ber of par­tic­i­pants and oth­er “con­text infor­ma­tion” relat­ed to the com­mu­ni­ca­tion process (meta­da­ta).

Fur­ther­more, the provider of the tool process­es all the tech­ni­cal data required for the pro­cess­ing of the online com­mu­ni­ca­tion. This includes, in par­tic­u­lar, IP address­es, MAC address­es, device IDs, device type, oper­at­ing sys­tem type and ver­sion, client ver­sion, cam­era type, micro­phone or loud­speak­er and the type of con­nec­tion.

Should con­tent be exchanged, uploaded, or oth­er­wise made avail­able with­in the tool, it is also stored on the servers of the tool provider. Such con­tent includes, but is not lim­it­ed to, cloud record­ings, chat/ instant mes­sages, voice­mail uploaded pho­tos and videos, files, white­boards, and oth­er infor­ma­tion shared while using the ser­vice.

Please note that we do not have com­plete influ­ence on the data pro­cess­ing pro­ce­dures of the tools used. Our pos­si­bil­i­ties are large­ly deter­mined by the cor­po­rate pol­i­cy of the respec­tive provider. Fur­ther infor­ma­tion on data pro­cess­ing by the con­fer­ence tools can be found in the data pro­tec­tion dec­la­ra­tions of the tools used, and which we have list­ed below this text.

Purpose and legal bases

The con­fer­ence tools are used to com­mu­ni­cate with prospec­tive or exist­ing con­trac­tu­al part­ners or to offer cer­tain ser­vices to our cus­tomers (Art. 6(1)(b) GDPR). Fur­ther­more, the use of the tools serves to gen­er­al­ly sim­pli­fy and accel­er­ate com­mu­ni­ca­tion with us or our com­pa­ny (legit­i­mate inter­est in the mean­ing of Art. 6(1)(f) GDPR). Inso­far as con­sent has been request­ed, the tools in ques­tion will be used on the basis of this con­sent; the con­sent may be revoked at any time with effect from that date.

Duration of storage

Data col­lect­ed direct­ly by us via the video and con­fer­ence tools will be delet­ed from our sys­tems imme­di­ate­ly after you request us to delete it, revoke your con­sent to stor­age, or the rea­son for stor­ing the data no longer applies. Stored cook­ies remain on your end device until you delete them. Manda­to­ry legal reten­tion peri­ods remain unaf­fect­ed.

We have no influ­ence on the dura­tion of stor­age of your data that is stored by the oper­a­tors of the con­fer­ence tools for their own pur­pos­es. For details, please direct­ly con­tact the oper­a­tors of the con­fer­ence tools.

Conference tools used

We employ the fol­low­ing con­fer­ence tools:

Microsoft Teams

We use Microsoft Teams. The provider is the Microsoft Ire­land Oper­a­tions Lim­it­ed, One Microsoft Place, South Coun­ty Busi­ness Park, Leop­ard­stown, Dublin 18, Ire­land. For details on data pro­cess­ing, please refer to the Microsoft Teams pri­va­cy pol­i­cy: https://privacy.microsoft.com/en-us/privacystatement.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/6474.

Data processing

We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dat­ed by data pri­va­cy laws that guar­an­tees that they process per­son­al data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

8. Custom Services

Handling applicant data

We offer web­site vis­i­tors the oppor­tu­ni­ty to sub­mit job appli­ca­tions to us (e.g., via e‑mail, via postal ser­vices on by sub­mit­ting the online job appli­ca­tion form). Below, we will brief you on the scope, pur­pose and use of the per­son­al data col­lect­ed from you in con­junc­tion with the appli­ca­tion process. We assure you that the col­lec­tion, pro­cess­ing, and use of your data will occur in com­pli­ance with the applic­a­ble data pri­va­cy rights and all oth­er statu­to­ry pro­vi­sions and that your data will always be treat­ed as strict­ly con­fi­den­tial.

Scope and purpose of the collection of data

If you sub­mit a job appli­ca­tion to us, we will process any affil­i­at­ed per­son­al data (e.g., con­tact and com­mu­ni­ca­tions data, appli­ca­tion doc­u­ments, notes tak­en dur­ing job inter­views, etc.), if they are required to make a deci­sion con­cern­ing the estab­lish­ment or an employ­ment rela­tion­ship. The legal grounds for the afore­men­tioned are § 26 BDSG accord­ing to Ger­man Law (Nego­ti­a­tion of an Employ­ment Rela­tion­ship), Art. 6(1)(b) GDPR (Gen­er­al Con­tract Nego­ti­a­tions) and – pro­vid­ed you have giv­en us your con­sent – Art. 6(1)(a) GDPR. You may revoke any con­sent giv­en at any time. With­in our com­pa­ny, your per­son­al data will only be shared with indi­vid­u­als who are involved in the pro­cess­ing of your job appli­ca­tion.

If your job appli­ca­tion should result in your recruit­ment, the data you have sub­mit­ted will be archived on the grounds of § 26 BDSG and Art. 6(1)(b) GDPR for the pur­pose of imple­ment­ing the employ­ment rela­tion­ship in our data pro­cess­ing sys­tem.

Data Archiving Period

If we are unable to make you a job offer or you reject a job offer or with­draw your appli­ca­tion, we reserve the right to retain the data you have sub­mit­ted on the basis of our legit­i­mate inter­ests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the appli­ca­tion pro­ce­dure (rejec­tion or with­draw­al of the appli­ca­tion). After­wards the data will be delet­ed, and the phys­i­cal appli­ca­tion doc­u­ments will be destroyed. The stor­age serves in par­tic­u­lar as evi­dence in the event of a legal dis­pute. If it is evi­dent that the data will be required after the expiry of the 6‑month peri­od (e.g., due to an impend­ing or pend­ing legal dis­pute), dele­tion will only take place when the pur­pose for fur­ther stor­age no longer applies.

Longer stor­age may also take place if you have giv­en your agree­ment (Arti­cle 6(1)(a) GDPR) or if statu­to­ry data reten­tion require­ments pre­clude the dele­tion.

Admission to the applicant pool

If we do not make you a job offer, you may be able to join our appli­cant pool. In case of admis­sion, all doc­u­ments and infor­ma­tion from the appli­ca­tion will be trans­ferred to the appli­cant pool in order to con­tact you in case of suit­able vacan­cies.

Admis­sion to the appli­cant pool is based exclu­sive­ly on your express agree­ment (Art. 6(1)(a) GDPR). The sub­mis­sion agree­ment is vol­un­tary and has no rela­tion to the ongo­ing appli­ca­tion pro­ce­dure. The affect­ed per­son can revoke his agree­ment at any time. In this case, the data from the appli­cant pool will be irrev­o­ca­bly delet­ed, pro­vid­ed there are no legal rea­sons for stor­age.

The data from the appli­cant pool will be irrev­o­ca­bly delet­ed no lat­er than two years after con­sent has been grant­ed.

OneDrive

We have inte­grat­ed OneDrive on this web­site. The provider is the Microsoft Ire­land Oper­a­tions Lim­it­ed, One Microsoft Place, South Coun­ty Busi­ness Park, Leop­ard­stown, Dublin 18, Ire­land (here­inafter “OneDrive”).

OneDrive enables us to include an upload area on our web­site where you can upload con­tent. When you upload con­tent, it is stored on the OneDrive servers. When you access our web­site, a con­nec­tion to OneDrive is also estab­lished so that OneDrive can deter­mine that you have vis­it­ed our web­site.

The use of OneDrive is based on Art. 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in a reli­able upload area on its web­site. If the rel­e­vant con­sent has been request­ed, pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR; con­sent may be revoked at any time.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/6474.

Data processing

We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dat­ed by data pri­va­cy laws that guar­an­tees that they process per­son­al data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

9. Our social media appearances

This privacy policy applies to the following social media presence

• https://www.facebook.com/StatmathGmbh
• https://www.instagram.com/statmath_gmbh/
• https://www.xing.com/pages/statmathgmbh
• https://www.linkedin.com/company/ifm-statmath-gmbh/

Data processing through social networks

We main­tain pub­licly avail­able pro­files in social net­works. The indi­vid­ual social net­works we use can be found below.

Social net­works such as Face­book, X etc. can gen­er­al­ly ana­lyze your user behav­ior com­pre­hen­sive­ly if you vis­it their web­site or a web­site with inte­grat­ed social media con­tent (e.g., like but­tons or ban­ner ads). When you vis­it our social media pages, numer­ous data pro­tec­tion-rel­e­vant pro­cess­ing oper­a­tions are trig­gered. In detail:

If you are logged in to your social media account and vis­it our social media page, the oper­a­tor of the social media por­tal can assign this vis­it to your user account. Under cer­tain cir­cum­stances, your per­son­al data may also be record­ed if you are not logged in or do not have an account with the respec­tive social media por­tal. In this case, this data is col­lect­ed, for exam­ple, via cook­ies stored on your device or by record­ing your IP address.

Using the data col­lect­ed in this way, the oper­a­tors of the social media por­tals can cre­ate user pro­files in which their pref­er­ences and inter­ests are stored. This way you can see inter­est-based adver­tis­ing inside and out­side of your social media pres­ence. If you have an account with the social net­work, inter­est-based adver­tis­ing can be dis­played on any device you are logged in to or have logged in to.

Please also note that we can­not retrace all pro­cess­ing oper­a­tions on the social media por­tals. Depend­ing on the provider, addi­tion­al pro­cess­ing oper­a­tions may there­fore be car­ried out by the oper­a­tors of the social media por­tals. Details can be found in the terms of use and pri­va­cy pol­i­cy of the respec­tive social media por­tals.

Legal basis

Our social media appear­ances should ensure the widest pos­si­ble pres­ence on the Inter­net. This is a legit­i­mate inter­est with­in the mean­ing of Art. 6 (1) lit. f GDPR. The analy­sis process­es ini­ti­at­ed by the social net­works may be based on diver­gent legal bases to be spec­i­fied by the oper­a­tors of the social net­works (e.g., con­sent with­in the mean­ing of Art. 6 (1) (a) GDPR).

Responsibility and assertion of rights

If you vis­it one of our social media sites (e.g., Face­book), we, togeth­er with the oper­a­tor of the social media plat­form, are respon­si­ble for the data pro­cess­ing oper­a­tions trig­gered dur­ing this vis­it. You can in prin­ci­ple pro­tect your rights (infor­ma­tion, cor­rec­tion, dele­tion, lim­i­ta­tion of pro­cess­ing, data porta­bil­i­ty and com­plaint) vis-à-vis us as well as vis-à-vis the oper­a­tor of the respec­tive social media por­tal (e.g., Face­book).

Please note that despite the shared respon­si­bil­i­ty with the social media por­tal oper­a­tors, we do not have full influ­ence on the data pro­cess­ing oper­a­tions of the social media por­tals. Our options are deter­mined by the com­pa­ny pol­i­cy of the respec­tive provider.

Storage time

The data col­lect­ed direct­ly from us via the social media pres­ence will be delet­ed from our sys­tems as soon as you ask us to delete it, you revoke your con­sent to the stor­age or the pur­pose for the data stor­age laps­es. Stored cook­ies remain on your device until you delete them. Manda­to­ry statu­to­ry pro­vi­sions — in par­tic­u­lar, reten­tion peri­ods — remain unaf­fect­ed.

We have no con­trol over the stor­age dura­tion of your data that are stored by the social net­work oper­a­tors for their own pur­pos­es. For details, please con­tact the social net­work oper­a­tors direct­ly (e.g., in their pri­va­cy pol­i­cy, see below).

Your rights

You have the right to receive infor­ma­tion about the ori­gin, recip­i­ent and pur­pose of your stored per­son­al data at any time and free of charge. You also have the right to object, the right to data porta­bil­i­ty and the right to file a com­plaint with the respon­si­ble reg­u­la­to­ry agency. Fur­ther­more, you can request the cor­rec­tion, block­ing, dele­tion and, under cer­tain cir­cum­stances, the restric­tion of the pro­cess­ing of your per­son­al data.

Individual social networks

Facebook

We have a pro­file on Face­book. The provider of this ser­vice is Meta Plat­forms Ire­land Lim­it­ed, Mer­rion Road, Dublin 4, D04 X2K5, Ire­land (here­inafter Meta). Accord­ing to Meta’s state­ment the col­lect­ed data will also be trans­ferred to the USA and to oth­er third-par­ty coun­tries.

We have signed an agree­ment with Meta on shared respon­si­bil­i­ty for the pro­cess­ing of data (Con­troller Adden­dum). This agree­ment deter­mines which data pro­cess­ing oper­a­tions we or Meta are respon­si­ble for when you vis­it our Face­book Fan­page. This agree­ment can be viewed at the fol­low­ing link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can cus­tomize your adver­tis­ing set­tings inde­pen­dent­ly in your user account. Click on the fol­low­ing link and log in: https://www.facebook.com/settings?tab=ads.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Details can be found in the Face­book pri­va­cy pol­i­cy: https://www.facebook.com/about/privacy/.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/4452

Instagram

We have a pro­file on Insta­gram. The provider of this ser­vice is Meta Plat­forms Ire­land Lim­it­ed, Mer­rion Road, Dublin 4, D04 X2K5, Irland.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

For details on how they han­dle your per­son­al infor­ma­tion, see the Insta­gram Pri­va­cy Pol­i­cy: https://privacycenter.instagram.com/policy/.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/4452

XING

We have a pro­file on XING. The provider is New Work SE, Am Strand­kai 1, 20457 Ham­burg, Ger­many. Details on their han­dling of your per­son­al data can be found in the XING Pri­va­cy Pol­i­cy: https://privacy.xing.com/de/datenschutzerklaerung.

LinkedIn

We have a LinkedIn pro­file. The provider is the LinkedIn Ire­land Unlim­it­ed Com­pa­ny, Wilton Plaza, Wilton Place, Dublin 2, Ire­land. LinkedIn uses adver­tis­ing cook­ies.

If you want to dis­able LinkedIn adver­tis­ing cook­ies, please use the fol­low­ing link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

For details on how they han­dle your per­son­al infor­ma­tion, please refer to LinkedIn’s pri­va­cy pol­i­cy: https://www.linkedin.com/legal/privacy-policy.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5448